$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft File: V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json) Hash identifier: sDzx/17cE+inbXz/N252Vt6I9UQkzONQtKZQd2FcOMw= Subject key identifier: D4:29:40:CF:87:05:B0:A8:0B:3F:4D:0E:6E:3B:B3:E1:D8:94:70:51 Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA Certificate issuer: /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft Manifest number: 16 Signing time: Sat 23 Nov 2024 05:54:40 +0000 Manifest this update: Sat 23 Nov 2024 05:54:39 +0000 Manifest next update: Sat 30 Nov 2024 05:54:39 +0000 Files and hashes: 1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: XGbVSGnKgO/A9to19fYlw9vZp0wNvp7sNJ86jcsli6U=) 2: 4E9CBEBE8ADA11EFBC4C6E84C4F9AE02.roa (hash: 7STfeveEYSO1lwr+DsahUmbKcroTtvHSfv2dPo8RBAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA Validity Not Before: Nov 23 05:54:39 2024 GMT Not After : Nov 30 05:54:39 2024 GMT Subject: CN=67416e1f-cc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:9e:c7:61:f5:d1:5f:a9:de:5e:12:a0:af: 5d:9e:b0:a5:34:fc:70:ce:4e:1f:98:40:19:fd:a1: 0e:3c:b5:cf:15:48:55:2a:f9:53:5f:8d:ec:53:16: 5a:b1:0a:9a:9e:3e:7c:98:a7:a5:28:13:a1:33:fc: c7:98:9b:7e:e7:d7:0e:b8:1e:00:ee:4f:ce:83:a6: 01:31:33:fe:21:99:25:cc:6d:86:d2:64:bc:27:12: a4:94:2a:5f:1d:5a:e2:e3:1e:9e:f8:dc:38:d6:ef: 0b:62:38:ad:08:6a:83:87:2c:52:64:24:61:98:c7: 17:de:c3:3c:d7:a0:f6:88:af:78:05:ba:0a:16:2d: 66:8a:b4:c3:94:69:2c:2a:40:94:e9:3c:57:fe:cf: 44:88:40:9a:a8:64:fe:1a:f2:8b:3c:39:c2:00:a9: ba:5f:0a:0b:1a:f6:e4:b9:aa:f1:46:00:de:2a:77: a8:7a:ae:b1:ac:26:e9:cf:3c:b0:b5:9f:ab:06:ee: 65:e9:45:67:1d:0a:8e:c8:a8:43:60:44:ba:11:02: e6:01:b8:89:70:89:43:1e:9c:8b:f4:86:d0:ca:ea: af:c7:07:b9:4e:21:d0:79:3b:88:5a:ed:72:6f:3a: 83:8b:73:cd:97:46:dc:32:46:a1:81:d5:5b:75:94: dd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:29:40:CF:87:05:B0:A8:0B:3F:4D:0E:6E:3B:B3:E1:D8:94:70:51 X509v3 Authority Key Identifier: keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:92:f8:a2:d8:3b:3c:0d:78:d3:20:04:31:44:cf:2e:9d:38: f2:c8:c6:bf:ee:de:f4:71:9b:f3:c8:06:06:a4:d8:4e:8e:60: f0:28:79:0a:b0:24:6b:f7:eb:7d:34:db:ae:0a:57:a2:75:5e: b0:d8:90:2a:2b:96:48:9b:ea:fe:cf:6e:22:6a:ed:25:7e:d4: 40:a8:36:73:a0:4b:64:4d:0c:e0:51:c1:4b:eb:c9:9c:f1:f9: bb:ad:c8:11:54:ab:eb:36:48:1f:08:d2:57:d1:4f:87:60:59: 0c:66:3b:41:e3:0b:9f:12:38:a4:2a:f3:14:40:3c:b7:85:e1: da:83:6c:a6:97:28:00:2c:5e:93:a7:2e:ac:29:f8:8f:31:dd: 2f:cf:6d:0b:95:d2:55:fb:2e:5d:ba:11:47:e6:e0:19:bc:35: 96:88:71:e9:cd:81:18:ab:b0:41:18:d0:4f:dc:c8:c7:cb:ef: a1:d4:24:e4:eb:a5:03:b1:c3:83:2b:3a:b9:e6:e2:ae:fc:74: 4e:77:e0:1d:6a:47:cd:7d:c6:86:e8:fc:18:a5:69:73:ab:e6: 31:a5:44:f0:13:b8:0c:33:bf:38:4b:72:3c:0b:37:31:8c:e1: bb:4d:43:7b:33:82:15:b8:14:49:2a:d1:cb:70:bc:06:3d:61: 26:77:08:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjdDNTExMC8GA1UEBRMoNTc1QTZFRDMwQzM3M0FENDM0RDE1QTY2NUREQTJFNzY0 RUM4OUFDQTAeFw0yNDExMjMwNTU0MzlaFw0yNDExMzAwNTU0MzlaMBgxFjAUBgNV BAMTDTY3NDE2ZTFmLWNjMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1hJ7HYfXRX6neXhKgr12esKU0/HDOTh+YQBn9oQ48tc8VSFUq+VNfjexTFlqx CpqePnyYp6UoE6Ez/MeYm37n1w64HgDuT86DpgExM/4hmSXMbYbSZLwnEqSUKl8d WuLjHp743DjW7wtiOK0IaoOHLFJkJGGYxxfewzzXoPaIr3gFugoWLWaKtMOUaSwq QJTpPFf+z0SIQJqoZP4a8os8OcIAqbpfCgsa9uS5qvFGAN4qd6h6rrGsJunPPLC1 n6sG7mXpRWcdCo7IqENgRLoRAuYBuIlwiUMenIv0htDK6q/HB7lOIdB5O4ha7XJv OoOLc82XRtwyRqGB1Vt1lN3lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1ClAz4cF sKgLP00Objuz4diUcFEwHwYDVR0jBBgwFoAUV1pu0ww3OtQ00VpmXdoudk7Imsow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyN0M1L0QwNjVBQkI0OEFE OTExRUY5ODFDODI4M0M0RjlBRTAyL1YxcHUwd3czT3RRMDBWcG1YZG91ZGs3SW1z by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVjFwdTB3dzNPdFEwMFZwbVhkb3VkazdJbXNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy N0M1L0QwNjVBQkI0OEFEOTExRUY5ODFDODI4M0M0RjlBRTAyL1YxcHUwd3czT3RR MDBWcG1YZG91ZGs3SW1zby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFmS+KLYOzwNeNMgBDFEzy6dOPLIxr/u3vRxm/PIBgak2E6OYPAoeQqw JGv36300264KV6J1XrDYkCorlkib6v7PbiJq7SV+1ECoNnOgS2RNDOBRwUvryZzx +butyBFUq+s2SB8I0lfRT4dgWQxmO0HjC58SOKQq8xRAPLeF4dqDbKaXKAAsXpOn Lqwp+I8x3S/PbQuV0lX7Ll26EUfm4Bm8NZaIcenNgRirsEEY0E/cyMfL76HUJOTr pQOxw4MrOrnm4q78dE534B1qR819xobo/BilaXOr5jGlRPATuAwzvzhLcjwLNzGM 4btNQ3szghW4FEkq0ctwvAY9YSZ3CNg= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org