$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft File: bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json) Hash identifier: XIZlfzVODgrg5piAPwq8EvYW00yQYWfxTTGb+Cxw8rc= Subject key identifier: D3:8D:A3:44:D6:0D:A2:3E:8A:F1:44:BD:00:37:3E:E1:97:A6:0D:03 Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Certificate serial: 1040 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft Manifest number: 1039 Signing time: Fri 22 Nov 2024 17:22:45 +0000 Manifest this update: Fri 22 Nov 2024 17:22:44 +0000 Manifest next update: Fri 29 Nov 2024 17:22:44 +0000 Files and hashes: 1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: Ogal9HbhZ+uVAXsMb5F1en9IkE95sRYLBbIHgoBcowM=) 2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: RT81J29uhYl4YzqEly3Rmp3Ji5PBXdnS+hxd+mUFyP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4160 (0x1040) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Validity Not Before: Nov 22 17:22:44 2024 GMT Not After : Nov 29 17:22:44 2024 GMT Subject: CN=6740bde4-255e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7a:1f:05:98:55:65:88:5b:df:cd:ba:63:b8: 32:f9:c4:a0:07:23:ff:ea:b6:69:6f:cd:d3:8e:75: b8:97:7f:c3:4b:fd:24:e0:67:c6:31:97:04:b6:02: 09:e9:b9:11:b9:4a:eb:e2:b7:20:97:94:ec:22:00: 10:ae:9c:a5:a8:25:3d:ed:17:1b:83:61:98:cf:fe: a6:df:05:f5:3c:e6:14:4d:64:3c:e7:09:71:f3:9b: 14:ed:c6:5a:5f:04:33:c5:9e:e9:ef:2d:dd:b1:67: b3:b1:b9:70:9f:4d:bf:90:a5:62:a2:bd:52:e9:29: e1:2e:c9:38:36:81:54:4c:54:55:04:4b:9e:ca:a6: 94:d5:e6:78:12:d9:e1:ee:a3:03:f1:3b:83:e1:25: 26:f5:38:2e:11:0f:d6:e4:f8:4d:77:e7:6d:d4:c6: b3:46:40:ed:1a:d9:af:d4:0c:bb:8d:28:b1:44:1a: f9:df:4c:d9:ba:ef:0f:61:d3:7d:09:bc:f1:ea:73: 50:af:d6:88:c8:42:0d:49:1d:77:cf:8b:04:2b:3c: c7:94:66:a7:4f:83:c5:19:12:78:ff:63:35:7b:92: 1a:a4:d5:96:e9:29:97:32:4b:dc:b2:03:e6:bb:95: e7:36:3b:11:1a:c2:4c:f5:21:fa:99:76:aa:71:20: 52:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8D:A3:44:D6:0D:A2:3E:8A:F1:44:BD:00:37:3E:E1:97:A6:0D:03 X509v3 Authority Key Identifier: keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:64:17:03:c0:bd:bc:13:18:76:f5:6b:45:29:f5:81:83:31: 57:99:2c:34:6d:8c:78:67:65:24:ed:70:bb:b4:72:c4:c9:f6: 81:41:f8:b5:f2:bc:f0:bb:83:37:45:d8:fc:5f:fb:a6:a5:5c: 2d:ba:81:24:2f:b1:e5:1f:02:0f:e1:62:bd:c3:f6:74:c3:8a: 7b:79:c5:c9:4d:39:aa:8c:e2:76:cc:e2:b0:f0:d7:79:4d:d3: 8a:b4:3c:80:23:7e:f1:0e:55:39:f1:a5:71:2a:6f:38:02:75: 90:84:10:0f:f7:0f:b3:8c:34:a3:65:14:e9:2a:8f:22:8d:c3: 47:24:88:f4:88:ea:19:69:b7:22:00:58:0c:73:db:28:25:c8: c5:6a:c0:27:3b:83:6f:f1:1b:3e:50:6c:f3:78:53:c2:ff:c6: b9:74:52:30:9b:84:47:bc:e2:f5:f9:d7:13:a2:c0:bc:bb:3e: ef:ac:e7:4d:93:f4:de:f7:bd:50:d8:dc:4b:6f:b0:ff:76:b9: 44:de:ff:41:37:9d:fc:56:83:63:ee:48:f1:9f:18:b7:2f:6e: ba:56:02:3f:18:92:85:1f:9d:ab:e1:63:21:3e:17:87:f5:16: e2:b8:2b:31:30:df:2e:b8:88:01:3e:ec:ae:c8:a9:d0:53:71: 1b:ac:6f:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk1RDUxMTAvBgNVBAUTKDZGMkMyMDc1NTg3NjRFQUI1MEVGODUwNjZGNzg1OTBD RTVCMUM1NjEwHhcNMjQxMTIyMTcyMjQ0WhcNMjQxMTI5MTcyMjQ0WjAYMRYwFAYD VQQDEw02NzQwYmRlNC0yNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53ofBZhVZYhb3826Y7gy+cSgByP/6rZpb83TjnW4l3/DS/0k4GfGMZcEtgIJ 6bkRuUrr4rcgl5TsIgAQrpylqCU97Rcbg2GYz/6m3wX1POYUTWQ85wlx85sU7cZa XwQzxZ7p7y3dsWezsblwn02/kKVior1S6SnhLsk4NoFUTFRVBEueyqaU1eZ4Etnh 7qMD8TuD4SUm9TguEQ/W5PhNd+dt1MazRkDtGtmv1Ay7jSixRBr530zZuu8PYdN9 Cbzx6nNQr9aIyEINSR13z4sEKzzHlGanT4PFGRJ4/2M1e5IapNWW6SmXMkvcsgPm u5XnNjsRGsJM9SH6mXaqcSBSPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNONo0TW DaI+ivFEvQA3PuGXpg0DMB8GA1UdIwQYMBaAFG8sIHVYdk6rUO+FBm94WQzlscVh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTVENS8xNjNCMUU3QzJB QUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRxdFE3NFVHYjNoWkRPV3h4 V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5d2dkVmgyVHF0UTc0VUdiM2haRE9XeHhXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTVENS8xNjNCMUU3QzJBQUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRx dFE3NFVHYjNoWkRPV3h4V0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMZBcDwL28Exh29WtFKfWBgzFXmSw0bYx4Z2Uk7XC7tHLEyfaBQfi1 8rzwu4M3Rdj8X/umpVwtuoEkL7HlHwIP4WK9w/Z0w4p7ecXJTTmqjOJ2zOKw8Nd5 TdOKtDyAI37xDlU58aVxKm84AnWQhBAP9w+zjDSjZRTpKo8ijcNHJIj0iOoZabci AFgMc9soJcjFasAnO4Nv8Rs+UGzzeFPC/8a5dFIwm4RHvOL1+dcTosC8uz7vrOdN k/Te971Q2NxLb7D/drlE3v9BN538VoNj7kjxnxi3L266VgI/GJKFH52r4WMhPheH 9RbiuCsxMN8uuIgBPuyuyKnQU3EbrG/t -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org