$ rpki-client -vvf rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft File: 5VbchrlOkc-bLilEqF9xaS2glNI.mft (raw, json) Hash identifier: PflAvfHBGtY2OYO9m3HRsJKvxqhBXzXPx1+maGvotSc= Subject key identifier: 28:01:1C:F5:DD:51:26:3A:6B:78:8A:B6:86:79:D3:10:2B:D4:86:19 Authority key identifier: E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 Certificate issuer: /CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft Manifest number: B8 Signing time: Sat 23 Nov 2024 04:05:53 +0000 Manifest this update: Sat 23 Nov 2024 04:05:52 +0000 Manifest next update: Sat 30 Nov 2024 04:05:52 +0000 Files and hashes: 1: 5VbchrlOkc-bLilEqF9xaS2glNI.crl (hash: 3RwJylVNdNoIIqFdEZ1My56/+PMBLywb3l2tdvQDlAw=) 2: 4B3E4A0693DE11EE81D1045FC4F9AE02.roa (hash: 4Cz/oqpVomdj5KjMuMHHcnulXM/0E2/i4QAzsSN/Y08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B20D/serialNumber=E556DC86B94E91CF9B2E2944A85F71692DA094D2 Validity Not Before: Nov 23 04:05:52 2024 GMT Not After : Nov 30 04:05:52 2024 GMT Subject: CN=674154a1-1d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:33:dd:fd:93:63:31:81:83:9f:7a:19:d2: 9e:2c:98:b7:2b:a6:c1:30:1d:b0:b1:d3:d3:62:ef: cc:40:5a:9f:25:05:15:a3:b4:c8:9c:6d:88:29:ae: fd:26:90:8c:12:91:c5:09:0b:e9:b2:c6:86:3a:97: 6c:d2:31:89:ec:95:82:e7:06:90:7c:4b:10:8a:db: b1:2f:71:51:e6:cf:1a:4e:cb:1c:6b:60:4d:e9:2a: 3c:24:e3:f1:e7:17:10:22:45:70:38:c9:60:aa:a9: 73:be:07:9a:d2:6e:23:32:12:4a:86:ad:c2:38:25: 85:3f:ed:1f:20:84:fe:b7:5f:ac:fb:b9:7b:a1:78: fc:36:07:a0:c7:32:87:eb:12:a2:68:0a:ac:ac:27: c9:7f:67:72:1c:b8:72:0f:6e:12:58:8f:ce:03:04: d3:8f:89:2a:af:c0:28:c1:0f:22:1b:00:26:47:3b: 5c:1a:2a:89:c0:07:30:e9:6c:84:6d:6c:59:fe:19: 50:cb:67:f8:05:a6:79:00:ca:aa:13:28:8d:b8:c6: 9f:b5:20:05:05:7f:d8:53:e7:24:06:9e:3d:e1:dc: 29:0a:3f:c9:98:07:ed:e0:ee:39:3a:15:7e:bc:4c: b6:6a:7c:b0:9b:77:c4:97:0f:ff:e8:2f:f3:fe:a6: 70:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:01:1C:F5:DD:51:26:3A:6B:78:8A:B6:86:79:D3:10:2B:D4:86:19 X509v3 Authority Key Identifier: keyid:E5:56:DC:86:B9:4E:91:CF:9B:2E:29:44:A8:5F:71:69:2D:A0:94:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VbchrlOkc-bLilEqF9xaS2glNI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B20D/61ACBF4693A911EE9149E354C4F9AE02/5VbchrlOkc-bLilEqF9xaS2glNI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:ba:ef:4f:2e:57:2f:ad:81:5a:5c:28:1b:17:ab:70:78:34: dd:82:32:b3:66:ec:b6:56:f6:8d:85:1f:d9:80:86:0a:94:42: 33:29:80:fa:8e:48:1b:ea:f2:9e:91:bf:d7:cb:f1:05:f9:4e: c9:fd:2a:4f:81:29:39:c8:0f:e3:54:e6:fc:eb:f8:33:c1:c5: 05:64:99:8a:3e:19:01:64:a1:7b:a1:7d:af:c7:0f:29:2b:1c: 27:06:75:b3:fc:d5:e5:09:37:fd:eb:27:b3:87:2b:35:55:f2: 3e:9e:92:a5:bd:9e:8a:d0:1f:05:b6:95:5c:34:bf:82:e3:ed: b3:c2:d2:ff:e0:a1:7f:c8:39:7d:38:88:49:c6:88:b9:22:a7: d6:c0:8d:c8:43:36:ea:8c:ea:69:0a:91:f3:7e:3b:f7:23:08: bd:8c:da:9d:b5:2a:f8:94:06:45:c3:b3:b4:48:e0:8e:d4:13: ca:f4:3c:22:c3:b6:82:2b:f5:bf:6d:ef:b6:a5:5a:34:2b:b1: 99:d0:8a:4e:ab:e9:a4:2a:3b:2a:86:b6:74:f3:dd:e6:c8:f2: 17:ba:d4:36:d5:85:8d:a9:09:74:8b:5b:12:de:a1:62:97:6a: a6:ee:41:a0:c7:b0:94:6c:16:f2:33:b4:29:44:1a:8d:cb:cf: 59:98:b6:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIyMEQxMTAvBgNVBAUTKEU1NTZEQzg2Qjk0RTkxQ0Y5QjJFMjk0NEE4NUY3MTY5 MkRBMDk0RDIwHhcNMjQxMTIzMDQwNTUyWhcNMjQxMTMwMDQwNTUyWjAYMRYwFAYD VQQDEw02NzQxNTRhMS0xZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fcz3f2TYzGBg596GdKeLJi3K6bBMB2wsdPTYu/MQFqfJQUVo7TInG2IKa79 JpCMEpHFCQvpssaGOpds0jGJ7JWC5waQfEsQituxL3FR5s8aTssca2BN6So8JOPx 5xcQIkVwOMlgqqlzvgea0m4jMhJKhq3COCWFP+0fIIT+t1+s+7l7oXj8NgegxzKH 6xKiaAqsrCfJf2dyHLhyD24SWI/OAwTTj4kqr8AowQ8iGwAmRztcGiqJwAcw6WyE bWxZ/hlQy2f4BaZ5AMqqEyiNuMaftSAFBX/YU+ckBp494dwpCj/JmAft4O45OhV+ vEy2anywm3fElw//6C/z/qZw8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgBHPXd USY6a3iKtoZ50xAr1IYZMB8GA1UdIwQYMBaAFOVW3Ia5TpHPmy4pRKhfcWktoJTS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjIwRC82MUFDQkY0Njkz QTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tjLWJMaWxFcUY5eGFTMmds TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWYmNocmxPa2MtYkxpbEVxRjl4YVMyZ2xOSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjIwRC82MUFDQkY0NjkzQTkxMUVFOTE0OUUzNTRDNEY5QUUwMi81VmJjaHJsT2tj LWJMaWxFcUY5eGFTMmdsTkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYuu9PLlcvrYFaXCgbF6tweDTdgjKzZuy2VvaNhR/ZgIYKlEIzKYD6 jkgb6vKekb/Xy/EF+U7J/SpPgSk5yA/jVOb86/gzwcUFZJmKPhkBZKF7oX2vxw8p KxwnBnWz/NXlCTf96yezhys1VfI+npKlvZ6K0B8FtpVcNL+C4+2zwtL/4KF/yDl9 OIhJxoi5IqfWwI3IQzbqjOppCpHzfjv3Iwi9jNqdtSr4lAZFw7O0SOCO1BPK9Dwi w7aCK/W/be+2pVo0K7GZ0IpOq+mkKjsqhrZ0893myPIXutQ21YWNqQl0i1sS3qFi l2qm7kGgx7CUbBbyM7QpRBqNy89ZmLbD -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:16 2024 by rpki-client on console-ams.rpki-client.org