$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft File: MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json) Hash identifier: Cwr5TIqht49u43aM9GW6CRE07WvzUyXA4rUAL30Wn0A= Subject key identifier: D0:11:8E:5B:7D:2C:15:B7:BD:68:DE:0D:83:64:A8:44:FA:38:90:99 Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Certificate serial: 05FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft Manifest number: 05F6 Signing time: Fri 22 Nov 2024 22:20:24 +0000 Manifest this update: Fri 22 Nov 2024 22:20:23 +0000 Manifest next update: Fri 29 Nov 2024 22:20:23 +0000 Files and hashes: 1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: bIpm7/9wZ/H9rZyQodyGKXO36fEUbN6LRDy1wrUWZ1A=) 2: 813CF67A858111EB914A5377C4F9AE02.roa (hash: QEOVhybwf6Wz+3qRFXxn3E9W4TWcZxLHMSU1XgjYyAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1530 (0x5fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411 Validity Not Before: Nov 22 22:20:23 2024 GMT Not After : Nov 29 22:20:23 2024 GMT Subject: CN=674103a7-8a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ae:a8:83:80:6c:78:ef:fd:a8:e7:da:97:70: 74:46:fb:39:ec:86:53:88:e0:ce:8d:2c:4e:2f:6c: 93:b7:6b:54:9f:ee:c8:cb:8b:52:05:26:ab:c6:40: a3:4b:ff:dc:73:28:0f:f5:e6:95:22:c2:36:18:9d: bd:d1:a4:65:b4:8f:cb:8f:21:74:3d:27:49:ca:14: ed:9c:36:10:75:83:88:66:80:e9:2e:b8:6e:dd:8d: 3d:3f:4d:ad:ef:11:43:35:01:4b:43:cb:bc:50:a7: 3c:76:6e:44:b1:4f:a0:c3:11:d8:a7:20:f5:76:78: 91:f6:5b:2c:a4:46:55:cd:36:bd:71:36:e2:14:da: 30:6b:27:c8:95:aa:80:f4:23:97:d6:73:88:77:d6: 81:8f:7d:30:05:ef:c1:ed:d3:60:0e:c8:64:8d:86: 88:5c:77:92:a7:02:b9:f1:64:4e:3a:cf:49:15:5b: 4e:0e:9e:00:87:a9:c1:14:86:a8:83:ae:77:13:87: 26:3b:fe:e8:b8:3a:12:e4:4a:c3:aa:f2:ab:3b:32: 91:3e:5e:1b:ca:d7:3b:98:94:5a:d6:f6:44:ce:39: 96:f8:24:29:24:46:ca:eb:a4:b9:26:77:8e:1b:58: 2e:03:a4:98:2e:a6:cc:d1:29:b4:67:86:e4:ba:ea: da:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:11:8E:5B:7D:2C:15:B7:BD:68:DE:0D:83:64:A8:44:FA:38:90:99 X509v3 Authority Key Identifier: keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:a4:f3:f2:6e:5f:10:d3:1e:d3:5d:3b:af:48:79:fa:12:f1: 86:56:a0:73:9b:85:b0:06:0c:1a:22:e8:ed:7a:b5:c9:e7:ce: ea:55:00:49:ec:0a:43:31:9c:14:53:07:5a:62:ff:3f:31:99: f5:5d:ed:f7:5d:ef:2c:13:ef:b0:76:19:ed:ee:71:eb:b0:68: b3:e5:2e:3b:a2:07:f7:af:6d:57:1e:ae:dc:1e:fb:25:39:37: 4f:51:46:c8:07:24:35:65:dd:44:f0:87:03:71:15:7d:e2:09: 74:9f:69:a1:0c:4b:cb:30:75:5f:c8:de:36:f1:46:c4:21:c9: 2e:0b:c5:ce:00:d2:59:5f:94:14:a7:04:d4:f3:7e:30:cf:06: 76:a9:94:d3:02:68:af:29:69:ba:b4:c4:ea:f1:85:28:a8:c3: 20:2d:b1:88:cd:a8:55:70:ae:14:d7:ac:ab:71:7e:c3:e3:b0: 40:46:50:0e:7a:53:1a:46:03:27:1d:e5:6b:a8:46:74:61:9a: f2:a6:43:fe:84:20:fd:f7:df:5a:df:fe:7c:70:1e:03:18:d0: d7:33:2a:58:ef:ff:6e:b2:9e:7b:f0:a8:09:47:16:c5:32:58: 3e:52:e4:34:c3:20:37:dc:5f:00:18:55:b3:a9:7f:10:4b:a0: 9f:bc:6e:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDRjQxMTAvBgNVBAUTKDMyQTRGNjcwREEwRjUyODU4RURERUYwNjkwQzhFNTUw REZEQjM0MTEwHhcNMjQxMTIyMjIyMDIzWhcNMjQxMTI5MjIyMDIzWjAYMRYwFAYD VQQDEw02NzQxMDNhNy04YTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzq6og4BseO/9qOfal3B0Rvs57IZTiODOjSxOL2yTt2tUn+7Iy4tSBSarxkCj S//ccygP9eaVIsI2GJ290aRltI/LjyF0PSdJyhTtnDYQdYOIZoDpLrhu3Y09P02t 7xFDNQFLQ8u8UKc8dm5EsU+gwxHYpyD1dniR9lsspEZVzTa9cTbiFNowayfIlaqA 9COX1nOId9aBj30wBe/B7dNgDshkjYaIXHeSpwK58WROOs9JFVtODp4Ah6nBFIao g653E4cmO/7ouDoS5ErDqvKrOzKRPl4bytc7mJRa1vZEzjmW+CQpJEbK66S5JneO G1guA6SYLqbM0Sm0Z4bkuuraCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNARjlt9 LBW3vWjeDYNkqET6OJCZMB8GA1UdIwQYMBaAFDKk9nDaD1KFjt3vBpDI5VDf2zQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNGNC85QUM0ODUxQTg1 N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVvV08zZThHa01qbFVOX2JO QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01xVDJjTm9QVW9XTzNlOEdrTWpsVU5fYk5CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUNGNC85QUM0ODUxQTg1N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVv V08zZThHa01qbFVOX2JOQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+pPPybl8Q0x7TXTuvSHn6EvGGVqBzm4WwBgwaIujterXJ587qVQBJ 7ApDMZwUUwdaYv8/MZn1Xe33Xe8sE++wdhnt7nHrsGiz5S47ogf3r21XHq7cHvsl OTdPUUbIByQ1Zd1E8IcDcRV94gl0n2mhDEvLMHVfyN428UbEIckuC8XOANJZX5QU pwTU834wzwZ2qZTTAmivKWm6tMTq8YUoqMMgLbGIzahVcK4U16yrcX7D47BARlAO elMaRgMnHeVrqEZ0YZrypkP+hCD9999a3/58cB4DGNDXMypY7/9usp578KgJRxbF Mlg+UuQ0wyA33F8AGFWzqX8QS6CfvG6B -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:46 2024 by rpki-client on console-ams.rpki-client.org