$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft File: 5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft (raw, json) Hash identifier: LyES/ngvkQmO4ziMu6ZJCbAr/JB8lCdL7kZkheNHxPA= Subject key identifier: 35:D9:CA:2B:9B:FE:99:DE:D2:5D:9E:1D:EF:5E:FA:BE:76:A8:AA:24 Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E Certificate issuer: /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft Manifest number: 84 Signing time: Mon 25 Nov 2024 04:41:07 +0000 Manifest this update: Mon 25 Nov 2024 04:41:06 +0000 Manifest next update: Mon 02 Dec 2024 04:41:06 +0000 Files and hashes: 1: 5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl (hash: pRdTNDG/RUh7DMdPI1Ozrm7SbCgQjypvGwoHxfIF1c4=) 2: C27C0758916B11EF81BBB521C4F9AE02.roa (hash: 0diVW8dy9wFSEzk96glJFk8zdqR8H6Y/olMf4xxS0Yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E Validity Not Before: Nov 25 04:41:06 2024 GMT Not After : Dec 2 04:41:06 2024 GMT Subject: CN=6743ffe2-df2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:3f:f8:83:43:08:93:8e:2d:2d:8d:86:f6: a0:ce:ff:82:c0:a8:af:a8:c4:91:8c:44:34:d7:bf: cd:53:9f:3e:69:07:86:14:71:2d:7e:da:57:86:13: cf:b0:e0:f7:41:79:41:a9:0a:ce:99:ca:71:ab:6a: 59:0b:77:75:65:0d:4c:9c:a7:0b:79:b2:ad:c2:40: ae:2d:5c:a0:61:ff:75:4a:2c:35:ac:98:8c:8a:a3: e3:59:0b:1c:5a:ed:0a:80:93:e5:2c:e7:ef:3b:64: 8c:3b:4d:b9:15:ec:56:38:5e:e4:64:d0:c5:04:c0: de:51:89:f5:d4:2d:4e:ef:08:f9:f7:82:f2:0f:bf: 63:76:00:9e:6d:0c:9b:da:14:c3:a3:fb:39:6f:2d: a5:31:dc:58:41:f3:b1:7c:a8:f1:66:0f:dd:46:1c: 87:a7:9b:8e:cb:4b:9c:1e:a5:0f:57:91:9b:93:3f: 08:bb:98:f8:b0:10:84:48:3d:a8:f3:8c:f3:c2:9c: 9d:e3:a9:be:c4:c6:4b:d0:28:cf:5c:1e:17:3d:19: 97:0d:07:34:1e:af:ee:9f:4e:19:92:b4:ae:82:66: b6:73:ec:5d:c4:0c:2e:84:31:f6:73:0c:c6:a9:a7: df:be:b4:04:81:02:95:6a:39:33:94:16:c9:67:62: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D9:CA:2B:9B:FE:99:DE:D2:5D:9E:1D:EF:5E:FA:BE:76:A8:AA:24 X509v3 Authority Key Identifier: keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:61:f7:86:2e:eb:42:87:86:f7:d5:ec:83:e3:bd:bd:88:96: eb:41:c1:84:d9:33:da:f8:89:42:56:45:0d:1e:e0:de:2e:97: 52:77:d2:dc:cc:1c:58:8c:99:3b:8f:a1:d6:bf:29:0e:4a:10: 07:ab:96:85:cb:75:de:40:cd:8c:ff:2c:4e:69:47:b6:77:60: d6:43:1e:c4:64:5f:8e:95:c5:06:6b:34:12:de:30:5e:4e:a6: fd:15:bf:08:46:e3:3d:22:16:89:9f:7e:b3:b1:f8:e4:29:4c: e9:81:58:54:41:e9:d9:eb:34:f1:05:18:61:ef:0a:85:d8:f7: d1:62:ad:66:29:0d:36:aa:84:c2:94:6d:7a:c9:7e:70:bf:ce: 09:58:06:0c:cc:28:4d:91:cc:0d:c8:6f:7a:84:1f:e7:14:66: 1f:ce:4e:3c:f3:e9:2a:aa:f2:a6:26:7e:53:76:44:b2:4d:99: d0:de:7f:3e:2c:e6:f3:12:17:6c:b6:a4:6e:ff:3b:57:45:1c: 6e:53:bb:83:f2:06:f7:4b:f5:48:64:03:fa:8f:31:f8:e3:ca: bb:c5:57:92:4a:f3:6b:c8:85:e9:37:db:15:c8:ab:45:bd:27: 9f:d4:a2:f0:57:07:85:0c:82:5d:ce:d6:d8:81:ea:51:40:a9: c2:22:cc:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKEU1MENCMjUwQkZBRDA4NjNFODVDMjkwMkVBMDIxOUQ1 M0NDMDgxMkUwHhcNMjQxMTI1MDQ0MTA2WhcNMjQxMjAyMDQ0MTA2WjAYMRYwFAYD VQQDEw02NzQzZmZlMi1kZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFg/+INDCJOOLS2Nhvagzv+CwKivqMSRjEQ017/NU58+aQeGFHEtftpXhhPP sOD3QXlBqQrOmcpxq2pZC3d1ZQ1MnKcLebKtwkCuLVygYf91Siw1rJiMiqPjWQsc Wu0KgJPlLOfvO2SMO025FexWOF7kZNDFBMDeUYn11C1O7wj594LyD79jdgCebQyb 2hTDo/s5by2lMdxYQfOxfKjxZg/dRhyHp5uOy0ucHqUPV5Gbkz8Iu5j4sBCESD2o 84zzwpyd46m+xMZL0CjPXB4XPRmXDQc0Hq/un04ZkrSugma2c+xdxAwuhDH2cwzG qaffvrQEgQKVajkzlBbJZ2J5owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXZyiub /pne0l2eHe9e+r52qKokMB8GA1UdIwQYMBaAFOUMslC/rQhj6FwpAuoCGdU8wIEu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82QjdGOTkzQ0VC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi81UXl5VUwtdENHUG9YQ2tDNmdJWjFUekFn UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVReXlVTC10Q0dQb1hDa0M2Z0laMVR6QWdTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE2OS82QjdGOTkzQ0VCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi81UXl5VUwtdENH UG9YQ2tDNmdJWjFUekFnUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyYfeGLutCh4b31eyD4729iJbrQcGE2TPa+IlCVkUNHuDeLpdSd9Lc zBxYjJk7j6HWvykOShAHq5aFy3XeQM2M/yxOaUe2d2DWQx7EZF+OlcUGazQS3jBe Tqb9Fb8IRuM9IhaJn36zsfjkKUzpgVhUQenZ6zTxBRhh7wqF2PfRYq1mKQ02qoTC lG16yX5wv84JWAYMzChNkcwNyG96hB/nFGYfzk488+kqqvKmJn5TdkSyTZnQ3n8+ LObzEhdstqRu/ztXRRxuU7uD8gb3S/VIZAP6jzH448q7xVeSSvNryIXpN9sVyKtF vSef1KLwVweFDIJdztbYgepRQKnCIswH -----END CERTIFICATE-----Generated at Mon Nov 25 06:04:14 2024 by rpki-client on console-ams.rpki-client.org