$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: sFE+mkZ9DuuE/DYi3EVCbPyw5bnxKmpiZLhaxwFB654= Subject key identifier: 5F:7B:96:DD:F4:7C:33:17:F2:E9:80:EC:AD:5A:C3:B8:5C:A9:AF:9D Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 051E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 0512 Signing time: Fri 22 Nov 2024 23:11:42 +0000 Manifest this update: Fri 22 Nov 2024 23:11:42 +0000 Manifest next update: Fri 29 Nov 2024 23:11:42 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: UXa++KQbQj0KpxmJTwO8pQw+ZOrrpVrO7pK/Ke0FQMA=) 2: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: ufMyNaGjuZX/NIDCDapqBE7K0L5whHlFadMDreUuVQI=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: iCz1ketzxjoXfDIC5MMDi5PROHAwL63mxQQHk82Ic5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1310 (0x51e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Nov 22 23:11:42 2024 GMT Not After : Nov 29 23:11:42 2024 GMT Subject: CN=67410fae-7206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:ef:3a:4f:53:ad:1d:c1:ba:e2:0c:03:2f: 00:30:c4:df:47:fb:c2:c7:45:25:3b:7d:f2:4b:a0: 73:77:c4:ba:4b:b0:f7:e5:da:5c:89:3c:92:92:98: 9f:96:93:20:0d:50:26:86:d9:fb:03:e8:9a:64:38: 6b:7b:21:7f:56:1d:d3:b2:c7:8b:5e:c5:47:be:49: a6:88:eb:2f:06:37:58:30:21:ba:11:3f:31:25:75: 6a:c0:e8:28:f2:aa:c0:82:66:41:dc:67:c1:bb:38: 4e:b3:7a:e5:c6:d3:e6:e8:84:93:83:4e:1e:bf:19: e8:e9:34:29:d0:4d:fb:7e:50:96:99:a8:04:43:4c: a2:3d:db:69:de:a7:2c:5b:78:90:88:f2:17:f2:05: 65:37:a4:91:8a:4b:0c:13:eb:92:45:c3:b7:03:eb: 31:ad:3f:5d:8e:f6:70:17:fe:e5:29:46:98:fc:fb: 45:6e:19:ae:18:37:08:3e:af:9c:84:0d:29:87:56: 8d:ba:15:19:c7:e5:58:3a:04:c9:ad:71:b1:d1:f4: ba:d9:cf:6e:43:bc:fd:a5:34:0b:a9:70:4b:ff:93: ec:eb:b3:1e:ac:9f:49:a5:f9:87:7a:37:75:d5:e7: e2:73:c9:4a:56:0e:5a:51:c9:82:7b:01:2e:af:b2: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7B:96:DD:F4:7C:33:17:F2:E9:80:EC:AD:5A:C3:B8:5C:A9:AF:9D X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:44:4c:5b:a9:79:b8:57:01:04:b8:c7:58:74:67:b9:1a:ac: 80:13:6b:6f:83:17:94:b3:e3:c1:11:29:7a:41:97:98:3d:ef: 11:63:c5:58:14:dd:af:4e:11:31:3f:ba:b1:17:d8:30:7f:18: 96:a0:6b:b3:a5:91:37:8d:57:c0:8b:83:5a:ca:a9:69:d6:c2: d3:7b:af:04:36:72:ec:0e:88:b7:7e:73:bf:09:ae:49:b1:e4: 49:1a:a6:e1:04:b0:3b:80:31:30:17:78:78:d4:39:c2:2e:90: be:82:53:7f:2b:1d:33:75:82:e9:d0:ca:08:84:83:1a:35:79: 73:15:3e:20:41:81:02:0f:20:46:32:e6:8e:66:47:b2:3c:19: 9c:76:51:b6:17:20:36:e5:ac:ef:4a:96:a5:8c:b2:c8:78:2d: 16:34:a9:34:c5:91:43:26:f8:40:0c:31:6b:7e:bd:27:47:70: 41:32:cd:d9:b8:95:0f:07:91:95:6b:7c:0c:9d:cc:dd:b4:c4: ae:2b:e4:64:eb:c3:08:8e:d4:9e:2d:fa:47:fb:64:fa:ac:a4: 2c:eb:9a:ca:42:86:cd:01:f2:10:7c:ef:f8:27:0e:da:61:bf: 7a:1e:10:7f:2e:bb:df:c3:50:d8:89:b8:6a:c5:9d:a8:7c:f4: 24:04:cd:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjQxMTIyMjMxMTQyWhcNMjQxMTI5MjMxMTQyWjAYMRYwFAYD VQQDEw02NzQxMGZhZS03MjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfrvOk9TrR3BuuIMAy8AMMTfR/vCx0UlO33yS6Bzd8S6S7D35dpciTySkpif lpMgDVAmhtn7A+iaZDhreyF/Vh3TsseLXsVHvkmmiOsvBjdYMCG6ET8xJXVqwOgo 8qrAgmZB3GfBuzhOs3rlxtPm6ISTg04evxno6TQp0E37flCWmagEQ0yiPdtp3qcs W3iQiPIX8gVlN6SRiksME+uSRcO3A+sxrT9djvZwF/7lKUaY/PtFbhmuGDcIPq+c hA0ph1aNuhUZx+VYOgTJrXGx0fS62c9uQ7z9pTQLqXBL/5Ps67MerJ9JpfmHejd1 1efic8lKVg5aUcmCewEur7Ij3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF97lt30 fDMX8umA7K1aw7hcqa+dMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHRExbqXm4VwEEuMdYdGe5GqyAE2tvgxeUs+PBESl6QZeYPe8RY8VY FN2vThExP7qxF9gwfxiWoGuzpZE3jVfAi4Nayqlp1sLTe68ENnLsDoi3fnO/Ca5J seRJGqbhBLA7gDEwF3h41DnCLpC+glN/Kx0zdYLp0MoIhIMaNXlzFT4gQYECDyBG MuaOZkeyPBmcdlG2FyA25azvSpaljLLIeC0WNKk0xZFDJvhADDFrfr0nR3BBMs3Z uJUPB5GVa3wMnczdtMSuK+Rk68MIjtSeLfpH+2T6rKQs65rKQobNAfIQfO/4Jw7a Yb96HhB/Lrvfw1DYibhqxZ2ofPQkBM0l -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org