$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: fofDBAQgzU/lBPCvGRoSuZBFWx+2z8z4DXNE+dPDXSo= Subject key identifier: DC:1D:33:4A:53:BA:EC:33:4A:02:80:C7:5F:F5:CD:2D:52:45:73:EB Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: 04 Signing time: Thu 21 Nov 2024 06:17:13 +0000 Manifest this update: Thu 21 Nov 2024 06:17:12 +0000 Manifest next update: Thu 28 Nov 2024 06:17:12 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: aBWPnQ6CPxfv9Diks1tqYkGYPHzrodMpwH8P+jux3bg=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: w3wkEl72R5yHh8FDEdSTJXXK4Ra1LhkLOkjK6q8uAIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Nov 21 06:17:12 2024 GMT Not After : Nov 28 06:17:12 2024 GMT Subject: CN=673ed068-8a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:47:2e:01:9b:9d:cf:68:82:d6:1c:06:8f: 96:3a:72:dc:e1:03:a0:01:d1:56:99:e2:b7:26:b0: f0:53:0b:e7:8d:b3:03:fd:a7:e8:34:22:45:24:ac: d0:1c:95:39:67:70:5b:66:0f:d6:ce:02:4a:1c:74: 1f:75:57:72:9e:f5:39:64:41:74:9c:55:61:cb:be: ba:b3:57:ef:1c:65:43:36:0a:a6:66:11:02:67:08: 06:aa:81:24:57:82:70:56:28:06:e0:91:a5:fc:fa: 4a:de:82:a7:09:a2:0d:ff:0d:f9:23:59:5a:f2:c6: 56:2d:7a:57:f4:c6:3f:f7:6d:79:bb:d6:42:5d:15: 30:8f:4c:68:97:68:97:46:28:6b:e6:3e:4d:6f:bf: 3e:44:e0:cb:e3:f0:8f:73:21:db:46:04:25:84:52: 97:db:8c:d9:00:9e:c7:13:7d:19:0b:3a:3d:5c:1a: 25:b9:53:27:c7:f4:6f:d1:5d:91:c6:18:27:a4:15: 63:85:7e:db:ab:ff:a9:7e:23:71:a3:8d:51:da:f5: ab:4d:f1:14:82:1b:0e:7c:10:67:f4:31:30:da:34: b8:0c:04:91:e7:81:fe:c2:b5:85:84:30:07:97:e6: bd:38:00:a4:d7:6e:b5:a6:1d:a9:cc:e2:d0:3b:9e: 50:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1D:33:4A:53:BA:EC:33:4A:02:80:C7:5F:F5:CD:2D:52:45:73:EB X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:68:34:19:46:74:e0:63:22:de:e0:43:a9:41:d8:88:48:50: c9:a8:cc:40:e9:b6:b0:d5:1c:d4:f6:4c:7b:0f:ce:0f:48:39: 2e:eb:f3:a1:c3:b5:9a:d0:a5:72:6e:8f:a7:5c:72:5e:b3:bf: b6:ea:67:95:43:26:0c:29:67:51:e3:8a:43:2d:95:fc:86:b0: 9a:6a:1a:77:38:b4:f7:a3:5f:e4:24:9b:8f:d5:e7:2a:e6:16: 48:c6:29:0a:8b:b8:8c:3d:1c:86:d1:8c:7d:ae:65:45:eb:22: d4:be:38:a3:4c:43:2c:33:7f:31:0c:d8:5f:3c:05:9e:cc:42: e7:ba:e0:ec:47:42:16:af:45:26:c6:6e:60:13:0b:b0:58:75: a6:8b:e4:52:0f:16:37:6c:3a:cc:d8:68:47:2c:7c:6e:2f:65: 96:f7:18:ae:37:21:2a:de:dd:f5:47:6d:cb:71:33:e6:ae:9e: c9:49:ab:bf:4e:44:97:62:60:39:18:ca:29:65:6a:08:67:43: ae:4c:43:2a:25:9c:46:19:74:71:26:9c:7d:fb:c0:07:6a:8e: 43:20:91:0d:10:3d:6a:7b:8c:c6:7e:36:2e:67:d1:63:ab:af: 82:e5:6c:bd:11:ae:17:a3:df:8a:1a:36:e7:67:f3:51:ba:45: 83:a3:9a:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTY1RjExMC8GA1UEBRMoRjA0OTI5RUY3NDNDNTRDMDhCNDVFMTlDRkM1MUJGMkFB NTU5REFBMTAeFw0yNDExMjEwNjE3MTJaFw0yNDExMjgwNjE3MTJaMBgxFjAUBgNV BAMTDTY3M2VkMDY4LThhOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC030cuAZudz2iC1hwGj5Y6ctzhA6AB0VaZ4rcmsPBTC+eNswP9p+g0IkUkrNAc lTlncFtmD9bOAkocdB91V3Ke9TlkQXScVWHLvrqzV+8cZUM2CqZmEQJnCAaqgSRX gnBWKAbgkaX8+kregqcJog3/DfkjWVryxlYtelf0xj/3bXm71kJdFTCPTGiXaJdG KGvmPk1vvz5E4Mvj8I9zIdtGBCWEUpfbjNkAnscTfRkLOj1cGiW5UyfH9G/RXZHG GCekFWOFftur/6l+I3GjjVHa9atN8RSCGw58EGf0MTDaNLgMBJHngf7CtYWEMAeX 5r04AKTXbrWmHanM4tA7nlBNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3B0zSlO6 7DNKAoDHX/XNLVJFc+swHwYDVR0jBBgwFoAU8Ekp73Q8VMCLReGc/FG/KqVZ2qEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNjVGLzhDMjE0OTc0QTRC MzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEVrcDczUThWTUNMUmVHY19GR19LcVZaMnFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NjVGLzhDMjE0OTc0QTRCMzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1D TFJlR2NfRkdfS3FWWjJxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHdoNBlGdOBjIt7gQ6lB2IhIUMmozEDptrDVHNT2THsPzg9IOS7r86HD tZrQpXJuj6dccl6zv7bqZ5VDJgwpZ1HjikMtlfyGsJpqGnc4tPejX+Qkm4/V5yrm FkjGKQqLuIw9HIbRjH2uZUXrItS+OKNMQywzfzEM2F88BZ7MQue64OxHQhavRSbG bmATC7BYdaaL5FIPFjdsOszYaEcsfG4vZZb3GK43ISre3fVHbctxM+aunslJq79O RJdiYDkYyillaghnQ65MQyolnEYZdHEmnH37wAdqjkMgkQ0QPWp7jMZ+Ni5n0WOr r4LlbL0Rrhej34oaNudn81G6RYOjmgU= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:37 2024 by rpki-client on console-ams.rpki-client.org