$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json) Hash identifier: RDeeK7I4zJ36Sp7DU7VvTDjA1rcwkQZKNe6r0hfXAds= Subject key identifier: F3:62:B3:2D:7D:E4:5C:E0:96:A4:38:40:E2:6F:03:64:B9:0D:C2:7A Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Certificate serial: 23C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft Manifest number: 4557 Signing time: Fri 22 Nov 2024 15:49:03 +0000 Manifest this update: Fri 22 Nov 2024 15:49:03 +0000 Manifest next update: Fri 29 Nov 2024 15:49:03 +0000 Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: 0CFWgBTgDIAjBGuQEihwTAbti1FIQ6bH8I4ZtSoS/D8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9156 (0x23c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D Validity Not Before: Nov 22 15:49:03 2024 GMT Not After : Nov 29 15:49:03 2024 GMT Subject: CN=6740a7ef-322d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e9:40:5f:41:90:9e:2b:37:83:98:7a:a1:e2: e0:2a:d6:88:0f:e0:ed:f2:cc:9c:fb:93:e4:c5:4c: ea:d3:8b:a3:4a:71:70:6e:7e:96:ab:06:27:88:2e: 9a:62:0e:ed:96:04:e1:c7:d8:ff:d8:e8:ca:2b:5a: 18:12:80:0d:90:02:31:f8:cf:bd:e5:f0:ef:cc:42: 2f:50:d9:57:cc:3e:38:fc:b6:1e:10:1f:7f:0d:2d: 88:93:7b:e9:b6:d6:ad:a9:00:c6:dd:ed:49:b6:a1: 5b:33:0e:3e:06:a9:61:da:86:22:1e:f3:54:eb:0a: 1b:27:f9:76:7d:da:c8:3b:0a:ee:88:58:74:01:76: 74:ed:18:67:43:4a:8c:46:6a:6b:bd:7c:9f:4f:d2: 59:12:ae:01:89:02:f9:49:99:67:f0:83:08:cd:a4: 2b:9a:a6:13:9c:ef:d3:90:05:2f:c9:82:7b:8d:21: d9:a1:09:72:05:78:87:28:d0:0f:c8:bd:00:40:f1: d5:80:53:c1:9d:29:a2:8a:6a:8e:f4:b6:28:a6:34: e4:b0:1d:55:5b:34:3e:e4:86:95:59:4c:32:90:e4: 51:e7:58:40:b6:22:23:5b:ff:f3:0f:60:d9:0e:22: ce:87:bd:cd:ee:0e:d9:a4:ed:62:ff:f5:02:e3:42: 49:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:62:B3:2D:7D:E4:5C:E0:96:A4:38:40:E2:6F:03:64:B9:0D:C2:7A X509v3 Authority Key Identifier: keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:28:53:13:cd:e7:ab:a7:eb:da:fd:aa:f3:7d:87:17:82:63: 50:d2:4c:18:26:e1:9b:b6:ba:f3:0f:31:e6:1a:34:10:43:a0: 15:f6:15:40:26:b5:72:e2:dc:80:c9:87:1d:c9:4b:fe:52:fc: 30:cb:e0:b4:47:09:5c:00:db:b8:57:63:6f:bb:41:e9:ad:9b: 6f:74:35:b0:b0:c0:83:38:57:43:7f:44:5e:c8:a1:67:61:15: 99:02:69:65:86:44:f8:34:23:19:48:e4:f2:66:42:48:a3:be: 2f:97:92:46:8b:a9:e6:40:ee:a1:51:13:1d:b4:86:7b:0d:d4: 3c:07:f7:00:39:82:90:f6:df:e4:25:35:56:40:3c:f3:f6:74: 49:94:1b:2b:26:bb:de:46:7b:06:06:3d:96:79:ea:d7:c6:2b: 4b:c3:ff:6e:07:95:2d:4f:5b:67:94:a2:c1:72:5e:62:b4:75: f6:1e:e3:e4:cf:cf:a7:10:af:72:e3:1e:aa:c9:73:13:8f:1b: d8:77:6b:71:e5:78:f8:f2:fc:aa:72:ae:9a:d4:71:b5:de:ea: e8:e6:2a:11:f8:30:6a:e1:69:bd:32:99:a6:1c:6d:b1:28:88: d4:e7:4e:64:e9:60:b9:00:58:ff:7f:72:29:b4:f8:8c:bf:b7: 2d:3e:91:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB NDg4REM5M0QwHhcNMjQxMTIyMTU0OTAzWhcNMjQxMTI5MTU0OTAzWjAYMRYwFAYD VQQDEw02NzQwYTdlZi0zMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OlAX0GQnis3g5h6oeLgKtaID+Dt8syc+5PkxUzq04ujSnFwbn6WqwYniC6a Yg7tlgThx9j/2OjKK1oYEoANkAIx+M+95fDvzEIvUNlXzD44/LYeEB9/DS2Ik3vp ttatqQDG3e1JtqFbMw4+Bqlh2oYiHvNU6wobJ/l2fdrIOwruiFh0AXZ07RhnQ0qM RmprvXyfT9JZEq4BiQL5SZln8IMIzaQrmqYTnO/TkAUvyYJ7jSHZoQlyBXiHKNAP yL0AQPHVgFPBnSmiimqO9LYopjTksB1VWzQ+5IaVWUwykORR51hAtiIjW//zD2DZ DiLOh73N7g7ZpO1i//UC40JJswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNisy19 5FzglqQ4QOJvA2S5DcJ6MB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1 MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55 VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW N3FMOGpDdnRqMGFraU55VDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVKFMTzeerp+va/arzfYcXgmNQ0kwYJuGbtrrzDzHmGjQQQ6AV9hVA JrVy4tyAyYcdyUv+Uvwwy+C0RwlcANu4V2Nvu0HprZtvdDWwsMCDOFdDf0ReyKFn YRWZAmllhkT4NCMZSOTyZkJIo74vl5JGi6nmQO6hURMdtIZ7DdQ8B/cAOYKQ9t/k JTVWQDzz9nRJlBsrJrveRnsGBj2WeerXxitLw/9uB5UtT1tnlKLBcl5itHX2HuPk z8+nEK9y4x6qyXMTjxvYd2tx5Xj48vyqcq6a1HG13uro5ioR+DBq4Wm9MpmmHG2x KIjU505k6WC5AFj/f3IptPiMv7ctPpG2 -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org