$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft File: 4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json) Hash identifier: KleMkC7xk4ULXUDaRKIM37CVcov2BwZNiwOakJDygMc= Subject key identifier: 97:F6:F5:9B:A4:87:90:96:AC:01:69:FF:51:27:45:18:3A:D7:A3:52 Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 Certificate issuer: /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Certificate serial: 078D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft Manifest number: 0752 Signing time: Wed 20 Nov 2024 21:17:52 +0000 Manifest this update: Wed 20 Nov 2024 21:17:51 +0000 Manifest next update: Wed 27 Nov 2024 21:17:51 +0000 Files and hashes: 1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: F5T06PlNeTmPQo4itkIBMGPvDigDdbVFQU9+EGmT4jU=) 2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: LhKQo3U+oEScw/Kkz5pzuY8n0wmOWUErN/K9Hepyn74=) 3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: RvH9liGYtN3pCJtiX2u2KDE0nqgRa0CwWenaE2r1n/4=) 4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: ETA9fsTMXTvs7R5wnnSoRNAPiUdGbww+8O48Wqcn1fE=) 5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: oTDftbGKIdkc7TbDX1evZR/fDG6RQDBKvMBylDuZzKY=) 6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: hEd7HFLaHuXdiEK5NPDfl9KI7qALqfHPsjTzHJrWnsk=) 7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: AP4fYyNrfah1AP8l/VpzoQ3VWxnS3AOViyzVl1GgzI0=) 8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: Rn2RY2KvZWLWrXubluwgWCKN//O/t5ln1nPe/3YiWc4=) 9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: SZMVejSV/qkmCA3U87HUM5KR3riZ9cH0CDAR6HS87ns=) 10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: 832ynpuro+RO0MMQGMpZcyGF5ZzjUvj68zh78iub0dU=) 11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: cX8QUr21/7Yflh3Ngq9ipDGjVl+RdRJBz1vVp6/kfUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1933 (0x78d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480 Validity Not Before: Nov 20 21:17:51 2024 GMT Not After : Nov 27 21:17:51 2024 GMT Subject: CN=673e5200-1786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:60:dc:38:ff:50:ee:31:aa:ba:e2:07:82:76: 5c:ec:aa:27:b8:a8:6a:b7:b9:4f:d5:a5:8d:d1:3b: a3:8e:61:2c:81:ce:29:00:59:8c:5e:27:4a:ba:ae: 80:71:b0:f6:bb:6d:46:54:e8:84:85:bc:f7:aa:92: 2e:1e:90:58:c3:13:48:5b:30:a0:83:51:ce:94:3f: 12:3f:83:b5:47:96:1e:79:a0:d1:31:13:6a:2f:64: b4:3a:9f:a0:a4:23:da:0b:d3:0d:c3:e3:aa:fc:5c: 4a:70:61:6c:b4:9f:14:02:9c:4e:86:53:8d:7f:2c: d5:8c:cb:e9:8e:4c:d1:f2:8b:1f:65:3c:fb:5a:6b: ab:dd:80:92:2c:e4:ff:fe:22:13:85:df:f0:13:3b: 3b:c7:da:8b:8c:8e:f8:ea:7a:1d:82:ac:d9:b0:69: 9f:03:37:39:e2:86:79:82:a1:44:78:f6:21:01:44: 47:e1:a2:0e:1c:9c:a5:28:aa:51:a9:82:4f:31:05: 56:6d:b3:6f:cd:a4:54:a4:32:0f:3e:cf:a6:c0:0a: d5:cc:e8:37:4d:07:6b:db:94:b0:ed:2d:34:1c:91: 45:a3:f3:ee:ee:fb:82:20:74:9b:47:ed:09:68:02: 4c:47:bf:f7:e0:1c:92:5b:1a:a8:b3:ea:7f:9c:d9: a8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F6:F5:9B:A4:87:90:96:AC:01:69:FF:51:27:45:18:3A:D7:A3:52 X509v3 Authority Key Identifier: keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:8d:91:83:87:16:fe:42:08:05:c1:e5:b3:b8:dc:3b:f9:70: e7:15:59:20:a6:0c:77:a9:95:ef:f3:8f:c6:3f:28:8d:63:57: ce:e8:d2:83:2c:53:72:5c:47:db:93:53:e3:31:55:76:12:6b: 0a:0e:8e:e0:ba:9f:64:eb:2e:3f:bd:1c:aa:f9:87:99:3e:ec: ad:2b:d2:d3:ab:c2:11:91:dd:f7:ba:bf:f1:bd:3e:32:5f:f0: a1:82:61:f4:5a:c2:42:cc:d8:86:c3:35:89:8b:7c:87:71:75: 37:d3:58:cd:e0:8f:07:cc:57:c6:bb:94:8c:0e:0a:04:41:2f: 4d:6b:fa:cf:18:a9:54:84:06:4f:3d:c4:0f:60:ad:e9:a8:0e: 38:cc:74:43:3a:9d:41:ef:bb:0a:7c:86:cd:cc:e6:43:06:46: 94:37:4a:96:31:99:6f:7d:93:48:e6:27:73:1f:de:cf:02:18: f0:fa:89:d4:65:9e:16:38:f0:54:ce:6f:9d:08:c6:da:06:53: 2d:b3:8a:df:02:b0:42:c3:55:43:54:8c:63:91:55:06:fb:1c: e0:f6:3b:bb:43:de:b8:07:c1:6b:7c:0a:d2:86:37:9d:dc:f9: 61:96:8f:da:df:ff:ca:43:33:1f:15:6a:c3:bf:42:b5:f7:ec: e0:74:c6:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3 NDRBQUY0ODAwHhcNMjQxMTIwMjExNzUxWhcNMjQxMTI3MjExNzUxWjAYMRYwFAYD VQQDEw02NzNlNTIwMC0xNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WDcOP9Q7jGquuIHgnZc7KonuKhqt7lP1aWN0TujjmEsgc4pAFmMXidKuq6A cbD2u21GVOiEhbz3qpIuHpBYwxNIWzCgg1HOlD8SP4O1R5YeeaDRMRNqL2S0Op+g pCPaC9MNw+Oq/FxKcGFstJ8UApxOhlONfyzVjMvpjkzR8osfZTz7Wmur3YCSLOT/ /iIThd/wEzs7x9qLjI746nodgqzZsGmfAzc54oZ5gqFEePYhAURH4aIOHJylKKpR qYJPMQVWbbNvzaRUpDIPPs+mwArVzOg3TQdr25Sw7S00HJFFo/Pu7vuCIHSbR+0J aAJMR7/34BySWxqos+p/nNmogwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJf29Zuk h5CWrAFp/1EnRRg616NSMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjI1Ri8yMkQ5MUY3MjExQ0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pv ZDJBdm1VLVBfVDUwU3E5SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCujZGDhxb+QggFweWzuNw7+XDnFVkgpgx3qZXv84/GPyiNY1fO6NKD LFNyXEfbk1PjMVV2EmsKDo7gup9k6y4/vRyq+YeZPuytK9LTq8IRkd33ur/xvT4y X/ChgmH0WsJCzNiGwzWJi3yHcXU301jN4I8HzFfGu5SMDgoEQS9Na/rPGKlUhAZP PcQPYK3pqA44zHRDOp1B77sKfIbNzOZDBkaUN0qWMZlvfZNI5idzH97PAhjw+onU ZZ4WOPBUzm+dCMbaBlMts4rfArBCw1VDVIxjkVUG+xzg9ju7Q964B8FrfArShjed 3Plhlo/a3//KQzMfFWrDv0K19+zgdMaW -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:51 2024 by rpki-client on console-ams.rpki-client.org