$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft File: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft (raw, json) Hash identifier: P6ls1nq8Wi8uuidQkrbTSRhO5/EXC5VtMQgal5+P5kE= Subject key identifier: 22:03:BB:7E:11:8B:EB:C2:02:19:F6:8E:E0:6A:B4:64:9E:59:15:DB Authority key identifier: E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 Certificate issuer: /CN=A91B6395/serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22 Certificate serial: 0722 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft Manifest number: 0718 Signing time: Wed 20 Nov 2024 21:20:49 +0000 Manifest this update: Wed 20 Nov 2024 21:20:48 +0000 Manifest next update: Wed 27 Nov 2024 21:20:48 +0000 Files and hashes: 1: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl (hash: oorQo6kotsUPKWWM5x/4OLEnVo5Swtnp4gJssERhKw8=) 2: 09664BCE144D11EBA0AF3555C4F9AE02.roa (hash: rdUSXytbXM84CWenGOGoRob5nCuOJZnNVIkvDgmUqS4=) 3: 08CE75A6144D11EBA0AF3555C4F9AE02.roa (hash: Ey+1oSHacaQI23omTKC4i8oGovoWsEThpx7tq0kzMuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6395/serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22 Validity Not Before: Nov 20 21:20:48 2024 GMT Not After : Nov 27 21:20:48 2024 GMT Subject: CN=673e52b0-604b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:ba:c1:d2:94:8f:a1:b3:d8:5d:64:7d:39: df:66:08:28:ef:07:92:75:48:74:91:0c:89:c2:d7: 96:50:82:43:ea:41:12:1b:11:07:b7:a6:b6:ba:3c: d6:61:cc:76:f3:78:70:41:fc:82:1e:ba:b5:ae:b4: ff:6c:f9:78:5b:8f:2c:10:d4:87:cc:ea:4b:d0:82: ff:26:f8:46:b1:bf:bf:97:00:11:e8:0a:8d:cb:ce: a8:c2:ac:30:e3:c5:d8:44:55:ce:7c:6e:d7:e6:59: 61:62:4f:b6:6e:62:8e:94:fa:23:14:4b:8c:23:37: e9:f5:17:c6:f9:f2:da:d5:b6:af:9d:17:a8:aa:63: 31:b1:31:a7:7c:6b:61:e5:57:92:a4:f2:ab:64:aa: 30:2a:c9:c4:15:cb:67:c8:e6:ca:c7:c4:37:7e:10: da:31:ae:4e:02:76:05:58:b1:72:9a:c1:ad:1b:b7: 93:44:24:95:0d:62:00:b9:c2:c9:d6:42:fb:40:46: 45:69:99:6a:b8:9e:44:ac:59:b2:6d:14:d7:3a:d0: 3b:9b:64:ee:d2:68:e5:7c:64:4c:e2:5d:ce:6a:58: 91:2f:ee:9d:6d:8c:bc:65:42:9e:cc:81:fd:5e:c8: 39:a9:e4:b5:21:70:ab:f1:f5:17:81:22:a0:fe:6d: 46:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:03:BB:7E:11:8B:EB:C2:02:19:F6:8E:E0:6A:B4:64:9E:59:15:DB X509v3 Authority Key Identifier: keyid:E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:96:12:ed:63:92:b6:1c:cf:38:de:61:10:0d:f8:b9:42:6e: 89:e8:2c:4a:c6:b6:7c:d1:54:36:8a:cd:a7:e7:f5:4e:e5:ec: 43:0f:05:c3:82:db:12:e7:82:95:3b:8f:9e:c5:0a:32:49:e5: 04:39:5f:16:0b:d3:d2:90:6f:0b:44:8e:65:e1:5a:97:8e:78: 1c:23:21:d8:77:07:b5:eb:98:2d:3b:3d:80:ad:dc:25:0b:59: b1:ac:49:0f:a0:c1:2b:d2:c4:27:6e:f0:e8:2f:83:e1:8c:33: 90:e9:42:9f:fa:2c:c8:75:18:f0:81:bd:03:0f:c2:18:42:39: ac:35:44:8d:00:f2:fa:4a:72:94:86:04:bc:f2:e8:df:c7:fd: c1:42:6c:2b:bc:be:78:4f:7e:7d:cc:a6:9e:c5:a7:98:2f:47: 37:da:ca:6c:c0:de:fc:c1:b2:53:d5:b0:bf:78:4e:b2:95:3d: 65:83:29:ad:c1:3b:c7:c1:f6:5e:fa:dd:e7:65:76:d6:64:17: 02:e1:dc:77:2b:cb:3d:b8:55:68:ff:93:f9:2b:ad:4d:45:65: 82:e6:6a:fd:4c:d7:a2:cd:d7:5c:78:6a:d2:53:0b:0a:72:83: c4:dd:89:1f:f9:c1:8a:e1:b4:ef:8a:99:1e:2f:7a:6e:cb:bb: a9:d9:1b:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYzOTUxMTAvBgNVBAUTKEU2QUNGNEY1OTRBNDQzOEY4OTdBRURBQUI0QTNEMzhD ODY1Q0NFMjIwHhcNMjQxMTIwMjEyMDQ4WhcNMjQxMTI3MjEyMDQ4WjAYMRYwFAYD VQQDEw02NzNlNTJiMC02MDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwni6wdKUj6Gz2F1kfTnfZggo7weSdUh0kQyJwteWUIJD6kESGxEHt6a2ujzW Ycx283hwQfyCHrq1rrT/bPl4W48sENSHzOpL0IL/JvhGsb+/lwAR6AqNy86owqww 48XYRFXOfG7X5llhYk+2bmKOlPojFEuMIzfp9RfG+fLa1bavnReoqmMxsTGnfGth 5VeSpPKrZKowKsnEFctnyObKx8Q3fhDaMa5OAnYFWLFymsGtG7eTRCSVDWIAucLJ 1kL7QEZFaZlquJ5ErFmybRTXOtA7m2Tu0mjlfGRM4l3OaliRL+6dbYy8ZUKezIH9 Xsg5qeS1IXCr8fUXgSKg/m1GRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIDu34R i+vCAhn2juBqtGSeWRXbMB8GA1UdIwQYMBaAFOas9PWUpEOPiXrtqrSj04yGXM4i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjM5NS9EQzQ1NjU3ODE0 NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0LUpldTJxdEtQVGpJWmN6 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVxejA5WlNrUTQtSmV1MnF0S1BUaklaY3ppSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjM5NS9EQzQ1NjU3ODE0NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0 LUpldTJxdEtQVGpJWmN6aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCplhLtY5K2HM843mEQDfi5Qm6J6CxKxrZ80VQ2is2n5/VO5exDDwXD gtsS54KVO4+exQoySeUEOV8WC9PSkG8LRI5l4VqXjngcIyHYdwe165gtOz2Ardwl C1mxrEkPoMEr0sQnbvDoL4PhjDOQ6UKf+izIdRjwgb0DD8IYQjmsNUSNAPL6SnKU hgS88ujfx/3BQmwrvL54T359zKaexaeYL0c32spswN78wbJT1bC/eE6ylT1lgymt wTvHwfZe+t3nZXbWZBcC4dx3K8s9uFVo/5P5K61NRWWC5mr9TNeizddceGrSUwsK coPE3Ykf+cGK4bTvipkeL3puy7up2Rvl -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:51 2024 by rpki-client on console-ams.rpki-client.org