$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft File: rJMLYl2DnFaNqBmeOP-dt-N4M70.mft (raw, json) Hash identifier: 1qYO2MzX2vRbwrwb94GZ6aUhB6MZnHcg8T3cJQK8bxw= Subject key identifier: 8E:F0:31:9A:EE:ED:EE:54:3C:55:52:92:E8:71:6C:26:DF:42:C2:A1 Authority key identifier: AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD Certificate issuer: /CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft Manifest number: 4A Signing time: Thu 21 Nov 2024 05:21:46 +0000 Manifest this update: Thu 21 Nov 2024 05:21:46 +0000 Manifest next update: Thu 28 Nov 2024 05:21:46 +0000 Files and hashes: 1: rJMLYl2DnFaNqBmeOP-dt-N4M70.crl (hash: Wms7Buj6v90XtMMMI5a7RK9k3jH7pZaawurZmgpNP8s=) 2: 7152252C37D111EF99A8011CC4F9AE02.roa (hash: qyHVBU6r1vopcSbtOHBuL6JaUanY0OBKOoUk8MRDDbM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7948/serialNumber=AC930B625D839C568DA8199E38FF9DB7E37833BD Validity Not Before: Nov 21 05:21:46 2024 GMT Not After : Nov 28 05:21:46 2024 GMT Subject: CN=673ec36a-6381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:54:29:c4:89:55:58:1f:b7:ca:12:c7:9e: 38:86:eb:2b:30:33:12:54:48:dd:8c:c0:de:a9:da: 5d:05:7c:5b:d0:5b:1e:20:6b:2d:54:12:91:53:f0: 03:28:b3:58:31:ef:03:9d:ca:d9:9b:b9:55:02:39: fa:13:e2:0c:3b:fd:c1:fc:c1:10:bd:94:2c:ef:ed: f3:eb:09:7a:1a:96:f3:ad:cd:5d:98:c3:f2:ba:75: cd:47:e7:52:30:78:78:d8:f4:fe:19:55:a5:51:78: e1:23:2d:00:50:ba:74:75:f0:89:34:3c:d6:1c:ec: 55:e1:cb:48:14:00:5b:b7:bd:17:7b:69:05:d8:64: 2d:d3:93:71:80:34:dc:27:56:45:e3:ae:b5:aa:b8: ee:68:5d:5a:90:ae:5f:de:df:d7:82:60:26:e6:4c: ea:4a:d9:19:1d:1d:6f:c5:78:e2:8f:93:8f:3d:93: a4:65:74:e5:a8:e8:cc:04:61:f3:a0:f1:3b:55:cc: 51:4f:ac:6e:11:2f:9d:8a:2b:4f:a2:85:b5:ec:b7: e2:57:db:02:71:8f:fb:76:14:2b:75:91:a2:b4:f1: d9:55:15:68:df:ee:14:24:3f:17:40:f1:75:25:6c: 10:19:22:5a:c3:4e:a5:6b:9b:81:30:98:9e:55:da: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F0:31:9A:EE:ED:EE:54:3C:55:52:92:E8:71:6C:26:DF:42:C2:A1 X509v3 Authority Key Identifier: keyid:AC:93:0B:62:5D:83:9C:56:8D:A8:19:9E:38:FF:9D:B7:E3:78:33:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJMLYl2DnFaNqBmeOP-dt-N4M70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/4F976DF837D011EF8945471AC4F9AE02/rJMLYl2DnFaNqBmeOP-dt-N4M70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:34:62:ff:8c:ff:4a:6d:0a:23:fd:26:c6:39:1d:4f:31:53: a7:d7:bf:0e:b5:93:1b:2f:4f:e2:7e:a1:49:40:bd:3e:74:ea: f6:2d:60:fd:eb:47:60:de:6c:3c:d1:c3:b2:59:96:e0:de:0e: 8d:0c:57:51:f9:37:db:45:9b:c5:13:71:16:d7:4a:d8:01:d6: c8:57:59:93:d3:d4:74:de:bb:e4:e2:1f:53:93:be:97:5c:e0: e1:1a:66:14:80:23:16:ac:38:01:00:66:a7:21:a4:fa:c5:4c: 5a:4a:58:cf:cd:96:1f:0a:1c:73:e3:e5:55:b9:92:40:06:25: 87:e7:70:2b:51:f1:fd:06:e3:e9:cb:8b:31:33:45:83:81:87: 2f:fc:85:a3:36:34:5a:3e:53:59:01:0e:ad:47:f4:6f:e0:cd: af:20:d7:1c:86:65:10:bb:04:df:7c:b8:a8:40:35:23:75:04: a6:dd:e4:01:17:5d:32:02:9e:22:d1:dd:74:09:47:57:00:07: a1:c7:68:50:32:c4:2e:b8:1f:6e:70:81:9a:94:b5:9f:21:c7: 30:be:d6:74:91:31:63:f5:13:eb:7c:f1:ca:30:f8:dd:a7:d4: 3f:fb:cb:65:d0:a5:b4:a5:4f:c0:56:83:d8:15:c6:6c:91:a4: f9:8e:19:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Nzk0ODExMC8GA1UEBRMoQUM5MzBCNjI1RDgzOUM1NjhEQTgxOTlFMzhGRjlEQjdF Mzc4MzNCRDAeFw0yNDExMjEwNTIxNDZaFw0yNDExMjgwNTIxNDZaMBgxFjAUBgNV BAMTDTY3M2VjMzZhLTYzODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtklQpxIlVWB+3yhLHnjiG6yswMxJUSN2MwN6p2l0FfFvQWx4gay1UEpFT8AMo s1gx7wOdytmbuVUCOfoT4gw7/cH8wRC9lCzv7fPrCXoalvOtzV2Yw/K6dc1H51Iw eHjY9P4ZVaVReOEjLQBQunR18Ik0PNYc7FXhy0gUAFu3vRd7aQXYZC3Tk3GANNwn VkXjrrWquO5oXVqQrl/e39eCYCbmTOpK2RkdHW/FeOKPk489k6RldOWo6MwEYfOg 8TtVzFFPrG4RL52KK0+ihbXst+JX2wJxj/t2FCt1kaK08dlVFWjf7hQkPxdA8XUl bBAZIlrDTqVrm4EwmJ5V2qXDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjvAxmu7t 7lQ8VVKS6HFsJt9CwqEwHwYDVR0jBBgwFoAUrJMLYl2DnFaNqBmeOP+dt+N4M70w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3OTQ4LzRGOTc2REY4MzdE MDExRUY4OTQ1NDcxQUM0RjlBRTAyL3JKTUxZbDJEbkZhTnFCbWVPUC1kdC1ONE03 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckpNTFlsMkRuRmFOcUJtZU9QLWR0LU40TTcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 OTQ4LzRGOTc2REY4MzdEMDExRUY4OTQ1NDcxQUM0RjlBRTAyL3JKTUxZbDJEbkZh TnFCbWVPUC1kdC1ONE03MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALU0Yv+M/0ptCiP9JsY5HU8xU6fXvw61kxsvT+J+oUlAvT506vYtYP3r R2DebDzRw7JZluDeDo0MV1H5N9tFm8UTcRbXStgB1shXWZPT1HTeu+TiH1OTvpdc 4OEaZhSAIxasOAEAZqchpPrFTFpKWM/Nlh8KHHPj5VW5kkAGJYfncCtR8f0G4+nL izEzRYOBhy/8haM2NFo+U1kBDq1H9G/gza8g1xyGZRC7BN98uKhANSN1BKbd5AEX XTICniLR3XQJR1cAB6HHaFAyxC64H25wgZqUtZ8hxzC+1nSRMWP1E+t88cow+N2n 1D/7y2XQpbSlT8BWg9gVxmyRpPmOGQI= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org