$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json) Hash identifier: +JadYqvdV1EuImrmy04zIkgkl+2EhkC/V1Va7ldSaOk= Subject key identifier: 04:CC:BF:38:D9:42:FF:82:B4:E8:E4:61:87:2C:8A:1B:D7:79:C0:5F Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft Manifest number: 27 Signing time: Thu 21 Nov 2024 05:49:25 +0000 Manifest this update: Thu 21 Nov 2024 05:49:24 +0000 Manifest next update: Thu 28 Nov 2024 05:49:24 +0000 Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: AHq+At11w1Hr/JsMxJPyu5/z/+SBaYGlxoyzjoe1xBU=) 2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: SORlAdQ9FssMHlMIfPwfvKAJ6kXMG+aUvNMZPsDTNq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638 Validity Not Before: Nov 21 05:49:24 2024 GMT Not After : Nov 28 05:49:24 2024 GMT Subject: CN=673ec9e5-94d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:a6:45:88:cf:78:2c:8a:e6:54:02:ee:eb: fd:6f:2d:aa:d7:f3:b6:63:fc:41:71:62:84:58:5d: f3:61:82:79:2b:55:87:a7:5e:d6:48:27:85:d7:2c: ff:cf:45:01:8d:41:35:78:23:76:d5:9c:11:c3:a9: d9:41:51:13:68:b0:2b:0b:71:59:06:35:b4:82:99: c4:62:7c:fd:3f:70:e6:bc:12:81:a9:70:0f:68:6e: 2e:57:ed:cb:b2:47:ac:b2:47:13:e3:5d:40:fd:5c: 58:f3:38:d1:f0:14:29:74:35:63:36:09:4b:3d:84: 13:ef:f2:6f:f7:df:0d:1c:69:da:b4:63:7f:93:c4: c5:02:3a:ec:f1:b5:15:4e:ca:32:6e:ed:fa:85:1d: c2:61:6f:e1:57:a5:d8:8c:57:a9:0f:22:76:0b:68: bc:72:a8:9c:57:8a:ad:9a:ec:0b:f1:07:93:db:76: a1:eb:57:b6:ed:8d:07:75:61:68:70:7f:ed:ea:78: 44:b5:3a:6b:3c:a7:a5:a3:bf:39:9b:1b:fe:18:9b: 37:5a:f1:71:a4:86:b7:f4:ff:ec:21:03:37:30:0f: b9:85:40:8f:ba:c0:39:83:89:4a:45:75:a1:0b:01: 3b:25:01:f3:61:8e:0f:48:15:8d:e9:f8:c4:73:92: e0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CC:BF:38:D9:42:FF:82:B4:E8:E4:61:87:2C:8A:1B:D7:79:C0:5F X509v3 Authority Key Identifier: keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:0c:be:53:43:22:ad:71:3c:eb:2c:02:12:1a:44:bc:17:e6: e1:aa:ca:e2:73:f9:d0:b6:ef:21:d0:1e:a6:87:92:95:3a:b0: 21:56:f6:19:24:af:49:68:e8:96:37:97:a9:37:e3:1c:54:40: 01:f5:46:82:e5:97:2b:72:03:d0:bb:f6:bf:6b:d9:e7:d0:63: 32:f6:9f:4d:81:73:a0:f6:ab:ae:7b:53:6b:c6:40:e9:70:0c: 1d:6b:e8:fc:29:da:ef:6c:96:ba:4d:6e:43:03:37:c0:d1:3f: a9:59:dd:ab:bd:58:c9:12:fa:2c:51:c8:51:53:3d:22:76:5e: 5b:53:51:38:b3:18:41:2c:9e:76:0c:48:e6:7d:ab:eb:3b:31: 26:22:65:b9:c6:60:98:e0:5b:7e:2c:9f:92:92:d0:20:ae:f6: b1:68:cc:2b:8a:b0:5d:d6:5e:c7:52:37:ee:cf:9d:9b:9e:49: 13:5c:17:b2:82:6c:cd:d6:7a:75:41:48:06:01:e4:05:01:bd: e4:1b:4f:1c:d4:48:1c:ba:70:7f:db:c3:13:4f:18:73:76:0b: c6:ae:10:64:20:54:a4:67:2b:1d:32:40:4f:36:e9:f2:9c:29: de:ad:35:17:87:fd:04:69:df:32:02:49:20:45:ad:c1:15:a0: 11:c1:5b:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OUFCOTExMC8GA1UEBRMoRjlDRDcwRTc2MkJFNjk1RjRCQTQ5MDJBQTIwQjk0MEY3 NzBBMDYzODAeFw0yNDExMjEwNTQ5MjRaFw0yNDExMjgwNTQ5MjRaMBgxFjAUBgNV BAMTDTY3M2VjOWU1LTk0ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA+qZFiM94LIrmVALu6/1vLarX87Zj/EFxYoRYXfNhgnkrVYenXtZIJ4XXLP/P RQGNQTV4I3bVnBHDqdlBURNosCsLcVkGNbSCmcRifP0/cOa8EoGpcA9obi5X7cuy R6yyRxPjXUD9XFjzONHwFCl0NWM2CUs9hBPv8m/33w0cadq0Y3+TxMUCOuzxtRVO yjJu7fqFHcJhb+FXpdiMV6kPInYLaLxyqJxXiq2a7AvxB5PbdqHrV7btjQd1YWhw f+3qeES1Oms8p6WjvzmbG/4Ymzda8XGkhrf0/+whAzcwD7mFQI+6wDmDiUpFdaEL ATslAfNhjg9IFY3p+MRzkuCjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBMy/ONlC /4K06ORhhyyKG9d5wF8wHwYDVR0jBBgwFoAU+c1w52K+aV9LpJAqoguUD3cKBjgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5QUI5L0M3NkY5MkMwNkU4 NDExRUZBM0NEOTgzRkM0RjlBRTAyLy1jMXc1MkstYVY5THBKQXFvZ3VVRDNjS0Jq Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWMxdzUySy1hVjlMcEpBcW9ndVVEM2NLQmpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5 QUI5L0M3NkY5MkMwNkU4NDExRUZBM0NEOTgzRkM0RjlBRTAyLy1jMXc1MkstYVY5 THBKQXFvZ3VVRDNjS0JqZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGgMvlNDIq1xPOssAhIaRLwX5uGqyuJz+dC27yHQHqaHkpU6sCFW9hkk r0lo6JY3l6k34xxUQAH1RoLllytyA9C79r9r2efQYzL2n02Bc6D2q657U2vGQOlw DB1r6Pwp2u9slrpNbkMDN8DRP6lZ3au9WMkS+ixRyFFTPSJ2XltTUTizGEEsnnYM SOZ9q+s7MSYiZbnGYJjgW34sn5KS0CCu9rFozCuKsF3WXsdSN+7PnZueSRNcF7KC bM3WenVBSAYB5AUBveQbTxzUSBy6cH/bwxNPGHN2C8auEGQgVKRnKx0yQE826fKc Kd6tNReH/QRp3zICSSBFrcEVoBHBWwE= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org