$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft File: 2x93mMABF7IMbzvDKZSALPIJSDc.mft (raw, json) Hash identifier: KqkEPkvqwoADuFPnXvlRGz/Og3TV4qqu4NTiF7MQfQA= Subject key identifier: 85:40:2E:E2:5E:61:72:9C:38:FA:DD:F6:CC:DB:67:05:E8:BD:E5:2F Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 Certificate issuer: /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Certificate serial: 067D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft Manifest number: 0673 Signing time: Fri 22 Nov 2024 21:52:48 +0000 Manifest this update: Fri 22 Nov 2024 21:52:48 +0000 Manifest next update: Fri 29 Nov 2024 21:52:48 +0000 Files and hashes: 1: 2x93mMABF7IMbzvDKZSALPIJSDc.crl (hash: 7nStfsxoRmr2q/YcXiy0t6bgdVgUs8wXW8lfboE9En0=) 2: 1B713E1C554F11EB99946233C4F9AE02.roa (hash: 9LWTdT6korXXocO8bu/tRSsNcQ9VUlAkcs47/vDh/E4=) 3: 1AC0CFAA554F11EB99946233C4F9AE02.roa (hash: 4VDuXUaOtbUXD3VVEY+AukdhbFh0WueivxM0MnxtQzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837 Validity Not Before: Nov 22 21:52:48 2024 GMT Not After : Nov 29 21:52:48 2024 GMT Subject: CN=6740fd30-edf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:c4:c2:b5:0f:df:77:50:65:a1:97:b3:82: f8:a1:94:0a:e2:dc:11:34:45:40:39:66:7f:d3:8e: 13:ca:82:72:11:96:8e:29:4a:c6:d3:f8:b7:91:f5: 49:f2:5c:ca:fb:00:5f:b6:af:0e:86:5f:d3:df:16: 5e:a6:09:bd:32:9a:5f:37:4b:8a:6e:73:65:8b:46: 0d:1c:69:ed:44:26:5b:1b:3b:f3:40:5e:8f:32:dc: 5b:6a:cb:c7:6c:ce:73:00:a8:a7:53:35:19:57:5c: 82:db:77:4b:78:44:a6:27:ba:12:69:98:47:d8:21: 75:f5:74:be:0b:1a:96:27:45:56:cc:e9:9d:a7:93: 34:74:99:b1:0b:2f:24:6a:e7:e8:0c:fa:76:ed:d7: a1:0e:bd:b6:f8:6b:cb:95:31:a1:54:00:1d:57:31: e5:bd:c0:5c:49:f7:1d:f4:f4:bd:8c:72:c6:e4:0a: 17:e5:0c:08:c4:ba:ed:00:3e:dc:01:ad:19:c7:dd: 9a:c4:9f:7f:b5:99:c7:39:a1:52:6a:e5:41:e9:d9: 38:1e:ea:fd:93:cf:7c:65:bf:f6:78:5b:0d:56:53: 53:b2:19:49:8f:56:7f:c5:c2:19:f5:1e:81:e8:82: 22:93:95:6d:df:6c:82:d4:77:14:b6:c3:1d:c3:1a: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:40:2E:E2:5E:61:72:9C:38:FA:DD:F6:CC:DB:67:05:E8:BD:E5:2F X509v3 Authority Key Identifier: keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8d:14:a7:c1:b4:3d:d4:fd:81:9b:11:7c:b3:62:09:fe:cf: eb:38:fd:f0:6a:14:d0:a1:07:b3:ae:ad:0d:83:97:87:8e:4f: 41:1c:a1:4a:43:05:50:c1:fa:ed:6f:cc:22:70:e7:f9:93:17: a0:96:10:f0:7f:1e:89:62:d9:23:9a:73:2c:35:8a:f1:4e:1f: 59:71:80:5b:05:9a:66:b8:b4:be:d3:c9:26:86:85:a8:36:18: c9:3e:c1:50:09:7f:d3:26:37:f0:51:9c:62:8e:b6:e5:b8:c0: fe:13:89:ae:0f:8d:12:20:de:83:b8:5d:e0:58:e6:37:4a:42: f9:74:64:55:2f:2c:dc:ff:83:c0:81:2b:ee:ce:86:fe:0b:e6: 5b:27:0c:d1:68:a7:df:39:2c:07:06:b5:4e:f5:4b:64:5b:2b: 9b:8b:57:d5:c4:69:c6:10:09:af:ef:39:f4:e1:07:e2:e3:6e: f7:c0:d3:45:c4:73:16:7a:fd:09:af:cb:73:52:4c:c4:53:57: 69:e4:44:15:4f:a2:8c:f4:a2:28:4d:c0:6f:f3:cd:e2:f2:ca: 6c:ed:0e:e5:c6:e4:a2:7e:2f:1b:0b:f5:30:e1:22:41:16:a6: bb:bd:48:d6:b6:e0:fd:13:09:a0:2d:32:03:62:5a:6b:e0:42: 60:cb:b5:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1OTQxMTAvBgNVBAUTKERCMUY3Nzk4QzAwMTE3QjIwQzZGM0JDMzI5OTQ4MDJD RjIwOTQ4MzcwHhcNMjQxMTIyMjE1MjQ4WhcNMjQxMTI5MjE1MjQ4WjAYMRYwFAYD VQQDEw02NzQwZmQzMC1lZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRDEwrUP33dQZaGXs4L4oZQK4twRNEVAOWZ/044TyoJyEZaOKUrG0/i3kfVJ 8lzK+wBftq8Ohl/T3xZepgm9MppfN0uKbnNli0YNHGntRCZbGzvzQF6PMtxbasvH bM5zAKinUzUZV1yC23dLeESmJ7oSaZhH2CF19XS+CxqWJ0VWzOmdp5M0dJmxCy8k aufoDPp27dehDr22+GvLlTGhVAAdVzHlvcBcSfcd9PS9jHLG5AoX5QwIxLrtAD7c Aa0Zx92axJ9/tZnHOaFSauVB6dk4Hur9k898Zb/2eFsNVlNTshlJj1Z/xcIZ9R6B 6IIik5Vt32yC1HcUtsMdwxrqDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVALuJe YXKcOPrd9szbZwXoveUvMB8GA1UdIwQYMBaAFNsfd5jAAReyDG87wymUgCzyCUg3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTU5NC81MjJCNkQ2RTU1 M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3SU1ienZES1pTQUxQSUpT RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4OTNtTUFCRjdJTWJ6dkRLWlNBTFBJSlNEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTU5NC81MjJCNkQ2RTU1M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3 SU1ienZES1pTQUxQSUpTRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8jRSnwbQ91P2BmxF8s2IJ/s/rOP3wahTQoQezrq0Ng5eHjk9BHKFK QwVQwfrtb8wicOf5kxeglhDwfx6JYtkjmnMsNYrxTh9ZcYBbBZpmuLS+08kmhoWo NhjJPsFQCX/TJjfwUZxijrbluMD+E4muD40SIN6DuF3gWOY3SkL5dGRVLyzc/4PA gSvuzob+C+ZbJwzRaKffOSwHBrVO9UtkWyubi1fVxGnGEAmv7zn04Qfi4273wNNF xHMWev0Jr8tzUkzEU1dp5EQVT6KM9KIoTcBv883i8sps7Q7lxuSifi8bC/Uw4SJB Fqa7vUjWtuD9EwmgLTIDYlpr4EJgy7Ua -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:49 2024 by rpki-client on console-ams.rpki-client.org