$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json) Hash identifier: MfGhzMGnSK2yDZFD+Rn96qHR0gtW6qttd1Wwr6TIkIE= Subject key identifier: 90:AB:94:B4:03:19:75:30:97:21:B8:7B:4A:96:F7:60:50:30:6F:33 Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft Manifest number: DC Signing time: Sat 23 Nov 2024 03:40:54 +0000 Manifest this update: Sat 23 Nov 2024 03:40:54 +0000 Manifest next update: Sat 30 Nov 2024 03:40:54 +0000 Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: GM21jYaufM6/9MvPALNxaML1zh6TBx5KGZExljFeShQ=) 2: 71014290D87411EE97234F5CC4F9AE02.roa (hash: UriYheink9mBFpQsL32JX0ce8LUKE4XsmIwp1611QqI=) 3: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: jh0oO56JyhcPYhu6/Q/RMYfmAkOnoy1yyTgFcYp5ApY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Validity Not Before: Nov 23 03:40:54 2024 GMT Not After : Nov 30 03:40:54 2024 GMT Subject: CN=67414ec6-4320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:55:0a:f2:e1:36:58:5c:f9:cc:8f:98:3c: 53:67:d7:3d:56:7a:bc:4e:8b:e5:76:54:73:ca:2a: 5a:90:5f:5c:85:6e:5d:bb:fe:3c:19:65:60:52:48: 79:27:00:4c:77:7e:64:67:45:7c:05:bc:d6:5e:e8: 37:12:b2:df:f0:83:00:15:31:cc:30:68:bf:2c:6c: 5b:d3:0d:e5:ff:e5:b0:80:f3:cd:29:2f:58:37:ea: d0:f4:11:65:3f:9d:ce:eb:ca:c8:bb:8c:de:74:ed: 6e:eb:b2:5f:a7:27:f0:2f:17:05:e2:9e:6a:57:74: 7c:50:85:0e:00:f1:ff:3d:10:3b:1b:af:10:39:06: 2c:a3:28:cb:bd:5c:e0:1c:6b:13:fb:82:f0:ec:eb: d1:96:4f:20:4f:df:aa:a0:16:01:09:dc:34:94:07: 89:7b:cc:3c:a1:20:34:f5:87:9b:99:3d:50:8b:47: d1:f9:a9:44:c9:91:fb:d6:3f:bb:03:0d:3d:9c:45: c6:57:e2:ba:7b:a7:ac:c0:aa:81:28:f0:62:84:84: c4:77:8f:d5:18:e3:51:33:49:aa:6d:3f:7a:00:78: ac:ee:ea:73:ce:27:09:bf:4f:bc:e9:cb:dd:ce:07: be:c2:5a:51:6a:5e:21:4b:65:2c:4b:8e:24:dc:48: 21:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AB:94:B4:03:19:75:30:97:21:B8:7B:4A:96:F7:60:50:30:6F:33 X509v3 Authority Key Identifier: keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6b:9f:23:9f:c9:aa:88:82:89:cf:ab:a0:79:6b:5f:b1:e0: a3:2a:11:c9:ef:b3:3d:ba:27:35:9d:fb:0e:0e:93:af:25:c3: be:16:20:ae:b7:7b:70:95:e4:45:80:f6:74:96:50:f7:bc:49: 5c:d2:0e:87:7d:13:69:07:5d:55:49:e0:7c:a7:cf:15:1d:7a: 97:a6:83:cf:a0:e9:d4:d0:00:15:27:e6:77:b9:8a:ff:55:13: 9b:f4:22:2c:0b:5f:58:e5:1d:16:50:a4:08:3a:7a:7d:0a:1a: 51:c9:c1:c2:0d:a3:aa:a8:5c:16:a5:d8:37:f2:64:ed:04:42: 86:2c:4b:d0:e0:c7:d2:3b:cb:6c:e3:44:4c:28:94:95:6d:d8: ee:3e:a9:25:27:e7:b0:a2:e1:29:43:39:4a:4d:17:1c:a0:31: a5:21:1f:79:8f:82:f6:d0:23:19:c5:a2:d4:f2:b5:82:1f:fc: 93:4c:55:63:2b:ce:b0:a1:3a:96:da:0f:d7:ea:88:48:3e:dc: 64:8b:88:ad:e1:f7:26:e1:f6:aa:5a:d7:03:5b:80:15:d6:2c: e8:16:4f:b6:cb:8e:78:c0:9b:1c:28:8e:1c:0c:69:7d:80:8f: db:b2:47:07:20:99:6d:35:6a:1a:0e:ab:06:9c:5f:15:81:4f: 05:81:5b:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE Q0IyQThBNEIwHhcNMjQxMTIzMDM0MDU0WhcNMjQxMTMwMDM0MDU0WjAYMRYwFAYD VQQDEw02NzQxNGVjNi00MzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzg9VCvLhNlhc+cyPmDxTZ9c9Vnq8TovldlRzyipakF9chW5du/48GWVgUkh5 JwBMd35kZ0V8BbzWXug3ErLf8IMAFTHMMGi/LGxb0w3l/+WwgPPNKS9YN+rQ9BFl P53O68rIu4zedO1u67JfpyfwLxcF4p5qV3R8UIUOAPH/PRA7G68QOQYsoyjLvVzg HGsT+4Lw7OvRlk8gT9+qoBYBCdw0lAeJe8w8oSA09YebmT1Qi0fR+alEyZH71j+7 Aw09nEXGV+K6e6eswKqBKPBihITEd4/VGONRM0mqbT96AHis7upzzicJv0+86cvd zge+wlpRal4hS2UsS44k3Egh4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCrlLQD GXUwlyG4e0qW92BQMG8zMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaa58jn8mqiIKJz6ugeWtfseCjKhHJ77M9uic1nfsODpOvJcO+FiCu t3twleRFgPZ0llD3vElc0g6HfRNpB11VSeB8p88VHXqXpoPPoOnU0AAVJ+Z3uYr/ VROb9CIsC19Y5R0WUKQIOnp9ChpRycHCDaOqqFwWpdg38mTtBEKGLEvQ4MfSO8ts 40RMKJSVbdjuPqklJ+ewouEpQzlKTRccoDGlIR95j4L20CMZxaLU8rWCH/yTTFVj K86woTqW2g/X6ohIPtxki4it4fcm4faqWtcDW4AV1izoFk+2y454wJscKI4cDGl9 gI/bskcHIJltNWoaDqsGnF8VgU8FgVt+ -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:21 2024 by rpki-client on console-ams.rpki-client.org