$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json) Hash identifier: NDaWDe7drPkvw+3yX5719Qmk8Jlxc1IJw1f2dsdPeXo= Subject key identifier: 69:FC:DA:05:52:08:F4:06:1A:B8:15:57:E9:2F:66:49:B5:15:15:D5 Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft Manifest number: 0436 Signing time: Fri 22 Nov 2024 23:51:22 +0000 Manifest this update: Fri 22 Nov 2024 23:51:22 +0000 Manifest next update: Fri 29 Nov 2024 23:51:22 +0000 Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: ENEEnSim2bd+cQW/ERHS1PNYMyzC5KNjjqR71oYPQa0=) 2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: zdwLUFrK62NtcQ/mdbUvAzqM7ityQdkX7IQIHBe+tG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Validity Not Before: Nov 22 23:51:22 2024 GMT Not After : Nov 29 23:51:22 2024 GMT Subject: CN=674118fa-c55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c2:6a:e0:41:39:08:5c:29:b1:fe:04:f7:10: 0c:0c:5f:1e:ee:fc:19:dc:c1:06:52:f2:6a:a2:ef: ae:3f:a8:00:c3:f3:38:9d:d6:42:21:f3:be:62:f1: 70:e5:66:3d:b9:9e:72:ce:2d:d8:1e:22:ea:5f:f4: 0c:14:57:d4:b2:85:93:45:70:25:42:70:57:ad:32: 3b:aa:14:56:95:1f:b2:9e:15:07:76:ef:ce:3a:93: 90:f1:bc:5a:bd:1f:b5:2f:cf:93:8b:55:87:9c:26: 52:e4:39:a1:ae:08:b8:a4:5b:8e:b1:f8:29:95:86: 57:07:fc:81:b3:b8:be:dd:e5:f1:60:7c:5e:c4:48: 04:25:22:f8:75:73:0c:6c:92:4b:3a:9c:af:d6:81: 0f:2c:cf:17:5a:32:77:26:6a:c0:a9:c4:de:af:7d: 15:02:4f:dc:1c:f8:ad:68:e9:72:11:41:e3:3e:ba: 96:33:ed:ba:0f:4f:56:4b:f0:c8:95:69:0f:f3:2e: f1:4c:53:b4:09:51:78:62:e8:54:8f:80:62:62:11: 8c:1a:d1:76:11:5b:83:55:57:7a:80:f7:8d:75:33: 84:ef:48:22:2b:da:b8:21:e6:d5:60:90:3f:03:1d: 6f:f8:9f:1d:32:19:b4:13:d3:24:00:e5:53:41:8d: 81:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FC:DA:05:52:08:F4:06:1A:B8:15:57:E9:2F:66:49:B5:15:15:D5 X509v3 Authority Key Identifier: keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:34:d6:81:93:6a:38:80:de:10:cf:32:31:8d:18:c3:50:49: 05:1b:7c:05:7b:f5:32:ae:89:fc:3d:8f:ce:61:2f:16:64:79: 4f:6c:ff:6d:78:18:e5:d7:5d:a6:93:b7:ac:8c:68:99:5e:c2: 6f:f3:69:fd:9d:dd:ab:a3:1c:eb:bc:e7:eb:cc:98:f3:59:e6: c5:2a:2d:3c:a3:91:62:e6:78:10:4e:b8:fe:1c:db:c2:3a:6c: d5:1f:2f:f9:ee:8b:c0:eb:45:85:5f:d4:aa:a3:2d:27:7b:4b: 96:4c:92:31:a6:c3:73:14:9e:63:e1:96:9c:1d:b3:fd:cb:0c: fd:ea:06:26:c7:47:a8:8c:32:14:ea:b1:1a:33:22:2d:19:b1: fc:5f:7b:3d:39:4c:70:a7:2b:3a:80:18:f7:f2:b3:37:28:57: 44:f8:b7:80:a9:f2:b5:1e:1c:20:ae:dd:e7:b6:a8:50:fa:18: e4:d2:5d:6a:62:36:42:8e:8f:8f:d4:a3:d4:0a:8a:6b:19:5d: 51:23:b2:cb:86:b0:f7:4e:7b:f0:77:e7:bd:26:43:d9:8f:36: 67:35:e3:16:11:1d:0b:c2:e7:1d:e7:2c:09:56:57:5c:62:ca: 97:8b:a1:6e:1c:f1:67:e5:70:e9:43:a8:f8:a9:cf:7a:b0:be: 8a:8d:2f:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy NEZGQUUxRkEwHhcNMjQxMTIyMjM1MTIyWhcNMjQxMTI5MjM1MTIyWjAYMRYwFAYD VQQDEw02NzQxMThmYS1jNTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8sJq4EE5CFwpsf4E9xAMDF8e7vwZ3MEGUvJqou+uP6gAw/M4ndZCIfO+YvFw 5WY9uZ5yzi3YHiLqX/QMFFfUsoWTRXAlQnBXrTI7qhRWlR+ynhUHdu/OOpOQ8bxa vR+1L8+Ti1WHnCZS5Dmhrgi4pFuOsfgplYZXB/yBs7i+3eXxYHxexEgEJSL4dXMM bJJLOpyv1oEPLM8XWjJ3JmrAqcTer30VAk/cHPitaOlyEUHjPrqWM+26D09WS/DI lWkP8y7xTFO0CVF4YuhUj4BiYhGMGtF2EVuDVVd6gPeNdTOE70giK9q4IebVYJA/ Ax1v+J8dMhm0E9MkAOVTQY2BkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGn82gVS CPQGGrgVV+kvZkm1FRXVMB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5 NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjUwOC83QTMzNzkxRTM5NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3 aEQ2MWRiaXdYZUlrXzY0Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWNNaBk2o4gN4QzzIxjRjDUEkFG3wFe/Uyron8PY/OYS8WZHlPbP9t eBjl112mk7esjGiZXsJv82n9nd2roxzrvOfrzJjzWebFKi08o5Fi5ngQTrj+HNvC OmzVHy/57ovA60WFX9Sqoy0ne0uWTJIxpsNzFJ5j4ZacHbP9ywz96gYmx0eojDIU 6rEaMyItGbH8X3s9OUxwpys6gBj38rM3KFdE+LeAqfK1Hhwgrt3ntqhQ+hjk0l1q YjZCjo+P1KPUCoprGV1RI7LLhrD3Tnvwd+e9JkPZjzZnNeMWER0Lwucd5ywJVldc YsqXi6FuHPFn5XDpQ6j4qc96sL6KjS/t -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org