$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json) Hash identifier: cMSkVlg2M9i7/ynlQfGdYIZ32ViA3cbc9OABcdSe0bc= Subject key identifier: 96:8D:F9:2F:C3:99:5C:3F:37:0E:7C:7F:5D:24:27:43:D7:E4:47:45 Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Certificate serial: 0951 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft Manifest number: 094B Signing time: Fri 22 Nov 2024 19:59:35 +0000 Manifest this update: Fri 22 Nov 2024 19:59:34 +0000 Manifest next update: Fri 29 Nov 2024 19:59:34 +0000 Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: tN6O9zzYroFKSCGPJ7t5sXEXRUQmDTABh8899eTgar8=) 2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: n5P347FiAUuKhxz5D51UBzZC3yGrF18WlVG2Rg0oGrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2385 (0x951) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Validity Not Before: Nov 22 19:59:34 2024 GMT Not After : Nov 29 19:59:34 2024 GMT Subject: CN=6740e2a6-108f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:31:8b:64:51:58:13:3b:9e:62:a9:0e:5b: 8e:bd:f7:06:0f:0e:0b:24:6a:b4:de:dd:b4:a2:c8: 68:05:48:57:ca:fa:16:d4:ee:9b:43:36:81:6c:7f: 6b:69:89:51:84:4c:d9:6b:79:a3:ed:d1:8c:44:08: c6:fd:d8:b7:ea:5b:57:8a:cb:e9:20:67:3f:94:cf: 11:82:11:f6:bf:ee:d5:0b:ae:14:6e:2d:a6:a4:a4: 0e:c9:e3:4f:e4:0f:f2:bd:3a:2f:0a:03:15:7c:89: 7e:93:3d:67:f7:5b:81:6c:e9:7f:ab:af:a0:41:cd: ad:95:0c:07:67:a3:3e:ff:b1:9b:20:54:cf:5a:f1: a1:d2:4a:cf:80:6f:fe:d0:3c:71:57:db:4a:8e:cf: 68:42:ca:65:5e:bd:cb:b1:52:2b:f7:87:a4:9a:43: 2f:f2:ec:5b:06:b3:de:7f:37:47:87:9b:8a:06:6e: 4e:f9:88:b7:87:48:8b:52:40:a8:8f:85:79:85:aa: c6:ee:0e:ed:2d:6e:fc:14:81:20:f0:dc:93:dc:b8: e1:ab:06:b8:15:75:16:4f:c5:15:2c:fc:bf:f3:3d: 36:5f:26:55:d6:db:2a:58:ed:1b:ab:74:9e:c4:9b: bb:9d:c3:4a:1c:4e:08:28:c0:30:51:cf:ae:5a:45: 8c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8D:F9:2F:C3:99:5C:3F:37:0E:7C:7F:5D:24:27:43:D7:E4:47:45 X509v3 Authority Key Identifier: keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:65:e8:b1:92:e2:b1:78:d1:dc:48:28:24:80:04:6f:0b:af: 36:c0:92:23:0d:39:9b:79:22:c5:03:4a:34:c7:b7:2c:ab:42: 2c:37:f5:a0:7c:a2:d9:ac:c1:e2:47:f1:02:03:cd:af:28:a7: 6d:aa:8c:de:75:31:14:65:be:ac:7b:2e:b9:6c:9b:ea:f4:71: 88:2b:47:23:06:ff:7d:e8:15:7a:82:d8:45:52:d2:bf:89:f3: 54:fa:f3:10:55:4e:a8:f7:20:fc:b6:8e:69:b2:32:1a:97:d3: 85:ea:08:a2:ea:74:da:62:b1:d7:2e:d4:73:48:46:5f:f4:3c: 5a:2f:bc:69:35:50:d0:e8:77:3f:c0:51:6f:54:77:2a:99:fe: c5:a2:e8:bb:f7:27:b0:5b:cb:83:3c:e3:1b:35:b0:8a:4d:70: 3d:2f:65:21:2e:90:bc:b5:b9:91:b2:8b:3a:36:34:00:07:72: ad:53:68:5c:99:22:24:e9:56:c0:d1:9b:86:24:d3:45:9c:c1: ff:2f:82:73:72:a6:a2:ab:57:ac:d5:2a:2c:6c:f8:46:ec:be: 74:4b:14:b8:5b:29:dd:d0:7b:d7:a3:18:51:60:03:82:50:09: 73:34:aa:aa:02:e7:98:7c:2a:bd:a3:8b:45:32:1e:52:7a:cd: 9a:41:f1:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0 Q0E3ODdENkYwHhcNMjQxMTIyMTk1OTM0WhcNMjQxMTI5MTk1OTM0WjAYMRYwFAYD VQQDEw02NzQwZTJhNi0xMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOsxi2RRWBM7nmKpDluOvfcGDw4LJGq03t20oshoBUhXyvoW1O6bQzaBbH9r aYlRhEzZa3mj7dGMRAjG/di36ltXisvpIGc/lM8RghH2v+7VC64Ubi2mpKQOyeNP 5A/yvTovCgMVfIl+kz1n91uBbOl/q6+gQc2tlQwHZ6M+/7GbIFTPWvGh0krPgG/+ 0DxxV9tKjs9oQsplXr3LsVIr94ekmkMv8uxbBrPefzdHh5uKBm5O+Yi3h0iLUkCo j4V5harG7g7tLW78FIEg8NyT3Ljhqwa4FXUWT8UVLPy/8z02XyZV1tsqWO0bq3Se xJu7ncNKHE4IKMAwUc+uWkWMdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaN+S/D mVw/Nw58f10kJ0PX5EdFMB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2 MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzVCQy8xM0VBQTQ3Qzg2MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZB OFdyc0VoS0c3RUZNcDRmVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtZeixkuKxeNHcSCgkgARvC682wJIjDTmbeSLFA0o0x7csq0IsN/Wg fKLZrMHiR/ECA82vKKdtqozedTEUZb6sey65bJvq9HGIK0cjBv996BV6gthFUtK/ ifNU+vMQVU6o9yD8to5psjIal9OF6gii6nTaYrHXLtRzSEZf9DxaL7xpNVDQ6Hc/ wFFvVHcqmf7Foui79yewW8uDPOMbNbCKTXA9L2UhLpC8tbmRsos6NjQAB3KtU2hc mSIk6VbA0ZuGJNNFnMH/L4Jzcqaiq1es1SosbPhG7L50SxS4Wynd0HvXoxhRYAOC UAlzNKqqAueYfCq9o4tFMh5Ses2aQfGU -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org