$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: CH40qpGw3NsLK8d/cVpU8E55sXVu1ah9RN1BEJkI3Ko= Subject key identifier: AF:23:00:EC:C6:21:BF:FF:2F:36:70:C7:3F:95:DA:AD:3C:CE:06:15 Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 138B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 1336 Signing time: Fri 22 Nov 2024 17:01:16 +0000 Manifest this update: Fri 22 Nov 2024 17:01:16 +0000 Manifest next update: Fri 29 Nov 2024 17:01:16 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: HHvHxSuu4BmyBO+v0F+au4AqmAb2R3kufo3jPdXL6cU=) 2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: bxKpA/oFCU6TUM9crxLIgO78TFK6gY7b8jSCF6lkl2Q=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: Ie+fFLUk+hkh8iPsi0JIDwR97rjtnpIzqO2/djh9dOA=) 4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: HMDXcvVMEGAxoOC++6wcObudAAOApyw/6bDY30a1r+o=) 5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: bwsT9LHkujI+JrOu04/8rGiF6KuhSDYaJy2PKrf04nk=) 6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: vIOfq2VGA/o5BqEJqyV+v1G5m5lQGi2kmLP/YtnJAmE=) 7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: l4uHSTMAHvz3K39iQ1N6BJocMGP4W2EFJHrCsRCiw/k=) 8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: 0Wf6MrY856EXSgNTseMSxFkk6LBzj+vW0CkBQhFM5Vo=) 9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wsYRvalqXpbWZCIqLrO6x3uxF4QcGxGmLPv4fG6+ndk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5003 (0x138b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: Nov 22 17:01:16 2024 GMT Not After : Nov 29 17:01:16 2024 GMT Subject: CN=6740b8dc-34cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:56:5e:88:6c:a8:d9:36:59:7c:2c:20:f3:ea: 49:be:95:51:d2:65:24:89:31:79:71:09:7f:26:05: 3d:58:2d:60:42:b0:ad:bc:af:19:fe:c7:2f:23:ec: bb:ef:2e:ee:78:0b:ed:56:f0:ae:35:58:57:41:cd: 0c:1d:c5:13:28:e3:04:51:3c:0d:4a:5b:67:12:41: 5c:be:d4:6d:27:96:3d:bc:0d:ba:8e:28:eb:76:f8: 8c:89:48:f9:36:ad:11:a0:fb:38:5b:db:93:b2:1d: 48:cb:f3:ab:87:c1:09:62:6f:a6:82:0d:e7:6f:1c: bf:4b:2e:b1:b3:d2:2c:d7:46:48:d8:7b:e6:f8:a0: 38:35:98:11:97:01:2c:5a:ae:3c:04:54:d1:5b:fb: 5b:b4:d7:d9:a9:88:79:e4:a7:66:ce:ff:1f:27:73: ac:21:5e:3f:c9:e3:c9:77:de:40:9e:e2:02:00:32: a1:0f:7d:33:f6:39:6a:c6:b9:43:2c:42:18:c4:80: ef:36:27:03:b0:08:91:56:6c:39:4a:c1:19:ff:38: b9:6f:3b:f5:1a:40:99:f0:ef:c7:5a:a8:7b:24:0c: 7a:eb:3b:e4:f6:ab:08:19:c5:4d:00:be:28:9b:b2: ab:d2:e0:24:7a:61:fa:42:f9:90:db:66:1f:e6:bb: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:23:00:EC:C6:21:BF:FF:2F:36:70:C7:3F:95:DA:AD:3C:CE:06:15 X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9f:54:2f:01:5a:e3:bf:4a:14:85:0d:84:c5:c7:a5:4c:94: 3d:b2:fd:2f:e8:67:54:50:f6:0f:c0:22:9f:66:d4:42:e3:f2: 08:f5:eb:df:42:b1:09:a3:0a:f4:cd:ed:4f:4e:aa:a5:af:dd: 7b:88:e8:57:7c:a2:35:76:53:0f:f1:c0:3a:fe:e1:53:20:11: a4:47:b1:3a:15:27:19:17:8a:aa:56:96:bd:ba:cc:8b:98:4a: 6c:1d:da:70:3f:29:6a:20:38:e8:67:ed:5f:44:c8:2e:50:9d: e2:4a:fc:b1:cb:d9:7b:fb:40:cb:fc:b0:bb:b4:bf:0c:e4:b5: 84:f0:4b:00:04:28:6d:60:80:b9:2f:70:a3:19:fd:0c:80:c4: de:4a:fb:7b:e4:5b:cd:a0:9e:ce:81:58:61:93:64:66:74:42: a4:d1:ff:c5:88:0b:55:7c:9e:cd:47:c2:90:e2:59:94:45:87: 74:b3:2a:9b:d9:b8:09:5b:ab:5d:42:ed:63:44:bf:2a:d3:23: 7d:75:24:65:b8:15:54:50:89:e2:66:e3:53:6b:24:d7:39:28: 5c:74:ba:4c:93:cc:46:b4:52:7f:95:5e:3b:21:34:21:06:66: ea:4d:fe:4d:3e:90:03:64:a8:a9:19:b1:25:99:39:00:2f:35: b4:be:c2:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjQxMTIyMTcwMTE2WhcNMjQxMTI5MTcwMTE2WjAYMRYwFAYD VQQDEw02NzQwYjhkYy0zNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VZeiGyo2TZZfCwg8+pJvpVR0mUkiTF5cQl/JgU9WC1gQrCtvK8Z/scvI+y7 7y7ueAvtVvCuNVhXQc0MHcUTKOMEUTwNSltnEkFcvtRtJ5Y9vA26jijrdviMiUj5 Nq0RoPs4W9uTsh1Iy/Orh8EJYm+mgg3nbxy/Sy6xs9Is10ZI2Hvm+KA4NZgRlwEs Wq48BFTRW/tbtNfZqYh55Kdmzv8fJ3OsIV4/yePJd95AnuICADKhD30z9jlqxrlD LEIYxIDvNicDsAiRVmw5SsEZ/zi5bzv1GkCZ8O/HWqh7JAx66zvk9qsIGcVNAL4o m7Kr0uAkemH6QvmQ22Yf5rv37wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8jAOzG Ib//LzZwxz+V2q08zgYVMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJn1QvAVrjv0oUhQ2ExcelTJQ9sv0v6GdUUPYPwCKfZtRC4/II9evf QrEJowr0ze1PTqqlr917iOhXfKI1dlMP8cA6/uFTIBGkR7E6FScZF4qqVpa9usyL mEpsHdpwPylqIDjoZ+1fRMguUJ3iSvyxy9l7+0DL/LC7tL8M5LWE8EsABChtYIC5 L3CjGf0MgMTeSvt75FvNoJ7OgVhhk2RmdEKk0f/FiAtVfJ7NR8KQ4lmURYd0syqb 2bgJW6tdQu1jRL8q0yN9dSRluBVUUIniZuNTayTXOShcdLpMk8xGtFJ/lV47ITQh BmbqTf5NPpADZKipGbElmTkALzW0vsKT -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org