$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft File: -tyXZLIJ-Bz4KTMiagZpoypO3XI.mft (raw, json) Hash identifier: hcF3p6rDjMomNRHwrUX9XqnxJmUiv+3soW92DP6mpL0= Subject key identifier: E8:AC:EA:0B:06:34:D2:B2:7D:A3:8E:29:96:7A:E9:A7:6B:1C:FB:D6 Authority key identifier: FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 Certificate issuer: /CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Certificate serial: 05E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft Manifest number: 05D4 Signing time: Wed 20 Nov 2024 22:33:40 +0000 Manifest this update: Wed 20 Nov 2024 22:33:39 +0000 Manifest next update: Wed 27 Nov 2024 22:33:39 +0000 Files and hashes: 1: -tyXZLIJ-Bz4KTMiagZpoypO3XI.crl (hash: /JdookSSQW/N3cYlV7hnTCbwTRVBhyePMOAd6UCmres=) 2: 9DF5B38CE0D011ECAF88A30DC4F9AE02.roa (hash: mXA6CTErg0wxJdZBq3q6wmtLNI7KWR6GhtBTn2JOB3w=) 3: 03A57262CC8611EC8D238672C4F9AE02.roa (hash: QMrrsm2NHbY/NMrkR70NjsjJaabEX61v1rHn7d+lOEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1504 (0x5e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72 Validity Not Before: Nov 20 22:33:39 2024 GMT Not After : Nov 27 22:33:39 2024 GMT Subject: CN=673e63c3-89b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:d0:ae:0b:d6:a7:b0:b9:a5:b9:fe:f0:61: 4c:8b:37:52:09:6f:87:e3:6c:37:e4:44:7e:bc:18: 82:07:6a:32:37:fe:be:74:4c:aa:5a:df:c9:a8:ea: a9:45:27:c2:55:a9:53:fd:13:b0:b6:c7:1a:3b:5e: 9c:7d:59:d6:89:8e:d7:f1:cc:a5:a9:e9:f7:be:7a: 10:90:e6:87:2c:3d:61:a3:1a:b9:67:47:d2:56:4e: 54:c7:6f:4e:0c:ed:28:e8:0d:b9:ec:e2:05:7a:4b: 7b:26:df:35:8e:51:a0:2e:64:27:fa:4e:d2:c9:f5: 71:8f:85:70:e2:c4:f0:06:11:2c:5c:89:d0:63:e0: 53:10:59:01:b9:66:68:76:46:df:5c:45:12:9f:6b: 89:2a:93:a9:d9:28:c2:c1:5e:1d:8f:1a:d9:70:7b: 7c:84:21:e4:01:ba:c5:2d:e7:f6:ab:51:7c:69:dd: 8e:15:95:82:de:43:b2:06:0e:92:14:93:75:39:e0: 09:00:55:36:3f:d0:b2:77:39:d5:d1:54:b2:80:1a: 69:75:e0:6d:fc:2e:f5:6f:d7:47:0a:e8:69:99:c0: 0a:11:66:3c:ec:be:b0:15:7c:c8:6a:f0:28:0c:e9: c0:05:b6:c7:8e:4b:d8:0e:a7:d7:ff:53:10:7f:8f: 60:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AC:EA:0B:06:34:D2:B2:7D:A3:8E:29:96:7A:E9:A7:6B:1C:FB:D6 X509v3 Authority Key Identifier: keyid:FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f2:b3:64:47:64:9e:73:c5:43:da:22:e8:b0:a8:2c:18:a6: 05:2c:76:98:73:49:b2:4e:50:26:ba:2f:b6:a8:9e:58:c8:fd: 5f:09:6f:9e:31:b1:4f:23:03:4b:79:1c:9d:7e:e6:9a:f6:5b: b2:1e:51:54:45:f2:23:08:9d:3e:ee:1d:b8:7f:e3:02:70:15: 57:dc:6d:f4:57:8f:40:7a:f9:82:11:3a:9a:33:ed:45:5c:f5: 76:d0:61:8b:3e:6e:6d:dd:20:3d:55:4a:dd:65:8d:a5:40:7b: 31:88:8e:a8:85:ea:60:e2:c4:6f:29:72:76:a5:e1:5e:27:aa: 36:d2:9e:a2:b2:63:4b:db:6d:95:84:c5:8f:3e:c0:68:5d:20: ab:4a:c3:e7:36:4b:7c:ae:65:68:76:2b:8e:55:9c:8b:80:d3: f7:10:f1:13:3a:03:37:ef:00:d9:14:8b:9a:cb:a7:f6:fc:19: 9d:fb:c8:ea:f5:76:ff:10:84:87:69:2e:70:2b:d5:6c:3b:b3: c2:de:fd:9e:db:e0:03:10:e7:75:b7:e7:5f:8f:75:30:77:8d: b2:4a:e7:44:98:05:ce:f8:9b:9e:e4:3a:5c:ea:e6:7f:04:a7: a3:ca:26:08:c9:00:ed:9a:6f:f6:c4:76:42:75:d8:06:87:71: 83:e7:3c:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRUMxMTAvBgNVBAUTKEZBREM5NzY0QjIwOUY4MUNGODI5MzMyMjZBMDY2OUEz MkE0RURENzIwHhcNMjQxMTIwMjIzMzM5WhcNMjQxMTI3MjIzMzM5WjAYMRYwFAYD VQQDEw02NzNlNjNjMy04OWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttPQrgvWp7C5pbn+8GFMizdSCW+H42w35ER+vBiCB2oyN/6+dEyqWt/JqOqp RSfCValT/ROwtscaO16cfVnWiY7X8cylqen3vnoQkOaHLD1hoxq5Z0fSVk5Ux29O DO0o6A257OIFekt7Jt81jlGgLmQn+k7SyfVxj4Vw4sTwBhEsXInQY+BTEFkBuWZo dkbfXEUSn2uJKpOp2SjCwV4djxrZcHt8hCHkAbrFLef2q1F8ad2OFZWC3kOyBg6S FJN1OeAJAFU2P9CydznV0VSygBppdeBt/C71b9dHCuhpmcAKEWY87L6wFXzIavAo DOnABbbHjkvYDqfX/1MQf49gHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOis6gsG NNKyfaOOKZZ66adrHPvWMB8GA1UdIwQYMBaAFPrcl2SyCfgc+CkzImoGaaMqTt1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNFQy8yMDNDQkI2NDk2 ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1CejRLVE1pYWdacG95cE8z WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10eVhaTElKLUJ6NEtUTWlhZ1pwb3lwTzNYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNFQy8yMDNDQkI2NDk2ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1C ejRLVE1pYWdacG95cE8zWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAx8rNkR2Sec8VD2iLosKgsGKYFLHaYc0myTlAmui+2qJ5YyP1fCW+e MbFPIwNLeRydfuaa9luyHlFURfIjCJ0+7h24f+MCcBVX3G30V49AevmCETqaM+1F XPV20GGLPm5t3SA9VUrdZY2lQHsxiI6ohepg4sRvKXJ2peFeJ6o20p6ismNL222V hMWPPsBoXSCrSsPnNkt8rmVodiuOVZyLgNP3EPETOgM37wDZFIuay6f2/Bmd+8jq 9Xb/EISHaS5wK9VsO7PC3v2e2+ADEOd1t+dfj3Uwd42ySudEmAXO+Jue5Dpc6uZ/ BKejyiYIyQDtmm/2xHZCddgGh3GD5zwW -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:52 2024 by rpki-client on console-ams.rpki-client.org