$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json) Hash identifier: K9eyAz6ZkHJjnJNzJlah4xhswWRIHwp1Nd1N0tn1o1U= Subject key identifier: 1A:37:06:B6:C7:4E:E1:80:BA:2C:95:DB:9A:C6:C5:52:3C:C2:5F:DE Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft Manifest number: 011D Signing time: Thu 21 Nov 2024 02:59:46 +0000 Manifest this update: Thu 21 Nov 2024 02:59:46 +0000 Manifest next update: Thu 28 Nov 2024 02:59:46 +0000 Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: JNI7I1vzUqmr2Cj5QTg0EG/HT5xMUH/Q5ypmX/vkdlQ=) 2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: RN4BzBKzm6DEJmTceToRMZocfmFw/tmq9npppNN/f6I=) 3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: R4MOqPNazPvSSKVGkQoTvV/niZowhUllvkAn/iWShNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Validity Not Before: Nov 21 02:59:46 2024 GMT Not After : Nov 28 02:59:46 2024 GMT Subject: CN=673ea222-22fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:50:b9:be:d9:60:33:96:e7:c1:bd:ca:e1:c0: 50:e2:1f:86:40:ab:9f:7c:62:db:c1:27:31:d0:a8: e2:f6:bd:db:81:51:4d:e0:d7:24:70:24:97:87:61: 54:75:46:cb:92:a5:50:36:f4:1b:41:a6:01:90:82: 77:74:f0:42:46:4d:c2:ad:3c:be:7f:87:ed:e6:1a: e5:25:7b:61:75:98:18:82:3b:fd:37:f8:dd:60:33: c9:31:8c:96:70:c7:e4:d7:86:ac:0f:e7:c5:16:53: 14:64:93:bf:24:ec:21:8f:ef:61:8a:08:02:5b:63: e7:a1:49:7d:6d:8d:ef:93:27:14:d6:6e:86:e3:3c: 8a:86:11:bc:8e:8f:e5:6c:c6:79:86:67:da:6c:48: f5:46:94:c5:1e:ba:a8:7a:7b:29:f8:3e:af:ad:c6: 36:59:3d:52:49:6f:c4:8e:40:cf:9e:ab:ef:d6:29: 9e:2b:9d:f7:cb:e7:ea:91:e3:e4:73:5f:4b:9c:d7: e1:86:36:ff:2f:c0:5a:a5:bc:a4:b8:25:95:03:6e: 5e:d6:a1:a8:3e:4f:91:58:12:3d:fd:e1:c3:89:69: 5f:c3:0f:f1:17:0a:b4:c2:ce:58:23:4c:63:e8:6d: 28:2d:e6:d5:65:ed:67:11:2e:e7:66:88:ed:c4:9d: a4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:37:06:B6:C7:4E:E1:80:BA:2C:95:DB:9A:C6:C5:52:3C:C2:5F:DE X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:aa:19:f4:34:34:77:6e:7f:f5:da:12:70:3c:85:03:21:ad: 21:ae:51:d4:05:42:e3:51:66:49:7c:b4:9a:f0:0e:78:1e:15: 35:76:fe:7b:6f:91:d8:f6:3c:52:85:93:f4:5d:34:cf:f7:db: d8:1c:b9:c0:83:3b:1f:e8:8a:33:f9:10:4a:a3:32:20:70:6e: 85:4f:0f:01:4b:46:d9:92:e8:d3:a7:78:b4:c0:5b:45:51:0a: 91:2c:43:9e:6c:12:30:eb:4a:bc:c2:59:d3:a8:10:33:12:b5: db:89:94:93:c7:d1:0f:9b:5c:9e:a4:08:3e:3e:95:d2:f5:1b: ab:b3:08:92:7b:19:8f:e1:a1:57:ca:71:78:37:b1:06:11:0d: 51:51:70:05:5f:0f:68:d4:1a:0c:e3:4e:cc:9f:96:c7:5e:eb: 7d:e1:ec:a3:4c:2a:c3:e3:fc:0b:b1:47:7b:d1:c6:42:2a:32: 6b:c5:84:9d:67:53:4e:4c:e3:bc:fa:f5:4c:51:99:45:13:54: 6e:c8:c0:81:e7:11:e3:cb:fc:8d:bd:ea:4a:3e:1d:5d:96:28: c1:9b:31:38:5e:03:2c:db:fd:9f:67:f4:d6:cf:ad:b3:11:8a: ab:6b:37:92:88:36:60:f6:e5:4b:aa:e8:3f:4f:60:b5:30:c4: 3a:4e:12:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjQxMTIxMDI1OTQ2WhcNMjQxMTI4MDI1OTQ2WjAYMRYwFAYD VQQDEw02NzNlYTIyMi0yMmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41C5vtlgM5bnwb3K4cBQ4h+GQKuffGLbwScx0Kji9r3bgVFN4NckcCSXh2FU dUbLkqVQNvQbQaYBkIJ3dPBCRk3CrTy+f4ft5hrlJXthdZgYgjv9N/jdYDPJMYyW cMfk14asD+fFFlMUZJO/JOwhj+9higgCW2PnoUl9bY3vkycU1m6G4zyKhhG8jo/l bMZ5hmfabEj1RpTFHrqoensp+D6vrcY2WT1SSW/EjkDPnqvv1imeK533y+fqkePk c19LnNfhhjb/L8BapbykuCWVA25e1qGoPk+RWBI9/eHDiWlfww/xFwq0ws5YI0xj 6G0oLebVZe1nES7nZojtxJ2k/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBo3BrbH TuGAuiyV25rGxVI8wl/eMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT ckc1dzNONl8xVWZkeERqNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLqhn0NDR3bn/12hJwPIUDIa0hrlHUBULjUWZJfLSa8A54HhU1dv57 b5HY9jxShZP0XTTP99vYHLnAgzsf6Ioz+RBKozIgcG6FTw8BS0bZkujTp3i0wFtF UQqRLEOebBIw60q8wlnTqBAzErXbiZSTx9EPm1yepAg+PpXS9RurswiSexmP4aFX ynF4N7EGEQ1RUXAFXw9o1BoM407Mn5bHXut94eyjTCrD4/wLsUd70cZCKjJrxYSd Z1NOTOO8+vVMUZlFE1RuyMCB5xHjy/yNvepKPh1dlijBmzE4XgMs2/2fZ/TWz62z EYqrazeSiDZg9uVLqug/T2C1MMQ6ThLO -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:16 2024 by rpki-client on console-ams.rpki-client.org