$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft File: US2b3oE8t7x3GQqE-bGNuOtOIl8.mft (raw, json) Hash identifier: 08e36o0ek+wWDzLMioviIIm8L4vW2Kza2lQobNhO7Tg= Subject key identifier: 86:9F:0A:6C:E4:B1:FA:D1:79:B6:05:3B:7D:A0:1A:47:06:C3:86:3E Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Certificate serial: 04BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft Manifest number: 04AD Signing time: Fri 22 Nov 2024 23:31:01 +0000 Manifest this update: Fri 22 Nov 2024 23:31:01 +0000 Manifest next update: Fri 29 Nov 2024 23:31:01 +0000 Files and hashes: 1: US2b3oE8t7x3GQqE-bGNuOtOIl8.crl (hash: XBkjuNYPYozhX+/gTRStKW+xD2llG7pj2T+Ny3kR4Y0=) 2: 2F3F56C42BB411EF8D887F3AC4F9AE02.roa (hash: Qi+WEKvtCWtvGFWFUb38yBqHoAd83mtV7+scTOUOMc4=) 3: E1755B4E24D711EDBE2C660BC4F9AE02.roa (hash: aLricGiGlyJJZTbRrMECo3zkg40wJti6wIrN+dUyP7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1210 (0x4ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Validity Not Before: Nov 22 23:31:01 2024 GMT Not After : Nov 29 23:31:01 2024 GMT Subject: CN=67411435-7436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dd:c1:22:51:db:7b:3a:a3:c1:2f:9a:cd:f2: 92:1b:72:62:da:98:b8:77:60:56:53:1d:fa:1a:80: ca:48:84:cd:a2:e6:91:be:9f:09:26:d2:ee:ae:3a: a9:3c:3c:45:8c:d1:50:17:10:e4:0d:2f:64:22:92: b7:b9:f9:61:01:87:82:83:76:88:0e:03:62:7c:20: 84:f1:40:ea:bc:44:cb:de:02:78:1d:44:96:50:79: 0a:0f:bd:71:57:4b:46:f7:a3:33:71:68:48:f2:1d: ec:11:51:c1:b9:a0:0c:cd:1e:75:0f:0b:72:e6:9e: 20:c6:cc:97:6f:8e:c4:ea:e3:c5:d6:02:28:19:15: 0d:48:20:e5:7d:7c:4d:28:14:ff:ed:15:ee:dc:32: 3e:6a:61:ec:df:bf:fe:ca:a8:f8:8d:43:e2:ab:a1: f1:67:eb:ba:3d:9a:41:89:b9:b2:ba:fa:49:37:bb: 00:3f:35:47:d6:d5:69:73:61:ff:53:de:9d:2c:bd: 33:e2:9b:52:dc:49:58:09:43:b4:a7:e0:56:05:45: 85:de:34:0d:17:15:aa:74:f9:d4:73:2d:0a:99:cb: 63:1d:37:c6:11:ee:9e:33:4b:87:ef:2a:f3:75:02: 0d:13:2d:96:4e:52:a3:2f:7f:36:7b:33:6b:5e:47: ad:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9F:0A:6C:E4:B1:FA:D1:79:B6:05:3B:7D:A0:1A:47:06:C3:86:3E X509v3 Authority Key Identifier: keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:18:99:75:60:1f:ee:c4:34:90:1b:6e:b0:43:bd:7f:cc:2b: 39:c6:e4:aa:06:d1:95:68:28:f3:fe:c4:55:54:36:31:a1:83: d1:f7:b7:c9:51:f6:65:ac:fb:d8:41:55:ac:ab:54:2f:41:c6: 4c:85:13:cd:10:f4:77:33:b5:d2:18:e6:df:47:f8:ec:08:82: ab:35:91:8c:a8:51:d2:9e:fa:b9:db:ae:3e:0f:54:de:6c:e8: 9c:cb:34:8d:cd:60:21:8c:e6:36:44:37:c7:0d:91:89:ce:14: 30:84:68:a9:ec:ab:0f:9c:25:4c:2d:a3:7d:ed:0a:cb:4a:ed: f6:0f:a4:ba:e3:9e:30:39:f7:4a:ce:1f:b2:82:4c:99:82:e6: fb:63:bd:7c:53:4e:5e:0d:f6:98:ef:e5:96:54:0f:c3:2d:f0: 17:f4:6b:b7:17:f1:2d:98:ef:d7:03:e8:7b:5d:20:d4:ca:29: eb:88:c3:92:8d:80:5b:a3:92:4e:1a:18:69:95:ab:27:86:62: d0:89:60:12:f7:4c:56:a8:18:61:96:db:61:4d:b0:fa:ab:e9: 7f:fd:55:e3:ca:40:79:24:1a:91:25:57:15:88:0c:25:76:ab: 69:e6:1a:e5:ec:23:25:eb:ca:fb:9c:41:c7:54:b4:e3:21:1d: 0d:61:9f:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4 RUI0RTIyNUYwHhcNMjQxMTIyMjMzMTAxWhcNMjQxMTI5MjMzMTAxWjAYMRYwFAYD VQQDEw02NzQxMTQzNS03NDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv93BIlHbezqjwS+azfKSG3Ji2pi4d2BWUx36GoDKSITNouaRvp8JJtLurjqp PDxFjNFQFxDkDS9kIpK3uflhAYeCg3aIDgNifCCE8UDqvETL3gJ4HUSWUHkKD71x V0tG96MzcWhI8h3sEVHBuaAMzR51Dwty5p4gxsyXb47E6uPF1gIoGRUNSCDlfXxN KBT/7RXu3DI+amHs37/+yqj4jUPiq6HxZ+u6PZpBibmyuvpJN7sAPzVH1tVpc2H/ U96dLL0z4ptS3ElYCUO0p+BWBUWF3jQNFxWqdPnUcy0KmctjHTfGEe6eM0uH7yrz dQINEy2WTlKjL382ezNrXkethwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIafCmzk sfrRebYFO32gGkcGw4Y+MB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTU2Qy9GQjMwNUE1RTBDOEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3 eDNHUXFFLWJHTnVPdE9JbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaGJl1YB/uxDSQG26wQ71/zCs5xuSqBtGVaCjz/sRVVDYxoYPR97fJ UfZlrPvYQVWsq1QvQcZMhRPNEPR3M7XSGObfR/jsCIKrNZGMqFHSnvq5264+D1Te bOicyzSNzWAhjOY2RDfHDZGJzhQwhGip7KsPnCVMLaN97QrLSu32D6S6454wOfdK zh+ygkyZgub7Y718U05eDfaY7+WWVA/DLfAX9Gu3F/EtmO/XA+h7XSDUyinriMOS jYBbo5JOGhhplasnhmLQiWAS90xWqBhhltthTbD6q+l//VXjykB5JBqRJVcViAwl dqtp5hrl7CMl68r7nEHHVLTjIR0NYZ/Q -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org