$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json) Hash identifier: bET7Tj6whNDRB2tmkrOhpHyE930YKj1eHL0e/6E3rv8= Subject key identifier: 75:F9:FB:EA:CC:00:60:EF:1D:3E:24:EC:FF:28:61:1A:24:CC:C4:09 Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft Manifest number: 047B Signing time: Fri 22 Nov 2024 23:37:54 +0000 Manifest this update: Fri 22 Nov 2024 23:37:53 +0000 Manifest next update: Fri 29 Nov 2024 23:37:53 +0000 Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: nJNdf+OfDl+xMsNNP3a+h78INdQWS/Cqqo3PCeqx07Y=) 2: D3001978D03B11ECA7C18D2DC4F9AE02.roa (hash: VhdbU5oeoE1P0kbQ3Dehjq8QrO/fgJ2Mi3no4eVdznQ=) 3: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: V0Ju3pd3n+IcbQEzHygiG/kTkhX/jsHG9G0e1qBxAxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: Nov 22 23:37:53 2024 GMT Not After : Nov 29 23:37:53 2024 GMT Subject: CN=674115d2-9cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bb:6a:89:d8:eb:21:21:1e:0e:65:b0:0f:91: 12:c8:fa:c6:59:c9:1e:f8:2c:be:8f:5e:bf:93:df: 8e:dc:89:2b:7f:a4:69:4b:c0:b3:c3:97:de:e6:f0: 5d:43:1f:03:04:a2:ac:89:c0:de:88:78:76:0e:0e: 6e:97:6a:8c:cf:82:43:d4:28:93:c5:c7:8a:cf:d6: 07:7c:b1:67:f8:53:d4:91:28:81:c8:b8:f6:c5:3c: 10:7e:53:32:38:c7:c2:57:d3:d4:5d:d6:cd:9f:d6: c9:d7:7c:e5:d0:6a:61:ca:8f:22:55:97:d6:86:ca: 16:da:32:2a:d6:6f:08:d5:8f:a1:75:bc:2d:6b:66: e7:83:19:02:de:54:f7:5d:3a:8a:a6:f9:03:d1:37: 29:94:07:aa:08:e2:0a:6f:9d:ac:40:8a:46:15:e3: 16:b4:95:c7:c6:d7:2f:92:91:7d:c3:0d:b0:f4:f4: 4b:88:78:ab:80:2d:a6:0e:e2:fa:c3:af:bd:4a:11: 80:d7:b2:99:7c:6f:c9:f9:06:08:bb:ae:7f:85:21: c9:a4:07:52:43:5e:b4:c4:12:7d:85:ac:2a:4b:d1: 3f:a7:3d:43:3e:20:6b:47:65:24:74:92:49:b3:c8: 5c:7d:29:36:10:f5:18:70:fe:a9:b0:bb:1d:29:f2: ba:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F9:FB:EA:CC:00:60:EF:1D:3E:24:EC:FF:28:61:1A:24:CC:C4:09 X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ad:9d:b3:18:6b:21:1b:23:c3:11:0f:bc:55:e1:a9:28:03: 1d:bf:5e:03:5c:bb:d5:6e:b5:0d:ca:80:d2:39:20:63:3e:9a: e5:c0:fe:ef:cc:c9:93:71:a2:af:91:57:80:6d:ea:fd:0b:a4: 93:dd:c7:5c:b6:e3:0f:b8:b4:80:72:20:fe:3a:ce:4a:af:39: d4:da:de:11:b9:ef:e9:33:12:67:f4:a9:68:a4:db:3b:7e:01: 8f:d2:0e:de:a0:6e:f5:ba:98:87:ed:65:4d:e6:37:9f:57:11: ea:4e:c0:91:1e:66:be:72:21:2a:13:f9:14:be:34:b6:a5:7b: e0:01:be:1f:e0:f9:2d:69:a3:7e:fb:8a:a2:cb:fb:0b:6c:ac: 65:c8:57:4c:ab:df:26:31:b6:33:05:b7:54:e4:78:59:62:83: 4b:9e:8d:6b:e8:52:4a:2b:aa:00:13:37:24:f1:4a:8b:e2:9d: 9c:60:88:19:0f:c4:d1:9c:67:f9:d2:0a:c5:44:fe:7e:0e:b7: fc:45:85:6a:98:cc:c0:ca:18:cc:44:9c:93:d9:40:4f:78:80: b4:fe:42:99:19:0c:40:6e:0d:03:f8:e1:9c:9f:eb:5c:e8:6f: 5f:cc:3c:ce:8c:fa:9b:fc:63:0e:75:c4:ba:0f:67:79:53:ca: b4:3c:b0:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjQxMTIyMjMzNzUzWhcNMjQxMTI5MjMzNzUzWjAYMRYwFAYD VQQDEw02NzQxMTVkMi05Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5btqidjrISEeDmWwD5ESyPrGWcke+Cy+j16/k9+O3Ikrf6RpS8Czw5fe5vBd Qx8DBKKsicDeiHh2Dg5ul2qMz4JD1CiTxceKz9YHfLFn+FPUkSiByLj2xTwQflMy OMfCV9PUXdbNn9bJ13zl0Gphyo8iVZfWhsoW2jIq1m8I1Y+hdbwta2bngxkC3lT3 XTqKpvkD0TcplAeqCOIKb52sQIpGFeMWtJXHxtcvkpF9ww2w9PRLiHirgC2mDuL6 w6+9ShGA17KZfG/J+QYIu65/hSHJpAdSQ160xBJ9hawqS9E/pz1DPiBrR2UkdJJJ s8hcfSk2EPUYcP6psLsdKfK63wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHX5++rM AGDvHT4k7P8oYRokzMQJMB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2NS9BNERERkE5NDFGM0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhG Mm1FQkNBLVlNaS05WlpHTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnrZ2zGGshGyPDEQ+8VeGpKAMdv14DXLvVbrUNyoDSOSBjPprlwP7v zMmTcaKvkVeAber9C6ST3cdctuMPuLSAciD+Os5KrznU2t4Rue/pMxJn9KlopNs7 fgGP0g7eoG71upiH7WVN5jefVxHqTsCRHma+ciEqE/kUvjS2pXvgAb4f4PktaaN+ +4qiy/sLbKxlyFdMq98mMbYzBbdU5HhZYoNLno1r6FJKK6oAEzck8UqL4p2cYIgZ D8TRnGf50grFRP5+Drf8RYVqmMzAyhjMRJyT2UBPeIC0/kKZGQxAbg0D+OGcn+tc 6G9fzDzOjPqb/GMOdcS6D2d5U8q0PLBp -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org