$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: 4IRu/WO9L6/VQkgrGrx/fhJt82ji/XYckVqQL+5gZhs= Subject key identifier: 4E:A8:B6:F4:91:21:A8:FE:CB:83:16:CA:25:A5:31:C9:36:5D:09:C9 Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 1620 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 1615 Signing time: Wed 20 Nov 2024 16:42:05 +0000 Manifest this update: Wed 20 Nov 2024 16:42:04 +0000 Manifest next update: Wed 27 Nov 2024 16:42:04 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: 9EIKXXm0ACpcGpK6NS81pHcGfmvok2UahMHBoyholIk=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: v3sjoQSpuFWRMhTWonBiueiIp4Y61jfzrKe4k2e0JcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5664 (0x1620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: Nov 20 16:42:04 2024 GMT Not After : Nov 27 16:42:04 2024 GMT Subject: CN=673e115d-5afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:84:0e:0c:f4:01:43:68:6a:36:91:ee:82:71: 2c:82:39:99:1f:db:c6:7d:98:2b:3c:67:90:6f:06: 80:70:46:c4:28:c7:cd:62:99:04:71:1b:53:39:66: be:b3:f6:56:30:a8:b7:51:27:1e:09:1e:ab:16:e8: 37:4f:7c:9b:32:a0:35:dc:29:18:6e:40:31:a5:65: 00:a6:5f:ec:00:94:8e:dd:34:39:1d:b3:30:59:3e: 81:82:b8:f5:41:fd:94:88:f9:9c:ba:0f:dc:ad:30: 66:03:be:44:7a:9b:1a:0a:17:1b:d3:b2:e7:f3:c8: de:d3:52:5e:fb:13:ef:4c:e9:c5:9f:58:52:9b:8b: 3f:ce:6b:cb:42:2e:0d:27:4f:5d:29:55:c6:7e:9e: 10:d1:a0:d8:0c:c5:83:7e:5f:58:c0:61:9a:98:79: 58:ff:39:6f:93:b8:db:ce:55:f2:a9:ad:16:71:f3: f1:ec:7d:75:cb:6c:eb:4a:61:5a:4c:cc:35:c1:e1: 3b:1a:3a:04:f4:1b:60:4a:31:33:b0:fc:c0:b8:1c: a8:1d:72:56:17:df:a4:c9:fe:ee:a2:7d:e5:5a:80: a0:f8:82:85:6e:91:83:5f:34:95:43:6e:1e:f7:d3: 46:d0:71:c3:d7:b8:85:49:90:12:4a:d0:ef:7d:37: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A8:B6:F4:91:21:A8:FE:CB:83:16:CA:25:A5:31:C9:36:5D:09:C9 X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ff:4f:9a:7f:8b:73:00:c9:e9:64:62:48:c3:33:0e:a1:53: 43:99:c7:9b:61:30:3d:56:5e:2e:e1:d0:7a:37:dd:8d:77:48: 63:2d:9c:88:29:0e:6c:5c:b8:d0:00:eb:1b:a5:0b:1a:a7:f0: 53:ec:fd:2a:10:4c:dc:38:82:1b:c4:86:2a:cd:ce:d9:34:75: 6e:34:6e:b5:8f:85:a5:4d:b9:4a:5b:4a:57:bd:c5:d1:63:13: 63:ac:36:ab:72:01:b4:a1:8c:03:42:e9:fb:24:31:a1:49:34: 7a:76:84:3a:ad:df:16:10:b5:d9:e7:52:d5:ef:9f:9e:72:bc: 28:52:18:5f:52:c0:67:ab:71:41:09:2a:fc:a8:ab:19:01:15: fa:71:4e:df:31:05:9b:2a:ef:10:20:f1:76:ce:a4:a2:5c:1f: 67:af:b9:49:09:fe:33:75:2f:6a:2f:a4:60:d2:85:1e:29:47: 2c:7b:07:9c:77:0c:15:9f:31:9f:94:c7:12:6e:e5:7f:ea:9e: aa:5a:7f:9e:e2:80:2f:3d:cf:39:91:3c:87:4d:1d:32:57:84: 9e:0d:c4:67:32:be:a5:9d:ca:60:61:91:2f:5a:97:d4:9d:2f: e1:62:7a:73:dd:9a:42:b2:78:53:60:40:2e:4c:43:3b:90:b9: 10:94:de:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjQxMTIwMTY0MjA0WhcNMjQxMTI3MTY0MjA0WjAYMRYwFAYD VQQDEw02NzNlMTE1ZC01YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIQODPQBQ2hqNpHugnEsgjmZH9vGfZgrPGeQbwaAcEbEKMfNYpkEcRtTOWa+ s/ZWMKi3USceCR6rFug3T3ybMqA13CkYbkAxpWUApl/sAJSO3TQ5HbMwWT6Bgrj1 Qf2UiPmcug/crTBmA75EepsaChcb07Ln88je01Je+xPvTOnFn1hSm4s/zmvLQi4N J09dKVXGfp4Q0aDYDMWDfl9YwGGamHlY/zlvk7jbzlXyqa0WcfPx7H11y2zrSmFa TMw1weE7GjoE9BtgSjEzsPzAuByoHXJWF9+kyf7uon3lWoCg+IKFbpGDXzSVQ24e 99NG0HHD17iFSZASStDvfTci8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6otvSR Iaj+y4MWyiWlMck2XQnJMB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7/0+af4tzAMnpZGJIwzMOoVNDmcebYTA9Vl4u4dB6N92Nd0hjLZyI KQ5sXLjQAOsbpQsap/BT7P0qEEzcOIIbxIYqzc7ZNHVuNG61j4WlTblKW0pXvcXR YxNjrDarcgG0oYwDQun7JDGhSTR6doQ6rd8WELXZ51LV75+ecrwoUhhfUsBnq3FB CSr8qKsZARX6cU7fMQWbKu8QIPF2zqSiXB9nr7lJCf4zdS9qL6Rg0oUeKUcsewec dwwVnzGflMcSbuV/6p6qWn+e4oAvPc85kTyHTR0yV4SeDcRnMr6lncpgYZEvWpfU nS/hYnpz3ZpCsnhTYEAuTEM7kLkQlN5H -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:07 2024 by rpki-client on console-ams.rpki-client.org