$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft File: 4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json) Hash identifier: 8M1sid1+cP/4q+AsNYObrpupasiUe20OUJzROypMuSU= Subject key identifier: 78:B4:36:84:00:FF:92:31:E0:2B:98:CA:9C:D5:98:24:FD:4F:5C:3F Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 Certificate issuer: /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Certificate serial: 05AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft Manifest number: 05AA Signing time: Fri 22 Nov 2024 22:42:49 +0000 Manifest this update: Fri 22 Nov 2024 22:42:49 +0000 Manifest next update: Fri 29 Nov 2024 22:42:49 +0000 Files and hashes: 1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: 2u72RZEPiSSKHgqOnRL6/oaRu51AZnD3QMV/Kn6fX2w=) 2: 6AE1616AA3F711EBBA757063C4F9AE02.roa (hash: mBt8RtcAAJ1E0qkhS2O17Qle9xp96BCyxe5ScaBrVUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1454 (0x5ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80 Validity Not Before: Nov 22 22:42:49 2024 GMT Not After : Nov 29 22:42:49 2024 GMT Subject: CN=674108e9-13b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a0:26:81:d2:7a:36:6b:c9:ed:fc:9c:34:ac: 78:97:4b:17:7b:61:07:78:ca:d8:5c:32:3a:3d:5f: 5c:09:86:e0:6d:16:9b:29:a3:fc:3e:aa:02:7a:d1: 7f:10:c4:da:48:e5:d9:e9:5e:b7:9e:8a:d8:b8:ba: 75:fb:4c:33:c7:e3:87:c6:ea:1f:c3:8a:21:08:30: 54:a9:22:d8:32:92:91:14:5d:7d:f3:5c:d7:18:d1: b5:1c:c0:6e:fd:5a:03:91:ff:9f:af:a0:90:de:a2: 72:4c:be:99:17:6d:86:e8:d8:aa:9d:d3:89:7b:c3: 2d:24:b0:8d:58:4e:c1:81:1c:d6:72:9f:3d:b6:fd: 42:06:dc:2e:b1:e8:9b:19:2c:e4:2a:36:1f:17:c7: 12:8a:1a:46:da:de:1d:2a:ee:39:7a:b4:17:2b:fa: de:db:60:eb:d8:eb:0d:cd:8f:f6:25:7a:5d:8c:8c: 25:64:be:84:d0:b0:7b:23:7f:74:af:1b:ab:cb:fb: d8:ab:b2:30:16:f9:99:4a:39:83:ef:e4:a5:40:1b: 36:e0:08:7a:b8:5b:1f:4f:f9:3b:e9:4c:b6:c1:f1: 1f:7b:44:61:08:54:3f:bd:57:2e:eb:05:88:70:35: 90:22:0a:5f:5f:57:39:6d:98:ca:56:56:c8:2d:e6: f3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B4:36:84:00:FF:92:31:E0:2B:98:CA:9C:D5:98:24:FD:4F:5C:3F X509v3 Authority Key Identifier: keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:2a:79:13:26:c5:31:6a:3e:c1:a6:e8:e9:64:b0:91:47:7b: 23:c7:c2:93:a9:78:a6:ad:78:19:62:10:b9:bb:a5:e5:9d:d4: a8:58:ef:87:3d:f8:1d:d5:00:55:02:df:c3:00:98:9d:eb:d5: c1:45:e0:e7:63:93:0c:aa:d6:8f:7d:f2:8c:38:10:dc:9a:09: 6c:af:fa:4e:ea:96:14:7a:2e:d4:50:1c:1b:61:ae:75:7c:be: 04:61:55:d8:91:26:de:b2:ad:b6:72:a6:d5:b8:16:0d:a6:b7: 9a:64:fa:8c:3a:56:c4:29:e4:22:33:e4:16:59:55:6b:f4:cb: 23:1e:11:6a:48:a5:59:e9:fa:c3:3e:5b:b1:a0:22:92:11:f5: 12:76:2c:7e:41:c1:85:fd:ae:2e:75:be:b1:64:ab:76:4b:a1: 76:d1:47:ce:f7:b2:10:9e:fd:82:2f:1f:74:70:01:b5:14:3a: 76:43:15:68:03:9f:9e:8e:a4:82:9e:53:06:96:1c:7b:d8:57: 45:7a:55:d5:96:a9:46:24:91:5c:49:d7:18:e3:e5:e6:13:18: 24:d1:ea:59:21:cb:49:8e:ee:d2:e6:21:98:6e:67:f5:30:69: ab:13:ee:3b:43:71:9d:3e:9d:fa:44:26:f2:0c:0e:b9:37:a9: 77:98:3c:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U3QkQxMTAvBgNVBAUTKEUxNUQxMzBCMEJCMjk4MEUxQkYxMUMwMUJDQ0I3NTNC NDk2ODRBODAwHhcNMjQxMTIyMjI0MjQ5WhcNMjQxMTI5MjI0MjQ5WjAYMRYwFAYD VQQDEw02NzQxMDhlOS0xM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl6AmgdJ6NmvJ7fycNKx4l0sXe2EHeMrYXDI6PV9cCYbgbRabKaP8PqoCetF/ EMTaSOXZ6V63norYuLp1+0wzx+OHxuofw4ohCDBUqSLYMpKRFF1981zXGNG1HMBu /VoDkf+fr6CQ3qJyTL6ZF22G6NiqndOJe8MtJLCNWE7BgRzWcp89tv1CBtwuseib GSzkKjYfF8cSihpG2t4dKu45erQXK/re22Dr2OsNzY/2JXpdjIwlZL6E0LB7I390 rxury/vYq7IwFvmZSjmD7+SlQBs24Ah6uFsfT/k76Uy2wfEfe0RhCFQ/vVcu6wWI cDWQIgpfX1c5bZjKVlbILebz3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHi0NoQA /5Ix4CuYypzVmCT9T1w/MB8GA1UdIwQYMBaAFOFdEwsLspgOG/EcAbzLdTtJaEqA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTdCRC9EMzAyNjAzNEEz RjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1BNGI4UndCdk10MU8wbG9T b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWMFRDd3V5bUE0YjhSd0J2TXQxTzBsb1NvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTdCRC9EMzAyNjAzNEEzRjUxMUVCOTJGOUM1NjFDNEY5QUUwMi80VjBUQ3d1eW1B NGI4UndCdk10MU8wbG9Tb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgKnkTJsUxaj7BpujpZLCRR3sjx8KTqXimrXgZYhC5u6XlndSoWO+H Pfgd1QBVAt/DAJid69XBReDnY5MMqtaPffKMOBDcmglsr/pO6pYUei7UUBwbYa51 fL4EYVXYkSbesq22cqbVuBYNpreaZPqMOlbEKeQiM+QWWVVr9MsjHhFqSKVZ6frD PluxoCKSEfUSdix+QcGF/a4udb6xZKt2S6F20UfO97IQnv2CLx90cAG1FDp2QxVo A5+ejqSCnlMGlhx72FdFelXVlqlGJJFcSdcY4+XmExgk0epZIctJju7S5iGYbmf1 MGmrE+47Q3GdPp36RCbyDA65N6l3mDxr -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org