$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft File: 78WCsqPLLBDooxZW548EvNW8UxA.mft (raw, json) Hash identifier: Nxo8dj8ge9C4E+vLr21dGCMAqQnJaBTdsBNCs2K8GZc= Subject key identifier: D4:DF:F1:C0:AA:C0:78:0A:9B:20:97:BF:E7:90:DD:25:E8:DA:92:C5 Authority key identifier: EF:C5:82:B2:A3:CB:2C:10:E8:A3:16:56:E7:8F:04:BC:D5:BC:53:10 Certificate issuer: /CN=A91D09A2/serialNumber=EFC582B2A3CB2C10E8A31656E78F04BCD5BC5310 Certificate serial: 05F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft Manifest number: 05ED Signing time: Fri 22 Nov 2024 22:24:50 +0000 Manifest this update: Fri 22 Nov 2024 22:24:50 +0000 Manifest next update: Fri 29 Nov 2024 22:24:50 +0000 Files and hashes: 1: 78WCsqPLLBDooxZW548EvNW8UxA.crl (hash: pGicvU5VylPqYtqTlGNHzV4xQX3COdpeaoklxn/CfLU=) 2: 59AD29B88C6B11EBA286C569C4F9AE02.roa (hash: moTAt3VjmiOCHxAKpACaMWgI7E3LHjdxwtqNPvRROiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.crl rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1525 (0x5f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09A2/serialNumber=EFC582B2A3CB2C10E8A31656E78F04BCD5BC5310 Validity Not Before: Nov 22 22:24:50 2024 GMT Not After : Nov 29 22:24:50 2024 GMT Subject: CN=674104b2-1c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:dc:5b:78:8c:50:08:3d:63:21:8f:d9:d8: 5c:5d:90:bc:b2:ec:07:ea:61:dc:53:f0:2b:96:05: ca:5c:ea:03:ca:4a:0e:df:5c:bf:6d:e3:7b:ef:6f: f1:21:fa:8f:96:b9:39:da:f7:32:d7:c0:c5:96:1e: e8:1f:b9:ba:67:85:c9:7f:2e:25:8f:5e:f7:05:e4: 5d:72:dd:a7:16:08:b5:84:c0:ca:10:f6:78:e8:f0: b6:32:5a:dc:c2:d7:65:bc:29:e1:c0:7f:41:8c:f6: 01:86:f8:23:73:fa:9c:bb:38:f0:12:53:d9:c4:02: 15:a7:0d:83:4e:e2:1b:57:a9:93:4c:da:b8:41:45: 37:ca:2e:e2:72:f0:27:5c:c2:25:33:4c:cf:84:7b: 17:ef:c4:6e:ed:2a:f5:86:d7:b1:91:1a:47:41:ef: a9:47:32:4c:12:c2:1e:75:d7:6b:e4:8d:40:f3:ea: 3c:50:8d:8e:ed:3b:c5:e6:fd:dc:3d:ed:94:42:5e: 0f:b2:d6:39:4a:99:89:4d:85:81:b3:7d:25:80:47: 8d:7a:a0:62:22:64:78:b8:19:c0:a9:93:02:89:3f: b4:1f:0a:5a:2b:2a:4b:05:bc:d8:e3:16:2f:53:57: c2:59:92:46:df:f7:da:d7:40:c1:44:38:f8:7e:83: 5d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DF:F1:C0:AA:C0:78:0A:9B:20:97:BF:E7:90:DD:25:E8:DA:92:C5 X509v3 Authority Key Identifier: keyid:EF:C5:82:B2:A3:CB:2C:10:E8:A3:16:56:E7:8F:04:BC:D5:BC:53:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/78WCsqPLLBDooxZW548EvNW8UxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09A2/1FEB5A208C6A11EB98DEDD68C4F9AE02/78WCsqPLLBDooxZW548EvNW8UxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:aa:8d:76:72:e1:22:b1:d9:35:ba:0f:36:d4:cc:c5:2b:7f: 7f:01:32:f6:be:4e:fb:a9:96:24:f8:09:83:3a:a0:95:df:4d: af:3f:0d:8f:51:78:64:3f:e8:1b:a4:8f:a7:0a:43:cb:fc:b0: 46:bd:84:34:69:4e:85:88:52:52:0d:92:1f:ed:58:d8:84:0e: dd:2e:4c:e6:cd:17:81:cd:64:95:cb:33:2a:3d:1e:bc:f1:7f: e8:40:56:02:83:19:da:2a:83:04:d1:21:af:b2:c3:14:a6:ab: 7e:68:d0:4b:6c:51:d1:ee:08:76:f2:4e:d2:59:36:d3:c5:de: bc:29:dd:c7:b5:3e:d5:18:e4:7e:bc:ef:1f:7a:23:f8:ee:70: 59:b3:0f:19:ef:c8:b9:fb:3e:53:e0:e0:27:0a:ab:5b:6a:8e: d4:2a:cb:3b:7e:f7:ca:dc:8f:1b:16:a4:99:62:8b:cb:a1:1e: cb:c0:5c:70:d3:46:8f:61:9e:ec:0e:32:a6:8c:ac:94:90:7e: 6f:dc:00:7e:13:13:ea:db:de:3f:7d:c4:68:c9:81:c0:4e:95: 8c:81:19:14:52:ea:30:ba:6e:a9:b0:60:c3:d0:90:31:8c:b0: 4f:2c:b2:9c:ae:fa:d7:6d:1d:23:55:54:1c:54:0c:c9:55:7c: 73:11:eb:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5QTIxMTAvBgNVBAUTKEVGQzU4MkIyQTNDQjJDMTBFOEEzMTY1NkU3OEYwNEJD RDVCQzUzMTAwHhcNMjQxMTIyMjIyNDUwWhcNMjQxMTI5MjIyNDUwWjAYMRYwFAYD VQQDEw02NzQxMDRiMi0xYzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVXcW3iMUAg9YyGP2dhcXZC8suwH6mHcU/ArlgXKXOoDykoO31y/beN772/x IfqPlrk52vcy18DFlh7oH7m6Z4XJfy4lj173BeRdct2nFgi1hMDKEPZ46PC2Mlrc wtdlvCnhwH9BjPYBhvgjc/qcuzjwElPZxAIVpw2DTuIbV6mTTNq4QUU3yi7icvAn XMIlM0zPhHsX78Ru7Sr1htexkRpHQe+pRzJMEsIedddr5I1A8+o8UI2O7TvF5v3c Pe2UQl4PstY5SpmJTYWBs30lgEeNeqBiImR4uBnAqZMCiT+0HwpaKypLBbzY4xYv U1fCWZJG3/fa10DBRDj4foNdhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTf8cCq wHgKmyCXv+eQ3SXo2pLFMB8GA1UdIwQYMBaAFO/FgrKjyywQ6KMWVuePBLzVvFMQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlBMi8xRkVCNUEyMDhD NkExMUVCOThERURENjhDNEY5QUUwMi83OFdDc3FQTExCRG9veFpXNTQ4RXZOVzhV eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4V0NzcVBMTEJEb294Wlc1NDhFdk5XOFV4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlBMi8xRkVCNUEyMDhDNkExMUVCOThERURENjhDNEY5QUUwMi83OFdDc3FQTExC RG9veFpXNTQ4RXZOVzhVeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbqo12cuEisdk1ug821MzFK39/ATL2vk77qZYk+AmDOqCV302vPw2P UXhkP+gbpI+nCkPL/LBGvYQ0aU6FiFJSDZIf7VjYhA7dLkzmzReBzWSVyzMqPR68 8X/oQFYCgxnaKoME0SGvssMUpqt+aNBLbFHR7gh28k7SWTbTxd68Kd3HtT7VGOR+ vO8feiP47nBZsw8Z78i5+z5T4OAnCqtbao7UKss7fvfK3I8bFqSZYovLoR7LwFxw 00aPYZ7sDjKmjKyUkH5v3AB+ExPq294/fcRoyYHATpWMgRkUUuowum6psGDD0JAx jLBPLLKcrvrXbR0jVVQcVAzJVXxzEet4 -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org