$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft File: eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft (raw, json) Hash identifier: d8uGnFmhhsq4v5ZfZ14ugKbg6W6czaQciK/b67bOYQg= Subject key identifier: 5E:60:96:B6:02:EE:5B:CB:DE:7A:5E:9F:8C:34:2F:A0:26:D6:1F:62 Authority key identifier: 7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98 Certificate issuer: /CN=A91D0C18/serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft Manifest number: 2E Signing time: Thu 21 Nov 2024 05:44:30 +0000 Manifest this update: Thu 21 Nov 2024 05:44:29 +0000 Manifest next update: Thu 28 Nov 2024 05:44:29 +0000 Files and hashes: 1: eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl (hash: 0OPV1opZ6OskL/mCDTbd39ahFHFNglnvFBytBJHnPiY=) 2: EF57F4D0646611EFA25D167EC4F9AE02.roa (hash: gGUuQZoCHoMxpbX892LJTwciHDZLV1IrcZ8alBZ8Tvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C18/serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98 Validity Not Before: Nov 21 05:44:29 2024 GMT Not After : Nov 28 05:44:29 2024 GMT Subject: CN=673ec8be-b981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e3:41:9c:f0:a5:fc:7a:b3:17:57:43:a7:23: 2f:cb:9d:90:94:dd:20:e5:19:4a:e2:7e:c7:b6:b8: 9e:b3:02:42:f3:bc:21:7e:60:52:52:39:07:0d:08: a9:58:7b:01:f9:4f:a8:46:27:cb:78:d3:33:27:e9: 60:e0:26:04:6d:71:ab:9b:24:03:fb:72:9b:ef:2f: 06:c3:a3:8b:a5:dc:10:50:51:2a:67:bc:77:59:5e: 5c:e9:59:c9:10:11:71:54:ff:82:63:ab:97:75:63: ca:b0:95:2d:a7:48:97:6f:5a:62:fc:53:24:bd:1c: 19:d3:18:f3:ef:87:ec:ea:f8:f1:bc:a1:78:48:c5: 0e:fd:99:bf:e5:cb:64:76:14:fa:96:62:27:72:2c: 7a:cc:43:b5:dd:c7:96:d1:12:37:55:f8:d3:bc:e4: 97:04:46:bc:b3:81:9c:9a:e6:dc:21:a3:8b:0c:f1: 16:35:57:f8:30:4b:a0:60:b3:50:82:11:91:fd:77: b7:ba:51:55:7f:51:eb:2d:b1:f8:3a:f5:46:27:8b: 00:31:23:6a:4a:54:8d:80:4d:5b:ff:f6:b6:31:4d: 7f:84:15:04:a2:b0:3d:3f:d4:77:c1:1b:63:f1:36: f7:64:6b:7c:70:86:91:9b:d5:91:fa:b1:66:f6:06: 9f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:60:96:B6:02:EE:5B:CB:DE:7A:5E:9F:8C:34:2F:A0:26:D6:1F:62 X509v3 Authority Key Identifier: keyid:7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:86:fc:9f:c0:0d:20:07:37:b1:aa:f9:c6:4d:92:6d:ba:2e: e6:d7:3e:5f:7e:8d:34:71:be:b9:f8:e2:d3:b7:c0:0b:ac:fc: dd:e7:4e:f1:91:b1:60:9d:e5:ae:95:33:f9:31:60:ae:7f:98: 52:80:f5:75:fd:36:fa:11:56:13:9a:5b:1a:9f:3e:e1:a5:29: 1d:a7:a7:65:78:48:ea:2d:e7:b2:33:5b:1c:25:19:5f:2a:6e: 67:76:37:28:3a:b7:4b:97:d8:73:66:47:62:08:a2:fd:cf:e4: cf:e8:77:3a:9c:33:46:71:89:c7:d1:88:48:c7:ee:02:90:08: d8:14:94:af:09:e5:da:27:10:ad:20:c6:00:1f:23:40:1a:6f: 4f:3b:8d:d1:64:2a:d0:c4:d3:e4:34:bd:29:f1:e0:3d:e3:10: 2f:7b:32:83:73:aa:c4:13:b9:ec:02:9c:dc:1d:72:5c:a2:99: 20:18:de:28:f4:c4:f9:28:5a:d4:8c:5a:e4:75:63:f2:0d:97: 16:27:c1:cd:bb:68:53:ac:36:ea:c2:1e:ed:6b:23:d4:bf:49: 2b:7d:da:4b:60:c6:a9:7b:bb:de:19:39:b4:45:58:27:c4:36: e5:84:aa:3d:f1:c5:60:3f:c3:b5:83:b9:e6:3c:19:93:56:d1: cb:80:06:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEMxODExMC8GA1UEBRMoN0EyODE2RTk2OTc5NzVDQUQ5MzQ5QjI2QjIwRjE0Qzgx QTkxNEM5ODAeFw0yNDExMjEwNTQ0MjlaFw0yNDExMjgwNTQ0MjlaMBgxFjAUBgNV BAMTDTY3M2VjOGJlLWI5ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDq40Gc8KX8erMXV0OnIy/LnZCU3SDlGUrifse2uJ6zAkLzvCF+YFJSOQcNCKlY ewH5T6hGJ8t40zMn6WDgJgRtcaubJAP7cpvvLwbDo4ul3BBQUSpnvHdZXlzpWckQ EXFU/4Jjq5d1Y8qwlS2nSJdvWmL8UyS9HBnTGPPvh+zq+PG8oXhIxQ79mb/ly2R2 FPqWYidyLHrMQ7Xdx5bREjdV+NO85JcERryzgZya5twho4sM8RY1V/gwS6Bgs1CC EZH9d7e6UVV/Uestsfg69UYniwAxI2pKVI2ATVv/9rYxTX+EFQSisD0/1HfBG2Px Nvdka3xwhpGb1ZH6sWb2Bp87AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXmCWtgLu W8veel6fjDQvoCbWH2IwHwYDVR0jBBgwFoAUeigW6Wl5dcrZNJsmsg8UyBqRTJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQzE4LzcxMkNGMEQ4NjQ2 NjExRUY4RTE4Rjg3QUM0RjlBRTAyL2VpZ1c2V2w1ZGNyWk5Kc21zZzhVeUJxUlRK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWlnVzZXbDVkY3JaTkpzbXNnOFV5QnFSVEpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QzE4LzcxMkNGMEQ4NjQ2NjExRUY4RTE4Rjg3QUM0RjlBRTAyL2VpZ1c2V2w1ZGNy Wk5Kc21zZzhVeUJxUlRKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGGG/J/ADSAHN7Gq+cZNkm26LubXPl9+jTRxvrn44tO3wAus/N3nTvGR sWCd5a6VM/kxYK5/mFKA9XX9NvoRVhOaWxqfPuGlKR2np2V4SOot57IzWxwlGV8q bmd2Nyg6t0uX2HNmR2IIov3P5M/odzqcM0ZxicfRiEjH7gKQCNgUlK8J5donEK0g xgAfI0Aab087jdFkKtDE0+Q0vSnx4D3jEC97MoNzqsQTuewCnNwdclyimSAY3ij0 xPkoWtSMWuR1Y/INlxYnwc27aFOsNurCHu1rI9S/SSt92ktgxql7u94ZObRFWCfE NuWEqj3xxWA/w7WDueY8GZNW0cuABrY= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org