$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft File: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft (raw, json) Hash identifier: Qv5voWPKc3BJWFlZ3PHnr7F4SZKSqyeOfhqRKrN3srY= Subject key identifier: 2E:34:60:2E:3F:0F:25:7C:35:E0:BB:54:56:05:C4:8B:F0:A7:CA:8B Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft Manifest number: 021C Signing time: Sat 23 Nov 2024 01:30:41 +0000 Manifest this update: Sat 23 Nov 2024 01:30:40 +0000 Manifest next update: Sat 30 Nov 2024 01:30:40 +0000 Files and hashes: 1: _Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl (hash: Cc4kUfeligl7EnO62sD7taoaOTXIQLD3EALz9pXiR4E=) 2: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (hash: c9QYAMegO3Li21SZh3wi64elC555+G1LwZ2LzSZCZTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Validity Not Before: Nov 23 01:30:40 2024 GMT Not After : Nov 30 01:30:40 2024 GMT Subject: CN=67413040-1357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a9:68:dd:e1:01:fa:65:e4:89:9a:d1:3a:5c: be:62:83:38:c6:c7:ba:75:83:75:57:bd:da:67:6d: 38:27:e7:e4:cb:79:e6:2b:d8:28:56:d7:b9:0e:70: 15:40:ea:23:96:0d:c5:96:8a:80:1a:31:b3:ac:55: 77:14:74:d0:d3:62:bb:5f:4c:07:4e:d8:f8:f6:dc: e8:4b:28:c6:c8:9a:53:4a:d1:fd:07:66:ce:78:56: 77:38:37:5d:d3:49:d2:fc:0a:1a:87:01:fb:27:85: 9b:b3:df:34:46:a7:36:fa:eb:a2:89:6d:0b:60:91: e9:69:4f:3e:b9:6b:f0:f1:b4:6f:59:bc:9f:99:d0: a2:cb:24:56:3e:c3:0b:da:5a:bf:d8:80:68:67:13: 2b:4a:83:dc:a8:e1:62:dd:eb:9c:70:81:24:55:3c: 29:9c:af:fc:ef:5c:98:48:b2:ad:fd:7b:eb:2f:f0: 4a:31:c2:27:c3:17:3c:11:7a:66:53:af:02:32:fd: 02:e7:a7:a2:2f:27:ed:72:c0:49:bb:68:23:98:ad: c2:b7:43:a9:8b:be:ea:71:5d:15:97:80:64:04:39: d8:1d:cc:ac:6c:96:fd:8c:f6:65:b8:a7:e9:a5:c7: 76:cb:d6:19:60:e5:67:ce:07:cd:68:84:5f:30:5d: c8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:34:60:2E:3F:0F:25:7C:35:E0:BB:54:56:05:C4:8B:F0:A7:CA:8B X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e8:fd:45:5f:a2:0c:15:63:f5:b1:1c:3d:8e:7d:2a:0e:3b: 56:7c:59:79:07:a1:de:6a:87:7a:8f:6f:68:3d:f9:b7:18:3a: db:9a:b3:95:04:99:7a:76:c1:0b:71:8f:78:3d:2f:ab:98:80: 0c:c4:40:04:ca:7e:9a:25:9f:54:97:13:89:4b:47:a5:65:54: d8:f7:db:d7:94:6e:10:49:c5:59:8c:2b:04:00:f0:69:c2:b4: 42:85:38:33:7b:d3:63:b8:ab:b6:78:7d:74:7b:83:f8:ec:80: dd:f9:df:2f:00:ef:4c:02:a2:77:ae:64:7f:a4:a9:95:da:3d: 2a:ab:67:56:fb:d8:eb:3b:39:29:d5:cc:f4:0f:e8:73:d4:78: b9:0e:10:24:b1:3d:bd:c6:50:68:be:09:c3:6b:46:fb:5d:f0: b5:d4:5f:8e:e3:3c:d5:45:38:50:25:f7:7e:7e:f8:0b:30:72: 16:08:60:38:ca:e4:3c:28:6f:11:d5:7a:ca:b7:7d:53:2d:bd: 08:91:60:51:52:d5:1f:31:85:77:df:47:7d:ac:3d:08:3e:99: 8c:bf:66:30:ac:7d:d2:71:94:2f:7f:7a:71:89:1d:3e:16:c7: 7d:3c:e0:eb:31:b7:ce:1b:5e:2d:2d:7b:38:53:ba:88:98:65: ad:a5:e5:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjQxMTIzMDEzMDQwWhcNMjQxMTMwMDEzMDQwWjAYMRYwFAYD VQQDEw02NzQxMzA0MC0xMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKlo3eEB+mXkiZrROly+YoM4xse6dYN1V73aZ204J+fky3nmK9goVte5DnAV QOojlg3FloqAGjGzrFV3FHTQ02K7X0wHTtj49tzoSyjGyJpTStH9B2bOeFZ3ODdd 00nS/AoahwH7J4Wbs980Rqc2+uuiiW0LYJHpaU8+uWvw8bRvWbyfmdCiyyRWPsML 2lq/2IBoZxMrSoPcqOFi3euccIEkVTwpnK/871yYSLKt/XvrL/BKMcInwxc8EXpm U68CMv0C56eiLyftcsBJu2gjmK3Ct0Opi77qcV0Vl4BkBDnYHcysbJb9jPZluKfp pcd2y9YZYOVnzgfNaIRfMF3ITwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC40YC4/ DyV8NeC7VFYFxIvwp8qLMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkE2RC83RjhENjNCNDBDQ0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1 emRJSlBDY20zZjZSUDZxYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn6P1FX6IMFWP1sRw9jn0qDjtWfFl5B6Heaod6j29oPfm3GDrbmrOV BJl6dsELcY94PS+rmIAMxEAEyn6aJZ9UlxOJS0elZVTY99vXlG4QScVZjCsEAPBp wrRChTgze9NjuKu2eH10e4P47IDd+d8vAO9MAqJ3rmR/pKmV2j0qq2dW+9jrOzkp 1cz0D+hz1Hi5DhAksT29xlBovgnDa0b7XfC11F+O4zzVRThQJfd+fvgLMHIWCGA4 yuQ8KG8R1XrKt31TLb0IkWBRUtUfMYV330d9rD0IPpmMv2YwrH3ScZQvf3pxiR0+ Fsd9PODrMbfOG14tLXs4U7qImGWtpeVJ -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:52 2024 by rpki-client on console-ams.rpki-client.org