$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft File: 4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json) Hash identifier: mkhi7cJ7FzvWfhqquNaUVihcPgZVUxeTGxuvqgQXSXc= Subject key identifier: E2:50:58:B4:C6:C5:78:03:04:9E:31:DD:76:EA:4A:F8:AD:93:7E:C2 Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F Certificate issuer: /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft Manifest number: 41 Signing time: Thu 21 Nov 2024 05:30:36 +0000 Manifest this update: Thu 21 Nov 2024 05:30:36 +0000 Manifest next update: Thu 28 Nov 2024 05:30:36 +0000 Files and hashes: 1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: dJmtOr2ox1MVcHbR22koFks4pXSAkbYQaazvW6/WDvM=) 2: 47C532D045B911EF93633071C4F9AE02.roa (hash: rE+0lealMQunqmP7T0ZCFPfRDHKLNmLXQBimJeKVcUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F Validity Not Before: Nov 21 05:30:36 2024 GMT Not After : Nov 28 05:30:36 2024 GMT Subject: CN=673ec57c-ed86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:37:36:02:a7:62:45:1d:b7:60:24:00:7a: 9a:80:71:e8:8d:b1:97:2c:c4:aa:90:84:8d:e6:03: d1:8f:19:86:25:b2:6f:03:a3:d8:12:cd:c6:eb:75: 7b:75:b7:12:d4:d2:44:f3:70:88:ac:81:11:b0:b2: d9:ca:6f:2e:c0:4e:bf:84:dc:b0:3a:db:c3:af:1c: a0:fb:cd:4f:38:fb:ed:23:b7:c2:5a:a1:fb:00:ff: a5:e4:c2:c8:c8:47:0a:0b:a8:97:cf:a9:f5:e5:07: 58:9d:7d:dc:2a:ed:f4:8f:34:67:a2:fd:a9:ec:71: d7:a6:c1:ab:5f:c4:65:19:cd:f8:11:4b:72:93:2a: 07:f7:ef:d5:bf:04:d9:b8:17:ba:0a:e3:65:56:ba: fd:41:b7:83:14:cd:d9:ea:84:51:04:b5:f8:8d:39: 3e:7e:a0:94:ed:25:92:e6:53:a6:4d:79:8e:9e:e7: 19:30:fa:65:28:2c:f1:93:fd:84:f5:ea:5f:f1:95: 76:f0:21:aa:03:1d:77:b2:84:e4:c8:e3:e0:c9:07: 65:c4:95:5a:0e:86:1a:e7:29:46:6e:81:12:a9:97: eb:e8:12:01:86:50:dd:05:d4:48:9d:7b:e0:0b:cf: 76:e2:ea:3e:7d:5e:ce:e9:3f:fa:e8:61:6b:46:70: f2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:50:58:B4:C6:C5:78:03:04:9E:31:DD:76:EA:4A:F8:AD:93:7E:C2 X509v3 Authority Key Identifier: keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:5c:f0:57:20:2a:b8:4e:df:a2:29:8f:3c:db:b9:b9:90:de: 69:d8:96:c0:38:83:f3:d8:bf:53:db:67:7c:1c:8a:cd:42:6d: 99:71:c0:ff:73:3a:46:70:84:56:5f:a2:ae:46:12:1c:cd:ec: 8a:20:30:65:3e:95:d4:a5:27:69:87:ba:94:54:95:d6:93:ee: ef:ed:b7:4b:17:ea:e7:53:f3:35:7a:4b:ef:0e:85:86:eb:15: 44:8a:94:da:e3:84:38:e5:db:b6:f7:e7:87:27:58:96:4a:c7: 4f:d3:d9:80:87:3e:fe:9c:e2:37:4a:81:8a:ae:94:29:25:de: 19:c4:8d:11:06:d0:51:1e:24:0c:85:53:78:95:bf:15:5f:0e: bc:3a:19:33:ee:01:51:24:f8:d4:c0:ef:8b:81:bd:34:e8:29: e4:ff:eb:3b:c3:74:2f:d5:05:ae:8a:68:6e:d1:b5:0b:c5:57: 13:34:0b:bd:82:6d:98:98:75:02:32:6d:51:19:82:27:d3:e6: d1:8a:72:2a:3b:98:85:88:cd:94:f5:82:08:ec:80:f1:cf:f9: 1c:db:7e:1d:24:44:27:17:88:a4:4a:52:f2:90:bc:27:45:8a: b5:c4:90:4a:65:6a:f8:a2:9b:a1:43:64:87:a9:9f:d8:f1:c1: 6b:c1:a3:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzREMDExMC8GA1UEBRMoRTA2RkU4NDFDNkJCNDk4QTFGQkY2N0VFM0FBOEM4QTlD NTM4N0QwRjAeFw0yNDExMjEwNTMwMzZaFw0yNDExMjgwNTMwMzZaMBgxFjAUBgNV BAMTDTY3M2VjNTdjLWVkODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0rTc2AqdiRR23YCQAepqAceiNsZcsxKqQhI3mA9GPGYYlsm8Do9gSzcbrdXt1 txLU0kTzcIisgRGwstnKby7ATr+E3LA628OvHKD7zU84++0jt8JaofsA/6XkwsjI RwoLqJfPqfXlB1idfdwq7fSPNGei/anscdemwatfxGUZzfgRS3KTKgf379W/BNm4 F7oK42VWuv1Bt4MUzdnqhFEEtfiNOT5+oJTtJZLmU6ZNeY6e5xkw+mUoLPGT/YT1 6l/xlXbwIaoDHXeyhOTI4+DJB2XElVoOhhrnKUZugRKpl+voEgGGUN0F1Eide+AL z3bi6j59Xs7pP/roYWtGcPIpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4lBYtMbF eAMEnjHddupK+K2TfsIwHwYDVR0jBBgwFoAU4G/oQca7SYofv2fuOqjIqcU4fQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzNEQwL0VDRjgwRjg2NDVC NzExRUZBM0Q5QTA0OUM0RjlBRTAyLzRHX29RY2E3U1lvZnYyZnVPcWpJcWNVNGZR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNEdfb1FjYTdTWW9mdjJmdU9xaklxY1U0ZlE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz NEQwL0VDRjgwRjg2NDVCNzExRUZBM0Q5QTA0OUM0RjlBRTAyLzRHX29RY2E3U1lv ZnYyZnVPcWpJcWNVNGZROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGFc8FcgKrhO36IpjzzbubmQ3mnYlsA4g/PYv1PbZ3wcis1CbZlxwP9z OkZwhFZfoq5GEhzN7IogMGU+ldSlJ2mHupRUldaT7u/tt0sX6udT8zV6S+8OhYbr FUSKlNrjhDjl27b354cnWJZKx0/T2YCHPv6c4jdKgYqulCkl3hnEjREG0FEeJAyF U3iVvxVfDrw6GTPuAVEk+NTA74uBvTToKeT/6zvDdC/VBa6KaG7RtQvFVxM0C72C bZiYdQIybVEZgifT5tGKcio7mIWIzZT1ggjsgPHP+Rzbfh0kRCcXiKRKUvKQvCdF irXEkEplaviim6FDZIepn9jxwWvBo3Y= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org