$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft File: V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft (raw, json) Hash identifier: +kXRGzN3C8uZprbPyg9KpsrAecAJsDDtyWBnMxPX1jI= Subject key identifier: 49:27:4D:FC:E5:10:DA:65:9B:5A:AE:60:43:FF:0B:16:18:A7:18:A9 Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 Certificate issuer: /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft Manifest number: 02 Signing time: Thu 21 Nov 2024 05:18:27 +0000 Manifest this update: Thu 21 Nov 2024 05:18:27 +0000 Manifest next update: Thu 28 Nov 2024 05:18:27 +0000 Files and hashes: 1: V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl (hash: 1oPLF8CGiCFRS0Lc3+KOBzPxMFvcNeVNyZYgFBgaEHA=) 2: 07D85DDEA7C811EF92C28379C4F9AE02.roa (hash: 9mVkmZtrTEdtUbw4LlN+DxJy0nOhfAMrpxdSeh7xUKY=) 3: 073CAA38A7C811EF92C28379C4F9AE02.roa (hash: VhOJTg1J41s5lkOv/ckUP2wgxV/zxhCWRKbMpmBKiwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535 Validity Not Before: Nov 21 05:18:27 2024 GMT Not After : Nov 28 05:18:27 2024 GMT Subject: CN=673ec2a3-8851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:8c:e2:ac:6f:bc:27:0c:7f:15:78:e4:d7: f8:de:20:b6:87:a5:ae:ac:62:4a:ef:0c:fc:47:26: 08:0c:a1:09:7d:e3:4f:69:be:92:f5:7d:56:e3:07: 8f:b5:6c:2b:99:02:a8:94:ed:9d:e3:cb:5d:98:29: f8:b9:b6:81:d3:a6:c3:89:37:7b:f2:48:21:b3:6b: 10:b3:11:7c:2c:e6:fa:d3:fe:09:32:7d:71:e8:a0: 9c:3b:1b:87:6a:36:29:89:80:e1:f5:7e:66:f5:bf: 26:d2:04:8c:52:9e:6d:4d:b3:25:aa:a0:be:ce:9d: 35:82:23:1a:d2:43:13:82:82:f3:10:23:de:7b:10: 08:5e:19:bf:ca:f5:5f:bc:04:dc:f9:4d:42:bf:5f: 7a:6d:39:43:08:5a:46:9d:1f:ef:ae:c8:e6:7e:5f: cd:51:69:b0:43:f1:56:ad:f1:28:e2:54:a7:85:12: f0:0c:af:16:6c:f7:85:c3:2b:7a:b9:e2:0b:ae:da: 06:a3:54:a3:95:33:c1:c4:7e:ce:15:b6:42:67:db: 44:50:52:95:ed:1b:de:5e:b1:7c:4f:d4:19:9a:62: f2:0f:7c:09:65:fd:bf:e1:f7:df:d8:26:c7:77:db: 65:f5:bb:44:c8:0b:31:bb:68:a7:2b:bb:b0:76:8b: 43:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:27:4D:FC:E5:10:DA:65:9B:5A:AE:60:43:FF:0B:16:18:A7:18:A9 X509v3 Authority Key Identifier: keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:27:e3:3a:41:b9:0d:16:7e:89:73:1d:8c:a0:c7:e8:bc:82: 96:27:39:9d:eb:a4:13:b9:a3:cd:53:a9:d9:5e:7d:7e:2d:0f: 30:83:7f:a2:3d:a9:bf:31:4d:1d:eb:ef:00:14:38:cf:11:71: c7:1f:75:bf:d6:8d:c3:74:9d:38:7f:71:73:a4:74:ca:60:01: d5:73:af:68:e9:6b:37:64:78:e4:7a:da:d0:0b:14:c7:ab:85: 81:a1:0d:57:97:56:b4:8d:cb:3a:16:1c:21:44:6b:c8:d0:64: 61:17:e7:ec:58:56:df:47:a3:07:b7:8a:2f:83:d3:4f:70:cd: a7:e9:cb:c3:ff:e2:89:b4:d6:15:b8:97:c1:8d:4b:97:70:54: 85:d4:56:98:ee:cd:25:49:a6:50:60:37:12:d8:78:6d:18:6f: 45:aa:37:83:d0:b7:eb:4c:2e:8b:ed:79:f8:74:ab:f2:6d:3f: dd:6b:66:a9:4a:f8:9a:a7:ca:2b:75:3e:26:62:8d:3f:e8:13: 3b:1d:7a:a3:0f:f9:f8:96:ff:ba:18:19:e7:4f:39:69:1a:71: 5c:9f:6d:e1:43:fa:ec:ac:f2:5b:a1:31:ef:e9:d8:bd:61:e5: 99:d3:85:ed:e1:21:5d:3e:98:6f:97:f8:bb:f1:7e:ca:f6:dd: c3:9e:19:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDc4NjExMC8GA1UEBRMoNTc4QzhEMDJBRUYwQjQzRTI5RkVDRUExODk1RENDOUQx MDY2MzUzNTAeFw0yNDExMjEwNTE4MjdaFw0yNDExMjgwNTE4MjdaMBgxFjAUBgNV BAMTDTY3M2VjMmEzLTg4NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7kozirG+8Jwx/FXjk1/jeILaHpa6sYkrvDPxHJggMoQl9409pvpL1fVbjB4+1 bCuZAqiU7Z3jy12YKfi5toHTpsOJN3vySCGzaxCzEXws5vrT/gkyfXHooJw7G4dq NimJgOH1fmb1vybSBIxSnm1NsyWqoL7OnTWCIxrSQxOCgvMQI957EAheGb/K9V+8 BNz5TUK/X3ptOUMIWkadH++uyOZ+X81RabBD8Vat8SjiVKeFEvAMrxZs94XDK3q5 4guu2gajVKOVM8HEfs4VtkJn20RQUpXtG95esXxP1BmaYvIPfAll/b/h99/YJsd3 22X1u0TICzG7aKcru7B2i0M/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSSdN/OUQ 2mWbWq5gQ/8LFhinGKkwHwYDVR0jBBgwFoAUV4yNAq7wtD4p/s6hiV3MnRBmNTUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0Nzg2LzM0NTk4QzcwQTdD MzExRUZCNTExRTA1M0M0RjlBRTAyL1Y0eU5BcTd3dEQ0cF9zNmhpVjNNblJCbU5U VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVjR5TkFxN3d0RDRwX3M2aGlWM01uUkJtTlRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 Nzg2LzM0NTk4QzcwQTdDMzExRUZCNTExRTA1M0M0RjlBRTAyL1Y0eU5BcTd3dEQ0 cF9zNmhpVjNNblJCbU5UVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF0n4zpBuQ0WfolzHYygx+i8gpYnOZ3rpBO5o81TqdlefX4tDzCDf6I9 qb8xTR3r7wAUOM8Rcccfdb/WjcN0nTh/cXOkdMpgAdVzr2jpazdkeOR62tALFMer hYGhDVeXVrSNyzoWHCFEa8jQZGEX5+xYVt9Howe3ii+D009wzafpy8P/4om01hW4 l8GNS5dwVIXUVpjuzSVJplBgNxLYeG0Yb0WqN4PQt+tMLovtefh0q/JtP91rZqlK +Jqnyit1PiZijT/oEzsdeqMP+fiW/7oYGedPOWkacVyfbeFD+uys8luhMe/p2L1h 5ZnThe3hIV0+mG+X+Lvxfsr23cOeGag= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:39 2024 by rpki-client on console-ams.rpki-client.org