$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft File: d7TYOLfSKf0cdNVYLHNekbVnteI.mft (raw, json) Hash identifier: e1erfCXTx1L3bJTubpBfIlFx8AoYu4VSx3v0QShC7pY= Subject key identifier: 49:A5:1D:C8:7C:4B:F5:29:1B:99:14:BA:B0:F6:2E:87:EE:29:D9:6E Authority key identifier: 77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 Certificate issuer: /CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Certificate serial: 0388 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft Manifest number: 0384 Signing time: Sat 23 Nov 2024 00:23:53 +0000 Manifest this update: Sat 23 Nov 2024 00:23:52 +0000 Manifest next update: Sat 30 Nov 2024 00:23:52 +0000 Files and hashes: 1: d7TYOLfSKf0cdNVYLHNekbVnteI.crl (hash: z2+QAMtbm46YAIjhMzC2/R2kzOSXeJpTvMyooqVWZcI=) 2: 55976FBE7F4A11ECB6E05A38C4F9AE02.roa (hash: m8FloIsH28VEFYR4VSnaFgU3R518CnbZZxE+Tn5D20s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 904 (0x388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Validity Not Before: Nov 23 00:23:52 2024 GMT Not After : Nov 30 00:23:52 2024 GMT Subject: CN=67412099-5a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:22:20:43:41:a1:20:4c:48:3b:8e:c4:9a:4e: 34:fd:0a:25:bc:be:25:ba:15:51:fa:4a:97:7d:1c: b2:a6:06:45:9b:ae:87:2c:a6:ac:aa:00:e4:ff:85: a6:bd:8b:d1:15:e4:52:72:ff:ba:f9:b4:16:60:21: d2:2d:b0:28:53:9a:b2:17:c1:95:ae:ba:c6:4e:fc: 64:39:79:c5:df:5d:34:2a:25:60:d8:81:c3:35:7f: 4d:73:a4:54:d7:87:8c:98:d2:95:ac:d2:98:4f:d9: cc:57:15:7c:22:ac:89:cf:de:d9:82:c5:83:fa:b0: 27:b4:fc:59:02:9d:2a:3e:72:2d:72:35:ba:f0:20: af:e2:5b:8a:84:60:d7:72:8e:02:80:9c:44:6f:1e: 4d:60:33:cd:61:8f:6f:90:4c:bf:ff:ea:d1:f0:e5: 64:54:53:bb:51:e6:8f:7f:dd:10:0f:9d:26:e4:75: 49:41:bd:67:f7:30:53:f7:14:37:e6:ae:d1:86:b6: 5e:fa:3e:37:af:11:be:50:0c:e4:80:70:a4:fb:8c: 2a:96:4b:ef:f1:b7:3b:bb:e1:28:0b:6e:86:e7:29: cf:bd:aa:e6:f8:a5:47:51:47:d1:68:f0:17:f3:31: 09:8e:0c:d2:4e:8a:9c:fc:55:c3:90:33:32:e7:3e: 59:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A5:1D:C8:7C:4B:F5:29:1B:99:14:BA:B0:F6:2E:87:EE:29:D9:6E X509v3 Authority Key Identifier: keyid:77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:dc:6f:4c:6d:49:26:1b:5d:32:e6:6a:42:b5:ac:f3:f3:16: 8b:ba:04:ef:4f:0a:8e:2f:2b:5a:ee:59:16:09:f4:19:b3:c5: ae:a6:c5:f8:6a:c8:47:60:f7:4e:22:d7:08:0b:49:66:b9:77: a3:b0:24:09:0a:a4:78:df:72:b0:30:77:f6:12:5b:80:7e:1f: cb:e2:18:42:b3:6f:3c:c7:c5:44:23:98:3c:bf:6a:22:db:7e: b4:77:16:88:aa:e1:1f:9a:20:7f:e2:23:db:ef:d7:04:0f:d8: fd:3d:f8:72:5e:ec:78:58:1c:5e:89:63:ae:fd:ef:c5:1d:ed: fc:06:e0:80:a5:5d:13:4a:ce:6d:ce:d8:8a:31:2a:21:cd:a7: 35:71:6e:bc:09:54:69:1d:91:01:3b:68:b8:cf:dd:f4:96:8d: 2b:eb:6e:e4:58:0c:32:77:60:d7:10:fb:53:9f:98:7f:20:10: a9:28:0b:2d:11:df:0c:8b:02:f2:a3:2e:aa:37:b9:6d:2d:51: 1a:93:c1:fc:99:ef:80:a5:1f:b9:0e:b1:a1:8b:50:55:2d:23: 3a:6f:bc:f1:5e:b3:43:37:10:8a:68:aa:ff:6e:e4:8e:25:56: 0a:01:61:7d:c6:5a:a1:cc:79:d8:b9:4c:62:22:30:34:5e:fe: 07:a2:c5:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFQUMxMTAvBgNVBAUTKDc3QjREODM4QjdEMjI5RkQxQzc0RDU1ODJDNzM1RTkx QjU2N0I1RTIwHhcNMjQxMTIzMDAyMzUyWhcNMjQxMTMwMDAyMzUyWjAYMRYwFAYD VQQDEw02NzQxMjA5OS01YTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSIgQ0GhIExIO47Emk40/QolvL4luhVR+kqXfRyypgZFm66HLKasqgDk/4Wm vYvRFeRScv+6+bQWYCHSLbAoU5qyF8GVrrrGTvxkOXnF3100KiVg2IHDNX9Nc6RU 14eMmNKVrNKYT9nMVxV8IqyJz97ZgsWD+rAntPxZAp0qPnItcjW68CCv4luKhGDX co4CgJxEbx5NYDPNYY9vkEy//+rR8OVkVFO7UeaPf90QD50m5HVJQb1n9zBT9xQ3 5q7RhrZe+j43rxG+UAzkgHCk+4wqlkvv8bc7u+EoC26G5ynPvarm+KVHUUfRaPAX 8zEJjgzSToqc/FXDkDMy5z5ZAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmlHch8 S/UpG5kUurD2LofuKdluMB8GA1UdIwQYMBaAFHe02Di30in9HHTVWCxzXpG1Z7Xi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUVBQy81RDQ1MEZBRTdG NDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tmMGNkTlZZTEhOZWtiVm50 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q3VFlPTGZTS2YwY2ROVllMSE5la2JWbnRlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUVBQy81RDQ1MEZBRTdGNDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tm MGNkTlZZTEhOZWtiVm50ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF3G9MbUkmG10y5mpCtazz8xaLugTvTwqOLyta7lkWCfQZs8WupsX4 ashHYPdOItcIC0lmuXejsCQJCqR433KwMHf2EluAfh/L4hhCs288x8VEI5g8v2oi 2360dxaIquEfmiB/4iPb79cED9j9PfhyXux4WBxeiWOu/e/FHe38BuCApV0TSs5t ztiKMSohzac1cW68CVRpHZEBO2i4z930lo0r627kWAwyd2DXEPtTn5h/IBCpKAst Ed8MiwLyoy6qN7ltLVEak8H8me+ApR+5DrGhi1BVLSM6b7zxXrNDNxCKaKr/buSO JVYKAWF9xlqhzHnYuUxiIjA0Xv4HosW0 -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org