$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json) Hash identifier: xHjtbl1vB5uRWhkkM7v/qxiG1kUPiCIKkBfG/mOHAEU= Subject key identifier: 21:D5:87:CF:5A:41:0D:C6:4E:DF:BB:4E:B9:91:A0:5D:93:84:CD:C6 Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft Manifest number: 41 Signing time: Thu 21 Nov 2024 05:29:25 +0000 Manifest this update: Thu 21 Nov 2024 05:29:25 +0000 Manifest next update: Thu 28 Nov 2024 05:29:25 +0000 Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: cDmPoHD8+uEFTUrl7B4CrXEIjhyuUlNQWbbzs6jWZRI=) 2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: PWJ2Cs2LxUKJ+e1M3VEz765niJLh/sYfiYQBfZ6dULY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Validity Not Before: Nov 21 05:29:25 2024 GMT Not After : Nov 28 05:29:25 2024 GMT Subject: CN=673ec535-2ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:3d:9e:70:62:43:b9:41:5b:9e:21:d4:06: 8e:4d:e7:90:4c:8f:4a:4f:23:84:33:94:07:a7:59: cf:d0:1e:27:c9:d5:34:4b:af:36:dd:cb:8e:a6:72: 1b:7f:b2:05:5e:d4:72:e3:5f:08:64:40:de:86:a9: cb:51:bb:97:e3:06:e2:08:94:5e:53:0e:9d:b4:3b: 75:1e:5a:23:81:1c:33:88:01:25:dc:67:e7:bc:70: 9f:51:84:0f:93:b7:1b:77:75:3c:55:57:04:e5:6d: 95:42:c8:a5:57:05:8f:b3:42:7c:dd:2c:ed:0a:64: 6e:04:91:d0:4a:05:39:05:23:2b:83:68:36:76:97: dd:4e:c8:17:90:17:f3:a8:99:60:5e:a8:d5:da:a0: b8:83:60:f8:a8:54:82:5a:42:82:7e:62:d9:25:28: 93:b3:b6:10:80:47:d8:4b:19:3c:93:dd:69:a8:59: cb:7f:64:5d:75:b3:db:fc:a9:db:49:96:b5:5f:98: 9e:95:d9:00:43:88:38:f4:43:9c:f0:9c:85:cd:a3: 91:c8:a2:f6:bb:53:c6:34:91:70:52:61:75:16:68: ee:c3:6f:6f:8e:2a:33:e6:1e:98:30:06:3d:c5:3c: 36:d2:4d:10:00:91:dc:20:92:8a:dd:ec:4c:75:97: 55:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D5:87:CF:5A:41:0D:C6:4E:DF:BB:4E:B9:91:A0:5D:93:84:CD:C6 X509v3 Authority Key Identifier: keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:9d:48:9c:65:d4:75:1c:9c:8c:50:26:c9:e3:f7:d2:74:49: 3a:37:91:e1:31:5a:99:98:80:70:ba:37:fd:2b:7e:39:64:6b: d0:ab:63:94:c2:76:f1:c9:36:bf:b1:bc:e7:ec:33:6b:8b:df: 14:80:9a:51:d3:4a:dc:37:e3:1c:20:e7:54:be:39:f2:25:d5: c7:e6:6c:6b:af:f8:16:cc:14:ed:3d:b6:35:a1:10:47:a5:0f: 01:58:c2:72:ac:62:c0:b2:77:69:84:20:e4:24:cd:65:68:c8: 80:ec:3b:3f:0a:6f:47:6a:f8:55:fb:32:29:3f:0d:bf:ad:a4: be:a0:c4:8e:3e:e1:86:28:64:72:1f:0e:49:fe:45:25:fa:27: 72:34:cb:f3:48:32:91:ea:96:3d:5c:cb:59:43:52:56:82:e5: d1:00:65:8d:b6:c9:be:7b:c4:b5:d5:3c:32:85:e6:98:81:d7: cb:8a:b6:60:d9:62:53:c7:2b:b5:7d:a0:c9:89:f1:a4:7b:ed: 4c:78:78:aa:95:62:8c:41:51:be:da:b4:7a:6f:eb:dd:bd:72: 1c:ad:98:94:29:cb:46:0e:bb:c1:20:be:70:28:9a:01:12:ea: 63:a4:29:a4:58:c7:6d:0f:d3:eb:d6:c7:e0:a2:5c:8f:3a:1d: 49:86:bd:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QUNBNzExMC8GA1UEBRMoMDFCQjI4RkRCRTE1NUE4NjYyQzVFRTY4MENGREYwQzk4 RDRFQkQxRDAeFw0yNDExMjEwNTI5MjVaFw0yNDExMjgwNTI5MjVaMBgxFjAUBgNV BAMTDTY3M2VjNTM1LTJlY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGLj2ecGJDuUFbniHUBo5N55BMj0pPI4QzlAenWc/QHifJ1TRLrzbdy46mcht/ sgVe1HLjXwhkQN6GqctRu5fjBuIIlF5TDp20O3UeWiOBHDOIASXcZ+e8cJ9RhA+T txt3dTxVVwTlbZVCyKVXBY+zQnzdLO0KZG4EkdBKBTkFIyuDaDZ2l91OyBeQF/Oo mWBeqNXaoLiDYPioVIJaQoJ+YtklKJOzthCAR9hLGTyT3WmoWct/ZF11s9v8qdtJ lrVfmJ6V2QBDiDj0Q5zwnIXNo5HIova7U8Y0kXBSYXUWaO7Db2+OKjPmHpgwBj3F PDbSTRAAkdwgkord7Ex1l1W7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIdWHz1pB DcZO37tOuZGgXZOEzcYwHwYDVR0jBBgwFoAUAbso/b4VWoZixe5oDP3wyY1OvR0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBQ0E3LzUxN0U2RTRDNDVC MjExRUZBNURGNkQxOUM0RjlBRTAyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZS MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQWJzb19iNFZXb1ppeGU1b0RQM3d5WTFPdlIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB Q0E3LzUxN0U2RTRDNDVCMjExRUZBNURGNkQxOUM0RjlBRTAyL0Fic29fYjRWV29a aXhlNW9EUDN3eVkxT3ZSMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMedSJxl1HUcnIxQJsnj99J0STo3keExWpmYgHC6N/0rfjlka9CrY5TC dvHJNr+xvOfsM2uL3xSAmlHTStw34xwg51S+OfIl1cfmbGuv+BbMFO09tjWhEEel DwFYwnKsYsCyd2mEIOQkzWVoyIDsOz8Kb0dq+FX7Mik/Db+tpL6gxI4+4YYoZHIf Dkn+RSX6J3I0y/NIMpHqlj1cy1lDUlaC5dEAZY22yb57xLXVPDKF5piB18uKtmDZ YlPHK7V9oMmJ8aR77Ux4eKqVYoxBUb7atHpv6929chytmJQpy0YOu8EgvnAomgES 6mOkKaRYx20P0+vWx+CiXI86HUmGvQM= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:39 2024 by rpki-client on console-ams.rpki-client.org