$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json) Hash identifier: etzmdeJISdTOT5nU5eqqmam/KK+wbKYtNJOYWxJ1UQE= Subject key identifier: 7F:74:3C:E2:9C:34:05:BC:60:39:1F:FA:E2:36:A7:E8:EE:59:D5:2D Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft Manifest number: 40 Signing time: Sat 23 Nov 2024 05:23:52 +0000 Manifest this update: Sat 23 Nov 2024 05:23:51 +0000 Manifest next update: Sat 30 Nov 2024 05:23:51 +0000 Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: DdMTL/iE2uW6ZYcRJThrEYeYD6dcLK/+PDvE3QIQAuE=) 2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: OVQ/CMJ4XqARrGXYEMgXeRxRPf3/PHnhFuc4e8fTgpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A Validity Not Before: Nov 23 05:23:51 2024 GMT Not After : Nov 30 05:23:51 2024 GMT Subject: CN=674166e7-46f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c1:df:46:2e:c9:22:c3:97:64:34:4f:63:f9: 98:d6:aa:96:b0:d0:9d:5d:bf:16:5e:e7:53:b8:a4: 1b:af:a6:a2:51:c9:f3:29:38:af:63:7f:dc:96:b9: f5:b8:99:62:64:a2:68:78:ca:87:79:d1:58:31:35: 03:05:9f:12:bb:63:e7:76:86:a9:d3:bd:0b:d9:b1: 39:62:9b:d5:b2:48:78:72:b4:92:54:b2:22:85:95: 6d:dc:ad:a0:23:fe:a1:19:50:f7:ca:92:13:ab:cb: 0b:0c:1f:63:da:75:4f:af:95:5c:81:f6:4a:9e:ea: f1:28:33:60:f2:b5:17:bd:7b:c3:b0:bc:99:a2:55: 3d:e6:b3:f6:5a:7e:ef:bd:cd:1e:c9:3b:27:c6:d3: c5:59:75:5c:16:f0:41:7e:df:2a:9d:25:54:66:e5: 34:c6:ab:bb:5a:14:b9:34:44:02:a6:ef:54:08:ef: b2:13:2e:56:f3:3b:bb:3c:d2:63:08:e0:ba:4d:6c: dc:9c:80:db:21:23:87:b5:34:e4:7a:5f:13:a1:0c: a3:14:12:a0:2b:97:0b:aa:02:4c:d9:fe:48:03:91: 79:58:72:1f:21:52:f2:1c:af:1d:11:b2:84:5a:57: 19:5f:44:b0:75:8e:6e:73:90:6b:7c:fa:c9:79:e5: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:74:3C:E2:9C:34:05:BC:60:39:1F:FA:E2:36:A7:E8:EE:59:D5:2D X509v3 Authority Key Identifier: keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:42:37:47:c6:50:65:65:03:e3:82:42:61:d1:45:70:9c:87: 53:71:82:e4:ec:47:c3:40:67:ac:3c:92:c7:f3:ec:fb:b1:f4: f1:c3:04:62:87:9f:c3:99:de:8b:b7:f1:d6:53:5f:e0:41:e3: 6d:25:97:c9:80:8f:75:8d:14:f1:89:38:6a:48:c8:9a:1e:c8: a3:3a:52:9e:32:95:8a:2a:99:68:70:90:7f:bb:a4:84:8b:90: ab:7e:84:aa:d1:e6:61:d7:55:35:b5:b9:8f:f8:f3:4f:4b:b9: a7:dc:e5:f5:f2:0e:40:40:a0:77:fe:23:b2:76:09:86:88:4b: b9:9a:9f:f5:22:fa:49:d7:ee:8a:1d:97:7a:90:c4:1e:62:ec: 77:c5:0d:0d:76:83:83:f6:6c:ea:cb:c3:ae:45:1c:11:6c:ed: a4:85:43:2f:01:d5:09:49:27:7f:6f:35:1a:fd:a0:3b:9f:f6: 6d:52:c4:ba:c6:d0:25:24:6c:25:ca:ba:b3:3a:99:e4:00:4b: 51:4f:b1:7d:ff:61:29:d5:d3:52:15:cc:47:b6:b5:a9:54:33: 14:65:27:9f:be:d8:cc:dc:20:98:99:04:e4:15:ef:4b:16:53: 48:33:07:00:8e:1d:ea:c3:04:87:85:54:38:16:bf:95:4d:d5: 09:a2:4f:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MENGNTExMC8GA1UEBRMoQ0JCQkJCMjRCMjJCNDM1RDFDQTQ5M0E5RDYzRENBNzc5 QkUwNzk2QTAeFw0yNDExMjMwNTIzNTFaFw0yNDExMzAwNTIzNTFaMBgxFjAUBgNV BAMTDTY3NDE2NmU3LTQ2ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzwd9GLskiw5dkNE9j+ZjWqpaw0J1dvxZe51O4pBuvpqJRyfMpOK9jf9yWufW4 mWJkomh4yod50VgxNQMFnxK7Y+d2hqnTvQvZsTlim9WySHhytJJUsiKFlW3craAj /qEZUPfKkhOrywsMH2PadU+vlVyB9kqe6vEoM2DytRe9e8OwvJmiVT3ms/Zafu+9 zR7JOyfG08VZdVwW8EF+3yqdJVRm5TTGq7taFLk0RAKm71QI77ITLlbzO7s80mMI 4LpNbNycgNshI4e1NOR6XxOhDKMUEqArlwuqAkzZ/kgDkXlYch8hUvIcrx0RsoRa VxlfRLB1jm5zkGt8+sl55f2DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf3Q84pw0 BbxgOR/64jan6O5Z1S0wHwYDVR0jBBgwFoAUy7u7JLIrQ10cpJOp1j3Kd5vgeWow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwQ0Y1LzUzOEMxOTYwNDky QjExRUZCRTEwMTg0RkM0RjlBRTAyL3k3dTdKTElyUTEwY3BKT3AxajNLZDV2Z2VX by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveTd1N0pMSXJRMTBjcEpPcDFqM0tkNXZnZVdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw Q0Y1LzUzOEMxOTYwNDkyQjExRUZCRTEwMTg0RkM0RjlBRTAyL3k3dTdKTElyUTEw Y3BKT3AxajNLZDV2Z2VXby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALlCN0fGUGVlA+OCQmHRRXCch1NxguTsR8NAZ6w8ksfz7Pux9PHDBGKH n8OZ3ou38dZTX+BB420ll8mAj3WNFPGJOGpIyJoeyKM6Up4ylYoqmWhwkH+7pISL kKt+hKrR5mHXVTW1uY/4809Luafc5fXyDkBAoHf+I7J2CYaIS7man/Ui+knX7ood l3qQxB5i7HfFDQ12g4P2bOrLw65FHBFs7aSFQy8B1QlJJ39vNRr9oDuf9m1SxLrG 0CUkbCXKurM6meQAS1FPsX3/YSnV01IVzEe2talUMxRlJ5++2MzcIJiZBOQV70sW U0gzBwCOHerDBIeFVDgWv5VN1QmiT3U= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org