$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft File: Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft (raw, json) Hash identifier: gygDQgh4T5o79Kp98nKvjSBAHH8yMbcZiMuO1xeN3Sc= Subject key identifier: C4:27:82:96:27:8C:B9:A8:8F:A4:E6:19:8C:0C:22:FE:BD:2F:C5:73 Authority key identifier: 56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 Certificate issuer: /CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659 Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft Manifest number: 064A Signing time: Fri 22 Nov 2024 22:01:26 +0000 Manifest this update: Fri 22 Nov 2024 22:01:26 +0000 Manifest next update: Fri 29 Nov 2024 22:01:26 +0000 Files and hashes: 1: Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl (hash: XIG4yKPntsC5vVrY9BESC2JPK8I2HBi3SMgMkZKmbRA=) 2: 146FD366653611EB99BE491DC4F9AE02.roa (hash: zHq4FTYpjaRXOiDoDnd+154qUu41MS1ZHnyKS70WNy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659 Validity Not Before: Nov 22 22:01:26 2024 GMT Not After : Nov 29 22:01:26 2024 GMT Subject: CN=6740ff36-ad72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:31:23:8b:1f:bb:ed:c5:35:20:08:76:b1:45: e0:38:91:f2:15:68:e5:12:e1:c7:19:60:12:69:1b: 85:f3:ce:70:f2:df:9d:4e:fc:66:4b:9c:56:ce:cd: 09:66:66:91:b6:25:58:6c:62:a0:49:38:2b:c5:ad: 4a:74:b0:f8:71:70:4d:b1:0b:b1:99:99:eb:45:6a: 4f:c8:4a:14:d4:93:1f:2f:31:62:90:99:e2:b4:66: 6f:eb:1d:e2:0c:4e:1e:a7:ee:41:9d:e2:51:54:b1: 92:01:f6:d0:a0:3a:5f:a8:ec:bc:8f:b9:ef:15:d9: bc:05:1b:1a:dd:6d:45:c8:11:08:5f:28:94:e9:96: 82:c8:b5:33:d4:59:db:88:ab:fd:13:f7:6a:e3:54: 83:14:1d:8f:1f:b4:c2:09:91:80:1a:f9:db:19:aa: 95:22:22:db:0c:32:72:31:5d:70:25:2d:ba:cf:a7: 1f:cd:54:4f:70:a9:92:3e:46:46:c3:38:3e:7a:6f: 71:28:61:67:9f:3e:17:4f:8c:3b:31:60:08:cf:4d: 2e:2a:6e:62:38:2f:06:1a:1b:e3:8d:35:1f:38:23: 5e:30:d3:46:9f:a3:75:1b:f4:42:12:10:a7:98:57: 44:a4:19:54:37:65:64:0c:e7:a0:1f:a9:5b:dd:81: ba:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:27:82:96:27:8C:B9:A8:8F:A4:E6:19:8C:0C:22:FE:BD:2F:C5:73 X509v3 Authority Key Identifier: keyid:56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:cd:b2:fc:87:2a:07:47:2b:71:28:e8:af:ab:8c:0b:4c:20: 9c:01:9a:3e:83:8c:fd:35:88:d4:cf:5e:ed:a4:24:48:31:85: 92:bf:48:22:59:1a:de:7c:2f:01:91:df:94:20:9b:ce:ac:2e: ff:2b:ab:18:55:13:5d:b1:b8:b1:3a:4e:85:79:8e:b8:ed:0a: 13:9a:70:57:14:c3:c8:b4:8c:ca:1d:92:88:45:42:df:59:8c: 79:6d:90:0e:c9:db:3b:37:16:ae:9f:c4:d8:93:05:0e:c5:03: 71:bd:05:67:e7:60:88:9b:ec:6d:7d:d5:14:64:3e:d0:eb:2d: 3c:7d:f3:06:00:7e:ed:6f:92:39:ed:80:8a:f8:fd:da:3c:0e: 8a:3a:07:53:46:8b:d0:06:48:c7:7a:b7:a0:6c:f2:b2:75:c1: 2c:d6:3c:2d:c8:d4:fb:3b:f4:94:22:77:65:b3:a6:6f:12:f5: 8a:0b:26:24:3c:0e:4a:ce:f2:8e:88:89:fa:5c:72:d0:f5:31: c6:14:9f:4d:d5:d9:6a:cc:15:75:5d:6c:31:49:84:5e:a2:48: ed:26:fd:7e:b5:85:f0:a8:9e:e5:41:e4:72:cd:09:7d:8d:3a: 68:ce:4b:b4:04:ba:53:eb:f4:ea:88:f3:a7:7e:33:34:33:4f: 00:dc:32:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEOEIxMTAvBgNVBAUTKDU2OEQxNzkxNTI0NzNDODA5QTYyRTU4NUU1QURDOTQy ODY2QkU2NTkwHhcNMjQxMTIyMjIwMTI2WhcNMjQxMTI5MjIwMTI2WjAYMRYwFAYD VQQDEw02NzQwZmYzNi1hZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zEjix+77cU1IAh2sUXgOJHyFWjlEuHHGWASaRuF885w8t+dTvxmS5xWzs0J ZmaRtiVYbGKgSTgrxa1KdLD4cXBNsQuxmZnrRWpPyEoU1JMfLzFikJnitGZv6x3i DE4ep+5BneJRVLGSAfbQoDpfqOy8j7nvFdm8BRsa3W1FyBEIXyiU6ZaCyLUz1Fnb iKv9E/dq41SDFB2PH7TCCZGAGvnbGaqVIiLbDDJyMV1wJS26z6cfzVRPcKmSPkZG wzg+em9xKGFnnz4XT4w7MWAIz00uKm5iOC8GGhvjjTUfOCNeMNNGn6N1G/RCEhCn mFdEpBlUN2VkDOegH6lb3YG6PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQngpYn jLmoj6TmGYwMIv69L8VzMB8GA1UdIwQYMBaAFFaNF5FSRzyAmmLlheWtyUKGa+ZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Qi80QTZENkMwQTY1 MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJQ2FZdVdGNWEzSlFvWnI1 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZvMFhrVkpIUElDYVl1V0Y1YTNKUW9acjVsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Qi80QTZENkMwQTY1MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJ Q2FZdVdGNWEzSlFvWnI1bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3zbL8hyoHRytxKOivq4wLTCCcAZo+g4z9NYjUz17tpCRIMYWSv0gi WRrefC8Bkd+UIJvOrC7/K6sYVRNdsbixOk6FeY647QoTmnBXFMPItIzKHZKIRULf WYx5bZAOyds7Nxaun8TYkwUOxQNxvQVn52CIm+xtfdUUZD7Q6y08ffMGAH7tb5I5 7YCK+P3aPA6KOgdTRovQBkjHeregbPKydcEs1jwtyNT7O/SUIndls6ZvEvWKCyYk PA5KzvKOiIn6XHLQ9THGFJ9N1dlqzBV1XWwxSYReokjtJv1+tYXwqJ7lQeRyzQl9 jTpozku0BLpT6/TqiPOnfjM0M08A3DLd -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:52 2024 by rpki-client on console-ams.rpki-client.org