$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft File: grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json) Hash identifier: mxozE4nyQ5ZOdNJq5iwztNLAPZtzPGmWIAb+Uu7XOdQ= Subject key identifier: FA:94:88:CC:A2:C4:BB:C6:56:52:64:1C:04:79:B8:67:EF:F0:85:83 Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft Manifest number: 49 Signing time: Thu 21 Nov 2024 05:24:38 +0000 Manifest this update: Thu 21 Nov 2024 05:24:38 +0000 Manifest next update: Thu 28 Nov 2024 05:24:38 +0000 Files and hashes: 1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: BY9W2RfLjwhGB/ZwnjkmBMLkBrPCeoOcvhs+mSCfhvY=) 2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: JKakG9b3XVmkk3cxf1Vx97SVOH3cZkhGMhy0iHgzcqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Validity Not Before: Nov 21 05:24:38 2024 GMT Not After : Nov 28 05:24:38 2024 GMT Subject: CN=673ec416-8fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:6b:a8:6f:c5:5f:54:69:20:ea:de:1b:1a: ec:c0:b2:14:dc:9f:79:79:7e:93:0e:6c:32:08:51: eb:49:e6:9c:3f:b4:b1:a3:dd:6e:03:1c:6f:92:67: 04:d3:60:29:fd:a6:5d:35:65:71:1b:a3:c7:f9:0e: c3:4b:23:d3:07:70:be:57:9e:c1:0a:c1:a8:d0:12: 1c:66:6d:ea:cc:6a:59:e9:15:1a:8a:1c:81:da:aa: c6:af:85:51:78:1c:b6:df:d2:fe:cd:d5:9d:74:2b: 4b:56:5e:c5:30:7b:68:c9:e7:04:54:64:f6:ad:78: 6f:7d:a4:db:bb:72:73:c9:f2:9e:46:58:3b:21:e4: c4:82:b7:35:f5:ce:b5:05:c8:7d:ba:de:4a:5a:6b: 0b:57:0d:76:16:17:3c:92:46:21:e9:9d:b7:60:6a: d6:c1:db:75:a6:e4:97:74:0e:e0:7f:0d:e8:eb:ae: 61:d5:32:7c:91:7e:e6:79:e0:83:5b:1a:83:98:4c: 2a:a7:92:b4:9b:bc:0d:ed:68:67:df:18:30:8a:9d: 65:c4:67:08:e7:c7:6e:63:6e:d3:a4:64:cf:07:33: ae:b2:0f:1c:f8:ea:d8:cd:45:2c:48:4a:b5:ed:d7: e6:4b:64:49:e8:c5:e9:8b:2b:9b:91:95:77:fc:f5: 96:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:94:88:CC:A2:C4:BB:C6:56:52:64:1C:04:79:B8:67:EF:F0:85:83 X509v3 Authority Key Identifier: keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:2b:25:b4:69:9c:f3:1f:c1:f8:69:fb:bc:6c:39:01:1c:e6: cb:20:5d:1e:06:c0:90:54:1a:00:e4:24:1f:88:c1:a5:af:5b: 62:01:86:ad:10:2c:1b:ab:3b:a9:f0:16:66:65:30:96:10:e2: a4:8b:25:54:a4:b9:49:6f:e1:86:19:80:91:8e:01:14:39:05: ec:08:72:89:48:f3:90:1d:79:8b:e0:fa:f2:93:c7:6e:30:f6: 7a:29:b7:93:02:39:49:d9:48:0d:3f:c4:a8:cc:eb:8a:57:2d: 17:a2:0e:a9:ae:1e:d9:b1:2c:55:a7:29:4b:12:9f:68:cd:79: 42:ae:45:e1:1c:70:28:f0:b7:a0:35:11:26:84:d4:e5:e4:80: 0b:b4:a9:74:30:e9:6e:d1:98:7a:d8:f6:fa:d6:d5:fb:0d:a7: a2:87:0c:fe:3e:f3:1f:06:2d:bd:47:07:91:55:c4:3a:82:9b: c4:9b:ad:5f:38:bc:14:31:ca:06:b2:47:95:04:bd:2b:3f:37: 31:89:40:e4:ee:69:3e:99:78:ec:7c:dc:e2:93:00:1b:01:e9: 02:e9:1c:34:e9:47:6a:f0:c5:01:15:ee:6f:98:46:b4:17:70: 21:cd:2e:69:3b:1e:ff:1a:05:b1:a2:87:82:c9:51:b5:bc:34: 28:88:d1:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Mzc5RjExMC8GA1UEBRMoODJCNEQyNzFERTIxMkUwNjMzNUMwQjQ1RTY2NTE3QjUw OEI4MzUxNjAeFw0yNDExMjEwNTI0MzhaFw0yNDExMjgwNTI0MzhaMBgxFjAUBgNV BAMTDTY3M2VjNDE2LThmZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Xmuob8VfVGkg6t4bGuzAshTcn3l5fpMObDIIUetJ5pw/tLGj3W4DHG+SZwTT YCn9pl01ZXEbo8f5DsNLI9MHcL5XnsEKwajQEhxmberMalnpFRqKHIHaqsavhVF4 HLbf0v7N1Z10K0tWXsUwe2jJ5wRUZPateG99pNu7cnPJ8p5GWDsh5MSCtzX1zrUF yH263kpaawtXDXYWFzySRiHpnbdgatbB23Wm5Jd0DuB/DejrrmHVMnyRfuZ54INb GoOYTCqnkrSbvA3taGffGDCKnWXEZwjnx25jbtOkZM8HM66yDxz46tjNRSxISrXt 1+ZLZEnoxemLK5uRlXf89ZbNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+pSIzKLE u8ZWUmQcBHm4Z+/whYMwHwYDVR0jBBgwFoAUgrTScd4hLgYzXAtF5mUXtQi4NRYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNzlGLzZGOTlENEYwM0NG OTExRUZBMEEwNkY4NkM0RjlBRTAyL2dyVFNjZDRoTGdZelhBdEY1bVVYdFFpNE5S WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ3JUU2NkNGhMZ1l6WEF0RjVtVVh0UWk0TlJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NzlGLzZGOTlENEYwM0NGOTExRUZBMEEwNkY4NkM0RjlBRTAyL2dyVFNjZDRoTGdZ elhBdEY1bVVYdFFpNE5SWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHArJbRpnPMfwfhp+7xsOQEc5ssgXR4GwJBUGgDkJB+IwaWvW2IBhq0Q LBurO6nwFmZlMJYQ4qSLJVSkuUlv4YYZgJGOARQ5BewIcolI85AdeYvg+vKTx24w 9nopt5MCOUnZSA0/xKjM64pXLReiDqmuHtmxLFWnKUsSn2jNeUKuReEccCjwt6A1 ESaE1OXkgAu0qXQw6W7RmHrY9vrW1fsNp6KHDP4+8x8GLb1HB5FVxDqCm8SbrV84 vBQxygayR5UEvSs/NzGJQOTuaT6ZeOx83OKTABsB6QLpHDTpR2rwxQEV7m+YRrQX cCHNLmk7Hv8aBbGih4LJUbW8NCiI0RI= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:39 2024 by rpki-client on console-ams.rpki-client.org