$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json) Hash identifier: ZFBg0ib65ie6VADLMMEvn/xM6i4/olqhoDWnZ9swMKg= Subject key identifier: 12:34:9B:20:9A:B5:41:F7:BD:F4:3E:FE:69:15:EE:C2:48:ED:66:F6 Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Certificate serial: 0458 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft Manifest number: 044C Signing time: Fri 22 Nov 2024 23:48:40 +0000 Manifest this update: Fri 22 Nov 2024 23:48:40 +0000 Manifest next update: Fri 29 Nov 2024 23:48:40 +0000 Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: 4t//wUPskQfvfHF4XAjCF9szXN8o8OmVZAqb3IO+x6s=) 2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: WznxjNlU4Br8YbmqB8P3UCKg7uwgEqA8D00AqocDQtc=) 3: 98D4C15C51A811EC9B4EC93CC4F9AE02.roa (hash: bNg1nPkHTi5qhKljMxc7OcbzdU8DfruLexW5/cfcCms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1112 (0x458) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Validity Not Before: Nov 22 23:48:40 2024 GMT Not After : Nov 29 23:48:40 2024 GMT Subject: CN=67411858-0149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:1a:52:6b:c3:af:91:f4:32:48:12:b6:a1: d9:bc:9a:c3:cc:af:cd:ee:fc:c5:35:c6:7c:f4:02: eb:9f:12:bb:6f:37:5e:54:bf:ca:ec:9b:c4:ba:2d: 82:22:5d:03:6b:dd:9c:67:de:bf:9f:6b:e6:27:cf: e3:ad:d3:34:cd:ee:01:e9:17:1b:71:89:99:fb:c7: e8:a7:f3:7b:d4:15:f8:d1:2d:39:15:ca:0d:fd:62: 36:9d:85:a8:1e:64:a3:cb:87:7d:77:49:58:ae:fb: 6e:44:0d:0d:fb:61:f4:86:6f:6c:1b:f7:61:c7:9d: 27:62:7c:cb:37:80:f4:4b:93:73:f9:de:0a:5a:55: f7:ed:e6:bc:d0:87:c2:e5:43:8a:25:91:c1:83:e8: cc:9b:06:3a:48:5a:d0:c4:a4:c3:19:35:4a:8f:b2: e9:71:28:f0:72:49:16:9a:1a:df:4a:7e:b8:c7:52: 5b:4c:8b:85:5e:52:d3:0c:0c:69:04:f2:b3:9e:84: ba:2f:5d:8c:5a:28:04:3a:07:6b:d5:4d:ae:13:ea: d7:81:57:a2:72:24:55:2f:8c:c6:15:12:7a:8e:d8: 33:7a:9b:e4:78:fe:71:b4:14:ce:3f:92:00:99:58: 5d:0b:25:5f:86:fe:d0:6c:6c:78:21:48:13:ae:f8: d7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:34:9B:20:9A:B5:41:F7:BD:F4:3E:FE:69:15:EE:C2:48:ED:66:F6 X509v3 Authority Key Identifier: keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:72:78:33:ff:4c:b8:75:32:ff:88:e2:67:dc:94:fe:3d:7d: 34:cc:cd:ac:89:99:94:d2:30:b6:ef:b6:f2:09:da:38:74:d5: 1c:74:b9:fd:4e:14:0f:c8:ad:cf:ef:8a:ca:0e:e3:b8:82:fa: 28:e0:5c:46:15:65:eb:89:77:8d:23:58:44:95:d1:9a:fc:14: e3:ff:64:ae:7f:ac:32:63:f7:5e:aa:06:19:f6:75:ab:e6:c4: 43:3a:b6:0e:40:0e:fe:a2:3a:12:27:72:4c:7a:c2:86:02:8b: 12:17:dc:e8:c8:96:cd:53:47:29:91:0a:7b:17:b7:33:37:c1: 32:c4:8b:64:8b:68:d6:f8:6a:3d:f8:9d:57:08:f3:63:b8:1e: 2e:ea:99:fb:94:25:2d:9d:dc:3e:87:42:61:09:23:cd:51:bf: 86:1e:37:5a:ad:0e:3c:3a:8c:5d:67:f0:6c:66:06:d5:57:57: a5:e4:34:07:04:73:82:d8:35:f1:e0:58:4a:dd:b2:f9:02:e9: 4c:91:e6:b6:81:3e:c0:84:06:2b:fe:18:c0:ec:81:36:b6:e5: 81:c2:d8:8f:17:ce:cf:a7:fb:11:2a:3e:04:1a:c6:bf:7e:f1: 2e:ba:47:fd:73:a1:ba:2a:16:ab:69:0a:9d:7b:56:b6:98:4e: f5:6d:11:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw MkI4MkY3NkQwHhcNMjQxMTIyMjM0ODQwWhcNMjQxMTI5MjM0ODQwWjAYMRYwFAYD VQQDEw02NzQxMTg1OC0wMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDAaUmvDr5H0MkgStqHZvJrDzK/N7vzFNcZ89ALrnxK7bzdeVL/K7JvEui2C Il0Da92cZ96/n2vmJ8/jrdM0ze4B6RcbcYmZ+8fop/N71BX40S05FcoN/WI2nYWo HmSjy4d9d0lYrvtuRA0N+2H0hm9sG/dhx50nYnzLN4D0S5Nz+d4KWlX37ea80IfC 5UOKJZHBg+jMmwY6SFrQxKTDGTVKj7LpcSjwckkWmhrfSn64x1JbTIuFXlLTDAxp BPKznoS6L12MWigEOgdr1U2uE+rXgVeiciRVL4zGFRJ6jtgzepvkeP5xtBTOP5IA mVhdCyVfhv7QbGx4IUgTrvjXiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBI0myCa tUH3vfQ+/mkV7sJI7Wb2MB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQwQy84OTFCNEVDQTMyMzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUt ZEVPUjA2aVp6ZElDdUM5MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgcngz/0y4dTL/iOJn3JT+PX00zM2siZmU0jC277byCdo4dNUcdLn9 ThQPyK3P74rKDuO4gvoo4FxGFWXriXeNI1hEldGa/BTj/2Suf6wyY/deqgYZ9nWr 5sRDOrYOQA7+ojoSJ3JMesKGAosSF9zoyJbNU0cpkQp7F7czN8EyxItki2jW+Go9 +J1XCPNjuB4u6pn7lCUtndw+h0JhCSPNUb+GHjdarQ48OoxdZ/BsZgbVV1el5DQH BHOC2DXx4FhK3bL5AulMkea2gT7AhAYr/hjA7IE2tuWBwtiPF87Pp/sRKj4EGsa/ fvEuukf9c6G6KharaQqde1a2mE71bRGY -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org