$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft File: 4190GdVyqG920uv3gpq22dA0CQU.mft (raw, json) Hash identifier: FjuKZe7aTKr1iC5n9aJhMyAqy3V3epuNLFK2skQYZzM= Subject key identifier: 4F:51:A0:CC:35:37:94:33:E4:B4:99:8F:09:1A:22:4E:D3:8B:21:36 Authority key identifier: E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05 Certificate issuer: /CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft Manifest number: F9 Signing time: Sat 23 Nov 2024 03:19:49 +0000 Manifest this update: Sat 23 Nov 2024 03:19:49 +0000 Manifest next update: Sat 30 Nov 2024 03:19:49 +0000 Files and hashes: 1: 4190GdVyqG920uv3gpq22dA0CQU.crl (hash: R/wod+IxL5sYYnJgRN8hQzqp2uXN/OhePOvEy4XFxQE=) 2: 9985244A2D1411EEAA9EA45DC4F9AE02.roa (hash: VdVGiGXj8WmtMijPMpgRK+Rb6MVhazNJnLJSMdY7Rjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905 Validity Not Before: Nov 23 03:19:49 2024 GMT Not After : Nov 30 03:19:49 2024 GMT Subject: CN=674149d5-5c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:dd:39:c1:f6:be:2d:6c:5a:53:96:0c:5c: 0e:46:26:84:e2:33:5f:e8:60:ec:88:50:2a:c0:6a: 6d:bc:fc:df:8b:af:c0:67:df:1c:37:8d:df:ff:7e: ef:09:c0:4f:ea:99:3b:6d:29:83:ad:49:68:d9:7e: 01:30:6c:76:22:57:95:91:a5:85:d7:26:a4:f6:7b: 9f:06:2b:46:d3:4f:f5:cd:74:70:37:92:0e:91:8e: bc:85:0f:5c:46:8d:89:f7:48:37:d9:49:fe:da:f7: bc:9d:87:f2:49:f3:6a:71:61:c2:cf:7a:17:95:3d: 82:6c:2a:47:2a:9c:13:79:da:ce:fa:a9:80:6c:1e: 94:a1:99:ca:e0:5f:e0:18:39:0e:c3:cc:40:bc:1d: f9:e1:5d:a7:30:f5:9f:cb:3d:b9:91:ee:04:2a:42: 40:75:2d:a0:60:1b:cd:36:cf:f8:47:f7:51:1a:42: 86:33:7e:47:aa:a9:80:03:88:47:14:b6:18:73:dc: ca:bd:a8:f9:64:74:ba:4b:ca:79:d9:e4:80:85:71: a9:37:13:0d:18:a1:eb:6d:cd:71:dd:6d:a9:73:89: 6c:b4:f0:be:95:10:e4:24:16:a8:3f:14:44:82:02: 19:d8:cb:59:35:3c:d8:79:15:6c:1c:8d:79:32:2e: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:51:A0:CC:35:37:94:33:E4:B4:99:8F:09:1A:22:4E:D3:8B:21:36 X509v3 Authority Key Identifier: keyid:E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:49:11:a8:12:f7:ed:ee:08:e2:07:ee:37:3e:f5:40:3f:75: 62:9c:70:92:14:10:ac:e2:f7:32:51:ca:56:e8:78:68:58:68: 67:b5:92:e9:1f:0c:53:71:4d:3f:45:fd:cf:6d:48:55:5a:85: 76:9d:e2:82:ca:27:b3:db:a0:90:67:6a:11:0d:66:ce:b4:81: 65:c2:a8:1f:02:bd:37:ff:2b:c8:61:77:9a:9a:ab:09:15:8c: 19:14:48:9a:eb:88:b3:95:61:6c:95:ce:2b:8c:ba:16:79:40: 93:b6:c4:73:cc:b7:e1:b4:18:82:20:4c:2b:4c:99:b0:db:12: 27:95:5b:09:d0:a2:74:40:41:37:41:a6:91:e3:75:70:71:3d: bb:49:93:eb:4c:ce:8a:fa:29:0b:f1:e3:dc:b7:9c:74:b4:1d: f1:9c:5a:19:0a:3d:c0:f4:55:eb:08:f8:2d:2c:50:31:14:89: 1d:7f:a9:3f:f5:0b:5a:f9:bd:4e:d7:a8:f3:0d:47:17:8b:81: b5:73:5c:fc:4d:77:ba:13:04:d4:61:c4:e6:3a:f2:b8:67:c1: ff:e1:91:a7:8a:23:0c:5c:9b:a4:e2:c0:d0:0b:fc:c4:b8:1a: 17:9a:bc:35:0c:da:5a:90:96:6a:07:7f:2a:3d:63:57:64:5b: 3b:ae:12:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThBRjUxMTAvBgNVBAUTKEUzNUY3NDE5RDU3MkE4NkY3NkQyRUJGNzgyOUFCNkQ5 RDAzNDA5MDUwHhcNMjQxMTIzMDMxOTQ5WhcNMjQxMTMwMDMxOTQ5WjAYMRYwFAYD VQQDEw02NzQxNDlkNS01YzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv7dOcH2vi1sWlOWDFwORiaE4jNf6GDsiFAqwGptvPzfi6/AZ98cN43f/37v CcBP6pk7bSmDrUlo2X4BMGx2IleVkaWF1yak9nufBitG00/1zXRwN5IOkY68hQ9c Ro2J90g32Un+2ve8nYfySfNqcWHCz3oXlT2CbCpHKpwTedrO+qmAbB6UoZnK4F/g GDkOw8xAvB354V2nMPWfyz25ke4EKkJAdS2gYBvNNs/4R/dRGkKGM35HqqmAA4hH FLYYc9zKvaj5ZHS6S8p52eSAhXGpNxMNGKHrbc1x3W2pc4lstPC+lRDkJBaoPxRE ggIZ2MtZNTzYeRVsHI15Mi48JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9RoMw1 N5Qz5LSZjwkaIk7TiyE2MB8GA1UdIwQYMBaAFONfdBnVcqhvdtLr94KattnQNAkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEFGNS8zM0Y3MjU4NjJE MTExMUVFOTk2Q0M2MTBDNEY5QUUwMi80MTkwR2RWeXFHOTIwdXYzZ3BxMjJkQTBD UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQxOTBHZFZ5cUc5MjB1djNncHEyMmRBMENRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEFGNS8zM0Y3MjU4NjJEMTExMUVFOTk2Q0M2MTBDNEY5QUUwMi80MTkwR2RWeXFH OTIwdXYzZ3BxMjJkQTBDUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxSRGoEvft7gjiB+43PvVAP3VinHCSFBCs4vcyUcpW6HhoWGhntZLp HwxTcU0/Rf3PbUhVWoV2neKCyiez26CQZ2oRDWbOtIFlwqgfAr03/yvIYXeamqsJ FYwZFEia64izlWFslc4rjLoWeUCTtsRzzLfhtBiCIEwrTJmw2xInlVsJ0KJ0QEE3 QaaR43VwcT27SZPrTM6K+ikL8ePct5x0tB3xnFoZCj3A9FXrCPgtLFAxFIkdf6k/ 9Qta+b1O16jzDUcXi4G1c1z8TXe6EwTUYcTmOvK4Z8H/4ZGniiMMXJuk4sDQC/zE uBoXmrw1DNpakJZqB38qPWNXZFs7rhI3 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org