$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft File: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft (raw, json) Hash identifier: vH61aX86679xV2HwAS564malef3W8GqTzR2eUyKaVnM= Subject key identifier: DB:37:B7:22:94:E0:DD:03:06:18:4F:B0:D5:00:C0:B7:23:0C:B9:97 Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 0636 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft Manifest number: 062A Signing time: Wed 20 Nov 2024 22:09:21 +0000 Manifest this update: Wed 20 Nov 2024 22:09:21 +0000 Manifest next update: Wed 27 Nov 2024 22:09:21 +0000 Files and hashes: 1: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl (hash: mZDTjQe2QM2wYKI64FG4PhFc4PVrLkBHq+N6mn8FQls=) 2: DE7B831C37DA11EDBEF9D050C4F9AE02.roa (hash: +kKylmkca6+FAx4sOYGqHKzwXEhQ+5JcXHkL0UhejKI=) 3: E959541EB28511ED8893C51CC4F9AE02.roa (hash: UcfQbjt5pGDSOZCx5IzeUlVnX3YAZQw3ib/ytvODV4c=) 4: DDC1A87037DA11EDBEF9D050C4F9AE02.roa (hash: JPtWkJd9tKQ9YS8DsRPubKSCxL1JQ7cieCqKgCXkh+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1590 (0x636) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Validity Not Before: Nov 20 22:09:21 2024 GMT Not After : Nov 27 22:09:21 2024 GMT Subject: CN=673e5e11-3d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:5e:f5:ba:34:f6:bf:74:de:15:87:34:f1: 4c:e9:89:d5:ff:4a:89:51:d5:62:50:22:12:98:36: 12:2d:32:8c:8e:14:10:4e:6d:76:6f:9b:06:be:29: d6:7d:11:2a:fa:ad:7b:83:c1:5f:10:a0:b1:44:3c: 22:6c:cd:c2:8d:ad:3e:9a:c1:ac:7b:14:4b:7e:8b: 8a:68:58:b9:3e:70:88:b4:e4:27:19:ec:64:ad:43: 5c:f9:ab:78:29:4b:fa:71:48:93:ca:2c:91:81:b2: 70:36:94:a7:b9:06:65:c3:51:16:7a:fc:1d:b7:ba: ee:d1:f7:e8:7d:78:ec:09:6e:21:92:39:ee:ef:ff: 30:81:1e:32:2c:f3:46:4e:d2:33:ce:b2:32:b5:a8: 5f:a1:b0:5f:62:45:ff:09:e4:47:60:bd:a7:eb:f8: 12:31:c9:0f:f5:e3:68:ad:80:99:97:4b:0a:0b:08: d3:75:52:60:df:67:47:d0:77:1c:52:6e:c8:e0:0d: c4:54:4d:0e:5c:36:e7:31:0b:3f:2f:b9:4e:d4:12: eb:7a:21:7b:86:b8:94:2f:61:ad:9d:5c:32:52:8a: 95:a1:79:d1:77:14:5b:d2:be:36:a4:a3:9f:80:f0: 2a:5a:32:7e:35:25:ea:41:8b:f6:d0:a5:5c:8d:e2: ee:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:37:B7:22:94:E0:DD:03:06:18:4F:B0:D5:00:C0:B7:23:0C:B9:97 X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:14:9a:28:f4:f8:f2:94:4c:42:e7:67:03:5e:c9:18:8f:4f: 82:05:03:55:d4:cf:42:7e:cb:aa:da:07:71:5a:97:e7:5b:17: 48:f2:dc:37:a3:06:28:38:29:fb:f3:49:26:dd:d9:43:72:4b: 91:74:66:c4:8f:ce:51:79:59:3d:6d:19:64:e2:22:bc:11:b1: 36:c2:75:cb:34:bf:5e:5d:90:6b:ff:5e:5b:49:6c:98:44:23: eb:34:3c:a5:b0:85:0c:fd:ec:c1:05:34:37:ca:ed:e9:bb:16: 82:79:ac:b9:1f:cd:6f:5a:88:74:29:17:3d:c3:08:28:97:a2: 3a:73:0d:15:84:1b:f4:cd:86:86:0d:f5:ea:b9:c5:4b:2c:89: 3c:bf:f2:8c:fa:21:c9:29:67:17:b6:4c:55:9c:c2:63:37:4c: 19:0f:83:04:fa:9c:3f:37:c1:58:b2:c7:b6:5a:2d:3c:27:87: 1b:d7:53:4a:ef:7f:c1:0f:dc:98:2d:08:a4:fd:87:95:e6:f3: f5:00:fa:23:56:b7:14:48:52:04:e4:b2:ed:95:00:86:c8:04: 0e:8f:7d:3c:dd:65:3d:89:1e:e1:9b:b2:5d:b4:61:48:a1:11: ba:49:4b:93:1f:25:a3:42:b0:bb:37:a2:84:08:ab:cf:18:2d: 9a:bd:35:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjQxMTIwMjIwOTIxWhcNMjQxMTI3MjIwOTIxWjAYMRYwFAYD VQQDEw02NzNlNWUxMS0zZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8te9bo09r903hWHNPFM6YnV/0qJUdViUCISmDYSLTKMjhQQTm12b5sGvinW fREq+q17g8FfEKCxRDwibM3Cja0+msGsexRLfouKaFi5PnCItOQnGexkrUNc+at4 KUv6cUiTyiyRgbJwNpSnuQZlw1EWevwdt7ru0ffofXjsCW4hkjnu7/8wgR4yLPNG TtIzzrIytahfobBfYkX/CeRHYL2n6/gSMckP9eNorYCZl0sKCwjTdVJg32dH0Hcc Um7I4A3EVE0OXDbnMQs/L7lO1BLreiF7hriUL2GtnVwyUoqVoXnRdxRb0r42pKOf gPAqWjJ+NSXqQYv20KVcjeLu2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNs3tyKU 4N0DBhhPsNUAwLcjDLmXMB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REIzNy81NzY0NzM3QTc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpq V0J4Y1FfVDhmTUxQYU5hU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtFJoo9PjylExC52cDXskYj0+CBQNV1M9Cfsuq2gdxWpfnWxdI8tw3 owYoOCn780km3dlDckuRdGbEj85ReVk9bRlk4iK8EbE2wnXLNL9eXZBr/15bSWyY RCPrNDylsIUM/ezBBTQ3yu3puxaCeay5H81vWoh0KRc9wwgol6I6cw0VhBv0zYaG DfXqucVLLIk8v/KM+iHJKWcXtkxVnMJjN0wZD4ME+pw/N8FYsse2Wi08J4cb11NK 73/BD9yYLQik/YeV5vP1APojVrcUSFIE5LLtlQCGyAQOj3083WU9iR7hm7JdtGFI oRG6SUuTHyWjQrC7N6KECKvPGC2avTVH -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:02 2024 by rpki-client on console-ams.rpki-client.org