$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft File: Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft (raw, json) Hash identifier: PInYE9N9BKsiE8jd3LrwvVbx2AwRU9zTo+VgLNU5y/g= Subject key identifier: 78:B5:5F:10:BB:DD:C7:DF:B6:43:CC:41:37:0F:F9:61:C9:39:75:05 Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 Certificate issuer: /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft Manifest number: 1F Signing time: Sat 23 Nov 2024 05:50:54 +0000 Manifest this update: Sat 23 Nov 2024 05:50:53 +0000 Manifest next update: Sat 30 Nov 2024 05:50:53 +0000 Files and hashes: 1: Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl (hash: nECAF9s+g9HJR8UxUO0pqWbo66rOYOuBVomfMAQihdE=) 2: F696F52C8C7311EF995EA751C4F9AE02.roa (hash: +xX9dK06mt7FZ9rZ/AJGfib2jU/nTKYDpNjOLCFKHSE=) 3: A227F4CC84CC11EFB2C53051C4F9AE02.roa (hash: Y2Tr1Ixlpiaz1ZaaVisHRV7bGTopPOYADJfeivF59M4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2 Validity Not Before: Nov 23 05:50:53 2024 GMT Not After : Nov 30 05:50:53 2024 GMT Subject: CN=67416d3d-4f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7c:a6:0f:29:ba:c5:c8:b4:b9:f5:b8:29:29: 3c:4c:ca:7e:eb:06:de:a2:5d:0b:02:2b:13:9b:85: 63:b9:e2:75:ec:8b:15:ba:c6:ee:75:65:93:4a:40: a2:dc:dc:a5:69:21:45:7b:b0:47:fc:6d:b6:8a:82: 0b:ce:91:fb:d9:45:75:f2:f6:41:6e:de:c2:f7:e3: 20:1b:ba:38:b3:45:a6:13:de:24:d9:f7:b1:d8:e2: 1d:53:a0:25:0a:77:1d:7d:5c:7a:24:a0:2b:31:da: 61:12:8b:c2:fa:6b:41:84:0e:a4:8b:1f:0f:ef:1c: 8c:7c:35:58:c7:41:af:56:6f:7c:a2:f0:10:63:30: b5:30:08:37:7f:7a:89:a7:8a:19:1a:2e:2d:28:e7: 50:84:88:ae:2c:79:d7:5c:9b:ba:bc:8b:03:80:d7: a9:64:2f:a7:33:3c:de:78:82:7e:99:c3:90:dd:67: fa:30:0f:5d:29:5a:b6:f2:e7:94:3f:61:38:46:46: 2b:7e:ca:43:5e:6c:be:9c:18:a2:ee:8e:4e:6a:21: 6e:b2:f9:e9:f2:31:4f:cc:c3:fb:57:9d:c1:95:1f: 69:3b:cf:02:ac:b9:88:0b:44:61:d3:71:ee:a0:7f: 25:f3:fb:10:83:de:37:1b:15:b0:34:dd:b5:f9:c0: cd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B5:5F:10:BB:DD:C7:DF:B6:43:CC:41:37:0F:F9:61:C9:39:75:05 X509v3 Authority Key Identifier: keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:9a:47:71:16:d7:41:62:93:e7:98:c6:3c:b6:55:45:ce:1f: 25:6a:33:e4:20:6f:76:45:bf:99:44:78:a1:8c:3e:e9:a3:1c: c2:08:ec:33:02:b3:b7:a6:8d:30:14:4b:20:a3:e5:ad:61:29: 43:41:34:29:ee:a7:e1:a6:f3:dd:1c:d5:c3:5b:98:4c:d5:58: f0:88:92:43:e2:63:00:f1:81:47:06:59:5a:63:da:fc:f9:e3: 39:a8:e2:8c:1d:83:56:6f:17:df:5f:7a:0a:37:6a:46:c4:17: 80:78:20:a9:55:5d:86:1c:e0:3f:34:82:13:91:42:f1:50:3e: 92:6d:56:d5:d2:f5:a4:51:63:42:3d:0b:b6:a0:86:97:f4:34: 26:84:64:94:2d:3c:4b:e3:df:40:23:3f:3d:22:c6:27:30:ce: dc:2e:eb:32:f8:c9:ef:80:ca:20:7c:6c:6d:9b:64:b1:50:db: 15:af:18:66:ed:67:00:6f:87:8f:b3:72:d9:0f:cf:bd:77:f0: 3a:09:5e:8e:bf:ee:fc:a7:42:25:f6:41:78:b6:e7:30:8b:77: 00:b0:75:69:10:b1:7e:6a:aa:8f:73:55:a5:d5:ce:3e:6f:78: 37:a0:e6:99:02:a2:30:a5:e4:db:01:34:c0:d3:fb:12:e9:10: 66:10:de:d5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MjM2NDExMC8GA1UEBRMoNDcwQ0RGRDQ5RjVERkYyMTI1NzhERUM1REEyMUYyMURB MEIzRkFEMjAeFw0yNDExMjMwNTUwNTNaFw0yNDExMzAwNTUwNTNaMBgxFjAUBgNV BAMTDTY3NDE2ZDNkLTRmNmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWfKYPKbrFyLS59bgpKTxMyn7rBt6iXQsCKxObhWO54nXsixW6xu51ZZNKQKLc 3KVpIUV7sEf8bbaKggvOkfvZRXXy9kFu3sL34yAbujizRaYT3iTZ97HY4h1ToCUK dx19XHokoCsx2mESi8L6a0GEDqSLHw/vHIx8NVjHQa9Wb3yi8BBjMLUwCDd/eomn ihkaLi0o51CEiK4seddcm7q8iwOA16lkL6czPN54gn6Zw5DdZ/owD10pWrby55Q/ YThGRit+ykNebL6cGKLujk5qIW6y+enyMU/Mw/tXncGVH2k7zwKsuYgLRGHTce6g fyXz+xCD3jcbFbA03bX5wM1NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeLVfELvd x9+2Q8xBNw/5Yck5dQUwHwYDVR0jBBgwFoAURwzf1J9d/yEleN7F2iHyHaCz+tIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyMzY0LzA0MDU2NkE4ODRD QzExRUY4NEVFM0U1MEM0RjlBRTAyL1J3emYxSjlkX3lFbGVON0YyaUh5SGFDei10 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnd6ZjFKOWRfeUVsZU43RjJpSHlIYUN6LXRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy MzY0LzA0MDU2NkE4ODRDQzExRUY4NEVFM0U1MEM0RjlBRTAyL1J3emYxSjlkX3lF bGVON0YyaUh5SGFDei10SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACaaR3EW10Fik+eYxjy2VUXOHyVqM+Qgb3ZFv5lEeKGMPumjHMII7DMC s7emjTAUSyCj5a1hKUNBNCnup+Gm890c1cNbmEzVWPCIkkPiYwDxgUcGWVpj2vz5 4zmo4owdg1ZvF99fego3akbEF4B4IKlVXYYc4D80ghORQvFQPpJtVtXS9aRRY0I9 C7aghpf0NCaEZJQtPEvj30AjPz0ixicwztwu6zL4ye+AyiB8bG2bZLFQ2xWvGGbt ZwBvh4+zctkPz7138DoJXo6/7vynQiX2QXi25zCLdwCwdWkQsX5qqo9zVaXVzj5v eDeg5pkCojCl5NsBNMDT+xLpEGYQ3tU= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:06 2024 by rpki-client on console-ams.rpki-client.org