$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft File: slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json) Hash identifier: 8UWxXcTZLU+7COoeSVyJZvkXPWBOyN2FzIt5jMnNudE= Subject key identifier: 30:3D:F7:AC:30:A2:EA:BA:72:24:1A:43:3E:57:AA:0D:AC:D8:9D:3A Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 Certificate issuer: /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft Manifest number: 34 Signing time: Thu 21 Nov 2024 05:37:08 +0000 Manifest this update: Thu 21 Nov 2024 05:37:08 +0000 Manifest next update: Thu 28 Nov 2024 05:37:08 +0000 Files and hashes: 1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: X3wQG1RgHoB32GAjHazZg1Qe/4TFiiw28KI5WdpTyqY=) 2: 1F3782EE5AE211EF8E82D12DC4F9AE02.roa (hash: fLihF8OPXYOV6Q+4GvvDUq4V32BKkeG6RAvNAd2mXSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86 Validity Not Before: Nov 21 05:37:08 2024 GMT Not After : Nov 28 05:37:08 2024 GMT Subject: CN=673ec704-b540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ec:33:3b:57:8c:78:af:a2:1a:d3:b6:7a:91: f4:f7:a8:96:42:cc:ee:90:17:a7:3b:70:59:59:53: 52:cb:c2:af:e4:95:73:8f:80:18:40:c5:85:76:f1: 29:44:f9:95:c5:a9:d6:7b:ae:6c:99:7c:f3:ce:ad: 0c:37:5a:42:44:ad:7c:3f:17:60:c3:36:54:ba:6d: d9:1e:03:f9:bd:65:61:b1:d8:8b:77:fb:e7:91:26: 35:f0:bf:87:71:1f:8d:04:a7:41:42:4b:0a:64:47: 76:f9:02:e2:11:b0:c4:95:d5:bb:db:41:d4:30:ae: 03:33:29:1c:da:cc:4f:d6:cd:d5:58:98:24:af:14: 0f:d5:37:6d:04:7d:2e:a9:ea:d8:12:db:d9:48:e7: 7b:4b:eb:5e:4a:91:c4:61:61:a7:12:f6:ae:32:43: 43:8a:38:3d:02:88:ce:ef:d3:55:6c:6f:8f:72:61: 50:ee:db:29:3c:fc:65:50:b2:52:b9:cb:7d:e9:f8: 6d:48:ac:b5:14:8d:c6:08:83:1d:6f:96:1c:04:60: 73:36:57:bf:67:4b:c4:95:70:38:8f:27:ae:ba:78: 37:33:7a:76:1c:5f:4c:c0:e6:77:3d:bf:ad:3f:de: fa:39:9f:c2:ba:7f:58:3b:05:65:22:e1:f3:03:8b: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3D:F7:AC:30:A2:EA:BA:72:24:1A:43:3E:57:AA:0D:AC:D8:9D:3A X509v3 Authority Key Identifier: keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0c:3b:d7:a0:48:da:68:b0:54:5c:1b:e9:d4:20:4b:a0:05: 46:71:da:ee:c5:53:57:89:56:fa:8e:a4:78:2d:9a:61:00:bb: fd:e4:f2:99:47:53:d3:60:6e:1b:c3:40:f0:de:3e:02:c1:a3: 1a:a8:59:ed:1b:b2:5c:6a:e6:81:51:83:ee:3f:3d:28:e2:cf: a5:b7:1a:7d:7c:ca:30:6e:28:3e:f0:0c:a5:92:9b:6c:c5:f1: 82:46:d2:3d:2d:0f:39:76:11:2a:62:18:e0:cd:cf:57:9f:e2: bb:67:3f:cf:92:41:67:7e:fd:17:a3:6c:0c:20:32:6d:56:8e: 32:26:a4:19:47:25:03:60:ef:7b:84:a7:f3:b8:bd:e8:a7:ea: e1:2d:b3:e5:4f:4d:2a:8d:0d:80:e2:58:45:18:a3:be:be:42: 0a:b9:49:70:b4:cc:6e:6b:0c:bc:12:e7:7c:d4:8c:72:8a:12: 66:9d:1c:39:8f:37:bc:e9:15:bd:c8:ab:c6:15:cd:0a:b0:6b: e4:5b:16:4d:74:54:22:fe:09:07:00:47:84:03:71:50:e3:50: f4:1c:1a:5f:51:21:1d:ae:c8:90:be:44:2b:e3:4d:0d:b4:20: ef:61:0a:79:42:c4:5d:36:e5:4b:24:37:69:f9:d2:bc:e1:be: 76:88:35:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc4NjExMC8GA1UEBRMoQjI1NTJCMzhCOEM1Q0IwOTM1Qzk0MEZBNjA5ODBFQTZG NTEwQ0Y4NjAeFw0yNDExMjEwNTM3MDhaFw0yNDExMjgwNTM3MDhaMBgxFjAUBgNV BAMTDTY3M2VjNzA0LWI1NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs7DM7V4x4r6Ia07Z6kfT3qJZCzO6QF6c7cFlZU1LLwq/klXOPgBhAxYV28SlE +ZXFqdZ7rmyZfPPOrQw3WkJErXw/F2DDNlS6bdkeA/m9ZWGx2It3++eRJjXwv4dx H40Ep0FCSwpkR3b5AuIRsMSV1bvbQdQwrgMzKRzazE/WzdVYmCSvFA/VN20EfS6p 6tgS29lI53tL615KkcRhYacS9q4yQ0OKOD0CiM7v01Vsb49yYVDu2yk8/GVQslK5 y33p+G1IrLUUjcYIgx1vlhwEYHM2V79nS8SVcDiPJ666eDczenYcX0zA5nc9v60/ 3vo5n8K6f1g7BWUi4fMDi5lhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMD33rDCi 6rpyJBpDPleqDazYnTowHwYDVR0jBBgwFoAUslUrOLjFywk1yUD6YJgOpvUQz4Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1Nzg2L0U1NzcxMzgwNUFF MTExRUZCQjVDNTcyREM0RjlBRTAyL3NsVXJPTGpGeXdrMXlVRDZZSmdPcHZVUXo0 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2xVck9MakZ5d2sxeVVENllKZ09wdlVRejRZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 Nzg2L0U1NzcxMzgwNUFFMTExRUZCQjVDNTcyREM0RjlBRTAyL3NsVXJPTGpGeXdr MXlVRDZZSmdPcHZVUXo0WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE4MO9egSNposFRcG+nUIEugBUZx2u7FU1eJVvqOpHgtmmEAu/3k8plH U9NgbhvDQPDePgLBoxqoWe0bslxq5oFRg+4/PSjiz6W3Gn18yjBuKD7wDKWSm2zF 8YJG0j0tDzl2ESpiGODNz1ef4rtnP8+SQWd+/RejbAwgMm1WjjImpBlHJQNg73uE p/O4vein6uEts+VPTSqNDYDiWEUYo76+Qgq5SXC0zG5rDLwS53zUjHKKEmadHDmP N7zpFb3Iq8YVzQqwa+RbFk10VCL+CQcAR4QDcVDjUPQcGl9RIR2uyJC+RCvjTQ20 IO9hCnlCxF025UskN2n50rzhvnaINZY= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:40 2024 by rpki-client on console-ams.rpki-client.org