$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft File: eE7A8P-dbYDcn33OORSfxg-WFJk.mft (raw, json) Hash identifier: KnTnQ3NFWn/UthxxtUT5Po/t8r9UBAmwN1frTX4sFcM= Subject key identifier: 4B:39:6E:68:A4:CF:2A:37:69:EB:53:A1:C3:7F:AB:97:8C:EF:93:08 Authority key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 Certificate issuer: /CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft Manifest number: 4D Signing time: Thu 21 Nov 2024 05:20:01 +0000 Manifest this update: Thu 21 Nov 2024 05:20:01 +0000 Manifest next update: Thu 28 Nov 2024 05:20:01 +0000 Files and hashes: 1: eE7A8P-dbYDcn33OORSfxg-WFJk.crl (hash: TfLLQ28mYLi0fMa5RIpCSBMgVIPU2XqTou0P+5Mhjyo=) 2: 4FAF60B433A411EFB7A29C24C4F9AE02.roa (hash: LD7B5+XzyaE0f/ths6DbB5WXZXs6tAf0rdqOWz9N/kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Validity Not Before: Nov 21 05:20:01 2024 GMT Not After : Nov 28 05:20:01 2024 GMT Subject: CN=673ec301-b970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:cc:aa:33:d9:44:56:dc:65:c3:5e:7b:14: 07:2f:d5:4b:1f:39:b7:c9:b4:b5:e1:08:f6:b5:93: 51:58:6d:d3:0c:ad:30:11:0b:d0:33:d8:17:0d:37: 4c:6e:d0:df:09:39:61:cf:f7:53:d6:ba:42:8e:04: c0:ee:ac:09:3e:34:d1:ac:10:c5:fd:f6:e7:9b:ef: 6a:3e:b9:c4:ab:e3:0f:8c:47:4c:0b:9d:0b:ca:7f: 30:22:4e:ef:3e:b1:6a:60:1a:3a:5f:b0:ea:7e:53: 82:b9:1f:e4:60:69:92:9a:69:08:37:28:47:b8:df: 26:87:21:53:29:2d:dd:ed:bb:36:6a:65:7a:e3:c9: db:14:db:0f:f1:7e:56:32:ca:03:ee:bb:dc:60:4e: 8b:ee:fe:45:b4:6b:74:d9:b1:d6:da:39:1b:52:62: 09:d3:01:4a:a5:13:67:52:93:a4:54:91:48:85:76: 2d:95:20:14:95:18:27:56:1e:9a:df:b4:15:45:93: c7:79:2f:63:29:f4:cb:cb:cf:53:f9:3a:59:5e:4a: 85:1f:2e:f2:df:e6:70:e5:a0:89:5f:6e:7b:b3:3c: 77:65:72:81:5e:fa:15:0b:44:6f:97:9c:87:44:af: 48:7d:78:c7:b8:f3:2a:92:e4:2b:71:a4:be:91:40: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:39:6E:68:A4:CF:2A:37:69:EB:53:A1:C3:7F:AB:97:8C:EF:93:08 X509v3 Authority Key Identifier: keyid:78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:f4:f1:ce:0d:78:8a:40:cf:83:b5:7d:90:0e:9b:8a:9b:a7: 4f:c2:ef:e9:f8:19:30:4b:86:d8:c7:42:c8:86:01:59:7f:21: 6d:45:57:af:72:ae:b5:17:7e:15:ff:3b:45:e6:20:21:d1:b1: 81:4f:c0:b1:15:f8:79:4b:67:ec:3e:bf:f6:8b:95:fa:8e:ae: ea:c1:6f:14:21:6a:53:9a:9e:7a:97:ec:4a:08:f1:dc:c9:1d: e3:26:32:f8:0f:ca:31:97:49:3e:24:fc:22:e4:5d:2e:58:2c: 1a:af:88:6b:d8:51:ab:09:6a:10:a8:25:3b:b8:64:f5:c6:f0: 32:0d:72:6f:12:57:8e:3b:6d:97:bd:1e:88:40:2c:d8:ad:3e: 80:52:43:1f:8c:1b:69:b6:c4:ac:68:aa:53:b3:d9:ba:b8:93: 88:5a:71:25:3a:f0:c1:02:6d:8c:ad:c0:ad:79:64:c3:20:da: e9:ba:f3:e6:d6:bf:26:23:9a:8d:fe:c0:0d:b6:8b:61:12:d9: b1:e4:da:15:2c:a0:37:74:2b:57:30:27:73:bb:cc:f6:9e:d9: 81:d5:5f:24:69:47:20:68:9e:31:b9:fd:27:2c:47:65:14:fa: 57:a0:fe:3a:1c:c5:9e:41:2b:06:2a:00:0b:8f:b6:25:16:eb: 09:0f:1f:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QTY5RjExMC8GA1UEBRMoNzg0RUMwRjBGRjlENkQ4MERDOUY3RENFMzkxNDlGQzYw Rjk2MTQ5OTAeFw0yNDExMjEwNTIwMDFaFw0yNDExMjgwNTIwMDFaMBgxFjAUBgNV BAMTDTY3M2VjMzAxLWI5NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCT8yqM9lEVtxlw157FAcv1UsfObfJtLXhCPa1k1FYbdMMrTARC9Az2BcNN0xu 0N8JOWHP91PWukKOBMDurAk+NNGsEMX99ueb72o+ucSr4w+MR0wLnQvKfzAiTu8+ sWpgGjpfsOp+U4K5H+RgaZKaaQg3KEe43yaHIVMpLd3tuzZqZXrjydsU2w/xflYy ygPuu9xgTovu/kW0a3TZsdbaORtSYgnTAUqlE2dSk6RUkUiFdi2VIBSVGCdWHprf tBVFk8d5L2Mp9MvLz1P5OlleSoUfLvLf5nDloIlfbnuzPHdlcoFe+hULRG+XnIdE r0h9eMe48yqS5CtxpL6RQHcJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSzluaKTP Kjdp61Ohw3+rl4zvkwgwHwYDVR0jBBgwFoAUeE7A8P+dbYDcn33OORSfxg+WFJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBNjlGL0M2NjVERjIyMzNB MzExRUZBNUI0OUIyM0M0RjlBRTAyL2VFN0E4UC1kYllEY24zM09PUlNmeGctV0ZK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUU3QThQLWRiWURjbjMzT09SU2Z4Zy1XRkprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB NjlGL0M2NjVERjIyMzNBMzExRUZBNUI0OUIyM0M0RjlBRTAyL2VFN0E4UC1kYllE Y24zM09PUlNmeGctV0ZKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALD08c4NeIpAz4O1fZAOm4qbp0/C7+n4GTBLhtjHQsiGAVl/IW1FV69y rrUXfhX/O0XmICHRsYFPwLEV+HlLZ+w+v/aLlfqOrurBbxQhalOannqX7EoI8dzJ HeMmMvgPyjGXST4k/CLkXS5YLBqviGvYUasJahCoJTu4ZPXG8DINcm8SV447bZe9 HohALNitPoBSQx+MG2m2xKxoqlOz2bq4k4hacSU68MECbYytwK15ZMMg2um68+bW vyYjmo3+wA22i2ES2bHk2hUsoDd0K1cwJ3O7zPae2YHVXyRpRyBonjG5/ScsR2UU +leg/jocxZ5BKwYqAAuPtiUW6wkPH0Q= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:40 2024 by rpki-client on console-ams.rpki-client.org