$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft File: pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft (raw, json) Hash identifier: mIIm/ECU6nkfsu6s18VsBsOxcifujxOkCLqRniQkFMA= Subject key identifier: 37:4F:B9:74:E7:BF:6D:F9:2E:8B:28:F6:98:F8:46:86:E6:C5:91:AC Authority key identifier: A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE Certificate issuer: /CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft Manifest number: 0116 Signing time: Thu 21 Nov 2024 03:03:55 +0000 Manifest this update: Thu 21 Nov 2024 03:03:55 +0000 Manifest next update: Thu 28 Nov 2024 03:03:55 +0000 Files and hashes: 1: pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl (hash: WYIdrQsjmK5W8SwFU4J4WmN/aZbQLPb9YPmzSWP8jMw=) 2: C5CD32AAE5DC11EE867C6F21C4F9AE02.roa (hash: 4AIgr5Ud5ti0oSHDBktujDNDac4fUeyWdMEfk5EvX6c=) 3: C6AA9D48E5DC11EE867C6F21C4F9AE02.roa (hash: rXva0zw9zpysL9/iIPRFRWMSmLFREnrMEPdU1Wc84aQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE Validity Not Before: Nov 21 03:03:55 2024 GMT Not After : Nov 28 03:03:55 2024 GMT Subject: CN=673ea31b-4712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:f3:66:b6:f8:4f:9b:e8:f0:2c:da:ba:3e: 58:08:4a:7f:9f:92:f7:45:83:ed:48:ff:7a:87:ff: f2:fc:01:1c:20:2d:18:9c:ac:54:ed:65:e3:66:c2: c0:c4:25:c7:cc:64:59:5a:0b:ef:d9:cf:63:c0:4c: 25:01:5b:ef:45:f2:d4:95:cb:c8:44:c8:56:b9:cf: 62:59:a9:be:3a:08:4b:7d:48:7f:b8:cf:53:42:76: 86:37:51:bb:de:be:34:c9:10:fa:fa:54:3a:7e:c7: ac:2b:3e:80:1a:3f:11:bf:ee:06:a0:80:76:8f:06: 06:43:4e:68:7a:17:2a:53:69:5f:b8:12:38:29:b3: 85:58:96:91:ad:f7:83:18:47:eb:3c:72:26:c4:1a: 29:27:2f:ad:9f:98:68:73:78:72:06:36:ba:05:e9: af:d6:1a:c9:d9:14:ff:f5:b9:b0:2e:f9:4e:f1:b6: 72:c8:64:ef:ea:c3:f2:51:11:c2:27:09:02:10:9b: 79:c4:b2:02:5b:65:fe:6b:6d:71:5a:c5:72:ad:f9: d8:65:e1:60:08:b7:f6:2e:ef:e9:bf:d9:a2:d0:27: b0:9f:e9:07:65:8f:16:81:52:bf:81:75:10:4f:fe: ca:d7:e6:1f:11:d9:bb:6d:06:e0:9b:6d:48:48:9c: 27:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4F:B9:74:E7:BF:6D:F9:2E:8B:28:F6:98:F8:46:86:E6:C5:91:AC X509v3 Authority Key Identifier: keyid:A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:10:28:dd:fe:2d:4f:46:69:73:68:91:13:f0:96:1b:63:dc: b6:62:58:c4:d7:04:85:41:ab:2a:53:c6:cb:19:83:87:0d:32: f3:46:96:90:b0:ff:fd:0a:1c:6f:eb:68:32:ee:09:df:0b:b8: 01:2f:bb:1e:ac:a6:ad:a2:ad:aa:24:86:19:2c:fe:6d:c3:cb: ca:15:66:ce:68:1f:ea:95:5c:c7:ca:78:b3:5e:f9:1b:7f:15: 64:f0:a0:56:1f:ab:aa:85:43:70:02:90:3a:ea:f2:cf:5c:b0: af:32:85:1e:51:fd:11:25:08:21:4a:ef:49:b6:4e:a0:a8:9f: e8:62:2a:48:7a:a4:a2:0f:c2:0a:c9:56:18:30:01:e8:8d:17: 14:e0:98:bc:2c:3e:f5:95:12:af:b4:bd:4b:9a:36:51:bb:30: 0f:36:a4:17:32:ff:6b:71:09:93:42:cb:7e:18:d6:79:f1:f0: 82:c3:ed:60:7a:64:68:0d:db:99:da:c8:e1:75:2f:f9:c4:6f: 53:e8:e4:f1:fc:2e:b9:40:00:a5:b5:53:b3:13:90:42:9d:89: d6:c3:1c:fe:c4:1f:b6:6c:1d:74:c2:25:99:48:00:cb:b0:35: 2c:a2:4c:59:e6:03:1d:cc:d5:23:44:dc:07:c3:a6:4b:cc:60: 31:b3:7a:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM5RkUxMTAvBgNVBAUTKEE1RDlDNkE2Rjk2NzVCOTFDRTU0RDExNUY4OEM5NDEw RjE4RjkwRkUwHhcNMjQxMTIxMDMwMzU1WhcNMjQxMTI4MDMwMzU1WjAYMRYwFAYD VQQDEw02NzNlYTMxYi00NzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGzzZrb4T5vo8Czauj5YCEp/n5L3RYPtSP96h//y/AEcIC0YnKxU7WXjZsLA xCXHzGRZWgvv2c9jwEwlAVvvRfLUlcvIRMhWuc9iWam+OghLfUh/uM9TQnaGN1G7 3r40yRD6+lQ6fsesKz6AGj8Rv+4GoIB2jwYGQ05oehcqU2lfuBI4KbOFWJaRrfeD GEfrPHImxBopJy+tn5hoc3hyBja6Bemv1hrJ2RT/9bmwLvlO8bZyyGTv6sPyURHC JwkCEJt5xLICW2X+a21xWsVyrfnYZeFgCLf2Lu/pv9mi0Cewn+kHZY8WgVK/gXUQ T/7K1+YfEdm7bQbgm21ISJwn5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdPuXTn v235Loso9pj4RobmxZGsMB8GA1UdIwQYMBaAFKXZxqb5Z1uRzlTRFfiMlBDxj5D+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzlGRS81M0NCNjkwQ0ZE RTIxMUVEOUQyRDFGNjhDNEY5QUUwMi9wZG5HcHZsblc1SE9WTkVWLUl5VUVQR1Br UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BkbkdwdmxuVzVIT1ZORVYtSXlVRVBHUGtQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzlGRS81M0NCNjkwQ0ZERTIxMUVEOUQyRDFGNjhDNEY5QUUwMi9wZG5HcHZsblc1 SE9WTkVWLUl5VUVQR1BrUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZECjd/i1PRmlzaJET8JYbY9y2YljE1wSFQasqU8bLGYOHDTLzRpaQ sP/9Chxv62gy7gnfC7gBL7serKatoq2qJIYZLP5tw8vKFWbOaB/qlVzHynizXvkb fxVk8KBWH6uqhUNwApA66vLPXLCvMoUeUf0RJQghSu9Jtk6gqJ/oYipIeqSiD8IK yVYYMAHojRcU4Ji8LD71lRKvtL1LmjZRuzAPNqQXMv9rcQmTQst+GNZ58fCCw+1g emRoDduZ2sjhdS/5xG9T6OTx/C65QACltVOzE5BCnYnWwxz+xB+2bB10wiWZSADL sDUsokxZ5gMdzNUjRNwHw6ZLzGAxs3rT -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:23 2024 by rpki-client on console-ams.rpki-client.org