$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft File: RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json) Hash identifier: 5vHfE0pHgXA5MHRYL+dkz1EVYYk+JSIXNMQ6YhSCxno= Subject key identifier: 59:23:77:AC:63:CB:D2:CD:8E:03:0E:09:9B:D6:35:93:09:0A:45:CF Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Certificate serial: 05C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft Manifest number: 05B9 Signing time: Fri 22 Nov 2024 22:41:09 +0000 Manifest this update: Fri 22 Nov 2024 22:41:09 +0000 Manifest next update: Fri 29 Nov 2024 22:41:09 +0000 Files and hashes: 1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: zuZYrBMH/yTZ84nyqC3u0wyl7ZXpA+d8LP5tT1IRXk8=) 2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: DXTuheibG+szNcxV77u8wD3wgohp51bY0opPALlmG3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1472 (0x5c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Validity Not Before: Nov 22 22:41:09 2024 GMT Not After : Nov 29 22:41:09 2024 GMT Subject: CN=67410885-d06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:da:50:07:c2:4a:e3:f4:59:1d:ce:d7:81: a6:3a:85:0c:d2:5c:22:15:02:03:79:b9:80:17:37: 2c:9c:3c:10:91:8a:cf:1d:b4:79:0f:58:2a:c0:3c: 90:e6:e5:d5:5b:b8:0c:d0:74:de:6b:f0:7d:8e:22: 04:7b:07:dd:59:bb:0e:e9:01:0d:07:32:36:6a:ea: 58:c6:84:68:68:d7:76:32:2e:f6:dd:a0:19:d8:ef: dd:8b:ef:53:d0:cd:9d:b6:0c:5d:5c:21:07:bb:9b: 5f:7f:4c:e1:1c:35:91:53:7c:ab:b7:39:52:2d:3d: 46:ff:ef:27:ff:c0:2b:a9:fe:89:ce:30:e3:73:86: bb:ea:99:9d:7b:2f:b9:fb:01:76:db:b7:b7:28:9a: 01:17:2a:98:e9:b7:76:15:6b:0c:39:69:8b:9e:4d: 7b:1d:e6:c4:3d:85:a9:81:e4:74:9d:2e:43:06:c7: bf:61:40:f0:ee:47:9f:63:d2:e5:19:2d:91:0f:37: 8b:70:b0:67:6e:b8:65:c1:9f:40:01:29:c6:3c:fa: 5f:fe:e3:48:c3:7d:2b:8b:f6:61:15:45:bf:82:7b: 39:43:ac:56:8f:f1:7f:f5:f7:be:01:cf:05:17:0d: 91:31:9e:f6:8f:61:fd:5f:7c:c5:ed:9b:2b:ee:74: e3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:23:77:AC:63:CB:D2:CD:8E:03:0E:09:9B:D6:35:93:09:0A:45:CF X509v3 Authority Key Identifier: keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:76:96:b9:42:18:e3:6a:14:38:f5:20:ed:52:9c:90:c7:95: 0e:af:16:76:6e:50:71:b3:43:cf:a7:96:19:5b:07:d4:ed:5b: 0f:21:47:f3:f0:ac:53:a3:14:3d:5b:b2:97:fc:e5:ed:df:31: e6:c0:dd:58:15:c6:b7:98:58:62:13:29:b1:4b:58:59:db:37: c4:99:21:b7:f2:3b:5d:36:4c:54:76:dd:75:b0:d6:2f:75:0f: c2:c7:ef:a8:6d:d0:5c:68:11:40:46:cc:7b:5c:86:80:8f:32: 4b:88:cc:d0:77:90:d3:2a:42:bf:a3:20:a1:83:0d:d0:6e:39: b6:3b:6a:0a:d7:36:7f:00:71:4f:20:fd:e1:14:0c:f1:ba:ed: b4:bb:69:ed:0c:36:e5:ba:1c:6a:8b:d5:0b:91:7a:ff:a5:42: e1:ac:06:cc:69:5f:ae:b4:63:f2:fb:30:8f:29:c2:19:16:77: 63:08:41:e7:c6:d2:0e:d2:31:cc:aa:fe:b6:c6:e1:09:f1:ed: 5c:2d:41:88:9f:61:e9:0e:7e:1c:d3:cc:ef:eb:fd:c3:ac:03: 25:b3:a6:b2:03:7a:6e:fc:d8:b8:b1:5f:e8:c7:32:07:78:ee: 56:fe:b3:f0:76:51:b3:e9:12:e2:fa:24:81:1d:2e:3f:e6:4a: e6:41:6c:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5 RTg1MjhGNDkwHhcNMjQxMTIyMjI0MTA5WhcNMjQxMTI5MjI0MTA5WjAYMRYwFAYD VQQDEw02NzQxMDg4NS1kMDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUfaUAfCSuP0WR3O14GmOoUM0lwiFQIDebmAFzcsnDwQkYrPHbR5D1gqwDyQ 5uXVW7gM0HTea/B9jiIEewfdWbsO6QENBzI2aupYxoRoaNd2Mi723aAZ2O/di+9T 0M2dtgxdXCEHu5tff0zhHDWRU3yrtzlSLT1G/+8n/8Arqf6JzjDjc4a76pmdey+5 +wF227e3KJoBFyqY6bd2FWsMOWmLnk17HebEPYWpgeR0nS5DBse/YUDw7kefY9Ll GS2RDzeLcLBnbrhlwZ9AASnGPPpf/uNIw30ri/ZhFUW/gns5Q6xWj/F/9fe+Ac8F Fw2RMZ72j2H9X3zF7Zsr7nTjgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkjd6xj y9LNjgMOCZvWNZMJCkXPMB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdFNS9EQjAwRjgwMkEwRkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3 T2RrZG8tUDZ1MUtlaFNqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBndpa5QhjjahQ49SDtUpyQx5UOrxZ2blBxs0PPp5YZWwfU7VsPIUfz 8KxToxQ9W7KX/OXt3zHmwN1YFca3mFhiEymxS1hZ2zfEmSG38jtdNkxUdt11sNYv dQ/Cx++obdBcaBFARsx7XIaAjzJLiMzQd5DTKkK/oyChgw3Qbjm2O2oK1zZ/AHFP IP3hFAzxuu20u2ntDDbluhxqi9ULkXr/pULhrAbMaV+utGPy+zCPKcIZFndjCEHn xtIO0jHMqv62xuEJ8e1cLUGIn2HpDn4c08zv6/3DrAMls6ayA3pu/Ni4sV/oxzIH eO5W/rPwdlGz6RLi+iSBHS4/5krmQWwr -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org