$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft File: R4tJDpOd3d8hrKx4y5MZinuBRIU.mft (raw, json) Hash identifier: yzT7s48iYiu/YXroEp3u+SsIYhI1kLS7zFKx7TfP61M= Subject key identifier: EA:73:77:6F:05:A7:F5:98:1E:94:46:5F:83:E0:63:4F:F1:C6:EB:55 Authority key identifier: 47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 Certificate issuer: /CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft Manifest number: 12 Signing time: Sat 23 Nov 2024 06:00:13 +0000 Manifest this update: Sat 23 Nov 2024 06:00:12 +0000 Manifest next update: Sat 30 Nov 2024 06:00:12 +0000 Files and hashes: 1: R4tJDpOd3d8hrKx4y5MZinuBRIU.crl (hash: 0L2S2h3Sf/75RGvjnlD/XGLZRTuvbN7mNj0OSnv697Y=) 2: 534DAEB2935111EF98AA8C86C4F9AE02.roa (hash: uOl4+NzZB6fPlXrYszF0PeNPfsE4Pp9BL5TML7ATF7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Validity Not Before: Nov 23 06:00:12 2024 GMT Not After : Nov 30 06:00:12 2024 GMT Subject: CN=67416f6c-952f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:05:36:d1:4b:1f:4c:4e:c1:31:1b:58:ce: f7:84:5d:b6:48:6a:72:f8:6f:87:9b:41:37:17:0a: 64:20:73:65:50:c5:4d:60:5a:cb:ef:3e:e3:70:2f: c6:fd:f8:50:1e:0d:77:6c:3c:b3:0b:df:08:9d:ca: f2:8a:02:84:cc:15:8c:b7:ea:d6:90:d1:78:f3:1e: 86:69:53:cf:cd:4d:0e:a7:ce:05:39:38:c7:82:9f: 53:ce:d2:24:51:de:c4:3f:72:0d:42:8b:fa:92:c6: 49:f9:36:e4:e5:58:fb:d8:11:a6:ba:e1:80:48:55: 8b:a4:c7:39:ad:0d:a2:31:e6:8a:fb:a8:d4:4d:8d: 24:7a:84:be:4d:75:d2:09:12:95:4d:92:5f:99:06: 51:e9:e5:6a:53:0e:23:15:7f:f4:f4:bd:35:4b:09: e8:6f:aa:f0:63:4e:b9:48:d3:23:4f:b1:97:81:93: 10:ef:09:43:1d:43:e9:ff:8b:1b:b1:01:dc:37:b7: be:b3:05:9c:fc:11:0e:21:e1:5b:54:6b:fd:c3:8c: d6:6a:c9:6c:7f:8d:00:d0:a7:f2:69:29:b2:b7:ad: 39:6e:b2:a7:90:cd:45:a1:5d:98:e7:d6:6b:b4:9b: 68:70:13:dd:43:7b:10:bc:76:25:c4:4f:2f:22:5b: 79:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:73:77:6F:05:A7:F5:98:1E:94:46:5F:83:E0:63:4F:F1:C6:EB:55 X509v3 Authority Key Identifier: keyid:47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:72:04:45:4d:ac:ab:64:52:af:15:02:51:22:23:3a:09:75: cb:2d:fa:f9:3b:48:01:36:2b:26:d6:0a:a4:25:9b:ee:04:ab: 9b:c8:af:6a:c6:43:d5:a2:3c:dd:96:4e:b7:f2:6d:b1:12:15: 37:4e:8a:9d:d9:50:00:05:65:8b:01:15:35:12:e0:c1:9e:bc: 51:6f:7e:9d:02:2a:ab:00:e9:d1:13:f5:f6:ba:5a:bf:6f:e2: 8d:78:71:2e:8d:4f:7c:ba:5e:c7:d3:e5:34:24:51:3a:38:76: ee:b6:d0:6a:ca:9c:cc:bf:39:e9:bb:b4:43:96:5b:2c:5b:cf: 3e:88:99:70:c8:65:94:5c:70:72:2d:db:32:96:d9:60:2b:d8: b9:74:af:58:f3:62:a2:5d:69:e6:e4:d7:af:bb:61:66:c7:a6: bb:5f:9f:9d:b4:5c:7c:d7:da:eb:7a:3d:7c:cb:5d:5a:43:ca: eb:d2:52:9d:e3:4b:9e:fb:00:80:fd:f1:7c:2d:4d:c4:8a:88: a1:17:82:17:a5:1c:d7:0b:dc:af:16:2d:ce:ad:f4:69:e4:62: a7:3d:db:79:c3:be:08:9a:ac:a6:f4:c5:89:63:73:49:81:fd: f1:ef:dc:a6:0d:b9:bd:3a:a6:f6:69:88:15:aa:94:1e:9f:bf: f2:35:4c:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjdFMjExMC8GA1UEBRMoNDc4QjQ5MEU5MzlERERERjIxQUNBQzc4Q0I5MzE5OEE3 QjgxNDQ4NTAeFw0yNDExMjMwNjAwMTJaFw0yNDExMzAwNjAwMTJaMBgxFjAUBgNV BAMTDTY3NDE2ZjZjLTk1MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgNwU20UsfTE7BMRtYzveEXbZIanL4b4ebQTcXCmQgc2VQxU1gWsvvPuNwL8b9 +FAeDXdsPLML3widyvKKAoTMFYy36taQ0XjzHoZpU8/NTQ6nzgU5OMeCn1PO0iRR 3sQ/cg1Ci/qSxkn5NuTlWPvYEaa64YBIVYukxzmtDaIx5or7qNRNjSR6hL5NddIJ EpVNkl+ZBlHp5WpTDiMVf/T0vTVLCehvqvBjTrlI0yNPsZeBkxDvCUMdQ+n/ixux Adw3t76zBZz8EQ4h4VtUa/3DjNZqyWx/jQDQp/JpKbK3rTlusqeQzUWhXZjn1mu0 m2hwE91DexC8diXETy8iW3mPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6nN3bwWn 9ZgelEZfg+BjT/HG61UwHwYDVR0jBBgwFoAUR4tJDpOd3d8hrKx4y5MZinuBRIUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyN0UyLzc4M0RGQkM0OTM1 MDExRUZCQUNFMDA0Q0M0RjlBRTAyL1I0dEpEcE9kM2Q4aHJLeDR5NU1aaW51QlJJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjR0SkRwT2QzZDhockt4NHk1TVppbnVCUklVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy N0UyLzc4M0RGQkM0OTM1MDExRUZCQUNFMDA0Q0M0RjlBRTAyL1I0dEpEcE9kM2Q4 aHJLeDR5NU1aaW51QlJJVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADFyBEVNrKtkUq8VAlEiIzoJdcst+vk7SAE2KybWCqQlm+4Eq5vIr2rG Q9WiPN2WTrfybbESFTdOip3ZUAAFZYsBFTUS4MGevFFvfp0CKqsA6dET9fa6Wr9v 4o14cS6NT3y6XsfT5TQkUTo4du620GrKnMy/Oem7tEOWWyxbzz6ImXDIZZRccHIt 2zKW2WAr2Ll0r1jzYqJdaebk16+7YWbHprtfn520XHzX2ut6PXzLXVpDyuvSUp3j S577AID98XwtTcSKiKEXghelHNcL3K8WLc6t9GnkYqc923nDvgiarKb0xYljc0mB /fHv3KYNub06pvZpiBWqlB6fv/I1TCQ= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org