$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft File: 5-kErSYVSeMdvVn0azB0xr-m2rI.mft (raw, json) Hash identifier: Tx4PDoEdN0Gjhm/3Vemlyuqr4YYoHrG9DGHmqc7Q8aM= Subject key identifier: F6:C6:3F:61:AA:6C:E2:B8:C9:F1:F4:49:78:01:49:B4:AF:37:D7:87 Authority key identifier: E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2 Certificate issuer: /CN=A9148E9A/serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft Manifest number: 013E Signing time: Sat 23 Nov 2024 02:39:03 +0000 Manifest this update: Sat 23 Nov 2024 02:39:02 +0000 Manifest next update: Sat 30 Nov 2024 02:39:02 +0000 Files and hashes: 1: 5-kErSYVSeMdvVn0azB0xr-m2rI.crl (hash: uBlyJYl6Q4c9C8bfcNNPeVOlS/dWK5AdgK0RXWQH56U=) 2: 20BD79FAC17A11ED8F7A315FC4F9AE02.roa (hash: FtelNB9mh9rm/DPnO36fMVkGjRmD3W2CCA0ojbvk/CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.crl rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E9A/serialNumber=E7E904AD261549E31DBD59F46B3074C6BFA6DAB2 Validity Not Before: Nov 23 02:39:02 2024 GMT Not After : Nov 30 02:39:02 2024 GMT Subject: CN=67414046-6db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:92:70:b5:50:35:07:88:9e:33:e9:7c:cb: 5d:fc:49:76:a4:c9:58:be:a9:b7:f8:5b:16:15:6a: 8a:5b:f1:e9:14:f2:ed:97:dc:d0:cb:06:9a:29:d6: a0:92:9f:8b:9e:f7:28:90:82:3f:ba:b8:d8:dd:b2: 6c:c7:0b:8c:46:76:7e:1d:4c:11:d0:90:5c:da:df: 1d:02:af:99:f4:ea:7c:e8:7d:d8:93:4f:ae:bd:26: 1c:ff:4c:2c:8c:72:b9:c4:20:8b:27:97:c9:53:cb: e0:5a:ca:29:8c:1d:ac:34:c6:10:21:9e:47:4c:e0: 1c:14:81:34:40:32:22:ef:d6:59:ed:71:8a:99:43: 39:88:04:a4:66:e5:16:7e:98:55:68:3c:6e:08:88: aa:7b:28:a1:fa:2e:25:c7:00:b6:95:eb:0c:1c:e7: d5:8a:55:58:b1:a6:d8:12:f6:aa:4c:54:6c:0d:4d: 43:05:4e:9d:f7:18:c7:fe:84:40:43:b4:5f:30:9b: 51:10:22:f7:c8:27:1a:51:e7:50:a8:13:75:3c:bb: d5:d6:15:b0:64:41:b2:53:51:db:83:82:f4:8a:34: 2d:e2:9a:fe:b4:3c:07:41:f3:d4:5a:61:a8:da:23: 7d:34:d7:ed:10:ad:72:90:14:e6:d8:d3:e2:51:bd: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C6:3F:61:AA:6C:E2:B8:C9:F1:F4:49:78:01:49:B4:AF:37:D7:87 X509v3 Authority Key Identifier: keyid:E7:E9:04:AD:26:15:49:E3:1D:BD:59:F4:6B:30:74:C6:BF:A6:DA:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5-kErSYVSeMdvVn0azB0xr-m2rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E9A/03F47D8AC17711EDA039F22FC4F9AE02/5-kErSYVSeMdvVn0azB0xr-m2rI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:d6:c7:fe:c9:64:0c:02:d5:34:5e:07:38:94:91:41:b4:bb: 81:c1:e1:31:93:b5:6a:60:59:2f:90:0c:9b:07:01:ff:42:be: a7:ff:59:55:57:21:1f:ff:4e:28:b5:11:97:22:bc:ae:66:7d: c5:f0:1b:b9:61:80:ba:2a:66:8d:56:b6:ee:a0:ab:e7:de:52: fc:5d:4f:44:58:6d:e2:8d:9a:87:04:ef:13:ef:1b:43:c5:66: 0c:6b:d9:32:b7:60:8a:db:01:1e:f8:a8:48:17:da:a3:77:76: a7:87:d9:48:97:e9:50:17:02:d2:68:2b:1d:a0:03:c6:2d:0d: 99:b2:68:aa:32:84:5e:7c:9f:12:18:4e:b4:ad:22:bb:92:23: 32:ec:4e:d3:37:69:b2:fd:0b:c3:ae:05:2a:59:cb:77:7a:b3: d6:99:ae:5b:1d:7c:b5:dc:d5:36:c4:85:be:61:3c:d2:4e:23: ca:20:4f:f6:2c:7f:69:48:bd:97:d3:9b:bd:f8:45:e1:88:1e: 8b:5b:5a:36:06:cf:95:5d:88:c8:bf:ae:46:f4:05:f5:8f:c6: 38:df:c6:c3:df:51:66:61:c2:d8:5b:42:42:2e:be:dc:ca:e3: 40:ed:e6:8e:ed:ab:83:13:17:20:9e:41:f2:69:73:95:cf:a5: 74:b6:4d:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFOUExMTAvBgNVBAUTKEU3RTkwNEFEMjYxNTQ5RTMxREJENTlGNDZCMzA3NEM2 QkZBNkRBQjIwHhcNMjQxMTIzMDIzOTAyWhcNMjQxMTMwMDIzOTAyWjAYMRYwFAYD VQQDEw02NzQxNDA0Ni02ZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOOScLVQNQeInjPpfMtd/El2pMlYvqm3+FsWFWqKW/HpFPLtl9zQywaaKdag kp+LnvcokII/urjY3bJsxwuMRnZ+HUwR0JBc2t8dAq+Z9Op86H3Yk0+uvSYc/0ws jHK5xCCLJ5fJU8vgWsopjB2sNMYQIZ5HTOAcFIE0QDIi79ZZ7XGKmUM5iASkZuUW fphVaDxuCIiqeyih+i4lxwC2lesMHOfVilVYsabYEvaqTFRsDU1DBU6d9xjH/oRA Q7RfMJtRECL3yCcaUedQqBN1PLvV1hWwZEGyU1Hbg4L0ijQt4pr+tDwHQfPUWmGo 2iN9NNftEK1ykBTm2NPiUb2TBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbGP2Gq bOK4yfH0SXgBSbSvN9eHMB8GA1UdIwQYMBaAFOfpBK0mFUnjHb1Z9GswdMa/ptqy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU5QS8wM0Y0N0Q4QUMx NzcxMUVEQTAzOUYyMkZDNEY5QUUwMi81LWtFclNZVlNlTWR2Vm4wYXpCMHhyLW0y ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUta0VyU1lWU2VNZHZWbjBhekIweHItbTJySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU5QS8wM0Y0N0Q4QUMxNzcxMUVEQTAzOUYyMkZDNEY5QUUwMi81LWtFclNZVlNl TWR2Vm4wYXpCMHhyLW0yckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh1sf+yWQMAtU0Xgc4lJFBtLuBweExk7VqYFkvkAybBwH/Qr6n/1lV VyEf/04otRGXIryuZn3F8Bu5YYC6KmaNVrbuoKvn3lL8XU9EWG3ijZqHBO8T7xtD xWYMa9kyt2CK2wEe+KhIF9qjd3anh9lIl+lQFwLSaCsdoAPGLQ2ZsmiqMoRefJ8S GE60rSK7kiMy7E7TN2my/QvDrgUqWct3erPWma5bHXy13NU2xIW+YTzSTiPKIE/2 LH9pSL2X05u9+EXhiB6LW1o2Bs+VXYjIv65G9AX1j8Y438bD31FmYcLYW0JCLr7c yuNA7eaO7auDExcgnkHyaXOVz6V0tk0m -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org