$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json) Hash identifier: xtSxHpPHKRUs93aGHsPvhkhTgyOCE/hM1FVx7EzJrS0= Subject key identifier: 16:35:31:F2:8A:27:C5:8F:2C:6A:48:7F:7A:D8:70:7E:D6:78:03:2B Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft Manifest number: 07 Signing time: Sat 23 Nov 2024 06:05:54 +0000 Manifest this update: Sat 23 Nov 2024 06:05:54 +0000 Manifest next update: Sat 30 Nov 2024 06:05:54 +0000 Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: Ulo+ijSAGupIPST/wfb/CCu/SAT63ybWnMu1dumi/rs=) 2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: 03/IZSSaWCkjD0t5R6IQf4NgtsFNdSzPU+q4DaqUlgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Validity Not Before: Nov 23 06:05:54 2024 GMT Not After : Nov 30 06:05:54 2024 GMT Subject: CN=674170c2-686b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bd:80:df:c5:cc:22:39:4f:05:60:7e:61:2d: 35:4a:bd:a7:04:7b:a4:9e:b3:8b:a9:cd:81:4d:35: ca:24:13:19:c3:2b:36:78:da:21:fa:6f:91:69:c7: 6a:fe:30:a5:2c:9d:05:85:ab:16:31:bf:da:ea:9a: 0d:0d:03:46:1c:9f:62:59:81:4d:71:75:51:a7:01: dc:4d:33:62:2e:00:6e:09:0d:44:3b:df:30:3c:3e: 0a:ab:e0:65:04:fa:ff:43:98:58:78:e5:22:bb:58: 57:9a:c7:33:7b:90:43:77:9f:1a:fb:b3:47:0e:49: 7b:c0:fc:09:5c:94:76:8f:76:8a:07:35:a2:06:c6: 36:66:a5:0a:43:f3:af:31:c4:33:ce:ee:b8:48:4a: 6e:89:97:94:dd:3a:24:ec:f5:9e:55:6b:dd:00:95: c7:2b:ba:32:53:15:88:93:c9:c4:28:c9:e2:47:dc: 2b:12:75:4a:d8:b7:fa:37:7a:fc:75:50:8a:96:89: f0:ca:c5:a4:4b:ec:c7:25:80:72:e3:5a:ac:9f:15: db:25:d9:ba:12:54:f5:43:b0:50:30:71:c5:78:9c: 64:a6:30:75:d3:34:d1:d7:91:43:f3:93:ba:0f:b6: fc:18:32:ca:5a:39:d3:03:73:86:83:f0:c0:14:90: e4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:35:31:F2:8A:27:C5:8F:2C:6A:48:7F:7A:D8:70:7E:D6:78:03:2B X509v3 Authority Key Identifier: keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d5:ef:80:eb:80:38:d1:2d:38:e6:4d:77:e3:56:10:11:5a: 9f:28:ef:66:af:8f:5f:47:d7:99:c3:91:03:1c:16:41:dd:38: 80:aa:ec:86:65:01:12:22:66:45:88:6a:00:48:30:80:8b:5c: ff:57:51:ab:30:03:3c:1b:31:36:14:c5:94:d9:59:67:f3:f1: 21:2f:b3:32:2d:a6:6d:db:13:58:d9:0e:31:80:71:6f:d1:13: 14:da:75:98:21:da:a5:4b:49:19:a5:24:ca:db:9a:7d:71:f6: 5c:15:e2:5a:01:d8:8c:45:79:4d:14:d6:73:37:2c:c7:ea:e8: 4d:6b:87:3a:f2:88:5d:16:cc:f3:92:55:30:7f:d4:31:ae:8b: c6:c7:33:d7:82:4c:5b:e4:93:a5:18:4c:a2:27:8e:05:51:fc: c0:2e:0b:76:58:c1:0e:1d:57:77:91:ee:bb:8c:0d:a4:00:f0: 02:17:01:4e:7d:c0:49:0a:2a:a0:35:75:52:5f:98:ff:c8:03: b2:bb:88:8e:56:ef:ec:f6:d8:b1:7f:dd:08:61:8e:29:28:4a: 7f:cd:e2:28:96:a7:76:98:ad:c3:4b:6d:db:e6:19:93:94:39: ad:db:b9:a5:7a:1b:22:0f:d5:d6:6c:9e:e0:d1:ba:22:96:1c: fc:45:ae:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MzdGRDExMC8GA1UEBRMoMEFDRTZGNkFBNkEzRkFFMjdBMDg1QzdBMTI3RjlCQzk5 NDI0NTIxNDAeFw0yNDExMjMwNjA1NTRaFw0yNDExMzAwNjA1NTRaMBgxFjAUBgNV BAMTDTY3NDE3MGMyLTY4NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVvYDfxcwiOU8FYH5hLTVKvacEe6Ses4upzYFNNcokExnDKzZ42iH6b5Fpx2r+ MKUsnQWFqxYxv9rqmg0NA0Ycn2JZgU1xdVGnAdxNM2IuAG4JDUQ73zA8Pgqr4GUE +v9DmFh45SK7WFeaxzN7kEN3nxr7s0cOSXvA/AlclHaPdooHNaIGxjZmpQpD868x xDPO7rhISm6Jl5TdOiTs9Z5Va90AlccrujJTFYiTycQoyeJH3CsSdUrYt/o3evx1 UIqWifDKxaRL7MclgHLjWqyfFdsl2boSVPVDsFAwccV4nGSmMHXTNNHXkUPzk7oP tvwYMspaOdMDc4aD8MAUkOSXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFjUx8oon xY8sakh/ethwftZ4AyswHwYDVR0jBBgwFoAUCs5vaqaj+uJ6CFx6En+byZQkUhQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzN0ZEL0UyNDVCNUIyQTE1 QTExRUZBMUVDMkI1RkM0RjlBRTAyL0NzNXZhcWFqLXVKNkNGeDZFbi1ieVpRa1Vo US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3M1dmFxYWotdUo2Q0Z4NkVuLWJ5WlFrVWhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYz N0ZEL0UyNDVCNUIyQTE1QTExRUZBMUVDMkI1RkM0RjlBRTAyL0NzNXZhcWFqLXVK NkNGeDZFbi1ieVpRa1VoUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ7V74DrgDjRLTjmTXfjVhARWp8o72avj19H15nDkQMcFkHdOICq7IZl ARIiZkWIagBIMICLXP9XUaswAzwbMTYUxZTZWWfz8SEvszItpm3bE1jZDjGAcW/R ExTadZgh2qVLSRmlJMrbmn1x9lwV4loB2IxFeU0U1nM3LMfq6E1rhzryiF0WzPOS VTB/1DGui8bHM9eCTFvkk6UYTKInjgVR/MAuC3ZYwQ4dV3eR7ruMDaQA8AIXAU59 wEkKKqA1dVJfmP/IA7K7iI5W7+z22LF/3QhhjikoSn/N4iiWp3aYrcNLbdvmGZOU Oa3buaV6GyIP1dZsnuDRuiKWHPxFruU= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org