$ rpki-client -vvf rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft File: 664fmrSVbxg0tzUpNXyfPx4SBfA.mft (raw, json) Hash identifier: b8vUp66BpiyQXRMLo4HiWhyyZR3vewKqCcerJaJRwC4= Subject key identifier: 71:3B:CA:0C:24:F6:00:64:04:08:65:04:8C:18:73:74:A7:45:E6:E6 Authority key identifier: EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 Certificate issuer: /CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft Manifest number: 0455 Signing time: Fri 22 Nov 2024 23:48:19 +0000 Manifest this update: Fri 22 Nov 2024 23:48:19 +0000 Manifest next update: Fri 29 Nov 2024 23:48:19 +0000 Files and hashes: 1: 664fmrSVbxg0tzUpNXyfPx4SBfA.crl (hash: StKTxeHX4+tu97WLIVPIoI6IB+heBYYXr9sV7JmO6PE=) 2: 42A39472C74E11ECB4AD656CC4F9AE02.roa (hash: 1V7aP/VrpDWRfbx48ExD+guKYQgGjkaPqkclj0jq9EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923E1/serialNumber=EBAE1F9AB4956F1834B73529357C9F3F1E1205F0 Validity Not Before: Nov 22 23:48:19 2024 GMT Not After : Nov 29 23:48:19 2024 GMT Subject: CN=67411843-ff67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0e:94:1e:2f:88:74:e7:2d:8f:b2:4f:1f:d5: e7:2b:72:49:5f:dd:dc:f4:cb:0c:a6:33:27:c4:eb: 15:82:46:39:69:aa:a3:7b:82:06:ec:2e:36:95:b7: 34:3b:93:12:38:1c:6f:dc:04:fe:58:6d:ab:d7:35: ab:7a:dc:19:9a:1d:54:58:12:ae:bf:b6:1e:7f:12: f3:1e:59:31:a6:9a:51:49:4b:74:be:8a:3c:c0:20: 15:e1:95:97:5f:4a:ef:01:28:b9:6b:a0:23:d2:5f: 0c:a2:70:ac:f0:9c:22:2b:c5:2a:ad:94:98:6d:63: 0f:5f:2f:0f:a2:dd:1c:38:83:e5:1d:8f:24:2f:bb: 08:d0:70:e3:9d:b3:96:de:98:7d:65:c4:73:0f:82: e0:e1:19:c0:16:e7:39:c1:a3:7c:7f:f4:c4:9c:06: a1:e1:06:e1:6c:6a:3c:26:2e:9c:6d:ab:52:0c:9d: b8:1e:f3:74:ac:ab:10:ab:66:9a:dd:cc:af:26:72: ea:45:71:07:d9:0d:2f:aa:6b:ea:45:a6:61:20:0b: be:70:e9:c6:f1:fc:fd:41:06:65:34:8b:ed:e2:da: c9:fa:c9:13:65:47:d0:ff:71:d1:46:a9:ef:45:30: 8b:cf:16:63:46:cd:47:63:f3:a4:31:00:03:7b:8f: 05:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3B:CA:0C:24:F6:00:64:04:08:65:04:8C:18:73:74:A7:45:E6:E6 X509v3 Authority Key Identifier: keyid:EB:AE:1F:9A:B4:95:6F:18:34:B7:35:29:35:7C:9F:3F:1E:12:05:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/664fmrSVbxg0tzUpNXyfPx4SBfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923E1/2AF4B374322511ECA285F341C4F9AE02/664fmrSVbxg0tzUpNXyfPx4SBfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:b6:74:b4:77:ce:34:5d:5f:55:a7:3f:a9:2e:2c:4e:f0:2b: 40:d1:6c:40:9a:4f:30:e4:ba:7e:41:63:14:8c:20:01:ac:c2: ca:b4:d0:67:62:d1:bc:b0:b9:25:36:3b:36:f4:ec:f3:c3:eb: 83:23:aa:bd:fb:f8:8b:76:7e:5d:c1:17:04:f1:3f:6c:bc:af: a1:e2:c2:ba:92:fc:81:ad:0e:a8:ac:d2:4d:59:9a:e3:ca:e3: 70:e4:bd:0c:55:83:b0:5b:6a:d3:a0:7c:6a:83:76:75:fc:6b: 71:19:80:20:fb:23:9b:9c:3c:9f:0f:7d:30:ea:ac:6b:e7:74: 07:18:eb:6c:6c:bf:d8:d4:ff:07:9f:0d:f4:7e:9a:5e:73:b7: a3:05:94:08:6b:17:a2:aa:44:96:99:ff:e0:e6:77:b0:ed:0e: f8:18:12:cd:03:7b:59:1d:81:5a:bb:71:e6:28:0c:db:cd:da: cc:18:30:49:d6:55:cd:6c:4f:62:7e:f5:ff:6f:d1:5f:92:bd: 0a:0e:42:b4:99:9b:06:5c:6a:3f:2f:9e:25:5f:ef:62:5b:62: e0:b8:11:28:20:cd:44:44:36:d8:cd:31:28:c2:d9:90:a3:1e: 3b:e4:f5:08:c8:7e:08:1f:1a:c0:b7:1e:93:1e:13:9b:2d:9d: 55:cb:9b:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzRTExMTAvBgNVBAUTKEVCQUUxRjlBQjQ5NTZGMTgzNEI3MzUyOTM1N0M5RjNG MUUxMjA1RjAwHhcNMjQxMTIyMjM0ODE5WhcNMjQxMTI5MjM0ODE5WjAYMRYwFAYD VQQDEw02NzQxMTg0My1mZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Q6UHi+IdOctj7JPH9XnK3JJX93c9MsMpjMnxOsVgkY5aaqje4IG7C42lbc0 O5MSOBxv3AT+WG2r1zWretwZmh1UWBKuv7YefxLzHlkxpppRSUt0voo8wCAV4ZWX X0rvASi5a6Aj0l8MonCs8JwiK8UqrZSYbWMPXy8Pot0cOIPlHY8kL7sI0HDjnbOW 3ph9ZcRzD4Lg4RnAFuc5waN8f/TEnAah4QbhbGo8Ji6cbatSDJ24HvN0rKsQq2aa 3cyvJnLqRXEH2Q0vqmvqRaZhIAu+cOnG8fz9QQZlNIvt4trJ+skTZUfQ/3HRRqnv RTCLzxZjRs1HY/OkMQADe48FSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHE7ygwk 9gBkBAhlBIwYc3SnRebmMB8GA1UdIwQYMBaAFOuuH5q0lW8YNLc1KTV8nz8eEgXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNFMS8yQUY0QjM3NDMy MjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4ZzB0elVwTlh5ZlB4NFNC ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY2NGZtclNWYnhnMHR6VXBOWHlmUHg0U0JmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNFMS8yQUY0QjM3NDMyMjUxMUVDQTI4NUYzNDFDNEY5QUUwMi82NjRmbXJTVmJ4 ZzB0elVwTlh5ZlB4NFNCZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEtnS0d840XV9Vpz+pLixO8CtA0WxAmk8w5Lp+QWMUjCABrMLKtNBn YtG8sLklNjs29Ozzw+uDI6q9+/iLdn5dwRcE8T9svK+h4sK6kvyBrQ6orNJNWZrj yuNw5L0MVYOwW2rToHxqg3Z1/GtxGYAg+yObnDyfD30w6qxr53QHGOtsbL/Y1P8H nw30fppec7ejBZQIaxeiqkSWmf/g5new7Q74GBLNA3tZHYFau3HmKAzbzdrMGDBJ 1lXNbE9ifvX/b9Ffkr0KDkK0mZsGXGo/L54lX+9iW2LguBEoIM1ERDbYzTEowtmQ ox475PUIyH4IHxrAtx6THhObLZ1Vy5tR -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org