$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft File: RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft (raw, json) Hash identifier: ugehgCZkMO4rxT5zI7S945HCLzHKe5B55CyynwgMReA= Subject key identifier: 9C:42:CD:EB:A9:32:B5:05:88:A5:54:47:BC:7C:11:E4:CB:51:D1:7A Authority key identifier: 45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A Certificate issuer: /CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft Manifest number: 0123 Signing time: Sat 23 Nov 2024 02:54:19 +0000 Manifest this update: Sat 23 Nov 2024 02:54:18 +0000 Manifest next update: Sat 30 Nov 2024 02:54:18 +0000 Files and hashes: 1: RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl (hash: so/SrTlUxR9zqDDxaXbaEcI/SUbt90baIw5A77e5JOA=) 2: 68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa (hash: B9rH7xYB2+kr58NYbrhUnykfNCc6xLqTbSn0D9X3q9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A Validity Not Before: Nov 23 02:54:18 2024 GMT Not After : Nov 30 02:54:18 2024 GMT Subject: CN=674143da-2429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:58:59:03:d5:74:8b:e4:ed:43:ff:b2:7c:35: 0b:46:8f:02:b8:70:01:01:7d:44:14:83:2d:41:84: 12:35:02:e9:dd:9a:4c:d5:ff:79:4f:19:54:dd:b0: b7:24:1a:c7:e2:22:b7:73:25:b8:b9:e6:8d:21:79: 35:8e:47:c1:ea:6b:8b:0b:77:e6:f6:2f:f2:b1:99: a9:dc:94:a7:a4:f2:e1:c7:04:ff:16:6e:9f:2f:c4: 76:3f:1b:55:db:5d:81:ea:85:2d:ca:42:d0:3a:95: d2:59:cd:8f:ed:19:d7:b9:cd:d8:11:ae:9a:8a:b8: 52:bf:12:a3:46:9f:4d:2f:76:38:c1:c8:d9:41:9c: e4:11:70:de:d0:3c:cc:ce:c7:33:17:81:ae:89:b0: 4a:2d:9f:fc:25:07:7a:b8:59:55:41:e2:3f:e8:cc: eb:31:ee:cc:18:e1:3c:c2:32:0f:56:30:e6:a4:5f: 89:6b:09:c2:3b:c0:2b:cc:36:c9:d8:72:d8:8d:fe: 01:d6:08:29:2e:4c:dc:4d:4c:3d:69:91:65:43:0f: a6:00:76:5d:2f:de:7a:a4:bc:71:04:d6:34:6d:66: 24:85:3f:01:05:82:58:f9:d8:c5:a6:08:30:5a:46: a7:d9:32:b0:3c:f2:49:33:6c:bc:97:17:36:3a:3c: c0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:42:CD:EB:A9:32:B5:05:88:A5:54:47:BC:7C:11:E4:CB:51:D1:7A X509v3 Authority Key Identifier: keyid:45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:63:63:89:26:99:84:34:26:b3:d6:c0:62:59:28:15:0c:e8: 76:30:14:14:d2:ed:8a:62:a2:83:6a:6e:bb:e8:4b:59:cf:97: 1a:70:d6:72:81:9b:74:f7:ff:64:85:e6:32:06:b7:97:44:48: 71:14:14:69:e3:b2:6d:f9:7a:9e:1c:00:cb:0b:2c:39:96:b5: aa:13:b7:89:5d:61:bc:39:23:61:ae:82:1b:90:36:3b:61:8c: ea:89:9b:27:7d:1b:85:1a:f9:f6:36:22:ea:1d:38:c2:16:74: 05:46:fc:0f:dc:8f:88:91:6e:11:1a:fa:46:ee:5b:88:b4:99: 4a:e8:02:55:e2:38:50:4b:cc:67:cc:bd:ae:14:ec:3b:e8:08: 8e:fd:eb:10:17:aa:e8:3d:92:31:15:59:70:cd:01:aa:0f:2c: 90:2c:a4:3d:d1:03:9a:27:f4:7a:57:31:ca:b9:0d:a7:d6:e2: dc:da:55:27:bb:1b:c0:fe:a5:44:e1:a3:27:11:eb:52:ca:d8: a8:89:a9:da:e5:1d:ea:1b:a1:89:4c:d5:48:57:b5:ee:ab:b7: 90:31:94:d5:ce:52:8e:fb:e6:a3:30:ef:18:17:ba:64:cc:9a: b3:1b:d2:00:34:08:9d:e3:7f:8f:b3:74:88:6d:b6:87:15:f9: 5b:03:f9:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MzgxMTAvBgNVBAUTKDQ1QzlERTI1NEUyRTAzMDVENjUwQTUwQTZCRjE5MjY4 ODA3RUYxMEEwHhcNMjQxMTIzMDI1NDE4WhcNMjQxMTMwMDI1NDE4WjAYMRYwFAYD VQQDEw02NzQxNDNkYS0yNDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61hZA9V0i+TtQ/+yfDULRo8CuHABAX1EFIMtQYQSNQLp3ZpM1f95TxlU3bC3 JBrH4iK3cyW4ueaNIXk1jkfB6muLC3fm9i/ysZmp3JSnpPLhxwT/Fm6fL8R2PxtV 212B6oUtykLQOpXSWc2P7RnXuc3YEa6airhSvxKjRp9NL3Y4wcjZQZzkEXDe0DzM zsczF4GuibBKLZ/8JQd6uFlVQeI/6MzrMe7MGOE8wjIPVjDmpF+JawnCO8ArzDbJ 2HLYjf4B1ggpLkzcTUw9aZFlQw+mAHZdL956pLxxBNY0bWYkhT8BBYJY+djFpggw Wkan2TKwPPJJM2y8lxc2OjzA7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxCzeup MrUFiKVUR7x8EeTLUdF6MB8GA1UdIwQYMBaAFEXJ3iVOLgMF1lClCmvxkmiAfvEK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkzOC81MjY4NDk3MkVF MTAxMUVEOTA2NTc0MzZDNEY5QUUwMi9SY25lSlU0dUF3WFdVS1VLYV9HU2FJQi04 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjbmVKVTR1QXdYV1VLVUthX0dTYUlCLThRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkzOC81MjY4NDk3MkVFMTAxMUVEOTA2NTc0MzZDNEY5QUUwMi9SY25lSlU0dUF3 WFdVS1VLYV9HU2FJQi04UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfY2OJJpmENCaz1sBiWSgVDOh2MBQU0u2KYqKDam676EtZz5cacNZy gZt09/9kheYyBreXREhxFBRp47Jt+XqeHADLCyw5lrWqE7eJXWG8OSNhroIbkDY7 YYzqiZsnfRuFGvn2NiLqHTjCFnQFRvwP3I+IkW4RGvpG7luItJlK6AJV4jhQS8xn zL2uFOw76AiO/esQF6roPZIxFVlwzQGqDyyQLKQ90QOaJ/R6VzHKuQ2n1uLc2lUn uxvA/qVE4aMnEetSytioiana5R3qG6GJTNVIV7Xuq7eQMZTVzlKO++ajMO8YF7pk zJqzG9IANAid43+Ps3SIbbaHFflbA/n3 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org