$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft File: U2v43c6AJmc3j0e9SVSpC3xwCcE.mft (raw, json) Hash identifier: y/CVslepxSuh3oDJnpOdrs8wl81usn529izBskwg5ko= Subject key identifier: 06:34:44:05:21:35:B7:28:03:6B:61:6B:39:92:9D:72:00:D9:46:45 Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 Certificate issuer: /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft Manifest number: 74 Signing time: Sat 23 Nov 2024 04:48:23 +0000 Manifest this update: Sat 23 Nov 2024 04:48:22 +0000 Manifest next update: Sat 30 Nov 2024 04:48:22 +0000 Files and hashes: 1: U2v43c6AJmc3j0e9SVSpC3xwCcE.crl (hash: 412xdZUsQC4wnBhqz0v8l+OA1Qkm2FTv6oQ4bQseA7Q=) 2: D8346320F7A011EE8BE8843BC4F9AE02.roa (hash: 8W+xFxZgciOpBXooHDbzzZTklV4cRzIRaTe2EGYo2G4=) 3: FA3B5DCAF7A011EEBAC1E03BC4F9AE02.roa (hash: SiXu7T2X5Ai2mQId/ZQnSVGAYrsHoSW8pzAzpHcsuBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Validity Not Before: Nov 23 04:48:22 2024 GMT Not After : Nov 30 04:48:22 2024 GMT Subject: CN=67415e97-7780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:91:42:ed:e5:97:e7:df:97:04:86:ca:2f:1e: 9d:e9:85:f1:02:c7:e6:8a:9b:96:fe:51:7c:8b:07: f2:5a:83:5e:23:33:c5:7d:9d:c3:ae:44:8b:1b:2a: c9:d9:b1:60:82:e6:88:16:47:2a:fe:00:45:b1:36: 22:69:7f:58:80:7b:38:b3:ef:0e:28:4d:cf:37:f4: 5e:c5:52:90:d7:da:29:f3:b7:88:4e:bf:d7:c3:ba: 6f:20:02:d2:25:97:3f:eb:dd:7d:3d:f6:59:9d:37: 26:84:04:57:22:5d:21:16:85:2f:ad:2c:ac:09:2b: b8:fd:bc:7a:c6:ce:d3:69:d4:6b:7e:af:6b:5b:5a: 73:d9:2e:af:3e:ed:29:d7:35:37:e8:af:9a:34:50: f1:92:d3:05:ae:a5:42:d1:40:0f:26:bf:08:6d:76: 0b:6c:e2:0f:78:bd:a3:f0:02:3a:5f:65:54:96:77: 0b:18:f9:c0:24:d8:e3:4e:ca:e0:17:23:2a:37:df: f2:35:c2:85:3a:19:40:8a:49:c3:1a:2b:c5:86:a7: d2:22:f2:a1:13:ac:e1:88:11:b4:d4:3f:29:3a:7e: b5:8f:50:c6:fa:4d:c9:e9:80:40:3a:fc:51:f6:e2: 9f:d9:00:7e:a1:2f:97:2e:6e:05:a2:90:51:0b:11: 2b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:34:44:05:21:35:B7:28:03:6B:61:6B:39:92:9D:72:00:D9:46:45 X509v3 Authority Key Identifier: keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:9e:71:89:d0:3b:9a:5a:e7:39:97:7c:7c:42:72:01:c0:4d: 83:ab:c1:78:94:cb:04:59:71:ba:f6:c2:aa:2d:68:09:0e:de: 0c:5f:72:cd:4a:4e:cd:a9:27:55:ba:a5:50:a3:c3:d1:ac:e5: 66:14:a9:30:18:3e:70:9f:cb:79:79:62:3e:7f:9c:e4:a2:de: 2b:84:32:ed:8a:25:9c:e3:0d:92:fa:b1:2d:d9:90:a8:b4:cb: eb:f9:21:8e:85:fd:e6:f1:26:92:51:5e:22:d0:28:38:f0:e0: 56:49:a2:0c:4e:64:d2:b2:af:b7:ea:45:54:59:16:80:db:b5: 59:62:27:e9:4f:bb:30:06:4b:43:8d:4a:58:d2:ab:0e:b0:8b: d2:6e:2a:15:aa:6a:a4:1e:3e:c7:ce:f7:49:32:50:f4:05:dd: a0:dd:ed:64:55:17:f0:df:5c:80:4a:19:73:d4:16:50:da:a6: b0:0e:1c:fe:e6:ea:c6:c1:e1:5d:40:b3:f8:8d:52:51:59:4a: 44:74:f3:0c:fe:37:91:fc:af:c2:0c:c0:49:13:db:f4:56:b8: 29:0c:a0:7b:9e:2f:5e:c8:54:85:93:08:b4:63:9d:0d:ae:06: 74:80:22:c0:e9:48:4f:3c:60:80:cd:ef:0d:68:68:f8:d5:8a: 5c:cc:d3:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NTg0OTExMC8GA1UEBRMoNTM2QkY4RERDRTgwMjY2NzM3OEY0N0JENDk1NEE5MEI3 QzcwMDlDMTAeFw0yNDExMjMwNDQ4MjJaFw0yNDExMzAwNDQ4MjJaMBgxFjAUBgNV BAMTDTY3NDE1ZTk3LTc3ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCekULt5Zfn35cEhsovHp3phfECx+aKm5b+UXyLB/Jag14jM8V9ncOuRIsbKsnZ sWCC5ogWRyr+AEWxNiJpf1iAeziz7w4oTc839F7FUpDX2inzt4hOv9fDum8gAtIl lz/r3X099lmdNyaEBFciXSEWhS+tLKwJK7j9vHrGztNp1Gt+r2tbWnPZLq8+7SnX NTfor5o0UPGS0wWupULRQA8mvwhtdgts4g94vaPwAjpfZVSWdwsY+cAk2ONOyuAX Iyo33/I1woU6GUCKScMaK8WGp9Ii8qETrOGIEbTUPyk6frWPUMb6TcnpgEA6/FH2 4p/ZAH6hL5cubgWikFELESunAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBjREBSE1 tygDa2FrOZKdcgDZRkUwHwYDVR0jBBgwFoAUU2v43c6AJmc3j0e9SVSpC3xwCcEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1ODQ5L0RCQUQzODRFRjc5 RTExRUVBNDVBQUUyQ0M0RjlBRTAyL1UydjQzYzZBSm1jM2owZTlTVlNwQzN4d0Nj RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVTJ2NDNjNkFKbWMzajBlOVNWU3BDM3h3Q2NFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 ODQ5L0RCQUQzODRFRjc5RTExRUVBNDVBQUUyQ0M0RjlBRTAyL1UydjQzYzZBSm1j M2owZTlTVlNwQzN4d0NjRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADmecYnQO5pa5zmXfHxCcgHATYOrwXiUywRZcbr2wqotaAkO3gxfcs1K Ts2pJ1W6pVCjw9Gs5WYUqTAYPnCfy3l5Yj5/nOSi3iuEMu2KJZzjDZL6sS3ZkKi0 y+v5IY6F/ebxJpJRXiLQKDjw4FZJogxOZNKyr7fqRVRZFoDbtVliJ+lPuzAGS0ON SljSqw6wi9JuKhWqaqQePsfO90kyUPQF3aDd7WRVF/DfXIBKGXPUFlDaprAOHP7m 6sbB4V1As/iNUlFZSkR08wz+N5H8r8IMwEkT2/RWuCkMoHueL17IVIWTCLRjnQ2u BnSAIsDpSE88YIDN7w1oaPjVilzM03g= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org