$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json) Hash identifier: DgAKu9FrveZ2MYEFe4dBXIB5foewaQHPaIoeZZN+o8Y= Subject key identifier: BE:44:C4:E7:62:51:34:DD:69:32:0A:34:70:3C:84:2B:B2:F6:2E:36 Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft Manifest number: 0116 Signing time: Sat 23 Nov 2024 03:04:43 +0000 Manifest this update: Sat 23 Nov 2024 03:04:43 +0000 Manifest next update: Sat 30 Nov 2024 03:04:43 +0000 Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: ZThfaWkz6SwAvQG1ixZL8nvUX2+gK2t6GmuTnzpuUaY=) 2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: ZHAMruYyeptNNpeohfIoYoif7sb87BSzSS5PG7gezGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504 Validity Not Before: Nov 23 03:04:43 2024 GMT Not After : Nov 30 03:04:43 2024 GMT Subject: CN=6741464b-d31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:2d:17:65:fb:07:77:45:bb:df:6c:68:32: f6:2e:df:5a:2d:a4:47:a0:0b:a7:34:3e:4f:a1:20: 41:c1:5a:c6:88:a2:20:f8:fc:64:9b:11:2d:e5:b3: 9b:b8:ec:2b:27:14:dd:4d:39:90:49:66:17:64:d3: 2a:dd:12:67:a6:8b:c5:65:dc:c5:7c:45:fb:74:1a: e7:a0:f8:1b:71:64:1f:05:c6:32:73:33:ee:5d:7f: 1b:60:e3:dc:d6:2c:cf:75:7a:a0:48:88:6e:f8:3d: a8:5c:d8:bd:d8:ca:a4:71:3c:17:ce:c5:80:a5:cf: 89:fc:57:0a:41:93:14:5d:22:f8:a0:0e:7b:84:49: 7f:c8:66:d5:09:ae:20:c4:60:51:f3:19:aa:34:be: d7:4f:26:e6:3d:a5:47:e9:8d:53:c2:6e:39:40:b9: ad:4f:02:1a:a5:89:b3:34:00:92:65:a3:5c:c7:18: dd:18:8b:c7:e3:fe:e4:b3:09:10:a7:79:eb:2d:10: 51:b9:67:61:83:74:d8:e2:28:17:6a:c2:15:65:1d: 6d:32:c0:ba:f9:cd:44:bd:67:62:b4:36:42:83:a7: 8d:db:03:9d:49:94:de:63:ad:8e:c6:b6:b9:e3:71: 8f:b0:05:0e:d4:0d:5f:24:8d:1d:70:ab:3e:d0:bc: dd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:44:C4:E7:62:51:34:DD:69:32:0A:34:70:3C:84:2B:B2:F6:2E:36 X509v3 Authority Key Identifier: keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:93:d5:49:5a:aa:5e:12:8b:a6:7c:3a:b4:c8:f0:75:7c:2c: ac:61:52:8e:b0:dd:5e:f4:9b:4b:8d:e2:d2:00:f3:f0:31:c8: 41:a6:f7:54:ec:b9:2f:d3:f3:09:45:aa:84:97:bd:a5:6c:4f: c1:b5:08:98:66:6a:de:be:a1:f5:c4:f8:8a:ed:93:ae:e2:8c: 68:52:d0:79:0e:93:cd:36:26:84:b4:03:43:11:b0:42:a9:9b: 23:99:d7:07:6f:44:33:55:e8:36:23:1e:89:07:58:6f:99:72: c9:d5:0f:5c:3e:42:da:8f:f9:4b:7d:b9:e0:8b:36:6a:4a:8f: a3:68:f6:d5:f7:70:78:eb:a1:4d:e2:ef:35:42:6f:dc:0a:4b: 39:0e:71:65:34:35:81:aa:d0:d9:22:48:e8:71:54:ab:89:42: ca:61:de:6f:70:41:8a:0d:d4:22:78:13:d9:9c:f6:ca:11:dc: 12:76:20:df:c7:d8:8c:d9:2a:de:a8:9e:af:11:65:6d:68:f2: fd:f9:e9:25:78:5b:4a:e3:f0:f3:4a:7b:ef:80:ac:a7:3d:02: c1:35:6a:82:ef:d1:06:82:d6:1b:e3:0d:79:02:ef:c4:97:d3: 15:65:ba:cb:61:7d:40:6f:27:04:71:1f:e1:9c:47:9d:12:b4: 25:e1:c2:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxOTcxMTAvBgNVBAUTKEI3RkU2QTQyNERCNTY1MjYxQjQ3M0E3MTIzMUQ1OUUy MThEQzQ1MDQwHhcNMjQxMTIzMDMwNDQzWhcNMjQxMTMwMDMwNDQzWjAYMRYwFAYD VQQDEw02NzQxNDY0Yi1kMzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTctF2X7B3dFu99saDL2Lt9aLaRHoAunND5PoSBBwVrGiKIg+PxkmxEt5bOb uOwrJxTdTTmQSWYXZNMq3RJnpovFZdzFfEX7dBrnoPgbcWQfBcYyczPuXX8bYOPc 1izPdXqgSIhu+D2oXNi92MqkcTwXzsWApc+J/FcKQZMUXSL4oA57hEl/yGbVCa4g xGBR8xmqNL7XTybmPaVH6Y1Twm45QLmtTwIapYmzNACSZaNcxxjdGIvH4/7kswkQ p3nrLRBRuWdhg3TY4igXasIVZR1tMsC6+c1EvWditDZCg6eN2wOdSZTeY62Oxra5 43GPsAUO1A1fJI0dcKs+0LzdwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5ExOdi UTTdaTIKNHA8hCuy9i42MB8GA1UdIwQYMBaAFLf+akJNtWUmG0c6cSMdWeIY3EUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTE5Ny80RjNDNzk4QTA2 OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpTWWJSenB4SXgxWjRoamNS UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfNXFRazIxWlNZYlJ6cHhJeDFaNGhqY1JRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTE5Ny80RjNDNzk4QTA2OUQxMUVFQjg3OThEMTRDNEY5QUUwMi90XzVxUWsyMVpT WWJSenB4SXgxWjRoamNSUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUk9VJWqpeEoumfDq0yPB1fCysYVKOsN1e9JtLjeLSAPPwMchBpvdU 7Lkv0/MJRaqEl72lbE/BtQiYZmrevqH1xPiK7ZOu4oxoUtB5DpPNNiaEtANDEbBC qZsjmdcHb0QzVeg2Ix6JB1hvmXLJ1Q9cPkLaj/lLfbngizZqSo+jaPbV93B466FN 4u81Qm/cCks5DnFlNDWBqtDZIkjocVSriULKYd5vcEGKDdQieBPZnPbKEdwSdiDf x9iM2SreqJ6vEWVtaPL9+ekleFtK4/DzSnvvgKynPQLBNWqC79EGgtYb4w15Au/E l9MVZbrLYX1AbycEcR/hnEedErQl4cKx -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org