$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft File: b2FOWP6Tat901zb1OS3tX9FrdYc.mft (raw, json) Hash identifier: 6iSPMF+WLCSCjk6YSKwigUkgh3/30AKU0IywvJW3+Ck= Subject key identifier: 17:94:4F:E3:81:B3:80:52:5C:57:92:65:9D:5C:E3:E4:75:D7:68:89 Authority key identifier: 6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87 Certificate issuer: /CN=A91A9B3C/serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587 Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft Manifest number: 05F4 Signing time: Fri 22 Nov 2024 22:22:13 +0000 Manifest this update: Fri 22 Nov 2024 22:22:13 +0000 Manifest next update: Fri 29 Nov 2024 22:22:13 +0000 Files and hashes: 1: b2FOWP6Tat901zb1OS3tX9FrdYc.crl (hash: WhplD35EhUAlqR3LoSQ8GSh0Eoiuosg6g2zcIcQZX/0=) 2: 00D8BE5286FC11EB8A95642DC4F9AE02.roa (hash: 4KhK9kqJTGDPAJOYCa4lEtI9t9APEbxN6UmdidYEYgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3C/serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587 Validity Not Before: Nov 22 22:22:13 2024 GMT Not After : Nov 29 22:22:13 2024 GMT Subject: CN=67410415-9359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:25:bc:bf:63:9e:fe:0d:99:95:89:22:0b: de:49:fe:ea:cf:5f:b7:fa:11:c7:e5:d1:10:36:07: 65:ae:67:89:d1:c9:32:27:85:b8:dc:2c:10:ab:90: af:60:4d:9c:e5:a3:61:09:ba:62:2c:a6:82:65:c4: ff:50:f6:f4:14:37:df:ac:a6:b1:34:45:62:8b:af: ac:54:ea:66:39:4f:1c:7c:7c:0c:4a:7a:29:22:73: 05:d1:5e:09:b0:9c:fa:94:12:66:c1:61:b2:41:00: 5c:7f:af:33:25:33:a4:b7:99:08:15:57:9f:3a:8d: 78:19:3c:c3:9a:a0:2c:13:64:d7:d2:85:1e:61:f3: 40:00:c8:4f:4f:70:1e:ac:09:e5:55:43:d1:6e:78: f1:82:48:e3:a9:47:ca:9b:dc:09:99:04:f1:f7:d9: 0d:6f:7c:79:27:d4:5b:69:34:d1:09:36:f0:8e:95: 1c:8a:70:58:66:98:b6:2d:b0:ca:6f:03:c8:2a:d8: 69:b6:80:82:fc:42:60:63:81:a6:c8:c2:a9:7a:32: a0:86:94:e8:c8:fe:71:fd:45:6e:4a:f2:49:56:9d: c9:80:36:4f:cd:9e:11:74:74:ef:43:64:c9:f0:7d: 8b:5a:00:72:1c:9e:f9:fa:7c:df:2d:13:8a:ff:5b: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:94:4F:E3:81:B3:80:52:5C:57:92:65:9D:5C:E3:E4:75:D7:68:89 X509v3 Authority Key Identifier: keyid:6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:ed:cc:5b:0d:98:4a:14:fc:25:a6:59:18:e9:4a:87:05:4a: ff:b1:86:81:ac:13:b0:df:2d:40:71:7a:93:82:55:be:ce:9a: 81:a9:fd:c9:ba:22:c4:bd:91:a1:b6:04:61:d0:58:2f:44:49: 4f:12:14:6c:3d:21:e2:22:ee:b7:fb:9d:f5:0d:78:86:13:8a: 22:8b:51:d8:5b:d5:e4:a6:e3:af:fd:2a:64:c1:c4:5c:7e:12: e2:50:c4:79:b0:39:d9:31:8d:a0:a4:65:08:07:cc:4e:38:75: 4c:c6:18:4a:74:e8:b5:96:b2:62:39:00:2c:54:f3:cb:77:3c: bf:9c:b2:90:a7:d6:5a:fb:87:e0:40:e2:56:ac:72:13:b5:c9: 98:27:29:e9:8a:7a:32:46:1a:9b:12:2d:1a:3f:5f:65:25:9e: b1:ae:04:cb:54:4a:3f:1a:e9:96:5c:14:e9:4f:2e:51:75:4d: a0:e7:85:24:c2:aa:e1:ff:89:27:9c:d3:99:d7:53:72:3b:f8: cf:4a:e3:ec:31:a3:80:4e:ab:83:83:91:95:ff:f6:b5:0a:f8: b5:b8:e2:31:f6:fb:9e:ae:10:a5:b7:8f:4c:f7:48:9b:95:05: f5:4f:4e:ce:c6:f8:11:b7:01:49:2d:d0:64:74:a8:26:38:41: 74:ac:53:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0MxMTAvBgNVBAUTKDZGNjE0RTU4RkU5MzZBREY3NEQ3MzZGNTM5MkRFRDVG RDE2Qjc1ODcwHhcNMjQxMTIyMjIyMjEzWhcNMjQxMTI5MjIyMjEzWjAYMRYwFAYD VQQDEw02NzQxMDQxNS05MzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rUlvL9jnv4NmZWJIgveSf7qz1+3+hHH5dEQNgdlrmeJ0ckyJ4W43CwQq5Cv YE2c5aNhCbpiLKaCZcT/UPb0FDffrKaxNEVii6+sVOpmOU8cfHwMSnopInMF0V4J sJz6lBJmwWGyQQBcf68zJTOkt5kIFVefOo14GTzDmqAsE2TX0oUeYfNAAMhPT3Ae rAnlVUPRbnjxgkjjqUfKm9wJmQTx99kNb3x5J9RbaTTRCTbwjpUcinBYZpi2LbDK bwPIKthptoCC/EJgY4GmyMKpejKghpToyP5x/UVuSvJJVp3JgDZPzZ4RdHTvQ2TJ 8H2LWgByHJ75+nzfLROK/1uvtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeUT+OB s4BSXFeSZZ1c4+R112iJMB8GA1UdIwQYMBaAFG9hTlj+k2rfdNc29Tkt7V/Ra3WH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzQy8zRjMzNjJEQTg2 RkExMUVCQjNDN0JCMjlDNEY5QUUwMi9iMkZPV1A2VGF0OTAxemIxT1MzdFg5RnJk WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyRk9XUDZUYXQ5MDF6YjFPUzN0WDlGcmRZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzQy8zRjMzNjJEQTg2RkExMUVCQjNDN0JCMjlDNEY5QUUwMi9iMkZPV1A2VGF0 OTAxemIxT1MzdFg5RnJkWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi7cxbDZhKFPwlplkY6UqHBUr/sYaBrBOw3y1AcXqTglW+zpqBqf3J uiLEvZGhtgRh0FgvRElPEhRsPSHiIu63+531DXiGE4oii1HYW9XkpuOv/SpkwcRc fhLiUMR5sDnZMY2gpGUIB8xOOHVMxhhKdOi1lrJiOQAsVPPLdzy/nLKQp9Za+4fg QOJWrHITtcmYJynpinoyRhqbEi0aP19lJZ6xrgTLVEo/GumWXBTpTy5RdU2g54Uk wqrh/4knnNOZ11NyO/jPSuPsMaOATquDg5GV//a1Cvi1uOIx9vuerhClt49M90ib lQX1T07OxvgRtwFJLdBkdKgmOEF0rFOM -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:32 2024 by rpki-client on console-fra.rpki-client.org