$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft File: sejBHBQOD6dR6L-mWlnHFd1-HFM.mft (raw, json) Hash identifier: 48usuku2ix6Yyk/tC9mSRxalt/gzuBT77VBZveUZuRE= Subject key identifier: 10:AB:89:11:86:50:D5:E1:05:35:8A:F9:19:9A:96:0C:54:66:01:43 Authority key identifier: B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53 Certificate issuer: /CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft Manifest number: 5F Signing time: Sat 23 Nov 2024 05:02:20 +0000 Manifest this update: Sat 23 Nov 2024 05:02:20 +0000 Manifest next update: Sat 30 Nov 2024 05:02:20 +0000 Files and hashes: 1: sejBHBQOD6dR6L-mWlnHFd1-HFM.crl (hash: SIyRhTYzbMKOwDyf+eHhWW8WL82EApkfhI2rGSfyFY0=) 2: 4D45F08C1E3B11EFB02B0184C4F9AE02.roa (hash: +50v3mlEKF+ZCfC1CHUDd+fzqudaC4LTsu2ANTG7KU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F6/serialNumber=B1E8C11C140E0FA751E8BFA65A59C715DD7E1C53 Validity Not Before: Nov 23 05:02:20 2024 GMT Not After : Nov 30 05:02:20 2024 GMT Subject: CN=674161dc-ea54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:59:45:06:13:2b:f7:70:6a:fb:30:e5:c8: ec:7d:c5:4d:0e:ec:83:b4:e5:3a:e4:54:17:85:89: e0:f8:f1:ad:52:8f:b2:45:53:9a:ba:f8:3d:4e:7b: 8f:e6:e1:51:bb:dc:6a:3b:14:b4:14:20:cf:cc:db: 45:02:74:14:28:f5:21:f4:95:ad:c3:0c:6a:d4:6e: fb:eb:35:8b:db:27:db:8a:fc:74:2d:04:03:19:5a: e4:64:0a:72:dc:ab:ba:c9:e0:3d:de:1e:93:5c:78: c6:d7:ab:6f:ba:c4:5d:ce:36:8e:fd:bc:d2:96:3b: d4:e7:86:3f:3d:59:c2:28:79:1e:a2:28:48:ef:71: 13:ff:b6:79:a9:9d:00:c4:97:8a:68:44:af:c6:14: 72:0e:cb:cb:37:e7:b0:a3:d6:88:d3:45:8d:d9:f8: ec:90:60:6e:02:5f:1e:c6:c4:db:45:31:c0:6c:e8: d7:c9:b9:ff:2a:27:fd:96:74:90:cb:b5:d4:5a:6c: b5:0f:f0:95:3b:d5:d8:c2:f8:b6:b6:82:f8:db:37: 42:19:57:8a:e6:80:f5:7f:35:37:ae:3f:a9:c3:c0: 89:f2:f0:3a:8a:a3:ff:b7:2d:2d:f2:63:db:68:1b: ec:2b:60:c4:b8:81:5a:b1:58:09:f6:2b:42:d5:dd: 34:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AB:89:11:86:50:D5:E1:05:35:8A:F9:19:9A:96:0C:54:66:01:43 X509v3 Authority Key Identifier: keyid:B1:E8:C1:1C:14:0E:0F:A7:51:E8:BF:A6:5A:59:C7:15:DD:7E:1C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sejBHBQOD6dR6L-mWlnHFd1-HFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F6/8F23CE841D5F11EFB8374D3DC4F9AE02/sejBHBQOD6dR6L-mWlnHFd1-HFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:06:67:38:23:23:cc:85:0a:0d:8f:6f:06:43:95:a7:d4:a7: 92:8f:09:72:d9:90:bb:22:15:33:8a:fe:1e:d4:f2:09:a6:7f: b3:1c:95:e2:88:1d:d7:74:c8:0e:63:dc:e1:80:86:14:e4:0c: f3:ff:61:29:83:98:dd:43:ef:41:e3:35:df:f8:c0:8c:1d:25: cf:1b:b4:20:3f:79:94:d2:37:d5:e9:5a:9a:52:99:5e:8e:ae: b1:79:18:5a:a7:25:94:80:c9:6c:36:17:4f:0e:76:fe:34:49: 66:74:b0:a3:c2:54:38:2f:0e:f7:70:0b:d4:e3:af:a5:d4:67: b3:37:e4:9a:64:32:b9:17:53:e7:65:c0:4b:a6:e9:2b:ea:10: 35:90:16:56:d8:3e:70:c7:96:20:93:63:c7:1e:7d:d3:bd:28: d8:35:58:e6:19:eb:fb:5e:35:34:ee:ba:d8:4d:91:98:28:52: 91:31:51:1d:2d:a7:cd:a1:ee:a0:2e:fe:56:cf:c4:16:3a:55: 6f:ed:ec:b3:50:23:47:92:70:15:ca:4e:84:95:06:a3:f7:b1: 68:0b:5c:ef:35:15:9e:ca:63:33:50:7b:78:db:f9:ed:98:48: 04:26:35:62:1f:e5:75:c3:c3:d3:de:bb:4d:ca:0c:5e:78:d5: bc:92:7e:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTlGNjExMC8GA1UEBRMoQjFFOEMxMUMxNDBFMEZBNzUxRThCRkE2NUE1OUM3MTVE RDdFMUM1MzAeFw0yNDExMjMwNTAyMjBaFw0yNDExMzAwNTAyMjBaMBgxFjAUBgNV BAMTDTY3NDE2MWRjLWVhNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXKFlFBhMr93Bq+zDlyOx9xU0O7IO05TrkVBeFieD48a1Sj7JFU5q6+D1Oe4/m 4VG73Go7FLQUIM/M20UCdBQo9SH0la3DDGrUbvvrNYvbJ9uK/HQtBAMZWuRkCnLc q7rJ4D3eHpNceMbXq2+6xF3ONo79vNKWO9Tnhj89WcIoeR6iKEjvcRP/tnmpnQDE l4poRK/GFHIOy8s357Cj1ojTRY3Z+OyQYG4CXx7GxNtFMcBs6NfJuf8qJ/2WdJDL tdRabLUP8JU71djC+La2gvjbN0IZV4rmgPV/NTeuP6nDwIny8DqKo/+3LS3yY9to G+wrYMS4gVqxWAn2K0LV3TQPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEKuJEYZQ 1eEFNYr5GZqWDFRmAUMwHwYDVR0jBBgwFoAUsejBHBQOD6dR6L+mWlnHFd1+HFMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFOUY2LzhGMjNDRTg0MUQ1 RjExRUZCODM3NEQzREM0RjlBRTAyL3NlakJIQlFPRDZkUjZMLW1XbG5IRmQxLUhG TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2VqQkhCUU9ENmRSNkwtbVdsbkhGZDEtSEZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF OUY2LzhGMjNDRTg0MUQ1RjExRUZCODM3NEQzREM0RjlBRTAyL3NlakJIQlFPRDZk UjZMLW1XbG5IRmQxLUhGTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABMGZzgjI8yFCg2PbwZDlafUp5KPCXLZkLsiFTOK/h7U8gmmf7McleKI Hdd0yA5j3OGAhhTkDPP/YSmDmN1D70HjNd/4wIwdJc8btCA/eZTSN9XpWppSmV6O rrF5GFqnJZSAyWw2F08Odv40SWZ0sKPCVDgvDvdwC9Tjr6XUZ7M35JpkMrkXU+dl wEum6SvqEDWQFlbYPnDHliCTY8cefdO9KNg1WOYZ6/teNTTuuthNkZgoUpExUR0t p82h7qAu/lbPxBY6VW/t7LNQI0eScBXKToSVBqP3sWgLXO81FZ7KYzNQe3jb+e2Y SAQmNWIf5XXDw9Peu03KDF541bySfvY= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org