$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft File: 5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json) Hash identifier: G/mfJm1v35dpsOW1/h+I+OKEnfzKjkyw5f8+GYxrMXc= Subject key identifier: 5B:8C:36:8B:39:5E:E0:0A:61:50:EA:DC:61:64:60:81:EF:F5:90:68 Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F Certificate issuer: /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft Manifest number: 0598 Signing time: Fri 22 Nov 2024 22:44:59 +0000 Manifest this update: Fri 22 Nov 2024 22:44:59 +0000 Manifest next update: Fri 29 Nov 2024 22:44:59 +0000 Files and hashes: 1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: /chmBYSHmr+cIOyoRVQf2McNV79xpa9M1YeO5G9L0ps=) 2: 2496CA7E557E11EF8AC47D15C4F9AE02.roa (hash: PIT6oIMb251VM95lTdXEal0FrokTgzIUykkJbbBnksM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Validity Not Before: Nov 22 22:44:59 2024 GMT Not After : Nov 29 22:44:59 2024 GMT Subject: CN=6741096b-140c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:11:af:14:ff:0a:48:10:45:dd:bd:50:0d:ee: 19:52:93:79:e1:c5:e5:eb:6f:96:89:8d:5a:a7:dd: 99:be:ab:61:63:86:39:2b:ec:43:c5:63:f2:84:9d: fb:63:61:83:35:31:64:97:17:ca:af:58:67:47:1d: aa:0e:5d:54:cf:98:a2:52:9c:01:d0:dd:87:36:05: 47:3c:12:89:15:08:0b:46:61:8d:99:2d:14:b1:10: f5:44:51:e5:5e:50:c8:91:77:56:7e:14:6f:fa:7f: cb:1a:71:4d:6d:b1:c6:2f:a4:84:09:fb:e7:34:ca: 6e:7d:0c:03:8a:65:3e:a2:c9:78:eb:58:ba:69:38: b8:be:c4:3d:3e:bc:3b:3e:9f:ac:0f:d1:75:ea:9e: 7d:b3:86:1f:84:cd:7d:29:fd:fc:ef:b9:02:4f:98: 7e:ad:84:42:3b:51:01:76:74:a6:23:e5:38:4c:6b: cc:b7:36:8b:19:56:1f:d1:a1:49:ef:ba:29:46:32: a2:e8:a8:10:79:1c:47:23:44:54:62:2f:fa:27:0f: 24:34:d6:68:0d:c1:c6:07:43:84:ef:c1:43:29:33: c9:28:c8:ba:af:ab:7a:69:85:93:e7:5c:44:de:d4: 48:86:b8:1a:c5:4c:a6:c2:bb:68:7b:90:cf:98:17: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8C:36:8B:39:5E:E0:0A:61:50:EA:DC:61:64:60:81:EF:F5:90:68 X509v3 Authority Key Identifier: keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:aa:04:4a:9f:93:79:55:00:ce:a7:6a:5d:c8:96:69:c5:0c: 5e:07:35:72:65:10:3d:98:8c:57:c0:8f:e4:ea:38:16:7d:18: 41:44:a2:ef:23:8e:99:03:b5:fb:92:e8:29:9e:2b:be:54:1b: f8:83:b1:1b:85:34:d7:e6:31:41:c3:de:12:cb:af:17:dd:f4: 25:41:37:c1:01:b3:11:c9:5e:a4:75:f8:24:fd:a5:4a:a8:ee: d6:af:75:eb:87:12:b6:92:3a:af:7d:02:67:c1:a2:e5:e4:9b: 38:46:48:06:70:bf:26:1c:7d:43:e8:3a:47:29:90:00:f4:ed: a2:6d:b7:f8:46:09:64:ae:c0:7c:5f:ee:15:59:d9:d7:a9:79: 7a:98:9c:03:3a:2f:5c:be:8d:4f:8c:a4:9d:c0:8d:24:4f:83: 99:f1:67:2d:ee:39:c0:f8:af:6d:8e:57:1d:77:78:90:5e:5b: 02:56:e7:93:5c:04:8f:ea:1c:a0:ce:48:a4:00:fa:ae:7f:c1: d1:46:c0:67:6c:4b:5f:87:cc:1a:ab:0a:60:da:5e:dd:13:ec: d6:a4:33:df:39:8b:b6:a6:8b:f1:3e:60:ae:9d:01:50:83:e1: 4b:89:c9:42:d3:7b:ab:30:6d:a4:4c:a0:96:96:92:17:16:fe: 52:20:2b:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg2MUQxMTAvBgNVBAUTKEU2MTIzRjQ5RUFFRjY2NEMyMkY5NENENUVCQkFFQUNF RDM4N0ExNkYwHhcNMjQxMTIyMjI0NDU5WhcNMjQxMTI5MjI0NDU5WjAYMRYwFAYD VQQDEw02NzQxMDk2Yi0xNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRGvFP8KSBBF3b1QDe4ZUpN54cXl62+WiY1ap92ZvqthY4Y5K+xDxWPyhJ37 Y2GDNTFklxfKr1hnRx2qDl1Uz5iiUpwB0N2HNgVHPBKJFQgLRmGNmS0UsRD1RFHl XlDIkXdWfhRv+n/LGnFNbbHGL6SECfvnNMpufQwDimU+osl461i6aTi4vsQ9Prw7 Pp+sD9F16p59s4YfhM19Kf3877kCT5h+rYRCO1EBdnSmI+U4TGvMtzaLGVYf0aFJ 77opRjKi6KgQeRxHI0RUYi/6Jw8kNNZoDcHGB0OE78FDKTPJKMi6r6t6aYWT51xE 3tRIhrgaxUymwrtoe5DPmBeHZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuMNos5 XuAKYVDq3GFkYIHv9ZBoMB8GA1UdIwQYMBaAFOYSP0nq72ZMIvlM1eu66s7Th6Fv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODYxRC9EMjk5N0Y2MEFC RTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlprd2ktVXpWNjdycXp0T0hv VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoSV9TZXJ2Wmt3aS1VelY2N3JxenRPSG9XOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODYxRC9EMjk5N0Y2MEFCRTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlpr d2ktVXpWNjdycXp0T0hvVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMqgRKn5N5VQDOp2pdyJZpxQxeBzVyZRA9mIxXwI/k6jgWfRhBRKLv I46ZA7X7kugpniu+VBv4g7EbhTTX5jFBw94Sy68X3fQlQTfBAbMRyV6kdfgk/aVK qO7Wr3XrhxK2kjqvfQJnwaLl5Js4RkgGcL8mHH1D6DpHKZAA9O2ibbf4RglkrsB8 X+4VWdnXqXl6mJwDOi9cvo1PjKSdwI0kT4OZ8Wct7jnA+K9tjlcdd3iQXlsCVueT XASP6hygzkikAPquf8HRRsBnbEtfh8waqwpg2l7dE+zWpDPfOYu2povxPmCunQFQ g+FLiclC03urMG2kTKCWlpIXFv5SICsH -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:33 2024 by rpki-client on console-fra.rpki-client.org