$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft File: b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json) Hash identifier: 1lvWBz46BBlsyChZlIoqlWv3PHZSfmyvh04A6T5Jhz0= Subject key identifier: B9:3D:36:32:FF:25:1E:4B:5A:79:69:E4:86:3A:B4:9E:BB:BE:D8:93 Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Certificate serial: 0AD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft Manifest number: 0AD0 Signing time: Fri 22 Nov 2024 19:08:43 +0000 Manifest this update: Fri 22 Nov 2024 19:08:43 +0000 Manifest next update: Fri 29 Nov 2024 19:08:43 +0000 Files and hashes: 1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: 5WyK+hL4zT0LDeFjAkq1132KqLRud+tZuGs44/Vnk1k=) 2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: Gpxpc8IRQzuHqiyk8bsF5mq9N6coqqpi1UICb22hud0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2777 (0xad9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Validity Not Before: Nov 22 19:08:43 2024 GMT Not After : Nov 29 19:08:43 2024 GMT Subject: CN=6740d6bb-33c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:2b:26:c9:72:d7:73:7f:58:63:2e:9f:73: 8e:b8:5f:7b:a3:81:7c:5e:96:de:cf:75:9d:8f:62: 08:3d:36:0e:12:86:36:ae:f9:63:06:3f:fc:54:f0: 97:3b:a7:26:a9:af:de:d6:98:82:c8:c8:4a:5b:4a: 6e:f8:50:84:81:8f:f6:e0:a6:fc:99:9f:99:88:a4: 35:ae:97:fa:a3:33:fa:eb:d1:e1:fa:e8:f7:2a:dc: af:a6:96:46:51:9c:58:9a:2b:f0:b4:b0:86:d1:e1: fc:76:60:74:e4:df:31:2a:43:fa:33:b1:de:d7:6a: 15:f3:51:ed:94:0a:60:e6:68:69:b4:ec:af:5f:fe: 46:63:f5:f1:1a:37:dc:1f:ee:55:b4:1d:28:02:18: b6:76:af:bd:c0:e2:5e:bc:ae:e5:aa:7d:fe:1d:69: 48:eb:b3:8d:7c:bd:a9:5d:81:15:9b:bb:2c:2b:14: cf:44:a5:40:62:7b:2f:65:4f:dc:c0:96:75:8e:37: 99:04:20:f5:45:0d:c2:cb:17:fa:2b:0a:ae:40:52: c1:e3:84:36:53:21:e1:37:6c:02:09:16:c2:4c:dc: 0a:ba:5d:93:e0:ca:40:8f:ad:fb:91:86:74:51:03: 9a:12:b7:e4:38:b4:38:25:15:21:59:96:a5:75:1d: b6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3D:36:32:FF:25:1E:4B:5A:79:69:E4:86:3A:B4:9E:BB:BE:D8:93 X509v3 Authority Key Identifier: keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:65:a5:e4:42:8b:9b:3f:0b:c5:d7:3b:6a:46:fd:e9:ff:f7: 39:e5:f8:97:d6:a9:a5:d2:0a:d6:5b:03:a8:bf:57:70:0c:74: a3:9b:41:b5:d9:92:15:c8:15:70:40:a5:31:f0:a7:ad:99:14: 9a:1d:5b:89:e3:4c:37:94:7c:85:f7:1e:c4:8b:3b:42:06:da: 6a:72:da:06:e5:57:03:3a:e0:b5:05:e1:63:02:c1:c8:97:e6: 8d:05:fe:00:2a:be:0d:8b:77:6f:64:1c:0e:0a:da:eb:c8:f4: 2a:98:96:22:8b:65:fd:3d:24:b3:d0:d9:22:9e:e1:11:8e:3b: 3f:0d:ee:26:8a:a7:8f:c5:8d:38:f7:9b:4d:8c:b4:b6:36:85: 1a:bf:b6:2a:a6:4b:9b:00:d0:c1:de:24:71:9e:9f:c5:9b:70: 7b:d3:d2:85:3d:0f:ba:cf:c4:33:3b:0d:36:d2:a0:2f:08:d0: bd:76:35:44:40:09:12:b8:f7:6c:b4:b9:f1:ce:a6:86:36:d6: 0d:ca:c9:c4:35:72:e8:a0:52:cf:fb:42:8d:cf:99:eb:f7:57: 23:e3:38:b8:00:fd:9c:21:f4:96:7e:83:5e:2a:b3:89:e5:f8: 9f:d2:43:3a:67:d6:8c:ce:5d:1e:6d:18:c1:84:e2:f0:6d:11: 7e:45:11:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex MEU1QjA2RUUwHhcNMjQxMTIyMTkwODQzWhcNMjQxMTI5MTkwODQzWjAYMRYwFAYD VQQDEw02NzQwZDZiYi0zM2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hUrJsly13N/WGMun3OOuF97o4F8Xpbez3Wdj2IIPTYOEoY2rvljBj/8VPCX O6cmqa/e1piCyMhKW0pu+FCEgY/24Kb8mZ+ZiKQ1rpf6ozP669Hh+uj3KtyvppZG UZxYmivwtLCG0eH8dmB05N8xKkP6M7He12oV81HtlApg5mhptOyvX/5GY/XxGjfc H+5VtB0oAhi2dq+9wOJevK7lqn3+HWlI67ONfL2pXYEVm7ssKxTPRKVAYnsvZU/c wJZ1jjeZBCD1RQ3Cyxf6KwquQFLB44Q2UyHhN2wCCRbCTNwKul2T4MpAj637kYZ0 UQOaErfkOLQ4JRUhWZaldR22LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLk9NjL/ JR5LWnlp5IY6tJ67vtiTMB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlDMi9BQjBERjRGMjNBQTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2Nh ZkN0Ni14cFZjbm9RNWJCdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXZaXkQoubPwvF1ztqRv3p//c55fiX1qml0grWWwOov1dwDHSjm0G1 2ZIVyBVwQKUx8KetmRSaHVuJ40w3lHyF9x7EiztCBtpqctoG5VcDOuC1BeFjAsHI l+aNBf4AKr4Ni3dvZBwOCtrryPQqmJYii2X9PSSz0NkinuERjjs/De4miqePxY04 95tNjLS2NoUav7YqpkubANDB3iRxnp/Fm3B709KFPQ+6z8QzOw020qAvCNC9djVE QAkSuPdstLnxzqaGNtYNysnENXLooFLP+0KNz5nr91cj4zi4AP2cIfSWfoNeKrOJ 5fif0kM6Z9aMzl0ebRjBhOLwbRF+RREU -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org