$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft File: 0q268NfVLLlNShOXizIFO833eg8.mft (raw, json) Hash identifier: /cENOMGkJjq8DBd4HmfBjp3X5YRJ2J6g6BbV+O8kqhM= Subject key identifier: 0E:2A:65:BE:9E:EA:17:74:BB:C4:BB:4D:0E:E0:E1:B9:06:D2:DE:D0 Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F Certificate issuer: /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft Manifest number: CE Signing time: Sat 23 Nov 2024 03:49:13 +0000 Manifest this update: Sat 23 Nov 2024 03:49:12 +0000 Manifest next update: Sat 30 Nov 2024 03:49:12 +0000 Files and hashes: 1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: CX/2Zbmz7KdxpDWXLr8/rh1F1klOCjuGwGh6vzJyJC0=) 2: EBF0BAF86EF711EE821C4538C4F9AE02.roa (hash: SRfPwkdW8J3KzSSInHGn0eT98LHGl310oQZHm49vXRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F Validity Not Before: Nov 23 03:49:12 2024 GMT Not After : Nov 30 03:49:12 2024 GMT Subject: CN=674150b8-2a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:0e:68:17:ae:b1:5d:77:a0:69:9c:db:57: e9:44:bb:65:c7:62:ba:42:44:06:5d:ea:ad:c4:7f: ce:dc:92:17:46:25:40:79:80:65:fa:0b:cf:ac:6b: 37:e4:21:64:4f:86:ab:75:49:82:4d:f1:12:20:2c: 3d:7a:46:13:29:52:54:77:f0:c0:19:34:97:8e:e3: 5a:6c:95:b3:50:6c:e6:6a:b2:1f:04:93:50:a1:de: eb:3f:9d:29:68:8e:8c:76:92:62:36:ef:2b:da:47: 69:5f:b0:d8:92:62:c4:5e:62:b6:00:c3:a5:89:90: ba:88:2c:b8:d5:7f:f4:32:ad:6b:75:4c:a0:61:73: 79:30:8f:e0:bd:de:54:a5:dd:d3:d3:25:77:e8:4e: 83:60:39:5e:6f:fb:bd:7b:88:7c:bb:5c:a1:fd:b0: 1a:7a:8a:de:d7:92:06:8d:4e:e4:7c:67:73:fb:ea: 4e:3a:49:8d:b5:8f:9d:eb:ca:bf:c0:7d:06:4b:1e: 06:24:bb:63:dd:7a:11:38:24:fb:d7:d7:0d:b3:99: 40:c5:6f:52:57:82:ec:2c:b7:32:97:fc:e8:67:c3: 28:0d:c9:04:f1:8a:39:86:f5:ce:ef:a5:72:50:45: 87:b0:ea:91:44:7c:d7:f9:42:9c:8a:90:9c:12:34: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2A:65:BE:9E:EA:17:74:BB:C4:BB:4D:0E:E0:E1:B9:06:D2:DE:D0 X509v3 Authority Key Identifier: keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:db:79:c3:04:07:1e:bf:e0:9e:3c:03:5d:c1:b9:49:8e:7d: 37:73:78:8d:d3:35:08:c6:a1:4b:b9:b6:5a:16:0f:f8:ac:8a: 98:f7:20:f5:11:84:d1:cc:22:9e:f6:55:1a:0f:3c:ad:80:80: 03:8d:9d:c0:bf:2d:c1:ab:f8:44:69:9e:89:db:39:0d:a3:16: 93:fd:af:7a:2f:9d:64:85:4f:d7:07:b7:e4:6f:c1:1e:17:2f: 01:b5:ca:3b:e3:65:83:81:2a:8e:79:24:fd:c2:d7:bf:fc:9b: 60:1e:d7:56:3e:94:1d:ca:f5:99:83:71:75:f1:6b:c1:7e:17: 1c:50:b6:64:7e:ec:92:8b:7e:3d:05:a4:d0:88:63:26:1c:29: 74:1c:09:c5:2c:dd:b6:45:98:44:90:49:bf:03:1a:80:aa:28: 07:db:3c:9d:c8:ab:d5:90:f5:16:23:64:46:76:ce:40:75:9d: 90:be:b1:e0:ae:0b:17:c8:24:44:b4:f0:e7:97:bd:cb:77:a5: 9f:f8:7f:7d:17:f5:e9:b8:dd:b0:1a:21:ca:8d:31:a0:8f:d9: 8e:0c:5c:75:c3:70:9a:93:cb:a1:09:c7:29:ed:0b:04:4f:b8: b4:65:68:18:43:f4:60:15:5b:22:05:6b:5a:f1:83:73:39:b5: c9:bc:fe:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU1MTQxMTAvBgNVBAUTKEQyQURCQUYwRDdENTJDQjk0RDRBMTM5NzhCMzIwNTNC Q0RGNzdBMEYwHhcNMjQxMTIzMDM0OTEyWhcNMjQxMTMwMDM0OTEyWjAYMRYwFAYD VQQDEw02NzQxNTBiOC0yYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZAOaBeusV13oGmc21fpRLtlx2K6QkQGXeqtxH/O3JIXRiVAeYBl+gvPrGs3 5CFkT4ardUmCTfESICw9ekYTKVJUd/DAGTSXjuNabJWzUGzmarIfBJNQod7rP50p aI6MdpJiNu8r2kdpX7DYkmLEXmK2AMOliZC6iCy41X/0Mq1rdUygYXN5MI/gvd5U pd3T0yV36E6DYDleb/u9e4h8u1yh/bAaeore15IGjU7kfGdz++pOOkmNtY+d68q/ wH0GSx4GJLtj3XoROCT719cNs5lAxW9SV4LsLLcyl/zoZ8MoDckE8Yo5hvXO76Vy UEWHsOqRRHzX+UKcipCcEjSNnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4qZb6e 6hd0u8S7TQ7g4bkG0t7QMB8GA1UdIwQYMBaAFNKtuvDX1Sy5TUoTl4syBTvN93oP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTUxNC9EOEVERjY4RTZF RjUxMUVFQkQxODBBMzJDNEY5QUUwMi8wcTI2OE5mVkxMbE5TaE9YaXpJRk84MzNl ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBxMjY4TmZWTExsTlNoT1hpeklGTzgzM2VnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTUxNC9EOEVERjY4RTZFRjUxMUVFQkQxODBBMzJDNEY5QUUwMi8wcTI2OE5mVkxM bE5TaE9YaXpJRk84MzNlZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB923nDBAcev+CePANdwblJjn03c3iN0zUIxqFLubZaFg/4rIqY9yD1 EYTRzCKe9lUaDzytgIADjZ3Avy3Bq/hEaZ6J2zkNoxaT/a96L51khU/XB7fkb8Ee Fy8Btco742WDgSqOeST9wte//JtgHtdWPpQdyvWZg3F18WvBfhccULZkfuySi349 BaTQiGMmHCl0HAnFLN22RZhEkEm/AxqAqigH2zydyKvVkPUWI2RGds5AdZ2QvrHg rgsXyCREtPDnl73Ld6Wf+H99F/XpuN2wGiHKjTGgj9mODFx1w3Cak8uhCccp7QsE T7i0ZWgYQ/RgFVsiBWta8YNzObXJvP5B -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org