$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft File: e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json) Hash identifier: rcYTKbMVcUT2c2JRSVH+xgCM1oXWDPSKKn4+alXspDc= Subject key identifier: 50:CC:2B:31:4C:B2:AB:92:D0:FC:A4:41:B9:77:D5:33:6C:4E:66:A4 Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 0841 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft Manifest number: 083A Signing time: Fri 22 Nov 2024 20:29:40 +0000 Manifest this update: Fri 22 Nov 2024 20:29:40 +0000 Manifest next update: Fri 29 Nov 2024 20:29:39 +0000 Files and hashes: 1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: 0DjtDpcfq0ZbPgRQTznvwl7TBOkb4C0yiOPcoNzfwQM=) 2: 059261A8BC5111EABE07AE32C4F9AE02.roa (hash: cybKavsK+KygtFzdLH5ZiH4HxzktrVv6nGmG8yvNLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2113 (0x841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: Nov 22 20:29:40 2024 GMT Not After : Nov 29 20:29:39 2024 GMT Subject: CN=6740e9b4-5202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:04:cf:9b:85:3e:86:5f:f8:3e:f5:ab:26:fc: 5e:3a:ed:66:59:de:f3:f1:ff:89:15:58:ec:0e:59: 45:20:8f:44:87:d6:5c:a0:f1:85:da:a8:e9:27:c7: 45:64:ac:f0:62:b8:4d:18:59:e7:85:aa:88:96:69: a7:3a:38:43:07:fc:55:eb:97:b0:1d:54:26:84:d1: 74:aa:5d:16:22:dd:28:bb:83:0c:23:80:6a:32:07: 19:4b:e8:49:b5:b5:84:0c:11:a6:6b:21:66:67:97: 3b:5a:93:d8:6b:43:57:1e:b2:de:48:19:aa:b2:ba: 72:44:d8:17:91:7f:31:e5:9f:07:38:29:57:96:bc: 10:ba:3f:fe:3f:22:a7:b2:3f:24:a8:60:0f:3c:b8: b6:cf:6e:08:b3:23:8d:11:a4:fd:b2:87:1b:93:c1: d8:e0:7a:bf:d0:ce:4c:0c:95:ce:7b:4e:3c:59:95: cb:d1:be:0a:70:bf:f9:a6:78:fa:fc:58:3a:57:c2: 3a:e7:b6:f9:b7:5b:04:66:d5:75:69:18:ac:eb:2b: c3:e2:05:e4:4b:38:9f:7f:ca:f4:b6:39:3d:bb:e3: a3:37:6d:0e:ff:88:8e:1f:a3:5d:8f:00:77:41:b2: b8:c4:0d:52:f7:9c:cd:81:19:3a:b8:2e:aa:28:35: c4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CC:2B:31:4C:B2:AB:92:D0:FC:A4:41:B9:77:D5:33:6C:4E:66:A4 X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:2f:b7:29:62:bc:8a:f3:46:2a:6d:0b:ca:f3:35:02:ea:be: 31:99:8d:65:41:d5:15:99:d4:fa:e0:01:d7:b5:53:e8:0b:c7: 38:5c:95:19:58:59:99:f7:05:b2:df:76:aa:18:29:e4:47:97: ca:88:1f:51:04:a6:81:91:64:26:85:64:ed:2b:8e:e5:c9:8d: 6e:e4:19:57:2c:a9:22:a7:a0:15:40:8c:c9:70:c3:6a:d8:d9: 90:b6:78:0e:9b:cd:1b:32:80:b6:00:1d:aa:6e:17:e5:da:22: 0a:db:59:aa:61:d3:d6:98:47:49:5c:4c:1d:d3:e3:af:4b:63: ee:59:ce:3c:98:2c:33:62:e8:3f:b2:1f:2e:07:3c:5a:20:ae: 3a:b9:e1:2b:a8:1d:6c:9c:df:d8:71:3c:45:9e:2c:87:7f:15: 4d:14:98:dd:95:1e:49:26:b6:02:fe:90:d8:cd:3b:f8:04:2b: da:2a:ee:03:b2:e4:77:19:89:f1:e7:0a:c5:85:44:8f:0f:2f: fd:39:b4:51:aa:48:70:4d:43:4f:7e:2e:01:58:69:bc:83:82: 27:73:a0:36:c3:cd:87:c4:7b:b3:91:61:8a:d6:9e:c8:eb:e1: 98:bb:bd:e6:55:ec:5a:e3:6b:0a:5b:39:ac:31:30:be:59:e5: dd:b7:86:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjQxMTIyMjAyOTQwWhcNMjQxMTI5MjAyOTM5WjAYMRYwFAYD VQQDEw02NzQwZTliNC01MjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQTPm4U+hl/4PvWrJvxeOu1mWd7z8f+JFVjsDllFII9Eh9ZcoPGF2qjpJ8dF ZKzwYrhNGFnnhaqIlmmnOjhDB/xV65ewHVQmhNF0ql0WIt0ou4MMI4BqMgcZS+hJ tbWEDBGmayFmZ5c7WpPYa0NXHrLeSBmqsrpyRNgXkX8x5Z8HOClXlrwQuj/+PyKn sj8kqGAPPLi2z24IsyONEaT9socbk8HY4Hq/0M5MDJXOe048WZXL0b4KcL/5pnj6 /Fg6V8I657b5t1sEZtV1aRis6yvD4gXkSziff8r0tjk9u+OjN20O/4iOH6NdjwB3 QbK4xA1S95zNgRk6uC6qKDXEZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDMKzFM squS0PykQbl31TNsTmakMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP S2lsdXNjZlg3LWJVZlF5NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7L7cpYryK80YqbQvK8zUC6r4xmY1lQdUVmdT64AHXtVPoC8c4XJUZ WFmZ9wWy33aqGCnkR5fKiB9RBKaBkWQmhWTtK47lyY1u5BlXLKkip6AVQIzJcMNq 2NmQtngOm80bMoC2AB2qbhfl2iIK21mqYdPWmEdJXEwd0+OvS2PuWc48mCwzYug/ sh8uBzxaIK46ueErqB1snN/YcTxFniyHfxVNFJjdlR5JJrYC/pDYzTv4BCvaKu4D suR3GYnx5wrFhUSPDy/9ObRRqkhwTUNPfi4BWGm8g4Inc6A2w82HxHuzkWGK1p7I 6+GYu73mVexa42sKWzmsMTC+WeXdt4bh -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org