$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft File: 4-j_B54D_aQzRoidk3ZblZ9uHVk.mft (raw, json) Hash identifier: vacRX4WMtHY2J2npwKPfoJl0PSqLDx6Vkj2juVvFuI4= Subject key identifier: 25:13:61:51:F5:1C:DC:EE:11:11:7F:A7:3C:90:DC:E5:C6:62:CA:3C Authority key identifier: E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59 Certificate issuer: /CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft Manifest number: 54 Signing time: Sat 23 Nov 2024 05:09:17 +0000 Manifest this update: Sat 23 Nov 2024 05:09:16 +0000 Manifest next update: Sat 30 Nov 2024 05:09:16 +0000 Files and hashes: 1: 4-j_B54D_aQzRoidk3ZblZ9uHVk.crl (hash: eIpb6IVOFyYOTF2ZfSYdmBJYavNIT0N2iFOmWHLYYo4=) 2: 7594FBFA2C7311EFA27A6526C4F9AE02.roa (hash: MW4brkS6iGYL+cXbHPuK8G2FUwzp/GEC0uyblPeDq90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59 Validity Not Before: Nov 23 05:09:16 2024 GMT Not After : Nov 30 05:09:16 2024 GMT Subject: CN=6741637c-e50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:6a:0b:18:ea:3f:48:a7:05:9e:26:40:3f: ad:1b:ed:01:55:72:ee:95:eb:fd:d9:02:4f:02:f2: 6b:65:b5:ec:41:5f:4c:15:b8:9e:41:1b:e1:fc:6f: 9f:48:a3:d0:db:f1:b1:72:d7:c2:3e:d4:1b:2a:4a: 62:49:06:42:64:22:28:2d:26:00:60:0c:25:65:08: 8d:6c:93:5c:ef:ba:bd:d1:50:f0:e8:8f:f5:f1:42: e2:1c:4e:31:4b:8b:a0:4d:39:25:a4:a4:fb:b1:36: 56:48:c0:31:67:1a:6f:1b:2e:44:f7:ad:c3:67:3d: ae:94:42:d7:a2:0f:db:65:17:99:bd:53:65:23:9f: bc:a0:38:ed:5d:b0:8d:8f:19:5b:21:9e:0d:f9:b0: bd:b0:e3:7b:4f:c4:52:f9:8d:26:71:0e:9f:be:6b: 77:ba:89:ad:4c:9e:d9:b8:98:40:cb:96:2a:af:58: df:6c:7e:11:aa:4f:9d:04:91:cc:a1:91:8f:ca:5d: d1:7c:8b:28:0d:a6:e3:ce:11:88:4a:9e:9b:f0:4c: d5:52:72:d9:44:c4:8f:4d:94:80:63:ab:b4:e2:ed: 16:8f:55:3f:b4:ed:57:dc:b4:af:b1:cd:de:ce:5b: 29:25:b9:16:1c:c7:b2:8a:b7:2d:2b:d8:51:d3:1b: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:13:61:51:F5:1C:DC:EE:11:11:7F:A7:3C:90:DC:E5:C6:62:CA:3C X509v3 Authority Key Identifier: keyid:E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c9:c5:a8:4e:93:e6:c0:53:4c:9c:55:e7:d6:00:c4:38:67: 0e:b7:9a:c8:e1:7e:1a:d3:2f:ee:ef:45:d4:2a:09:13:df:f2: 8a:a6:91:09:4d:dc:3a:ba:19:57:87:63:ca:e6:17:b8:71:10: b8:ef:31:c1:e7:5c:9e:df:c2:92:e4:46:52:8b:ef:b5:9d:14: 58:ba:99:2f:75:40:4c:6d:b1:db:50:49:5b:35:28:1d:87:cc: f0:a8:66:61:e0:5a:b7:8d:eb:64:1d:20:2b:94:d8:aa:17:45: 08:bd:84:58:74:15:05:4d:a6:1a:54:ca:15:00:81:ba:2d:d2: 4f:64:b9:b1:2d:84:1d:be:08:86:23:72:29:aa:3e:c2:a8:c9: dd:60:50:c2:2f:b5:a5:ff:2a:63:f8:98:16:bc:e5:12:c6:66: 45:2e:c5:fd:6a:fd:06:c2:b1:bd:4e:95:96:ea:45:d1:14:9d: 55:bd:9c:e0:46:62:f0:ec:6a:f3:4f:6e:b0:56:97:a9:3e:aa: 63:06:56:fd:eb:d4:87:8e:88:54:cf:83:59:b0:8b:86:98:1d: 4e:72:63:2c:7f:58:30:e4:4c:cd:d4:c2:bf:fb:14:3b:90:33: ca:91:73:95:83:e4:93:e6:29:6a:9e:d3:2c:95:05:2c:ce:fe: d0:f3:55:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCODExMC8GA1UEBRMoRTNFOEZGMDc5RTAzRkRBNDMzNDY4ODlEOTM3NjVCOTU5 RjZFMUQ1OTAeFw0yNDExMjMwNTA5MTZaFw0yNDExMzAwNTA5MTZaMBgxFjAUBgNV BAMTDTY3NDE2MzdjLWU1MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9kWoLGOo/SKcFniZAP60b7QFVcu6V6/3ZAk8C8mtltexBX0wVuJ5BG+H8b59I o9Db8bFy18I+1BsqSmJJBkJkIigtJgBgDCVlCI1sk1zvur3RUPDoj/XxQuIcTjFL i6BNOSWkpPuxNlZIwDFnGm8bLkT3rcNnPa6UQteiD9tlF5m9U2Ujn7ygOO1dsI2P GVshng35sL2w43tPxFL5jSZxDp++a3e6ia1Mntm4mEDLliqvWN9sfhGqT50Ekcyh kY/KXdF8iygNpuPOEYhKnpvwTNVSctlExI9NlIBjq7Ti7RaPVT+07VfctK+xzd7O WykluRYcx7KKty0r2FHTG8UJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJRNhUfUc 3O4REX+nPJDc5cZiyjwwHwYDVR0jBBgwFoAU4+j/B54D/aQzRoidk3ZblZ9uHVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUI4LzZBQjk5RTI2MkM3 MjExRUZCODlCMEY4NEM0RjlBRTAyLzQtal9CNTREX2FRelJvaWRrM1pibFo5dUhW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNC1qX0I1NERfYVF6Um9pZGszWmJsWjl1SFZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw OUI4LzZBQjk5RTI2MkM3MjExRUZCODlCMEY4NEM0RjlBRTAyLzQtal9CNTREX2FR elJvaWRrM1pibFo5dUhWay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIvJxahOk+bAU0ycVefWAMQ4Zw63msjhfhrTL+7vRdQqCRPf8oqmkQlN 3Dq6GVeHY8rmF7hxELjvMcHnXJ7fwpLkRlKL77WdFFi6mS91QExtsdtQSVs1KB2H zPCoZmHgWreN62QdICuU2KoXRQi9hFh0FQVNphpUyhUAgbot0k9kubEthB2+CIYj cimqPsKoyd1gUMIvtaX/KmP4mBa85RLGZkUuxf1q/QbCsb1OlZbqRdEUnVW9nOBG YvDsavNPbrBWl6k+qmMGVv3r1IeOiFTPg1mwi4aYHU5yYyx/WDDkTM3Uwr/7FDuQ M8qRc5WD5JPmKWqe0yyVBSzO/tDzVZc= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:30 2024 by rpki-client on console-fra.rpki-client.org