$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft File: 62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json) Hash identifier: kbFx8zGqwSSzEHQ2tPMx17gZBD7UBKSfiB1nfDPdXew= Subject key identifier: C2:DC:3A:09:8D:0F:E0:7A:57:A2:AA:28:3F:F9:D4:F8:FF:61:F2:21 Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 Certificate issuer: /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Certificate serial: 3448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft Manifest number: 3437 Signing time: Fri 22 Nov 2024 14:51:41 +0000 Manifest this update: Fri 22 Nov 2024 14:51:40 +0000 Manifest next update: Fri 29 Nov 2024 14:51:40 +0000 Files and hashes: 1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: x+ajN+hAp2DogHgtip6nPzDzmEjB4oxbQ1tGKI1GV5E=) 2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: d144T7oMH95RvKY4e89HKTmo5Jmqni2w+fwMwfkyYxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13384 (0x3448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Validity Not Before: Nov 22 14:51:40 2024 GMT Not After : Nov 29 14:51:40 2024 GMT Subject: CN=67409a7d-c499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d6:73:dd:62:59:8e:4d:0e:23:29:9b:7f:a7: 56:e3:2b:cc:a6:7d:07:76:f8:75:66:9d:4c:3e:5c: 1a:b2:d0:46:a2:7e:d4:0d:2c:fe:e4:8e:d0:cc:cd: e2:9c:cd:c9:91:05:1a:fc:05:d0:df:86:b6:8a:d8: 70:a2:0d:43:08:8e:c0:b5:ce:7b:28:e9:4c:a4:c7: 96:78:0d:c6:af:12:63:d2:c6:b9:0a:17:fc:2a:b7: c9:8b:a4:13:4c:e9:ab:e1:7d:1b:8a:08:fa:33:91: 65:b2:3e:2b:c2:e1:40:f3:0c:38:04:ff:1a:86:00: a5:43:0e:26:0e:a4:cd:59:51:fe:82:b1:a8:b8:63: 2f:b9:2b:15:c9:0b:36:a7:db:05:e1:23:96:e9:54: 63:09:d3:98:65:38:42:a6:ea:a6:41:48:52:54:33: f1:8b:53:7d:dc:34:f1:f8:3f:32:46:ba:e9:5d:a2: 0b:aa:f1:cc:a9:11:55:fe:20:27:64:95:e2:0c:12: dc:d1:6c:a1:a3:a9:91:6a:69:cf:82:c7:27:26:ef: 55:d2:a4:29:c7:01:b2:f7:3a:48:a5:d0:7f:1a:c8: 16:2b:a5:4f:7c:d6:86:5d:94:72:88:bd:d9:43:24: d4:d0:e7:9a:3f:9a:be:63:9b:dc:ba:09:e0:fd:5f: 27:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DC:3A:09:8D:0F:E0:7A:57:A2:AA:28:3F:F9:D4:F8:FF:61:F2:21 X509v3 Authority Key Identifier: keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5b:f0:b0:6d:e5:75:fe:93:90:d5:59:8b:58:fa:ec:39:83: d3:eb:5e:41:f0:69:a1:f3:bb:e0:58:36:ee:81:75:fa:f8:76: 4d:7b:42:7a:79:16:61:29:a9:22:b8:ea:69:14:a7:39:53:24: 40:6b:13:a0:92:74:d2:80:27:17:64:6c:d7:9a:30:eb:ba:fa: 4e:72:44:5a:21:32:bb:24:d1:7a:d8:6f:b7:b5:d1:4f:25:f7: 73:5a:c6:c5:9e:0e:1b:83:e7:32:77:c8:4c:a0:4c:72:21:d6: 7e:17:bc:21:ea:d1:81:7f:d7:1c:7c:9a:97:8f:50:55:e4:5a: 9c:c1:fc:5a:04:b6:e9:52:17:62:70:cc:e4:96:69:87:e2:13: 77:8c:ac:2c:a8:00:99:58:7d:b8:ad:b5:a6:84:61:4d:4a:94: dd:31:83:68:30:f3:2a:cf:3c:a0:08:46:82:da:fd:06:f3:ec: 7d:4e:0b:29:81:f2:98:f6:1d:d1:42:f3:ee:ee:5e:f8:99:1c: e4:65:c0:c1:87:0c:f7:d5:9b:e1:b2:aa:86:99:8e:22:90:52: 7f:3c:dd:9a:6b:00:3d:bc:5d:3e:ff:58:6b:c9:4c:21:82:e6: 31:fd:ce:40:60:fe:10:7e:fb:9b:12:c7:af:e2:35:15:59:bb: 80:8a:13:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NjYxMTAvBgNVBAUTKEVCNjgwQjdERTRDNEExQjQ0M0FCRDc5OUJBRjUyNDlE RDRCMEVBOTAwHhcNMjQxMTIyMTQ1MTQwWhcNMjQxMTI5MTQ1MTQwWjAYMRYwFAYD VQQDEw02NzQwOWE3ZC1jNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9Zz3WJZjk0OIymbf6dW4yvMpn0Hdvh1Zp1MPlwastBGon7UDSz+5I7QzM3i nM3JkQUa/AXQ34a2ithwog1DCI7Atc57KOlMpMeWeA3GrxJj0sa5Chf8KrfJi6QT TOmr4X0bigj6M5Flsj4rwuFA8ww4BP8ahgClQw4mDqTNWVH+grGouGMvuSsVyQs2 p9sF4SOW6VRjCdOYZThCpuqmQUhSVDPxi1N93DTx+D8yRrrpXaILqvHMqRFV/iAn ZJXiDBLc0Wyho6mRamnPgscnJu9V0qQpxwGy9zpIpdB/GsgWK6VPfNaGXZRyiL3Z QyTU0OeaP5q+Y5vcugng/V8nNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLcOgmN D+B6V6KqKD/51Pj/YfIhMB8GA1UdIwQYMBaAFOtoC33kxKG0Q6vXmbr1JJ3UsOqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg2Ni82QTBERjlCQTFE OTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9iUkRxOWVadXZVa25kU3c2 cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYyZ0xmZVRFb2JSRHE5ZVp1dlVrbmRTdzZwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg2Ni82QTBERjlCQTFEOTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9i UkRxOWVadXZVa25kU3c2cEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtW/CwbeV1/pOQ1VmLWPrsOYPT615B8Gmh87vgWDbugXX6+HZNe0J6 eRZhKakiuOppFKc5UyRAaxOgknTSgCcXZGzXmjDruvpOckRaITK7JNF62G+3tdFP JfdzWsbFng4bg+cyd8hMoExyIdZ+F7wh6tGBf9ccfJqXj1BV5FqcwfxaBLbpUhdi cMzklmmH4hN3jKwsqACZWH24rbWmhGFNSpTdMYNoMPMqzzygCEaC2v0G8+x9Tgsp gfKY9h3RQvPu7l74mRzkZcDBhwz31ZvhsqqGmY4ikFJ/PN2aawA9vF0+/1hryUwh guYx/c5AYP4QfvubEsev4jUVWbuAihPO -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org