$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json) Hash identifier: m80t9lYDfwe2ByVn554Ru6RZkkp2YnSoaa+hwh7EdZA= Subject key identifier: 41:E6:3E:D7:F3:19:1B:14:09:AB:0E:97:14:1C:86:53:5A:28:8B:C5 Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Certificate serial: 3427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft Manifest number: 3427 Signing time: Fri 22 Nov 2024 14:36:22 +0000 Manifest this update: Fri 22 Nov 2024 14:36:22 +0000 Manifest next update: Fri 29 Nov 2024 14:36:22 +0000 Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: n6bMOP84ugJpMYZQr8QEZdiwI37HRGYdeXadgUt4bBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13351 (0x3427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Validity Not Before: Nov 22 14:36:22 2024 GMT Not After : Nov 29 14:36:22 2024 GMT Subject: CN=674096e6-83e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:9b:97:65:64:01:cd:5c:7e:d5:97:06:9e: a7:b7:c7:ec:fb:45:49:e4:39:d2:aa:62:4d:b8:6e: 23:a0:7e:22:0d:ce:d9:3d:b2:a6:cb:2c:f6:e9:b7: f2:21:63:b3:d1:8a:b9:31:b8:d3:0c:e1:7c:44:d4: 28:be:63:45:82:1e:b7:e4:c0:3f:e0:ab:d8:50:78: f0:f1:57:6e:82:7a:b8:4b:51:a8:c6:3c:ab:43:3f: 77:d5:41:1e:0c:cc:c9:2d:9d:a2:c2:0f:b0:37:3b: 98:c5:34:c1:0b:9d:13:cd:64:ff:73:30:f5:da:39: 4c:86:01:33:88:89:25:4c:57:14:38:fe:44:97:7e: a4:42:6d:8f:e9:1d:cc:d6:ab:61:a9:14:a0:3a:b0: ea:af:84:8c:8e:44:0a:1d:b6:6b:a1:a0:70:45:7a: ad:e6:da:a9:ec:06:4a:e9:8e:19:b4:ca:af:9c:50: 74:6c:0b:db:44:3d:92:b4:fb:1c:36:57:c8:06:e5: 05:40:1f:04:54:0d:25:cb:3d:cc:b4:07:2a:be:63: 89:ba:a0:75:a6:46:4b:2e:bd:b4:60:2a:d0:57:2f: 3c:b8:24:ca:b7:6d:31:7f:ac:af:ac:bc:c5:50:89: 78:3d:1c:64:c4:bd:17:eb:bc:35:60:1d:20:73:74: 8f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E6:3E:D7:F3:19:1B:14:09:AB:0E:97:14:1C:86:53:5A:28:8B:C5 X509v3 Authority Key Identifier: keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:83:33:1b:61:2f:fe:fe:e4:2b:75:c4:31:bd:b2:43:80:48: 52:64:38:c3:3c:6b:7d:a0:51:b8:a4:86:be:ce:18:fb:fa:cd: 58:f7:27:e0:d9:cb:63:dc:93:3c:e2:1b:13:21:2b:06:a1:3d: a0:0d:ef:cd:7e:8f:4b:12:0c:a2:2e:31:f2:fc:3b:7d:27:52: 63:23:a2:fd:d2:c2:09:b1:04:1e:73:55:84:92:ee:69:c7:35: 01:b0:8d:92:bb:2f:d9:05:96:45:ca:48:90:25:ad:d0:2d:1c: 4b:43:7e:e8:50:0b:03:cc:e6:22:fc:3c:01:3b:04:ed:85:be: 4f:51:90:c2:a4:54:2c:bc:99:e0:c9:1b:10:e5:b8:fc:83:dc: 9d:a6:03:2d:47:8b:0b:2e:e8:07:1d:cc:70:01:4b:76:2e:13: 81:24:c0:6e:8d:43:ef:ec:b8:1f:b9:1d:cc:4c:54:a3:b1:95: 2a:67:02:7b:34:0c:13:0e:16:74:02:8e:14:f5:c3:6c:55:09: 68:30:38:a3:2a:90:ec:35:35:0e:51:50:ab:ba:db:8a:c2:da: 72:6a:ac:de:ea:fa:fb:a2:a8:cd:db:3a:40:b7:9d:86:2d:08: 38:b6:3b:be:e9:dc:df:3c:72:97:71:d5:c8:fb:10:86:31:2c: 90:9d:7e:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB NzM0QTkyQkQwHhcNMjQxMTIyMTQzNjIyWhcNMjQxMTI5MTQzNjIyWjAYMRYwFAYD VQQDEw02NzQwOTZlNi04M2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqX6bl2VkAc1cftWXBp6nt8fs+0VJ5DnSqmJNuG4joH4iDc7ZPbKmyyz26bfy IWOz0Yq5MbjTDOF8RNQovmNFgh635MA/4KvYUHjw8Vdugnq4S1GoxjyrQz931UEe DMzJLZ2iwg+wNzuYxTTBC50TzWT/czD12jlMhgEziIklTFcUOP5El36kQm2P6R3M 1qthqRSgOrDqr4SMjkQKHbZroaBwRXqt5tqp7AZK6Y4ZtMqvnFB0bAvbRD2StPsc NlfIBuUFQB8EVA0lyz3MtAcqvmOJuqB1pkZLLr20YCrQVy88uCTKt20xf6yvrLzF UIl4PRxkxL0X67w1YB0gc3SP3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHmPtfz GRsUCasOlxQchlNaKIvFMB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm UW9VU2E3RGNTLXFuTktrcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUgzMbYS/+/uQrdcQxvbJDgEhSZDjDPGt9oFG4pIa+zhj7+s1Y9yfg 2ctj3JM84hsTISsGoT2gDe/Nfo9LEgyiLjHy/Dt9J1JjI6L90sIJsQQec1WEku5p xzUBsI2Suy/ZBZZFykiQJa3QLRxLQ37oUAsDzOYi/DwBOwTthb5PUZDCpFQsvJng yRsQ5bj8g9ydpgMtR4sLLugHHcxwAUt2LhOBJMBujUPv7LgfuR3MTFSjsZUqZwJ7 NAwTDhZ0Ao4U9cNsVQloMDijKpDsNTUOUVCrutuKwtpyaqze6vr7oqjN2zpAt52G LQg4tju+6dzfPHKXcdXI+xCGMSyQnX5i -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:44 2024 by rpki-client on console-fra.rpki-client.org