$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft File: MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json) Hash identifier: eU0cB2QK3d149C2XtrHftaBKEf3FFyOl8I4Se5GqleU= Subject key identifier: 84:FD:45:7B:DD:18:21:F4:4A:97:2E:22:FD:EF:2F:F3:93:5B:B6:72 Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft Manifest number: 013B Signing time: Sat 23 Nov 2024 02:43:13 +0000 Manifest this update: Sat 23 Nov 2024 02:43:12 +0000 Manifest next update: Sat 30 Nov 2024 02:43:12 +0000 Files and hashes: 1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: MA0JFuGEdeoUGKlxlytXfa3vIsFDgDHnrXJB/mRdRl4=) 2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: QOfAhP3S+ePBd5bLXcD9SSvstPxykfxAtUO9d7xqQdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Validity Not Before: Nov 23 02:43:12 2024 GMT Not After : Nov 30 02:43:12 2024 GMT Subject: CN=67414140-6bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:e5:e6:7e:28:8c:ec:69:c9:ff:28:0f:5a:9a: c0:dc:32:e6:45:36:e3:76:50:3d:dd:a1:ea:c6:66: 00:8a:03:76:19:fd:ac:fc:59:5a:6b:e0:42:b6:a9: 6b:be:d9:a0:b6:d6:10:41:9b:d1:9c:1d:27:be:c3: 51:ba:6b:f7:68:40:8c:6a:4d:41:d7:d9:80:15:af: d0:f6:0f:1e:c4:e5:2f:81:31:4e:c0:7d:33:63:79: d4:6f:80:93:cb:35:b2:61:ed:4a:bb:5f:84:1a:14: ca:32:8c:18:88:93:07:98:1c:91:d9:58:7c:63:02: fb:1c:a6:d1:be:d0:68:99:36:1c:34:5e:bd:17:03: 44:8a:ec:bf:e4:cc:6d:78:1e:f3:9a:7e:05:b1:bf: 06:0c:c3:4b:1c:31:40:e5:4e:15:c5:b5:3d:3a:6f: 87:cf:75:19:b2:90:d6:d7:71:30:c5:5e:64:30:60: e9:94:06:ed:73:c6:78:de:d2:a2:a3:8d:2d:3d:31: 01:f2:a7:97:09:34:b3:52:66:ea:a1:53:a7:57:4b: 56:9f:0a:72:d7:90:d9:de:a9:eb:ad:8c:9f:fe:cd: 8b:c9:31:ca:de:d0:98:cc:ec:fb:fd:6d:51:fd:7f: 02:62:0f:47:a0:ee:2b:21:fc:ad:39:2e:4d:6f:49: 7c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FD:45:7B:DD:18:21:F4:4A:97:2E:22:FD:EF:2F:F3:93:5B:B6:72 X509v3 Authority Key Identifier: keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:87:1f:8d:d0:69:e2:af:ef:aa:c1:78:b8:7f:93:99:a0:c7: ea:d6:99:5d:6a:4b:a1:5b:d1:8f:5e:fa:aa:ed:c2:44:c0:6c: e7:8c:d3:e8:72:79:8a:df:e1:ac:5e:0d:08:9e:ec:d2:72:ac: da:3d:7c:17:fd:da:00:8f:55:6a:0c:80:26:f3:87:2e:d6:6f: f8:e6:d1:ba:b6:eb:ed:c5:5a:dd:c5:52:f3:6a:43:8c:fd:af: 32:bb:34:4b:4d:cf:80:a5:d4:11:e6:81:db:cb:5e:e7:59:b1: 6c:55:37:54:a7:6d:0c:72:81:05:18:2b:d4:a5:d1:c6:c4:f1: 7d:22:1a:dc:4a:5d:63:63:61:3b:cf:ef:d7:40:45:a1:cf:6e: f2:b7:6b:82:e6:09:22:de:07:6a:98:17:ad:9c:64:26:f0:04: c9:d3:67:e0:8a:74:b4:22:dc:fe:b8:e7:2c:e3:95:fb:75:1b: a7:d9:c0:00:db:43:70:b2:0c:5b:c4:bb:ed:02:0b:cd:f7:98: 01:28:1f:a4:4b:93:24:1e:bf:19:f6:73:7e:b5:ba:3c:63:17: 69:0d:c6:3a:94:e9:15:3b:5f:46:a0:32:1c:b0:6c:75:7f:93: 8d:cb:d4:be:ae:18:34:59:d2:09:2f:e2:3e:51:d9:25:39:89: 6a:f4:28:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw MURFMDAzMDMwHhcNMjQxMTIzMDI0MzEyWhcNMjQxMTMwMDI0MzEyWjAYMRYwFAYD VQQDEw02NzQxNDE0MC02YmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/OXmfiiM7GnJ/ygPWprA3DLmRTbjdlA93aHqxmYAigN2Gf2s/Flaa+BCtqlr vtmgttYQQZvRnB0nvsNRumv3aECMak1B19mAFa/Q9g8exOUvgTFOwH0zY3nUb4CT yzWyYe1Ku1+EGhTKMowYiJMHmByR2Vh8YwL7HKbRvtBomTYcNF69FwNEiuy/5Mxt eB7zmn4Fsb8GDMNLHDFA5U4VxbU9Om+Hz3UZspDW13EwxV5kMGDplAbtc8Z43tKi o40tPTEB8qeXCTSzUmbqoVOnV0tWnwpy15DZ3qnrrYyf/s2LyTHK3tCYzOz7/W1R /X8CYg9HoO4rIfytOS5Nb0l85QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIT9RXvd GCH0SpcuIv3vL/OTW7ZyMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt NGlpWWtrNHhKa3dCM2dBd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAahx+N0Gnir++qwXi4f5OZoMfq1pldakuhW9GPXvqq7cJEwGznjNPo cnmK3+GsXg0InuzScqzaPXwX/doAj1VqDIAm84cu1m/45tG6tuvtxVrdxVLzakOM /a8yuzRLTc+ApdQR5oHby17nWbFsVTdUp20McoEFGCvUpdHGxPF9IhrcSl1jY2E7 z+/XQEWhz27yt2uC5gki3gdqmBetnGQm8ATJ02fginS0Itz+uOcs45X7dRun2cAA 20NwsgxbxLvtAgvN95gBKB+kS5MkHr8Z9nN+tbo8YxdpDcY6lOkVO19GoDIcsGx1 f5ONy9S+rhg0WdIJL+I+UdklOYlq9Chk -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org