$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft File: 5xqfIU6Aybw7LSOf-LmqtxP27bc.mft (raw, json) Hash identifier: ODo67/YbVaKltpOFvP9Z5zPdb3cc/cjyj7b7XymXh9U= Subject key identifier: EC:68:28:24:CD:AA:27:86:D4:9B:3D:5F:28:32:6A:65:F9:03:96:04 Authority key identifier: E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 Certificate issuer: /CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Certificate serial: 1973 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft Manifest number: 1961 Signing time: Sun 24 Nov 2024 16:18:30 +0000 Manifest this update: Sun 24 Nov 2024 16:18:30 +0000 Manifest next update: Sun 01 Dec 2024 16:18:30 +0000 Files and hashes: 1: 5xqfIU6Aybw7LSOf-LmqtxP27bc.crl (hash: IStZXVoZl30pagAxHxB+iOO5MYHZQUfk8v/7FYZoRmQ=) 2: 3A21C144E51211EBB1225278C4F9AE02.roa (hash: 72UJY4qW+1X6PGltHkH0J24hlzlOfouYDMNRAXq28vY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6515 (0x1973) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Validity Not Before: Nov 24 16:18:30 2024 GMT Not After : Dec 1 16:18:30 2024 GMT Subject: CN=674351d6-3719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:8a:6d:5b:7e:9e:01:ec:d4:25:48:b9:d8: b0:b2:f3:9c:e4:60:74:48:eb:d7:77:90:6d:ab:4f: 66:f5:ae:6a:3a:34:34:aa:48:70:18:f1:33:8b:4d: 00:18:4e:c7:0c:26:de:28:3c:17:8c:3e:93:8e:6d: 0f:28:53:84:b8:d3:98:45:49:ce:07:d7:ee:bc:34: bd:bc:3d:0d:73:5d:54:68:2b:4f:b1:f2:aa:00:df: 1a:72:57:e8:8d:58:4e:81:2d:1b:bf:ef:82:c5:11: d4:5f:b0:40:58:89:02:e8:5b:ee:0f:72:36:39:8b: 49:58:aa:d8:8a:54:43:3d:36:1d:20:9f:7d:9d:54: a0:6a:5e:e6:61:af:65:c2:61:31:ec:7b:13:23:30: 05:e7:c8:b6:88:91:0a:c5:85:5e:4e:ab:68:8b:80: 91:76:a0:99:64:fa:0b:14:02:81:dd:5e:65:ac:7e: fc:88:50:db:bc:82:70:88:6e:cb:db:20:c6:f2:09: 92:b1:a4:f4:38:4f:d6:ae:af:b2:08:fd:bc:d6:38: 1a:80:0e:f4:49:89:08:9c:dc:2e:73:56:a9:45:20: fd:dc:46:8f:90:31:50:84:36:be:da:4c:d5:83:2d: 4f:9d:eb:8c:d0:3a:5b:e3:76:a7:88:4a:73:25:7e: d1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:68:28:24:CD:AA:27:86:D4:9B:3D:5F:28:32:6A:65:F9:03:96:04 X509v3 Authority Key Identifier: keyid:E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a8:f3:41:4c:60:1f:5c:7d:fe:19:31:69:70:94:60:b2:62: 91:7c:ed:f8:c0:3c:94:46:b3:1b:75:17:3d:c9:e6:3f:67:90: 03:ec:2c:21:1e:70:8f:a0:d9:de:70:11:a0:fd:ae:c9:2a:f6: 1f:13:a8:f4:44:7e:13:04:c2:5d:56:0f:da:d2:c7:20:99:dd: fb:37:e1:89:cd:03:d6:5e:5c:d3:ba:f0:89:17:e0:07:ec:3e: 23:76:b7:5e:32:57:66:1a:b3:01:f7:f3:bf:55:42:2d:ef:20: ba:ff:4c:2c:0b:40:01:74:8b:00:5b:ee:49:6d:69:03:68:10: 58:0a:5f:5b:31:6f:a3:82:59:fd:6a:63:61:c5:bc:6d:fb:dd: 86:69:65:48:d0:e0:fe:d5:6b:ba:0c:3b:f7:60:4d:5d:2e:17: 12:f8:d5:a4:2b:d8:67:13:e9:75:c5:76:dc:c8:84:a5:25:26: 36:d1:11:0e:a4:34:35:a8:33:0a:93:4a:2d:8a:25:5e:9f:0f: b5:4b:2f:87:db:8a:74:9d:94:41:4b:75:df:4e:b9:94:86:e4: 78:14:db:f8:c9:dc:3a:44:00:60:82:46:53:56:38:9e:09:6b: 8d:5c:fc:9b:ee:40:1e:f2:83:be:bb:4a:df:bf:e8:11:7e:87: af:00:7c:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1MjUxMTAvBgNVBAUTKEU3MUE5RjIxNEU4MEM5QkMzQjJEMjM5RkY4QjlBQUI3 MTNGNkVEQjcwHhcNMjQxMTI0MTYxODMwWhcNMjQxMjAxMTYxODMwWjAYMRYwFAYD VQQDEw02NzQzNTFkNi0zNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HCKbVt+ngHs1CVIudiwsvOc5GB0SOvXd5Btq09m9a5qOjQ0qkhwGPEzi00A GE7HDCbeKDwXjD6Tjm0PKFOEuNOYRUnOB9fuvDS9vD0Nc11UaCtPsfKqAN8aclfo jVhOgS0bv++CxRHUX7BAWIkC6FvuD3I2OYtJWKrYilRDPTYdIJ99nVSgal7mYa9l wmEx7HsTIzAF58i2iJEKxYVeTqtoi4CRdqCZZPoLFAKB3V5lrH78iFDbvIJwiG7L 2yDG8gmSsaT0OE/Wrq+yCP281jgagA70SYkInNwuc1apRSD93EaPkDFQhDa+2kzV gy1PneuM0Dpb43aniEpzJX7RwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxoKCTN qieG1Js9XygyamX5A5YEMB8GA1UdIwQYMBaAFOcanyFOgMm8Oy0jn/i5qrcT9u23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODUyNS81MjIxMjYxMDYx MkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXlidzdMU09mLUxtcXR4UDI3 YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4cWZJVTZBeWJ3N0xTT2YtTG1xdHhQMjdiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODUyNS81MjIxMjYxMDYxMkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXli dzdMU09mLUxtcXR4UDI3YmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUqPNBTGAfXH3+GTFpcJRgsmKRfO34wDyURrMbdRc9yeY/Z5AD7Cwh HnCPoNnecBGg/a7JKvYfE6j0RH4TBMJdVg/a0scgmd37N+GJzQPWXlzTuvCJF+AH 7D4jdrdeMldmGrMB9/O/VUIt7yC6/0wsC0ABdIsAW+5JbWkDaBBYCl9bMW+jgln9 amNhxbxt+92GaWVI0OD+1Wu6DDv3YE1dLhcS+NWkK9hnE+l1xXbcyISlJSY20REO pDQ1qDMKk0otiiVenw+1Sy+H24p0nZRBS3XfTrmUhuR4FNv4ydw6RABggkZTVjie CWuNXPyb7kAe8oO+u0rfv+gRfoevAHzs -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:53 2024 by rpki-client on console-fra.rpki-client.org