$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft File: T8Rg8J-QqobK9GfCha149DEnILA.mft (raw, json) Hash identifier: 2DWNS9/8+ICmEPsWeUlDN0sl2txGIi3LmAKOXz28G2g= Subject key identifier: BA:9F:68:33:47:D5:69:FD:7B:C7:37:17:65:6B:20:3E:13:16:A5:D6 Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0 Certificate issuer: /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft Manifest number: 64 Signing time: Sat 23 Nov 2024 05:01:21 +0000 Manifest this update: Sat 23 Nov 2024 05:01:20 +0000 Manifest next update: Sat 30 Nov 2024 05:01:20 +0000 Files and hashes: 1: T8Rg8J-QqobK9GfCha149DEnILA.crl (hash: 7wPDWzOkMuuqxqHKI17KZQrDtsgN8FkdmZV29zDgELA=) 2: F394D822271911EF86EB1C09C4F9AE02.roa (hash: mt85vO9S1+M069/Vqga0C4rzQVNchf8ezTWc8qB7iUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0 Validity Not Before: Nov 23 05:01:20 2024 GMT Not After : Nov 30 05:01:20 2024 GMT Subject: CN=674161a0-fffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b3:e3:16:f3:07:71:5c:46:6d:e7:ad:fc:56: b8:cb:04:9e:68:87:78:aa:d7:d2:8c:14:00:d6:1f: 9f:b9:63:09:19:6c:16:9e:92:e8:a9:74:40:d1:c6: 12:16:e8:4e:71:9a:74:cc:11:e4:66:4a:df:7a:69: 21:3b:75:97:8a:5a:b8:cc:bf:9e:4b:ac:52:94:3e: 96:48:30:37:17:f1:3b:5f:79:e2:30:d5:3f:40:00: 11:cb:f4:2a:22:e1:ae:fa:f2:92:7d:29:e4:28:59: 54:8c:8e:8f:67:08:ce:ad:c6:f5:7d:18:4e:8b:4b: a0:ab:e1:de:4f:fb:66:e7:2a:14:e5:8c:fa:f6:95: 74:9c:d5:cb:fa:fa:4a:2f:de:b3:fd:2d:bd:f4:6a: c1:79:a6:b0:89:a4:08:b6:0f:a9:69:45:08:f5:f2: 3e:30:df:c9:da:c1:31:bf:b9:6b:9b:15:51:73:41: 34:fc:7b:3b:7d:5f:b8:45:fd:25:ea:8c:34:61:4a: f4:c9:00:84:4f:c7:99:2d:2a:a9:0f:5e:3f:ea:a8: 4e:bb:2c:2c:4b:21:b9:6e:52:33:58:66:22:6d:53: ba:28:e4:99:72:da:98:b4:23:01:01:f4:74:55:d6: 3f:05:b5:a4:58:33:39:c1:09:a1:96:9f:32:36:95: ee:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9F:68:33:47:D5:69:FD:7B:C7:37:17:65:6B:20:3E:13:16:A5:D6 X509v3 Authority Key Identifier: keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:00:f5:ea:a4:cf:c2:89:63:8e:0c:6e:05:fb:7f:ae:71:2b: e2:29:d0:b3:19:78:50:65:f3:8f:f0:18:d6:f6:aa:f7:13:6f: 92:42:73:4c:cd:8b:0e:a1:42:ef:cb:44:ad:a0:b4:cc:57:77: bc:7d:bd:22:e9:25:ef:2b:70:a5:eb:3a:26:7b:78:32:09:7f: c5:ec:b7:c6:96:f8:54:74:fb:2a:46:25:ac:ea:cc:f6:91:a4: f3:8d:d5:50:c9:ac:64:a7:39:45:ea:b0:93:47:9f:5d:a0:38: 9c:25:e7:f2:7e:26:7a:cc:ae:c9:e7:14:48:d5:dc:37:df:c2: c9:10:66:2a:d9:e5:e6:e6:c7:0e:d8:d3:24:47:78:d7:49:10: 72:98:c1:1b:d3:ad:71:3c:23:17:b3:36:a9:a3:15:a5:cf:5a: 7e:cc:c0:74:7e:07:fa:60:bd:6c:41:5d:b3:04:ab:5c:d0:eb: b7:0e:70:24:86:d1:6b:4c:28:9c:1e:5c:b1:d9:c2:27:7e:0b: 87:bf:b9:4c:27:e0:da:2a:1e:ad:9d:04:7f:7d:b4:1d:8c:9d: 7b:0f:72:4b:54:8d:60:b6:bc:cc:95:67:0c:63:3e:59:66:83: 47:1f:e8:22:0f:64:53:24:44:8b:16:c5:fd:d9:24:74:20:85: 22:62:b2:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF REQ5OTExMC8GA1UEBRMoNEZDNDYwRjA5RjkwQUE4NkNBRjQ2N0MyODVBRDc4RjQz MTI3MjBCMDAeFw0yNDExMjMwNTAxMjBaFw0yNDExMzAwNTAxMjBaMBgxFjAUBgNV BAMTDTY3NDE2MWEwLWZmZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrs+MW8wdxXEZt5638VrjLBJ5oh3iq19KMFADWH5+5YwkZbBaekuipdEDRxhIW 6E5xmnTMEeRmSt96aSE7dZeKWrjMv55LrFKUPpZIMDcX8TtfeeIw1T9AABHL9Coi 4a768pJ9KeQoWVSMjo9nCM6txvV9GE6LS6Cr4d5P+2bnKhTljPr2lXSc1cv6+kov 3rP9Lb30asF5prCJpAi2D6lpRQj18j4w38nawTG/uWubFVFzQTT8ezt9X7hF/SXq jDRhSvTJAIRPx5ktKqkPXj/qqE67LCxLIbluUjNYZiJtU7oo5Jly2pi0IwEB9HRV 1j8FtaRYMznBCaGWnzI2le7pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUup9oM0fV af17xzcXZWsgPhMWpdYwHwYDVR0jBBgwFoAUT8Rg8J+QqobK9GfCha149DEnILAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVERDk5LzA1NzI5QjRDMTlC OTExRUY4RTBERkUzRUM0RjlBRTAyL1Q4Umc4Si1RcW9iSzlHZkNoYTE0OURFbklM QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVDhSZzhKLVFxb2JLOUdmQ2hhMTQ5REVuSUxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE RDk5LzA1NzI5QjRDMTlCOTExRUY4RTBERkUzRUM0RjlBRTAyL1Q4Umc4Si1RcW9i SzlHZkNoYTE0OURFbklMQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHEA9eqkz8KJY44MbgX7f65xK+Ip0LMZeFBl84/wGNb2qvcTb5JCc0zN iw6hQu/LRK2gtMxXd7x9vSLpJe8rcKXrOiZ7eDIJf8Xst8aW+FR0+ypGJazqzPaR pPON1VDJrGSnOUXqsJNHn12gOJwl5/J+JnrMrsnnFEjV3DffwskQZirZ5ebmxw7Y 0yRHeNdJEHKYwRvTrXE8IxezNqmjFaXPWn7MwHR+B/pgvWxBXbMEq1zQ67cOcCSG 0WtMKJweXLHZwid+C4e/uUwn4NoqHq2dBH99tB2MnXsPcktUjWC2vMyVZwxjPllm g0cf6CIPZFMkRIsWxf3ZJHQghSJisk8= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org