$ rpki-client -vvf rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft File: q47HWiojWU9vKtMnsOa7wLCrm-4.mft (raw, json) Hash identifier: EF1/eiEzIGFgGcA/4bjDg84XhhWzj3K5gYHOJ3u+HaY= Subject key identifier: D8:6E:F2:A6:63:3A:56:21:D1:D8:2F:FF:91:0E:86:F1:8F:9A:18:61 Authority key identifier: AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE Certificate issuer: /CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Certificate serial: 0D6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft Manifest number: 0D66 Signing time: Fri 22 Nov 2024 17:56:02 +0000 Manifest this update: Fri 22 Nov 2024 17:56:01 +0000 Manifest next update: Fri 29 Nov 2024 17:56:01 +0000 Files and hashes: 1: q47HWiojWU9vKtMnsOa7wLCrm-4.crl (hash: cGfwJ7CCuOCmcbyr5fqeDvxHjCHd9N2ThdVDGOBctMg=) 2: E3ACB710B9B211E9A9A37254C4F9AE02.roa (hash: nvhDjt387zYhf/8ySzGmSAzk4CFMkqY2rRX2y6Ihwk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3439 (0xd6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE Validity Not Before: Nov 22 17:56:01 2024 GMT Not After : Nov 29 17:56:01 2024 GMT Subject: CN=6740c5b1-cf19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:5c:38:86:df:19:e7:0b:eb:55:ad:79:d7: 07:96:11:99:82:60:13:4d:1c:84:9f:5d:8c:73:47: e5:06:d5:7f:2b:9f:d2:ea:8e:01:50:77:b3:b3:bf: 00:9f:12:d2:db:42:94:5c:43:39:18:1f:33:f4:f5: d5:65:48:1e:56:bc:d3:55:58:5d:5c:a1:ec:66:11: 30:6c:71:df:39:e8:36:46:b1:a4:df:6e:5a:b2:63: 23:42:77:7d:be:33:2b:26:64:8e:e5:63:c2:3d:d0: bf:a0:19:64:47:f3:bd:fd:f6:10:2e:9e:48:75:5f: e9:73:80:03:2a:f9:ae:47:e8:a1:10:1a:34:b0:f1: c8:3c:16:46:e5:05:2c:ad:21:83:49:51:8c:d3:2f: 3b:e7:f7:f8:10:9d:5e:ab:7a:b0:19:20:46:7f:66: b1:b5:e9:dd:eb:ca:95:73:17:06:22:fa:d5:6b:0a: 50:a0:1a:13:57:8d:f1:a7:f7:63:d0:b4:8a:b8:2d: 28:24:c1:4b:c1:7c:91:50:16:aa:45:4e:2d:ca:80: 7a:c9:9c:c4:0c:ab:ab:67:d3:a4:58:3d:82:45:df: f8:88:66:ae:d5:18:c4:5b:91:5f:24:0f:e7:df:46: bc:7b:ee:bb:54:15:8e:7a:09:db:84:49:b0:4a:85: 35:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6E:F2:A6:63:3A:56:21:D1:D8:2F:FF:91:0E:86:F1:8F:9A:18:61 X509v3 Authority Key Identifier: keyid:AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:bc:d9:eb:8b:6e:04:73:31:6a:bc:5e:58:05:7b:8f:49:3e: 47:e8:05:09:00:af:f6:9d:6e:68:f2:61:75:a0:61:0f:3b:50: 35:96:69:ab:24:b5:a3:4c:68:c4:e7:d7:cd:0e:75:f9:fe:20: 05:05:07:16:49:a0:78:e2:a7:a3:43:5a:e6:67:72:b6:55:95: 85:06:c9:58:7e:23:09:ea:af:4b:ad:a2:cb:72:2c:63:23:db: 25:18:53:32:92:20:f1:8e:6e:f5:06:aa:89:ac:d7:b3:f9:37: 24:c6:86:ed:22:4a:15:28:a4:53:9d:48:fb:47:be:25:b8:56: 98:48:a1:39:db:51:bc:23:3b:ec:d9:92:35:f1:47:1c:60:95: ae:9d:a2:56:40:2a:21:b5:bb:d2:4d:1d:97:57:7f:2e:39:1b: 23:8b:2d:01:00:33:6e:22:13:2f:43:1d:2e:83:e5:39:80:96: ac:cd:98:50:18:b0:fa:9e:56:38:12:73:eb:f9:ce:2e:f7:f3: b8:2c:12:b6:ac:95:97:51:61:d9:03:ff:7c:ec:6a:e4:42:6d: 71:13:7a:c2:d2:0e:6e:42:a8:3c:47:28:2d:65:d9:cd:e2:23: ed:16:59:3d:bf:0f:d1:c0:21:3c:c8:f6:35:08:50:a3:63:62: cb:af:32:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc4M0QxMTAvBgNVBAUTKEFCOEVDNzVBMkEyMzU5NEY2RjJBRDMyN0IwRTZCQkMw QjBBQjlCRUUwHhcNMjQxMTIyMTc1NjAxWhcNMjQxMTI5MTc1NjAxWjAYMRYwFAYD VQQDEw02NzQwYzViMS1jZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmRcOIbfGecL61WtedcHlhGZgmATTRyEn12Mc0flBtV/K5/S6o4BUHezs78A nxLS20KUXEM5GB8z9PXVZUgeVrzTVVhdXKHsZhEwbHHfOeg2RrGk325asmMjQnd9 vjMrJmSO5WPCPdC/oBlkR/O9/fYQLp5IdV/pc4ADKvmuR+ihEBo0sPHIPBZG5QUs rSGDSVGM0y875/f4EJ1eq3qwGSBGf2axtend68qVcxcGIvrVawpQoBoTV43xp/dj 0LSKuC0oJMFLwXyRUBaqRU4tyoB6yZzEDKurZ9OkWD2CRd/4iGau1RjEW5FfJA/n 30a8e+67VBWOegnbhEmwSoU1JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhu8qZj OlYh0dgv/5EOhvGPmhhhMB8GA1UdIwQYMBaAFKuOx1oqI1lPbyrTJ7Dmu8Cwq5vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzgzRC8zMURGMURFRUI5 QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldVOXZLdE1uc09hN3dMQ3Jt LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E0N0hXaW9qV1U5dkt0TW5zT2E3d0xDcm0tNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzgzRC8zMURGMURFRUI5QjExMUU5OTkwQzA4NTJDNEY5QUUwMi9xNDdIV2lvaldV OXZLdE1uc09hN3dMQ3JtLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJvNnri24EczFqvF5YBXuPST5H6AUJAK/2nW5o8mF1oGEPO1A1lmmr JLWjTGjE59fNDnX5/iAFBQcWSaB44qejQ1rmZ3K2VZWFBslYfiMJ6q9LraLLcixj I9slGFMykiDxjm71BqqJrNez+TckxobtIkoVKKRTnUj7R74luFaYSKE521G8Izvs 2ZI18UccYJWunaJWQCohtbvSTR2XV38uORsjiy0BADNuIhMvQx0ug+U5gJaszZhQ GLD6nlY4EnPr+c4u9/O4LBK2rJWXUWHZA/987GrkQm1xE3rC0g5uQqg8RygtZdnN 4iPtFlk9vw/RwCE8yPY1CFCjY2LLrzI5 -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org