$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft File: 61l_6N8H6peZiwP4KDQ7yIda7Qg.mft (raw, json) Hash identifier: 9+LND2jcougRfkDuzZNrpvvfsFx7jsHef8M9aJMx/GM= Subject key identifier: 49:7A:CD:3C:D3:9F:AE:36:76:1C:80:3E:25:F2:AA:11:75:DA:80:9C Authority key identifier: EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08 Certificate issuer: /CN=A91FCF7C/serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08 Certificate serial: 05F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft Manifest number: 05F1 Signing time: Fri 22 Nov 2024 22:22:47 +0000 Manifest this update: Fri 22 Nov 2024 22:22:46 +0000 Manifest next update: Fri 29 Nov 2024 22:22:46 +0000 Files and hashes: 1: 61l_6N8H6peZiwP4KDQ7yIda7Qg.crl (hash: PETxLoO9h+pYoYu5wsN2XZpu4BPq89hPniVCrxcL1DE=) 2: EF31C4CC87CE11EBAA016A4BC4F9AE02.roa (hash: 1Np6q+KzS501yGbJmnak7Gn4lwm2tkNgIP8+p6JTg10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1525 (0x5f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF7C/serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08 Validity Not Before: Nov 22 22:22:46 2024 GMT Not After : Nov 29 22:22:46 2024 GMT Subject: CN=67410437-c0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:cb:a3:ec:12:bc:42:e6:50:6d:47:15:3c: f3:5e:7f:2d:99:e0:6f:d6:db:0f:d8:4d:24:be:36: 4c:2a:74:ee:fe:c2:89:24:a6:e7:cb:00:9c:0c:0c: b8:77:5d:21:92:f7:85:ce:b1:ba:ab:b0:58:41:be: 1d:06:ea:8a:c8:a8:06:8d:e0:6a:ef:13:d3:d5:45: ea:ad:9b:a7:ce:72:0a:05:54:ac:3f:de:83:9b:b7: f4:b4:bc:f6:b8:f8:5f:24:1e:95:40:4e:a4:ad:94: 47:ce:09:c5:56:03:fc:45:82:f5:fa:5e:fc:82:33: b6:fa:6a:32:ef:4f:68:d1:ab:80:4d:5e:80:d0:4a: 62:6e:1b:36:50:2e:c0:c3:69:28:7c:ad:3a:07:40: 74:9f:f3:9a:4a:c6:82:9f:85:6d:20:e4:9e:a0:47: b8:1d:cc:05:07:25:e3:ee:45:2d:22:65:48:5b:b6: 49:dc:98:bd:1b:49:90:79:02:5d:30:4c:e4:e8:00: 9c:56:ea:f0:cb:2e:da:1a:39:d8:72:db:da:7b:3d: a7:1d:de:06:58:1a:58:b6:49:15:2b:78:5e:d0:30: 7e:e4:d6:37:71:ed:fa:39:87:01:38:a7:36:f0:fb: b5:ac:33:25:5c:bd:1c:7c:47:35:d2:75:7f:86:f2: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7A:CD:3C:D3:9F:AE:36:76:1C:80:3E:25:F2:AA:11:75:DA:80:9C X509v3 Authority Key Identifier: keyid:EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:73:0b:32:1b:45:3b:05:b2:0e:1d:9c:87:25:4f:f0:19:cc: 29:c2:19:c3:ca:d8:b3:98:14:58:35:02:5d:77:11:48:da:33: 25:7f:41:9a:27:9d:6a:db:a5:56:2c:90:30:ca:f2:6e:39:cd: 6a:dd:5b:85:26:2f:b8:5c:5a:47:c3:f4:1d:99:65:35:ee:a6: 77:55:3a:cd:3c:22:c1:c1:7c:89:78:cf:4a:75:47:25:ae:84: 25:7a:9d:cb:22:3e:65:fd:96:29:fa:c5:ac:84:e6:91:66:0f: e3:19:93:95:95:8b:ce:79:4a:4d:10:36:e0:5b:cb:45:35:04: 96:b9:46:bd:5d:41:e4:e9:7d:b1:45:7b:03:6c:40:ba:58:1e: 03:52:cf:c5:3e:df:6e:da:bc:09:e3:0d:7b:e4:34:c1:2f:8f: f1:d4:63:0b:59:ae:34:fb:d9:5c:5c:d7:f9:ec:f2:5a:4c:f9: 7c:e7:1e:31:23:e1:f9:29:db:43:51:12:f9:7b:67:34:d3:6f: 8e:b3:c4:79:57:73:88:09:e3:c5:32:57:51:bd:06:be:85:b7: a6:54:c2:37:33:05:16:9b:79:57:28:96:45:a3:ef:56:14:a5: 06:53:92:08:6b:ac:39:7f:50:9c:70:b7:27:9f:25:c1:16:81: 19:d3:9d:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGN0MxMTAvBgNVBAUTKEVCNTk3RkU4REYwN0VBOTc5OThCMDNGODI4MzQzQkM4 ODc1QUVEMDgwHhcNMjQxMTIyMjIyMjQ2WhcNMjQxMTI5MjIyMjQ2WjAYMRYwFAYD VQQDEw02NzQxMDQzNy1jMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvO3Lo+wSvELmUG1HFTzzXn8tmeBv1tsP2E0kvjZMKnTu/sKJJKbnywCcDAy4 d10hkveFzrG6q7BYQb4dBuqKyKgGjeBq7xPT1UXqrZunznIKBVSsP96Dm7f0tLz2 uPhfJB6VQE6krZRHzgnFVgP8RYL1+l78gjO2+moy709o0auATV6A0Epibhs2UC7A w2kofK06B0B0n/OaSsaCn4VtIOSeoEe4HcwFByXj7kUtImVIW7ZJ3Ji9G0mQeQJd MEzk6ACcVurwyy7aGjnYctvaez2nHd4GWBpYtkkVK3he0DB+5NY3ce36OYcBOKc2 8Pu1rDMlXL0cfEc10nV/hvKUlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEl6zTzT n642dhyAPiXyqhF12oCcMB8GA1UdIwQYMBaAFOtZf+jfB+qXmYsD+Cg0O8iHWu0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y3Qy9DRDNCNzQ4Qzg3 Q0MxMUVCOTg0RkE3NDhDNEY5QUUwMi82MWxfNk44SDZwZVppd1A0S0RRN3lJZGE3 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxbF82TjhINnBlWml3UDRLRFE3eUlkYTdRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y3Qy9DRDNCNzQ4Qzg3Q0MxMUVCOTg0RkE3NDhDNEY5QUUwMi82MWxfNk44SDZw ZVppd1A0S0RRN3lJZGE3UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjcwsyG0U7BbIOHZyHJU/wGcwpwhnDytizmBRYNQJddxFI2jMlf0Ga J51q26VWLJAwyvJuOc1q3VuFJi+4XFpHw/QdmWU17qZ3VTrNPCLBwXyJeM9KdUcl roQlep3LIj5l/ZYp+sWshOaRZg/jGZOVlYvOeUpNEDbgW8tFNQSWuUa9XUHk6X2x RXsDbEC6WB4DUs/FPt9u2rwJ4w175DTBL4/x1GMLWa40+9lcXNf57PJaTPl85x4x I+H5KdtDURL5e2c002+Os8R5V3OICePFMldRvQa+hbemVMI3MwUWm3lXKJZFo+9W FKUGU5IIa6w5f1CccLcnnyXBFoEZ050h -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:38 2024 by rpki-client on console-fra.rpki-client.org