$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json) Hash identifier: UIJ559nGlooNg8qyc7CiXg4LLf5gTJfMgpsK7U1iDns= Subject key identifier: 37:27:08:95:CD:45:B3:20:FD:1D:4C:CE:CB:38:87:F0:E9:F9:D6:0F Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Certificate serial: 094A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft Manifest number: 0941 Signing time: Fri 22 Nov 2024 20:00:39 +0000 Manifest this update: Fri 22 Nov 2024 20:00:38 +0000 Manifest next update: Fri 29 Nov 2024 20:00:38 +0000 Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: dh9CsZf31SvlrOFWzFl0ObDKy/YWHDiZHBDg612Wuiw=) 2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: sYwVE1L2S9DVLlLPiPsujA+9SMHdkm/oUQt4rK/izSo=) 3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: w4J4xAuvdERMPvfOUQHJ8THCJMJLk8tx9s5ftfLsDas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2378 (0x94a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Validity Not Before: Nov 22 20:00:38 2024 GMT Not After : Nov 29 20:00:38 2024 GMT Subject: CN=6740e2e7-eafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:28:0b:c1:68:1f:15:ef:64:c9:17:ce:83: ba:48:a2:5e:56:82:d5:61:fb:35:c9:23:13:8d:65: 4f:3d:74:18:49:ac:61:38:db:7a:75:bf:d0:e5:2b: d0:cc:48:06:7c:87:e7:d6:74:6d:18:ae:df:e5:9e: 39:25:9e:41:83:f7:56:06:3b:77:a1:ac:c5:fc:2c: 57:49:8c:c7:e3:8b:f9:1b:ac:cd:86:d3:05:08:11: fa:17:36:c0:99:9a:fb:62:e7:37:0e:e6:3d:cc:e6: bf:f1:23:7d:27:2a:f3:a1:36:dc:9b:35:36:3e:4b: 54:a9:27:08:11:0b:d9:76:bd:71:b6:66:02:9b:a1: 79:01:74:33:5e:7f:c2:cf:bb:ea:65:f4:c7:a5:2f: b2:8b:ee:0f:36:c6:f4:77:0e:8e:83:83:77:51:19: d3:66:49:85:4f:4a:ba:2e:85:dc:0d:f2:5c:4f:de: 4b:21:04:6c:b1:9b:3d:37:8a:df:e8:d4:84:49:b2: 3a:6b:61:78:50:1a:22:c9:09:00:9d:6c:6d:b4:44: 52:52:f2:68:89:88:27:a0:7e:97:17:1c:bc:09:31: ac:b0:b7:f3:33:ab:42:f1:f4:07:f0:f2:46:6b:d5: f8:e7:78:bb:d1:b1:50:44:81:85:00:b7:d9:71:45: 10:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:27:08:95:CD:45:B3:20:FD:1D:4C:CE:CB:38:87:F0:E9:F9:D6:0F X509v3 Authority Key Identifier: keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:19:6a:e1:e7:01:c7:c6:20:ae:8a:05:0f:1c:bf:6d:d8:8d: 00:a6:14:3a:1e:ac:c9:fb:02:d4:90:2a:ec:38:47:75:d3:f9: e5:2b:cf:1a:67:4c:47:a5:75:f0:6d:8e:8f:22:e8:01:59:e6: ff:d8:18:84:c6:0d:e6:d2:18:5d:63:80:75:4e:b8:b9:1a:b5: 4b:33:09:68:4b:c3:5c:b7:9a:cd:14:a6:5c:81:7b:c6:63:d3: 5f:8d:82:8e:91:75:d7:fe:5b:54:03:30:4f:ae:18:cf:65:56: 4f:09:11:a1:1e:90:e2:fc:ad:7b:2e:2d:c7:ed:27:b9:ba:a6: 14:95:1f:93:41:0a:ab:a6:e8:a2:87:9e:6a:af:8e:4a:28:ed: b1:aa:50:85:7a:36:08:90:45:58:3b:a5:97:2d:b6:41:25:4b: 63:e7:73:cd:74:f8:01:6d:35:18:a6:66:c8:f6:e8:48:d6:06: 08:14:3a:48:ad:a0:ba:bb:a0:4e:0b:b2:26:58:20:7e:d2:12: 98:f2:45:e1:3b:2c:42:e3:5b:8b:2b:d6:81:3c:a2:34:e8:2a: 32:d3:61:15:1b:c7:3a:00:62:ac:c4:08:43:7b:42:d3:90:d5: ed:55:3c:88:2a:c9:3f:74:2a:a4:8f:02:08:4b:bb:fb:af:ed: f4:68:cf:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0 RjdBQzQ2MzkwHhcNMjQxMTIyMjAwMDM4WhcNMjQxMTI5MjAwMDM4WjAYMRYwFAYD VQQDEw02NzQwZTJlNy1lYWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApY4oC8FoHxXvZMkXzoO6SKJeVoLVYfs1ySMTjWVPPXQYSaxhONt6db/Q5SvQ zEgGfIfn1nRtGK7f5Z45JZ5Bg/dWBjt3oazF/CxXSYzH44v5G6zNhtMFCBH6FzbA mZr7Yuc3DuY9zOa/8SN9JyrzoTbcmzU2PktUqScIEQvZdr1xtmYCm6F5AXQzXn/C z7vqZfTHpS+yi+4PNsb0dw6Og4N3URnTZkmFT0q6LoXcDfJcT95LIQRssZs9N4rf 6NSESbI6a2F4UBoiyQkAnWxttERSUvJoiYgnoH6XFxy8CTGssLfzM6tC8fQH8PJG a9X453i70bFQRIGFALfZcUUQFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcnCJXN RbMg/R1Mzss4h/Dp+dYPMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5 MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ TFpYNFJIcW51YnRQZXNSamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeGWrh5wHHxiCuigUPHL9t2I0AphQ6HqzJ+wLUkCrsOEd10/nlK88a Z0xHpXXwbY6PIugBWeb/2BiExg3m0hhdY4B1Tri5GrVLMwloS8Nct5rNFKZcgXvG Y9NfjYKOkXXX/ltUAzBPrhjPZVZPCRGhHpDi/K17Li3H7Se5uqYUlR+TQQqrpuii h55qr45KKO2xqlCFejYIkEVYO6WXLbZBJUtj53PNdPgBbTUYpmbI9uhI1gYIFDpI raC6u6BOC7ImWCB+0hKY8kXhOyxC41uLK9aBPKI06Coy02EVG8c6AGKsxAhDe0LT kNXtVTyIKsk/dCqkjwIIS7v7r+30aM+R -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org