$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json) Hash identifier: OCZWZEHxuwy24nFrSOHgcPLjC5Y5InOulsXs4lgZE4Q= Subject key identifier: A4:51:4B:29:63:9B:1E:3D:50:9A:7F:D0:7B:65:89:D8:FD:6F:29:41 Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Certificate serial: 0418 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft Manifest number: 0412 Signing time: Fri 22 Nov 2024 23:58:56 +0000 Manifest this update: Fri 22 Nov 2024 23:58:56 +0000 Manifest next update: Fri 29 Nov 2024 23:58:56 +0000 Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: s+kr7LnN2Dvzm0mL1WlDSVzOjHKBG02fnIDi2bM3C3A=) 2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: yrgJiB4VmkkkL0wy5q4A23svX1r+S/7CECcoJjyrMso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1048 (0x418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA Validity Not Before: Nov 22 23:58:56 2024 GMT Not After : Nov 29 23:58:56 2024 GMT Subject: CN=67411ac0-300e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a1:0f:f6:24:cc:06:a0:0d:e7:e3:26:3d:72: 9b:a0:75:0f:92:0d:2a:f6:8e:8c:54:40:67:55:29: 24:82:41:c5:5d:1c:c0:91:82:ce:24:bd:eb:eb:ee: de:79:34:70:b9:18:81:99:ce:19:1e:fa:cb:1c:a6: 7e:85:f1:2c:3f:f9:5a:81:a4:57:e0:0f:0c:29:c3: ad:90:7a:3c:64:0e:0b:5b:12:e1:50:da:83:05:68: 18:c4:e8:c3:c8:9f:02:2b:98:40:d5:ba:c0:89:09: dd:9c:87:6b:da:6e:c5:07:07:03:b6:c1:dd:43:d8: 59:11:2d:f3:3f:f5:2d:a8:32:30:46:45:7a:ff:54: fa:78:90:d5:c3:fc:8c:b4:5d:01:c9:6a:74:d0:5c: 09:14:54:6b:da:a7:87:a3:a7:24:73:9a:ee:26:47: 16:8e:80:de:8c:4d:1d:dd:7a:0d:9d:0c:3f:29:a1: 94:56:5e:05:62:09:e7:1c:18:4c:8a:00:3e:ab:f8: 2b:14:82:8b:87:6a:07:4d:92:50:15:de:94:41:64: ff:e8:b4:cf:f8:76:e2:67:88:c6:c6:aa:21:b6:c8: 27:cd:86:cb:65:9d:42:69:6a:ee:42:e1:6a:be:69: 41:16:79:f3:7e:7b:26:1a:41:59:4a:93:e3:08:fc: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:51:4B:29:63:9B:1E:3D:50:9A:7F:D0:7B:65:89:D8:FD:6F:29:41 X509v3 Authority Key Identifier: keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:9c:19:ee:37:12:b5:65:19:58:87:50:b6:5e:8d:9c:b4:b8: 9b:9d:72:11:55:1f:d0:20:b3:dc:c4:fc:88:08:8d:99:b1:5b: 75:84:36:da:88:55:eb:5f:20:7c:6c:ff:7e:f8:4c:86:a5:b2: 0e:26:ee:9d:92:8e:e2:5e:4e:b9:06:25:21:43:43:cf:9c:37: e5:c9:6d:60:af:e5:18:6c:42:3c:02:6e:fa:3f:cb:88:d1:25: 08:e8:4f:eb:54:f4:8f:ee:65:46:63:70:bf:c8:c7:fc:fd:ba: e2:f6:1e:83:3c:02:85:02:c4:62:6a:5e:c5:f5:de:21:79:6b: 19:fe:b9:97:d7:8b:f4:cc:55:96:86:b4:af:81:69:ef:1d:e0: 54:49:cd:7b:df:c4:81:7b:d3:cc:55:e0:77:6b:13:72:12:3e: 8b:38:ba:ff:b8:f9:f3:e3:30:24:88:0f:c3:8e:b8:ee:8e:7e: 0f:92:e4:dd:e3:4d:e1:42:af:d0:95:34:3f:b8:ae:99:ac:a5: 9f:05:a7:8c:8c:a2:74:11:c5:05:27:81:f8:29:f6:5c:d1:7b: 04:c4:b4:5e:f8:74:22:1f:bd:88:65:4b:54:f0:c0:36:f8:07: 74:34:05:6c:2b:e3:0f:b3:1e:f9:0b:9e:fa:2f:f3:ae:7b:b9: aa:fd:0b:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RUMxMTAvBgNVBAUTKEQ1QzA0QTBBQzJENTJBREZFNzA1NTY0NzhEQ0IwRTFE ODFFRDEwREEwHhcNMjQxMTIyMjM1ODU2WhcNMjQxMTI5MjM1ODU2WjAYMRYwFAYD VQQDEw02NzQxMWFjMC0zMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyaEP9iTMBqAN5+MmPXKboHUPkg0q9o6MVEBnVSkkgkHFXRzAkYLOJL3r6+7e eTRwuRiBmc4ZHvrLHKZ+hfEsP/lagaRX4A8MKcOtkHo8ZA4LWxLhUNqDBWgYxOjD yJ8CK5hA1brAiQndnIdr2m7FBwcDtsHdQ9hZES3zP/UtqDIwRkV6/1T6eJDVw/yM tF0ByWp00FwJFFRr2qeHo6ckc5ruJkcWjoDejE0d3XoNnQw/KaGUVl4FYgnnHBhM igA+q/grFIKLh2oHTZJQFd6UQWT/6LTP+HbiZ4jGxqohtsgnzYbLZZ1CaWruQuFq vmlBFnnzfnsmGkFZSpPjCPw65QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRRSylj mx49UJp/0Htlidj9bylBMB8GA1UdIwQYMBaAFNXASgrC1Srf5wVWR43LDh2B7RDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRFQy9FQkY2MDFGQzQ4 Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0X25CVlpIamNzT0hZSHRF Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjQktDc0xWS3RfbkJWWkhqY3NPSFlIdEVOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRFQy9FQkY2MDFGQzQ4Q0YxMUVDQTY2NkIwM0VDNEY5QUUwMi8xY0JLQ3NMVkt0 X25CVlpIamNzT0hZSHRFTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHnBnuNxK1ZRlYh1C2Xo2ctLibnXIRVR/QILPcxPyICI2ZsVt1hDba iFXrXyB8bP9++EyGpbIOJu6dko7iXk65BiUhQ0PPnDflyW1gr+UYbEI8Am76P8uI 0SUI6E/rVPSP7mVGY3C/yMf8/bri9h6DPAKFAsRial7F9d4heWsZ/rmX14v0zFWW hrSvgWnvHeBUSc1738SBe9PMVeB3axNyEj6LOLr/uPnz4zAkiA/Djrjujn4PkuTd 403hQq/QlTQ/uK6ZrKWfBaeMjKJ0EcUFJ4H4KfZc0XsExLRe+HQiH72IZUtU8MA2 +Ad0NAVsK+MPsx75C576L/Oue7mq/Qud -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org