$ rpki-client -vvf rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft File: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft (raw, json) Hash identifier: Qvquz7L5A/DTvDRMELL2aeCeWEkB+wJ/kigKhottFb8= Subject key identifier: 4E:E3:7F:C3:23:F0:B1:60:95:96:EC:F1:44:DB:EB:AF:D9:BC:C5:7C Authority key identifier: D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 Certificate issuer: /CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft Manifest number: 4B Signing time: Fri 27 Sep 2024 05:53:19 +0000 Manifest this update: Fri 27 Sep 2024 05:53:19 +0000 Manifest next update: Fri 04 Oct 2024 05:53:19 +0000 Files and hashes: 1: 1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl (hash: RmhjOl2bvTgPhMyLm+Efo7d/zqJwrxxZYNdp+5kSWqY=) 2: 4B0C31680FA511EFA3249B35C4F9AE02.roa (hash: I+MzgbGQV3Ix84rdhaAbWOK+GMavwSb8VU8kMKlSBXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Oct 2024 05:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91311BC/serialNumber=D4B1DD3EB1A06FA262AB6C5EBF4AF53671ACD2F4 Validity Not Before: Sep 27 05:53:19 2024 GMT Not After : Oct 4 05:53:19 2024 GMT Subject: CN=66f6484f-b39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:51:ff:52:4a:79:0e:4b:23:25:0d:f7:5b:21: 83:ca:8b:a7:a3:ad:fa:59:07:c8:46:c1:4b:3c:f9: fe:fa:67:c2:a5:1d:87:82:f8:dd:64:44:2d:f7:df: 3f:63:1b:0b:47:df:22:9a:f3:47:bb:46:dd:91:f5: 8e:9f:af:f3:e9:ea:6d:1c:78:7c:3d:99:39:c8:01: 3d:b3:76:5a:84:5e:71:16:04:5a:0e:8a:d0:c2:9a: 10:55:89:a8:f9:72:ec:47:8c:16:36:dd:24:eb:0b: 13:20:05:77:b0:03:19:ae:0a:bf:2d:27:e6:5c:89: 65:16:8c:ec:3b:a4:c4:d8:7c:f7:f5:6c:71:c9:a3: 5b:6b:07:f4:b7:69:ea:fb:ed:d5:70:d3:14:a6:a2: 3f:73:06:32:c3:f2:ed:bd:1a:c8:f4:fd:de:31:71: 79:f2:b3:62:c2:d4:38:7c:27:a1:e8:ad:f7:ad:02: d2:da:13:9a:86:21:b9:e2:90:43:86:53:e1:06:65: 91:5f:fa:12:52:c3:5e:53:25:8e:e4:ed:59:d8:40: 15:46:8d:69:6e:16:a9:03:1b:de:0d:14:8d:d3:51: 53:57:d3:65:67:86:25:2c:80:14:06:96:8f:75:ce: f8:dd:de:39:1a:38:b0:7a:e4:74:9e:eb:f2:8a:dd: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E3:7F:C3:23:F0:B1:60:95:96:EC:F1:44:DB:EB:AF:D9:BC:C5:7C X509v3 Authority Key Identifier: keyid:D4:B1:DD:3E:B1:A0:6F:A2:62:AB:6C:5E:BF:4A:F5:36:71:AC:D2:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91311BC/05EEABFC0FA411EFA3AA8D33C4F9AE02/1LHdPrGgb6Jiq2xev0r1NnGs0vQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:65:8f:b2:d3:9d:01:36:20:34:70:f8:1e:20:90:f5:34:ba: fd:ed:54:86:dd:0e:94:98:60:50:4b:cc:f5:e6:5e:71:65:4a: 0b:51:b7:14:54:f6:b0:61:5e:82:8f:a3:af:48:59:e3:0b:e8: df:ee:9e:fe:14:49:97:e8:bd:7b:40:11:9a:13:ad:bc:54:76: ee:1f:b2:31:ad:48:80:d0:93:fb:79:a9:18:ed:75:65:4e:ef: 1f:03:ed:e2:43:ac:3b:19:6e:1c:10:14:eb:a6:7a:3b:d1:a5: 91:5a:7d:c7:8a:18:81:f9:77:a7:0e:12:8d:7c:2f:0a:34:48: c7:a6:11:68:57:4e:b5:85:0e:73:64:58:b5:bd:53:86:b2:05: 58:b0:83:af:a5:8d:4d:f2:ea:40:9c:53:e2:12:f5:c2:aa:86: a7:9c:b6:95:9c:d2:80:27:9b:0a:a5:ea:61:7d:f1:64:de:19: 68:13:82:07:fc:dd:dd:e7:45:36:1a:fd:c7:e0:6a:fc:09:68: db:82:ad:b2:fd:0d:77:ee:82:92:fa:1d:c5:35:10:6c:2b:8d: 0f:c7:0f:af:42:e0:09:e8:a3:be:44:99:0d:58:27:eb:27:cb: f2:f4:69:9a:39:0c:ca:95:c5:57:6e:4b:63:f6:b5:06:a6:31: 09:97:3d:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTFCQzExMC8GA1UEBRMoRDRCMUREM0VCMUEwNkZBMjYyQUI2QzVFQkY0QUY1MzY3 MUFDRDJGNDAeFw0yNDA5MjcwNTUzMTlaFw0yNDEwMDQwNTUzMTlaMBgxFjAUBgNV BAMTDTY2ZjY0ODRmLWIzOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Uf9SSnkOSyMlDfdbIYPKi6ejrfpZB8hGwUs8+f76Z8KlHYeC+N1kRC333z9j GwtH3yKa80e7Rt2R9Y6fr/Pp6m0ceHw9mTnIAT2zdlqEXnEWBFoOitDCmhBViaj5 cuxHjBY23STrCxMgBXewAxmuCr8tJ+ZciWUWjOw7pMTYfPf1bHHJo1trB/S3aer7 7dVw0xSmoj9zBjLD8u29Gsj0/d4xcXnys2LC1Dh8J6HorfetAtLaE5qGIbnikEOG U+EGZZFf+hJSw15TJY7k7VnYQBVGjWluFqkDG94NFI3TUVNX02VnhiUsgBQGlo91 zvjd3jkaOLB65HSe6/KK3WitAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTuN/wyPw sWCVluzxRNvrr9m8xXwwHwYDVR0jBBgwFoAU1LHdPrGgb6Jiq2xev0r1NnGs0vQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMUJDLzA1RUVBQkZDMEZB NDExRUZBM0FBOEQzM0M0RjlBRTAyLzFMSGRQckdnYjZKaXEyeGV2MHIxTm5HczB2 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUxIZFByR2diNkppcTJ4ZXYwcjFObkdzMHZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MUJDLzA1RUVBQkZDMEZBNDExRUZBM0FBOEQzM0M0RjlBRTAyLzFMSGRQckdnYjZK aXEyeGV2MHIxTm5HczB2US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE1lj7LTnQE2IDRw+B4gkPU0uv3tVIbdDpSYYFBLzPXmXnFlSgtRtxRU 9rBhXoKPo69IWeML6N/unv4USZfovXtAEZoTrbxUdu4fsjGtSIDQk/t5qRjtdWVO 7x8D7eJDrDsZbhwQFOumejvRpZFafceKGIH5d6cOEo18Lwo0SMemEWhXTrWFDnNk WLW9U4ayBViwg6+ljU3y6kCcU+IS9cKqhqectpWc0oAnmwql6mF98WTeGWgTggf8 3d3nRTYa/cfgavwJaNuCrbL9DXfugpL6HcU1EGwrjQ/HD69C4Anoo75EmQ1YJ+sn y/L0aZo5DMqVxVduS2P2tQamMQmXPf4= -----END CERTIFICATE-----Generated at Fri Sep 27 07:39:55 2024 by rpki-client on console-fra.rpki-client.org