$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft File: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json) Hash identifier: beC51FDRLq0lrfB/jbOOa013MD3BBhXW1jjNqg3iGH8= Subject key identifier: 68:83:D1:0E:BB:23:B5:15:90:95:E3:F6:4B:C5:37:36:67:5C:DA:DE Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 Certificate issuer: /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft Manifest number: EA Signing time: Sat 23 Nov 2024 03:29:46 +0000 Manifest this update: Sat 23 Nov 2024 03:29:46 +0000 Manifest next update: Sat 30 Nov 2024 03:29:46 +0000 Files and hashes: 1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: 4HxBS9+wzgsIXSBvwUJ4p2yBnORaS084Xi1cekwzQiQ=) 2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: gAXQ6XOA3NODkbVV4z4rY8FPGvcx9W1CdIeenZ4k+xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Validity Not Before: Nov 23 03:29:46 2024 GMT Not After : Nov 30 03:29:46 2024 GMT Subject: CN=67414c2a-63fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:40:4a:28:f0:19:cd:3d:ed:f6:fa:54:3e: 05:03:7e:f8:45:c6:65:d7:47:e3:db:fd:81:7b:20: 23:32:0e:ce:03:53:57:c5:44:23:67:eb:60:96:03: 19:0f:2b:3e:c3:4c:fc:0e:a6:46:4e:e8:da:71:71: c7:c5:61:0c:01:0a:45:2d:d7:a2:c8:1d:b6:d2:a7: b4:73:5f:2b:12:d0:3a:0f:d3:ae:32:eb:29:18:d5: aa:f6:9d:f0:88:af:d0:a5:e4:8c:9b:5f:87:aa:8d: 2a:fe:41:ff:3c:e6:0b:3a:21:80:85:d7:a1:90:07: e8:54:96:9e:e9:03:15:cd:d2:c6:14:1c:dc:66:8b: d2:6d:49:82:44:9f:d2:61:ad:39:f2:32:a1:f1:bc: 7b:01:66:23:c9:fa:f7:36:ba:45:c9:3d:82:fe:58: 35:c0:80:54:dd:ea:7a:da:e9:08:a1:3d:07:8c:d0: 22:ca:66:b4:e0:78:07:4a:25:c4:e8:dd:3d:76:f5: a3:a0:ac:83:f2:9f:80:8c:90:43:1a:45:27:22:32: a4:01:18:12:84:9d:ff:d5:5b:cf:29:80:13:38:95: 95:4a:6b:df:25:93:90:75:b0:75:39:fd:51:b1:7e: bb:bb:b0:dc:8f:87:d9:70:0d:0d:cd:b0:09:08:ab: ed:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:83:D1:0E:BB:23:B5:15:90:95:E3:F6:4B:C5:37:36:67:5C:DA:DE X509v3 Authority Key Identifier: keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:8e:cf:e0:31:82:0e:66:19:0d:44:9d:d0:25:4f:26:e4:55: 3e:07:51:f4:b4:1f:f7:0c:dd:91:77:4e:e6:71:35:1a:73:7b: 5d:98:ec:5f:0c:55:3e:b9:8b:b2:f7:ad:c9:ff:75:c1:87:b9: 57:c8:62:86:c6:f2:5c:27:02:3c:91:d2:65:72:f5:ef:39:b2: fe:b9:5c:41:1e:86:c2:a2:ef:ae:5c:b3:42:17:06:63:d9:13: d0:45:ac:2b:75:37:6f:ef:3f:45:1b:1a:bb:2e:60:e2:5d:db: 7b:a5:4a:9c:35:7c:08:81:f3:b6:35:81:d0:41:c4:b3:5a:ce: 3c:25:fc:82:74:81:21:11:4c:cf:57:96:69:28:f2:db:dd:ec: f1:1d:25:0a:b9:c4:01:39:97:b2:b3:50:9c:ef:27:41:1b:b5: 37:41:fb:7c:b0:ff:10:aa:7b:c6:ee:75:d1:fe:66:9e:50:1c: 8f:80:cc:31:e6:3e:30:4e:c9:c8:a1:61:1b:16:56:01:11:73: c6:23:14:6a:89:c7:b7:ce:a9:0c:73:01:0a:65:d4:6e:16:89: 59:14:46:be:d3:53:38:46:95:19:e3:58:ca:bc:df:d3:95:e7: 4f:ff:d3:9f:16:7e:15:65:3e:81:9e:46:9f:66:4c:29:5a:bb: 66:e2:7d:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2RTUxMTAvBgNVBAUTKDczOTg3RUNDRTc3RTQ0RUIzNjY1MUUwOThEMzM3NTBG QTg2NEU2NzYwHhcNMjQxMTIzMDMyOTQ2WhcNMjQxMTMwMDMyOTQ2WjAYMRYwFAYD VQQDEw02NzQxNGMyYS02M2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9RASijwGc097fb6VD4FA374RcZl10fj2/2BeyAjMg7OA1NXxUQjZ+tglgMZ Dys+w0z8DqZGTujacXHHxWEMAQpFLdeiyB220qe0c18rEtA6D9OuMuspGNWq9p3w iK/QpeSMm1+Hqo0q/kH/POYLOiGAhdehkAfoVJae6QMVzdLGFBzcZovSbUmCRJ/S Ya058jKh8bx7AWYjyfr3NrpFyT2C/lg1wIBU3ep62ukIoT0HjNAiyma04HgHSiXE 6N09dvWjoKyD8p+AjJBDGkUnIjKkARgShJ3/1VvPKYATOJWVSmvfJZOQdbB1Of1R sX67u7Dcj4fZcA0NzbAJCKvtZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiD0Q67 I7UVkJXj9kvFNzZnXNreMB8GA1UdIwQYMBaAFHOYfsznfkTrNmUeCY0zdQ+oZOZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZFNS81MUY5ODM1QzQ2 RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJPczJaUjRKalROMUQ2aGs1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1aC16T2QtUk9zMlpSNEpqVE4xRDZoazVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZFNS81MUY5ODM1QzQ2RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJP czJaUjRKalROMUQ2aGs1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnjs/gMYIOZhkNRJ3QJU8m5FU+B1H0tB/3DN2Rd07mcTUac3tdmOxf DFU+uYuy963J/3XBh7lXyGKGxvJcJwI8kdJlcvXvObL+uVxBHobCou+uXLNCFwZj 2RPQRawrdTdv7z9FGxq7LmDiXdt7pUqcNXwIgfO2NYHQQcSzWs48JfyCdIEhEUzP V5ZpKPLb3ezxHSUKucQBOZeys1Cc7ydBG7U3Qft8sP8QqnvG7nXR/maeUByPgMwx 5j4wTsnIoWEbFlYBEXPGIxRqice3zqkMcwEKZdRuFolZFEa+01M4RpUZ41jKvN/T ledP/9OfFn4VZT6BnkafZkwpWrtm4n0n -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org