$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json) Hash identifier: ydXw2rGZo0M3EbzrX6XQZ2Pl4oRVr/DkJboAZgpIvQE= Subject key identifier: 19:F3:97:9E:C6:E5:7A:37:86:42:B6:4A:0E:38:76:FE:31:A8:D3:14 Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 05D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft Manifest number: 05B9 Signing time: Fri 22 Nov 2024 22:43:41 +0000 Manifest this update: Fri 22 Nov 2024 22:43:41 +0000 Manifest next update: Fri 29 Nov 2024 22:43:41 +0000 Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: TebcIw4C2UZMMwvZmckVIdc+wumEkWiD0ikXEGvy2Cg=) 2: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: apLdblhrz6YyStUbSoSCzL9c+6GMVbSzf8gMIFt1QZk=) 3: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: X7SuxUReIhtEeuRuataRkcxsMjFsDM5LgmkcsMvaDtY=) 4: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: kct2b7luZDVQOa8YrqBwyvHjQUSitXwj0nspiCjY8kY=) 5: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: rBIm6jqwZwJQbjfxJkkUqCHv7S2T/a+V2ct0xr99PXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1489 (0x5d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Validity Not Before: Nov 22 22:43:41 2024 GMT Not After : Nov 29 22:43:41 2024 GMT Subject: CN=6741091d-554e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:78:3b:11:dc:17:aa:43:14:d5:3a:7e:31: 01:2b:08:aa:20:21:5e:4c:43:73:5e:06:52:d4:19: 19:ac:ee:2f:1d:72:f7:1b:e2:ee:e0:20:af:a0:f3: 3d:75:5f:e5:37:67:b6:b9:71:13:8c:8b:95:1d:d6: 16:b9:9a:3f:d7:dc:18:cc:50:85:ee:c0:07:92:2b: f4:c2:bb:92:ae:ba:d0:9e:a7:43:72:ee:6d:0b:27: 93:0f:a5:9f:4f:fc:d2:c4:ff:05:52:f6:6a:76:fd: 40:2f:01:3e:d9:c6:b9:80:10:e7:7b:80:9e:a5:c2: ab:4f:55:f9:31:f8:3b:8a:2f:db:42:ab:62:5e:b8: 25:1d:60:af:21:02:89:5b:c8:fc:cf:20:5c:57:25: f8:9e:c4:d6:e1:dd:78:c9:48:96:c3:9a:ba:3b:fc: 85:a7:4a:33:d1:27:a4:50:df:ac:29:94:27:43:bc: 9d:d4:86:28:1d:c2:13:7c:6d:44:a2:c1:0b:f8:2e: 53:a5:0e:55:d7:be:44:92:c0:fb:0a:3a:22:fa:71: 8f:3c:d8:54:c6:47:b8:4b:9e:cf:21:c3:ea:6d:3d: 77:c2:41:32:65:b5:f8:60:d1:df:25:bc:f8:c8:c5: c9:8e:03:12:dd:e7:75:a5:60:e2:0e:ff:3d:66:29: b1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F3:97:9E:C6:E5:7A:37:86:42:B6:4A:0E:38:76:FE:31:A8:D3:14 X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:e8:60:2d:0b:e5:27:dd:e8:e7:49:2f:8c:cc:66:78:b9:d3: 0c:4e:69:36:7f:be:cb:fc:35:87:9b:75:40:00:ff:44:6d:77: 75:76:9a:a4:b5:fb:ba:e1:57:6d:a4:e8:9e:f4:5c:fd:99:e6: 0c:1e:82:a3:64:8f:42:0e:cc:6b:87:55:02:db:ab:0e:d4:36: 8d:6e:ca:5a:50:82:cb:1e:cd:f3:21:32:d3:f3:c7:14:a3:4b: c5:c0:c1:41:18:6c:9f:07:26:3d:be:76:98:df:c1:53:ce:8f: 04:f3:b0:3f:ef:09:61:3a:43:9d:af:1f:ce:d5:55:86:11:a7: 6c:ed:6c:2b:7c:73:e7:88:18:06:e4:bc:d6:55:5d:f8:25:85: cd:3e:b1:10:c0:b4:b4:ef:5a:43:6c:a3:d8:7c:20:41:97:ff: da:40:d3:c2:9b:51:3a:7d:75:9e:f5:40:a0:18:22:5c:7f:9b: b0:12:c0:ec:3a:63:8f:32:c0:ae:75:63:90:b9:77:fd:c4:c8: 83:ce:66:d7:c2:62:8d:8d:24:41:1d:47:5e:f7:e2:4b:b0:21: 04:22:f5:3b:8e:02:82:0b:3a:71:fc:f8:4c:26:95:8d:f9:2b: 89:fa:e6:c8:c2:e4:ec:75:c4:61:33:e5:99:de:8f:e3:07:b5: d0:c8:a1:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjQxMTIyMjI0MzQxWhcNMjQxMTI5MjI0MzQxWjAYMRYwFAYD VQQDEw02NzQxMDkxZC01NTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsk54OxHcF6pDFNU6fjEBKwiqICFeTENzXgZS1BkZrO4vHXL3G+Lu4CCvoPM9 dV/lN2e2uXETjIuVHdYWuZo/19wYzFCF7sAHkiv0wruSrrrQnqdDcu5tCyeTD6Wf T/zSxP8FUvZqdv1ALwE+2ca5gBDne4CepcKrT1X5Mfg7ii/bQqtiXrglHWCvIQKJ W8j8zyBcVyX4nsTW4d14yUiWw5q6O/yFp0oz0SekUN+sKZQnQ7yd1IYoHcITfG1E osEL+C5TpQ5V175EksD7Cjoi+nGPPNhUxke4S57PIcPqbT13wkEyZbX4YNHfJbz4 yMXJjgMS3ed1pWDiDv89ZimxLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnzl57G 5Xo3hkK2Sg44dv4xqNMUMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjRENC8xQTZFNzUxQ0E3MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNp NUxmLVFMYS16djBYQmF6OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy6GAtC+Un3ejnSS+MzGZ4udMMTmk2f77L/DWHm3VAAP9EbXd1dpqk tfu64VdtpOie9Fz9meYMHoKjZI9CDsxrh1UC26sO1DaNbspaUILLHs3zITLT88cU o0vFwMFBGGyfByY9vnaY38FTzo8E87A/7wlhOkOdrx/O1VWGEads7WwrfHPniBgG 5LzWVV34JYXNPrEQwLS071pDbKPYfCBBl//aQNPCm1E6fXWe9UCgGCJcf5uwEsDs OmOPMsCudWOQuXf9xMiDzmbXwmKNjSRBHUde9+JLsCEEIvU7jgKCCzpx/PhMJpWN +SuJ+ubIwuTsdcRhM+WZ3o/jB7XQyKFa -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org