$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: pRmPyV+4goC8mDtIZvj37T2YPVPxoxHBDRiUEQiMkgc= Subject key identifier: CC:45:44:51:EE:04:D7:37:0F:88:CC:F9:68:39:D1:39:EC:F8:15:47 Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 0963 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 095D Signing time: Fri 22 Nov 2024 19:55:54 +0000 Manifest this update: Fri 22 Nov 2024 19:55:54 +0000 Manifest next update: Fri 29 Nov 2024 19:55:54 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: P97qttGbPL/crC8KOGB21OtaihNh7/g8SFCfhJDcfwo=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: 8UoETv43NCbg359unaKa056KSfIsJT8AiDvuudbYvko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2403 (0x963) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: Nov 22 19:55:54 2024 GMT Not After : Nov 29 19:55:54 2024 GMT Subject: CN=6740e1ca-caca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:9c:bc:a7:e5:7b:01:45:c0:e8:4e:86:02: 86:77:ba:c9:c5:3c:8f:11:83:34:75:fc:4a:0f:bb: 0a:91:83:fd:f2:a0:39:c6:75:d1:a0:03:73:a5:28: df:4f:2c:dd:c9:85:86:43:3b:7b:99:bc:71:15:ff: 73:a3:de:b3:23:cb:98:ed:38:24:e2:ab:04:34:3f: af:d0:07:93:73:0e:f8:52:e3:93:e1:72:98:b5:78: 6f:d8:30:37:85:73:f6:9d:c0:34:f8:18:f6:7b:97: 82:b4:0d:ef:4c:0e:0e:7f:6a:c2:0a:61:cb:6f:1e: 00:74:09:7a:af:7d:d9:9b:6a:25:af:1b:a4:c8:4b: a0:de:1c:1b:2e:74:7b:e8:37:a6:72:14:f3:17:77: d2:4d:e5:5f:d5:c3:8d:61:65:f3:1b:cc:8e:17:61: c3:1f:4a:ca:37:b5:06:9e:ce:10:cf:0f:a6:ec:57: 09:78:8b:9d:8c:b8:f6:fe:a7:09:20:6c:72:f0:f3: b0:86:a3:51:08:f0:1e:12:b6:15:54:15:05:78:26: 73:8f:dd:d9:6a:c4:be:09:f4:a5:f6:b1:85:2e:7a: 4a:5a:83:f2:db:67:ae:9d:70:8f:a8:c2:b0:e5:46: 06:cc:0d:0c:31:71:c8:6a:5f:8a:3e:ee:50:89:ae: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:45:44:51:EE:04:D7:37:0F:88:CC:F9:68:39:D1:39:EC:F8:15:47 X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e3:ba:c4:72:76:30:89:2b:ed:07:ca:59:8c:4a:0c:43:96: b8:49:c9:c8:b1:fa:73:ab:3c:a0:21:4c:5d:c3:ae:a0:07:a1: 0f:bf:e5:71:d2:91:3f:23:88:47:9b:83:c2:43:5d:3b:c4:38: 55:a2:6c:06:97:98:03:25:c1:e2:08:e1:63:df:db:41:a4:00: bc:5e:3b:f9:71:4b:72:9f:8a:f0:04:19:c5:25:16:6c:60:6d: e4:96:9e:65:76:ab:5b:2b:14:10:7f:c3:8e:15:78:dd:a0:0e: d4:78:97:6f:4d:70:14:65:9c:bb:a9:32:c5:c4:d8:58:f0:75: 67:fc:0d:1f:e4:fb:6b:0d:a2:90:92:7e:c3:d2:26:05:3b:83: a1:5a:80:bc:30:02:34:69:2e:2f:ab:48:f1:5f:1b:a2:8c:6c: b5:c9:2b:30:3a:a8:d2:07:b8:7c:40:54:6c:86:9e:3f:cb:2e: b5:7d:74:2b:3e:37:bc:df:5d:59:76:a6:ec:66:9a:23:d1:48: 68:2c:34:0f:91:e4:d1:4a:15:4e:4d:6e:5c:ab:1c:95:a2:9b: 5f:34:97:9c:b1:b9:2d:e2:49:41:ed:7b:39:41:a7:82:df:e3: 4e:23:9c:77:4b:65:bf:6d:8c:d0:fb:2c:69:e2:33:c3:06:38: 4a:3e:41:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjQxMTIyMTk1NTU0WhcNMjQxMTI5MTk1NTU0WjAYMRYwFAYD VQQDEw02NzQwZTFjYS1jYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1OcvKflewFFwOhOhgKGd7rJxTyPEYM0dfxKD7sKkYP98qA5xnXRoANzpSjf TyzdyYWGQzt7mbxxFf9zo96zI8uY7Tgk4qsEND+v0AeTcw74UuOT4XKYtXhv2DA3 hXP2ncA0+Bj2e5eCtA3vTA4Of2rCCmHLbx4AdAl6r33Zm2olrxukyEug3hwbLnR7 6DemchTzF3fSTeVf1cONYWXzG8yOF2HDH0rKN7UGns4Qzw+m7FcJeIudjLj2/qcJ IGxy8POwhqNRCPAeErYVVBUFeCZzj93ZasS+CfSl9rGFLnpKWoPy22eunXCPqMKw 5UYGzA0MMXHIal+KPu5Qia6+mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxFRFHu BNc3D4jM+Wg50Tns+BVHMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA847rEcnYwiSvtB8pZjEoMQ5a4ScnIsfpzqzygIUxdw66gB6EPv+Vx 0pE/I4hHm4PCQ107xDhVomwGl5gDJcHiCOFj39tBpAC8Xjv5cUtyn4rwBBnFJRZs YG3klp5ldqtbKxQQf8OOFXjdoA7UeJdvTXAUZZy7qTLFxNhY8HVn/A0f5PtrDaKQ kn7D0iYFO4OhWoC8MAI0aS4vq0jxXxuijGy1ySswOqjSB7h8QFRshp4/yy61fXQr Pje8311ZdqbsZpoj0UhoLDQPkeTRShVOTW5cqxyVoptfNJecsbkt4klB7Xs5QaeC 3+NOI5x3S2W/bYzQ+yxp4jPDBjhKPkEt -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org