$ rpki-client -vvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft File: c5FNFBChzT-FrR4bClD_P4vWDBA.mft (raw, json) Hash identifier: 3FMnLjbG8fFUKYzhcmDmvDG3Utm2Tgf5m1qmnkjLZ0Y= Subject key identifier: 78:E8:AA:E5:72:73:48:E9:DB:CA:B6:12:A7:A5:D7:9C:24:C2:4C:54 Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 Certificate issuer: /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Certificate serial: 02E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft Manifest number: 02E1 Signing time: Thu 21 Nov 2024 00:52:35 +0000 Manifest this update: Thu 21 Nov 2024 00:52:35 +0000 Manifest next update: Thu 28 Nov 2024 00:52:35 +0000 Files and hashes: 1: c5FNFBChzT-FrR4bClD_P4vWDBA.crl (hash: pf38SePspnPWCn6Py6Y+HpYv/c4E/LoCh1cASkpxqME=) 2: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (hash: Py8gHJNmqLpByr4I29rw6Mm8G9sMV9RnjA0oEGne9CY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Validity Not Before: Nov 21 00:52:35 2024 GMT Not After : Nov 28 00:52:35 2024 GMT Subject: CN=673e8453-a788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:86:63:43:43:ba:e5:3f:24:d9:be:3b:f3:25: ab:b2:c5:19:28:a4:0c:bf:9b:82:c7:68:16:a7:8c: b1:d3:c3:15:42:10:6d:e0:17:0d:94:e5:93:e3:87: 40:77:e9:97:4a:9b:d6:3a:d4:3a:7f:70:e3:5a:72: a6:1c:3e:5c:b6:c3:5b:57:a5:68:6d:ff:a2:19:18: 0b:d7:d1:d9:b0:e7:c9:2e:e4:e5:7c:c4:5f:f8:ab: a1:e8:df:b2:91:d0:f6:11:71:ac:f1:a2:b9:11:78: 08:ac:06:3f:95:56:fe:67:0f:62:61:2c:e7:f2:9c: 92:74:c8:0e:f5:af:92:43:42:bc:3b:f1:b4:92:d3: 35:87:f8:24:0b:37:72:9e:61:15:3f:60:a4:86:6e: 24:6f:1f:ce:f7:f6:0b:bc:23:e9:7f:76:bd:7c:cb: e5:4b:47:9d:28:fa:ac:5e:2d:fa:63:79:0b:e1:bc: 84:0c:54:06:0b:53:c9:fa:33:c7:5a:ff:d7:a6:85: fb:02:4c:58:79:83:16:f0:be:12:b1:1e:84:d0:72: cd:df:31:03:b1:f6:7a:de:6c:da:f4:5d:6d:03:47: ce:cf:13:c0:c0:25:08:ff:14:51:51:4c:26:a4:bf: 7a:65:34:f4:50:3f:d8:72:c1:1d:05:88:dc:eb:fd: 64:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E8:AA:E5:72:73:48:E9:DB:CA:B6:12:A7:A5:D7:9C:24:C2:4C:54 X509v3 Authority Key Identifier: keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:45:f0:37:e3:d2:94:d1:f4:97:6d:3a:78:63:6c:b8:fa:94: 86:c3:05:48:8c:5b:8e:3f:8a:f4:df:17:c8:6a:66:f0:7f:f7: bd:e5:8b:08:c6:01:2b:a1:aa:c1:84:ae:ac:a8:48:a7:87:42: 20:38:88:d9:d9:64:7b:bc:f0:dc:e5:3e:05:da:c9:16:e6:c1: 34:38:98:db:bf:3c:3b:ed:e2:f8:b7:21:79:9f:b7:ac:19:97: 5b:7a:60:e3:9a:1e:56:20:30:78:55:83:d7:91:a4:8b:15:a2: df:4b:a1:ae:fa:5f:f8:6a:52:bb:13:05:8a:e5:7b:f2:0d:bb: 23:d4:47:47:ac:5e:7d:63:4d:92:df:a0:52:be:37:04:5e:02: 83:e2:6b:f8:79:f3:8a:e2:dc:1f:d2:19:de:11:a2:91:f0:37: 73:ca:57:76:39:73:98:68:c8:71:1f:bc:45:c1:b8:18:b7:d5: 80:4e:6a:c5:0c:55:8a:cb:ae:bb:e2:d7:aa:86:bf:1c:94:a9: e7:a2:58:b8:82:ef:39:67:bc:30:89:30:95:a8:23:b6:39:e0: 74:79:c2:ec:c7:b8:be:d4:98:7e:b0:43:7e:18:db:a5:fa:ce: 39:76:d1:de:49:a6:b7:f2:aa:bb:79:50:d6:22:92:46:53:9b: 55:bd:64:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2RjgxMTAvBgNVBAUTKDczOTE0RDE0MTBBMUNEM0Y4NUFEMUUxQjBBNTBGRjNG OEJENjBDMTAwHhcNMjQxMTIxMDA1MjM1WhcNMjQxMTI4MDA1MjM1WjAYMRYwFAYD VQQDEw02NzNlODQ1My1hNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4ZjQ0O65T8k2b478yWrssUZKKQMv5uCx2gWp4yx08MVQhBt4BcNlOWT44dA d+mXSpvWOtQ6f3DjWnKmHD5ctsNbV6Vobf+iGRgL19HZsOfJLuTlfMRf+Kuh6N+y kdD2EXGs8aK5EXgIrAY/lVb+Zw9iYSzn8pySdMgO9a+SQ0K8O/G0ktM1h/gkCzdy nmEVP2Ckhm4kbx/O9/YLvCPpf3a9fMvlS0edKPqsXi36Y3kL4byEDFQGC1PJ+jPH Wv/XpoX7AkxYeYMW8L4SsR6E0HLN3zEDsfZ63mza9F1tA0fOzxPAwCUI/xRRUUwm pL96ZTT0UD/YcsEdBYjc6/1kLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjoquVy c0jp28q2Eqel15wkwkxUMB8GA1UdIwQYMBaAFHORTRQQoc0/ha0eGwpQ/z+L1gwQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjZGOC9BNDI0Mzk3MEJF NEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpULUZyUjRiQ2xEX1A0dldE QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1Rk5GQkNoelQtRnJSNGJDbERfUDR2V0RCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjZGOC9BNDI0Mzk3MEJFNEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpU LUZyUjRiQ2xEX1A0dldEQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6RfA349KU0fSXbTp4Y2y4+pSGwwVIjFuOP4r03xfIambwf/e95YsI xgEroarBhK6sqEinh0IgOIjZ2WR7vPDc5T4F2skW5sE0OJjbvzw77eL4tyF5n7es GZdbemDjmh5WIDB4VYPXkaSLFaLfS6Gu+l/4alK7EwWK5XvyDbsj1EdHrF59Y02S 36BSvjcEXgKD4mv4efOK4twf0hneEaKR8Ddzyld2OXOYaMhxH7xFwbgYt9WATmrF DFWKy6674teqhr8clKnnoli4gu85Z7wwiTCVqCO2OeB0ecLsx7i+1Jh+sEN+GNul +s45dtHeSaa38qq7eVDWIpJGU5tVvWQq -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:53 2024 by rpki-client on console-fra.rpki-client.org