$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft File: g--P6e5IafC5SpX3RvWJS6H7MPA.mft (raw, json) Hash identifier: jbwg9vDGl+sx14ExCTp7OPM8mfFBBrNsOpGENYr7J8g= Subject key identifier: A8:42:01:77:DB:DD:66:F6:63:03:92:EE:1C:97:0C:A6:CF:8E:29:09 Authority key identifier: 83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 Certificate issuer: /CN=A914EB9A/serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft Manifest number: 59 Signing time: Mon 25 Nov 2024 05:03:54 +0000 Manifest this update: Mon 25 Nov 2024 05:03:53 +0000 Manifest next update: Mon 02 Dec 2024 05:03:53 +0000 Files and hashes: 1: g--P6e5IafC5SpX3RvWJS6H7MPA.crl (hash: NdMJcCTIrkWWrVAt/aEZIfwFer1rPfb7YjOp75w08HY=) 2: A368B23623C411EFB7164123C4F9AE02.roa (hash: 6WMxEseQDOQi71AEegKWG3BFBRYdf0cjzTU5QeyGB6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A/serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Validity Not Before: Nov 25 05:03:53 2024 GMT Not After : Dec 2 05:03:53 2024 GMT Subject: CN=67440539-af71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:70:7e:86:d9:e8:33:6f:98:0e:6b:a5:96:01: 90:90:19:b9:ef:0b:b4:81:d1:51:53:9d:25:e9:6a: 68:5e:3f:e3:d3:9e:e4:a0:9c:34:30:b9:f3:20:39: a4:63:44:4e:f8:d4:64:89:2d:fe:0e:08:ad:d9:38: f2:73:3a:25:3f:8f:71:84:84:03:b8:da:c9:7b:06: fd:0c:8e:38:64:a7:85:27:7c:96:a5:c1:c2:01:0f: 57:e1:3b:67:f7:99:31:95:99:91:bc:fb:3b:66:8c: b7:1e:30:35:e4:74:3f:0a:0b:a0:67:08:79:d4:65: b1:92:ab:71:36:e8:d7:0c:42:81:fa:4d:0a:35:b9: 0e:8f:64:91:80:6c:75:2e:7e:fc:ca:58:1e:ab:35: ae:e7:3d:66:b3:50:bc:10:30:3c:f6:4f:66:4e:79: 8b:dd:1c:32:86:86:6f:01:fd:38:2b:d3:b5:6a:ee: 80:09:0f:61:a8:1a:84:4d:63:bc:58:98:7e:8a:38: 96:cf:85:b0:7e:e9:1a:5c:a2:ae:91:54:e3:d6:0e: 7e:83:ec:dc:d7:87:06:f7:07:70:e7:47:ef:23:a4: ec:e1:9d:0c:69:03:85:c1:82:b3:1b:50:bc:fb:b0: 92:b5:da:be:10:84:d9:b4:8d:1d:cb:f7:99:63:ed: 2b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:42:01:77:DB:DD:66:F6:63:03:92:EE:1C:97:0C:A6:CF:8E:29:09 X509v3 Authority Key Identifier: keyid:83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:1c:61:f5:50:72:f6:92:fa:f9:26:55:d6:b8:c1:a0:09:e1: c8:ec:b0:6b:e3:25:6e:05:21:a6:47:b2:3b:53:98:d5:ab:56: 24:8b:68:58:1f:2d:6d:a8:3c:52:a5:76:57:1e:a1:33:0b:22: dc:a3:3d:3b:c9:f8:be:b3:b5:8f:6f:91:d0:67:4f:6e:16:03: eb:1d:95:46:a2:71:b1:ae:ae:f9:bf:cd:36:33:d8:b2:62:f3: 79:29:d9:dd:2e:0c:79:10:8f:35:7a:ca:ee:21:a1:2f:98:0b: 69:aa:28:10:08:83:2d:ed:1d:bf:5c:93:67:0f:23:97:fb:5c: 68:78:83:ae:50:67:70:6e:35:6b:4d:ae:9a:0e:fc:0f:35:aa: 1d:89:3d:50:00:63:57:11:83:67:34:5b:2a:7e:f0:e4:73:8f: 33:ff:9c:60:f2:7f:c5:9d:ad:0b:83:7a:8a:db:62:47:44:39: 82:f5:ab:39:0e:3e:a3:03:af:63:5e:41:20:39:2e:d4:4c:8e: 5b:ac:f2:e8:4f:fe:27:d7:b5:cb:04:42:9f:f2:f9:0c:e8:f7: 09:91:ae:dd:97:6d:94:22:20:ec:4f:b7:76:a9:25:51:33:35: a4:70:32:5f:2d:49:87:ec:3c:21:ce:a0:92:5d:8b:d5:ec:10: d5:53:f3:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RUI5QTExMC8GA1UEBRMoODNFRjhGRTlFRTQ4NjlGMEI5NEE5NUY3NDZGNTg5NEJB MUZCMzBGMDAeFw0yNDExMjUwNTAzNTNaFw0yNDEyMDIwNTAzNTNaMBgxFjAUBgNV BAMTDTY3NDQwNTM5LWFmNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgcH6G2egzb5gOa6WWAZCQGbnvC7SB0VFTnSXpamheP+PTnuSgnDQwufMgOaRj RE741GSJLf4OCK3ZOPJzOiU/j3GEhAO42sl7Bv0Mjjhkp4UnfJalwcIBD1fhO2f3 mTGVmZG8+ztmjLceMDXkdD8KC6BnCHnUZbGSq3E26NcMQoH6TQo1uQ6PZJGAbHUu fvzKWB6rNa7nPWazULwQMDz2T2ZOeYvdHDKGhm8B/Tgr07Vq7oAJD2GoGoRNY7xY mH6KOJbPhbB+6Rpcoq6RVOPWDn6D7NzXhwb3B3DnR+8jpOzhnQxpA4XBgrMbULz7 sJK12r4QhNm0jR3L95lj7StZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqEIBd9vd ZvZjA5LuHJcMps+OKQkwHwYDVR0jBBgwFoAUg++P6e5IafC5SpX3RvWJS6H7MPAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFQjlBL0U0QTY1RURFMjND MzExRUY4OTJERUIyMUM0RjlBRTAyL2ctLVA2ZTVJYWZDNVNwWDNSdldKUzZIN01Q QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZy0tUDZlNUlhZkM1U3BYM1J2V0pTNkg3TVBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF QjlBL0U0QTY1RURFMjNDMzExRUY4OTJERUIyMUM0RjlBRTAyL2ctLVA2ZTVJYWZD NVNwWDNSdldKUzZIN01QQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADQcYfVQcvaS+vkmVda4waAJ4cjssGvjJW4FIaZHsjtTmNWrViSLaFgf LW2oPFKldlceoTMLItyjPTvJ+L6ztY9vkdBnT24WA+sdlUaicbGurvm/zTYz2LJi 83kp2d0uDHkQjzV6yu4hoS+YC2mqKBAIgy3tHb9ck2cPI5f7XGh4g65QZ3BuNWtN rpoO/A81qh2JPVAAY1cRg2c0Wyp+8ORzjzP/nGDyf8WdrQuDeorbYkdEOYL1qzkO PqMDr2NeQSA5LtRMjlus8uhP/ifXtcsEQp/y+Qzo9wmRrt2XbZQiIOxPt3apJVEz NaRwMl8tSYfsPCHOoJJdi9XsENVT8xw= -----END CERTIFICATE-----Generated at Mon Nov 25 06:05:06 2024 by rpki-client on console-fra.rpki-client.org