$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json) Hash identifier: B4IXjXB0i4PJFL1dr2ddGgW0WFMIX9pX4snGvx2o9ec= Subject key identifier: 6E:8C:54:56:E6:E3:C8:03:1C:C1:B0:E7:79:58:C0:A4:4F:BD:8B:78 Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 1888 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft Manifest number: 1859 Signing time: Fri 22 Nov 2024 16:31:46 +0000 Manifest this update: Fri 22 Nov 2024 16:31:45 +0000 Manifest next update: Fri 29 Nov 2024 16:31:45 +0000 Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: xE1JmD/wSO9u5xrCz61WbzV0xp0XaE3+Jgilh2PZ6hQ=) 2: 4A4CE204D49A11EEAB1AF055C4F9AE02.roa (hash: EzHzSCDlBlC4veKW1Q3W/qzMLdRqyApJm4hY8qe4PS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6280 (0x1888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Validity Not Before: Nov 22 16:31:45 2024 GMT Not After : Nov 29 16:31:45 2024 GMT Subject: CN=6740b1f2-a3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:d9:ed:49:11:ee:e0:22:eb:5f:90:83:c2: d1:30:a5:e8:f9:f1:ed:fd:7c:51:e5:3a:9c:d3:a8: 77:b9:4c:b8:d8:f7:2c:4b:de:0c:a8:a6:31:dd:14: 54:ab:44:9d:01:4c:ce:ef:ed:fd:d3:6d:19:42:78: 5e:09:a9:f1:04:6c:54:5f:ab:f3:cb:f3:be:84:1e: d8:03:fa:59:9f:fe:e2:44:e6:9e:01:2c:90:b4:fe: 24:31:08:48:21:19:e0:a1:f5:12:06:1f:ec:d3:d3: b2:46:82:c9:5b:2c:95:18:b1:c8:60:ab:a4:0b:17: f8:47:b9:16:cb:8e:44:0c:30:39:e9:9f:1f:be:ba: 46:83:7f:ed:c9:a6:8f:2a:57:66:b4:92:ee:e2:37: 81:5b:30:3b:88:eb:ab:99:15:a1:b8:16:b9:8d:ed: 0c:f6:be:1d:13:3a:ef:33:f9:f4:fa:b0:91:74:72: 21:84:f0:fd:1c:52:e2:87:7f:f3:ac:c0:dd:e2:b9: 78:07:09:06:0e:77:f3:23:c0:5e:3e:74:38:54:21: ed:b4:bd:69:5f:0e:cc:62:42:2e:88:fe:bf:2d:53: ee:c3:11:b5:34:80:e1:be:91:3f:e2:70:aa:64:1b: fe:df:f7:e3:49:d5:39:1d:49:17:3b:ab:8e:35:ba: b4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8C:54:56:E6:E3:C8:03:1C:C1:B0:E7:79:58:C0:A4:4F:BD:8B:78 X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:65:08:66:72:ed:ea:b9:ef:bf:19:a8:4c:ed:96:f3:5a:64: 86:03:b0:75:35:8b:a2:59:d8:8b:d1:05:76:65:e2:ac:56:f3: 71:cb:10:60:34:4d:20:cb:9a:45:3b:d2:bc:6e:8a:b2:aa:dc: e1:5e:67:68:97:ab:33:ff:ff:57:1e:ff:c7:7e:f7:a3:87:f0: 4f:64:a2:26:ef:ff:9b:1f:c8:22:00:9b:5a:49:80:4f:07:58: a5:a6:6d:dc:8f:98:70:c6:47:59:96:7f:65:e4:13:aa:39:8d: ba:2e:4f:28:cb:6e:ff:7e:a4:05:0d:c9:2b:71:c8:34:65:af: 55:19:c2:7b:6a:c3:14:a5:67:51:dc:45:a3:8e:b2:0e:3a:de: 8b:fa:05:92:b6:6d:36:c5:a4:5a:e5:d7:28:15:87:a1:99:72: f5:f8:9b:b9:a6:ca:21:0f:57:3d:a9:e3:d3:63:58:5a:1d:b7: 28:3f:0c:0e:6d:51:5d:6a:00:e7:70:fc:71:df:85:57:8c:53: ef:40:52:c3:77:fd:25:37:20:ce:ec:bd:67:47:af:22:fa:52: 68:87:80:cc:fc:03:c1:bf:d9:7e:7f:87:2a:c9:70:43:8b:3c: 33:23:95:63:ee:21:b3:81:d4:71:09:24:19:22:9c:2c:54:e0: 24:4a:5a:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjQxMTIyMTYzMTQ1WhcNMjQxMTI5MTYzMTQ1WjAYMRYwFAYD VQQDEw02NzQwYjFmMi1hM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxF3Z7UkR7uAi61+Qg8LRMKXo+fHt/XxR5Tqc06h3uUy42PcsS94MqKYx3RRU q0SdAUzO7+39020ZQnheCanxBGxUX6vzy/O+hB7YA/pZn/7iROaeASyQtP4kMQhI IRngofUSBh/s09OyRoLJWyyVGLHIYKukCxf4R7kWy45EDDA56Z8fvrpGg3/tyaaP KldmtJLu4jeBWzA7iOurmRWhuBa5je0M9r4dEzrvM/n0+rCRdHIhhPD9HFLih3/z rMDd4rl4BwkGDnfzI8BePnQ4VCHttL1pXw7MYkIuiP6/LVPuwxG1NIDhvpE/4nCq ZBv+3/fjSdU5HUkXO6uONbq0TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6MVFbm 48gDHMGw53lYwKRPvYt4MB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTBFMy9EQTE4QjE4NDlBNDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3 WGpmNndBcGJlSWpsZjFIRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1ZQhmcu3que+/GahM7ZbzWmSGA7B1NYuiWdiL0QV2ZeKsVvNxyxBg NE0gy5pFO9K8boqyqtzhXmdol6sz//9XHv/Hfvejh/BPZKIm7/+bH8giAJtaSYBP B1ilpm3cj5hwxkdZln9l5BOqOY26Lk8oy27/fqQFDckrccg0Za9VGcJ7asMUpWdR 3EWjjrIOOt6L+gWStm02xaRa5dcoFYehmXL1+Ju5psohD1c9qePTY1haHbcoPwwO bVFdagDncPxx34VXjFPvQFLDd/0lNyDO7L1nR68i+lJoh4DM/APBv9l+f4cqyXBD izwzI5Vj7iGzgdRxCSQZIpwsVOAkSloA -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:46 2024 by rpki-client on console-fra.rpki-client.org