$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json) Hash identifier: eofeW9gyemyLP0JX/2R5m/NmDGn5AdLHns/oMMsU+LE= Subject key identifier: A3:00:A3:F7:09:EB:8E:1C:42:7C:69:D1:8B:A5:E2:D5:11:30:1C:13 Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft Manifest number: A1 Signing time: Thu 21 Nov 2024 04:26:12 +0000 Manifest this update: Thu 21 Nov 2024 04:26:12 +0000 Manifest next update: Thu 28 Nov 2024 04:26:12 +0000 Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: 9uFY+9t/AjbGmd90BcEqJuDBipLVWe8pUeDom+QxhO0=) 2: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: MpAPurYtTXFLW1M0lBme9ujEKrNBy5u7pAbDE0pQumo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA Validity Not Before: Nov 21 04:26:12 2024 GMT Not After : Nov 28 04:26:12 2024 GMT Subject: CN=673eb664-aebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:14:e5:8b:5c:ce:16:5b:39:f3:17:a2:e5: c1:7c:35:d0:6f:c0:55:ed:d0:d7:15:7c:0b:68:4c: 36:b6:ac:b4:54:d8:24:1b:f0:2c:a1:ec:84:3c:07: b4:61:6a:73:ab:f3:44:77:18:81:15:6a:5c:1d:f8: f2:05:fc:35:bf:ff:3a:9f:13:27:40:25:c7:c5:a2: 47:b4:c2:d2:d2:bc:4e:c0:e2:4f:4a:c0:55:12:f9: 52:1e:d6:49:46:43:e1:fc:ee:6a:6b:36:3c:b3:73: 1d:8b:06:4c:bb:63:47:b1:08:1e:ea:a5:25:cd:3d: 08:29:9f:67:b5:a3:5e:78:7f:e8:00:ec:98:6d:0c: 99:8e:c9:ec:ad:2f:16:f8:cf:3b:78:43:e0:8e:85: 4e:26:52:e0:b9:c4:fb:9a:61:f8:12:be:a4:6b:f9: 27:ef:a8:31:2b:8a:48:59:7e:b5:5b:b6:96:4e:af: 84:35:6c:fc:c1:28:1a:8e:cc:9b:28:f6:dc:d1:df: 2f:8e:c1:88:86:d9:69:08:82:82:90:59:5f:1a:66: bc:a3:2d:88:24:ea:01:1d:c8:e1:c5:fb:b3:a6:4d: e3:30:59:aa:c4:20:13:05:82:40:33:5f:b8:a9:76: b3:9e:32:d6:0f:25:0f:2f:6d:d4:53:7f:74:ea:ef: cc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:00:A3:F7:09:EB:8E:1C:42:7C:69:D1:8B:A5:E2:D5:11:30:1C:13 X509v3 Authority Key Identifier: keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d4:b0:87:ce:87:9a:6e:0f:0e:5c:65:a9:28:44:81:e9:6b: 2a:93:ed:db:47:7b:95:ec:0e:cb:d8:ce:ac:1e:69:ba:ba:5a: 72:7a:dc:1f:d8:96:98:9b:0d:aa:a4:e5:6a:b4:ff:0a:43:8d: e2:0c:9f:09:80:ee:d4:7b:cc:c8:ef:45:bd:78:0b:f6:6e:3e: f0:a7:37:09:c6:90:b8:0b:f2:01:ec:ae:d8:3f:75:2e:5f:86: 17:51:b9:83:c8:52:68:cd:1e:53:d4:2c:3f:98:50:24:dc:3f: fa:04:51:96:21:1c:ff:5d:36:80:bd:fa:57:d8:85:42:4a:7e: 87:7a:6c:25:fa:eb:7c:63:8b:15:15:e3:20:16:b0:b4:df:c0: ee:8f:e4:a2:4d:b4:3d:89:4f:58:88:df:75:b4:a9:97:ae:3a: 78:1e:b7:7b:c4:76:98:bd:c0:31:3a:be:cf:aa:9e:54:08:00: 91:84:60:58:d9:6b:f7:33:05:46:13:48:23:15:8f:7f:eb:56: 34:f3:c1:e7:48:a9:96:69:dc:7e:c1:13:78:0f:35:7b:45:6b: 65:7b:4d:c9:03:02:54:5c:2c:e3:b1:c2:e6:14:dc:06:0d:54: c9:18:cc:86:33:1b:43:7d:f3:eb:d9:d4:f4:47:f2:c0:a3:18: c3:8c:93:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEU3ODBGQTM3NzdCODFENENGNkEzNTQwNkVBNUNGNEJF NEY2NUU5RkEwHhcNMjQxMTIxMDQyNjEyWhcNMjQxMTI4MDQyNjEyWjAYMRYwFAYD VQQDEw02NzNlYjY2NC1hZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmEU5YtczhZbOfMXouXBfDXQb8BV7dDXFXwLaEw2tqy0VNgkG/AsoeyEPAe0 YWpzq/NEdxiBFWpcHfjyBfw1v/86nxMnQCXHxaJHtMLS0rxOwOJPSsBVEvlSHtZJ RkPh/O5qazY8s3MdiwZMu2NHsQge6qUlzT0IKZ9ntaNeeH/oAOyYbQyZjsnsrS8W +M87eEPgjoVOJlLgucT7mmH4Er6ka/kn76gxK4pIWX61W7aWTq+ENWz8wSgajsyb KPbc0d8vjsGIhtlpCIKCkFlfGma8oy2IJOoBHcjhxfuzpk3jMFmqxCATBYJAM1+4 qXaznjLWDyUPL23UU3906u/MWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMAo/cJ 644cQnxp0Yul4tURMBwTMB8GA1UdIwQYMBaAFOeA+jd3uB1M9qNUBupc9L5PZen6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9FNjQwMDFGNEI2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhVejJvMVFHNmx6MHZrOWw2 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU0RDZOM2U0SFV6Mm8xUUc2bHowdms5bDZmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9FNjQwMDFGNEI2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi81NEQ2TjNlNEhV ejJvMVFHNmx6MHZrOWw2Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl1LCHzoeabg8OXGWpKESB6Wsqk+3bR3uV7A7L2M6sHmm6ulpyetwf 2JaYmw2qpOVqtP8KQ43iDJ8JgO7Ue8zI70W9eAv2bj7wpzcJxpC4C/IB7K7YP3Uu X4YXUbmDyFJozR5T1Cw/mFAk3D/6BFGWIRz/XTaAvfpX2IVCSn6Hemwl+ut8Y4sV FeMgFrC038Duj+SiTbQ9iU9YiN91tKmXrjp4Hrd7xHaYvcAxOr7Pqp5UCACRhGBY 2Wv3MwVGE0gjFY9/61Y088HnSKmWadx+wRN4DzV7RWtle03JAwJUXCzjscLmFNwG DVTJGMyGMxtDffPr2dT0R/LAoxjDjJPQ -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:58 2024 by rpki-client on console-fra.rpki-client.org