$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft File: U0TWuzfqDMOR0SQgetmV_Nd7npU.mft (raw, json) Hash identifier: dQRwyk7mN8MZCyo5jB3FHgpAozv2UPT1gnvKBeZwSIE= Subject key identifier: 61:EF:C5:78:C9:5A:FE:AE:E5:33:25:E4:6D:C7:EE:CF:4D:EF:35:A9 Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 Certificate issuer: /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft Manifest number: 04 Signing time: Sat 23 Nov 2024 06:09:54 +0000 Manifest this update: Sat 23 Nov 2024 06:09:54 +0000 Manifest next update: Sat 30 Nov 2024 06:09:54 +0000 Files and hashes: 1: U0TWuzfqDMOR0SQgetmV_Nd7npU.crl (hash: sdm1p1gXUoLFEy5VoQEUXiPLHHWGL0h1AXVpDbTOrnk=) 2: 1903DFAAA8A111EFA5EC0D76C4F9AE02.roa (hash: Z+7lSPlj6qJcmufiQhj7leJTEF6BXes8pYMg2fU8lgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Validity Not Before: Nov 23 06:09:54 2024 GMT Not After : Nov 30 06:09:54 2024 GMT Subject: CN=674171b2-d455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:5f:be:96:3e:86:72:0e:23:a1:08:f6:bb: c3:c0:1d:9b:bb:36:b1:2b:90:8a:53:cf:c4:85:d9: c8:92:3b:79:89:b1:0f:e3:62:09:11:4a:ea:55:ca: 66:eb:1e:93:2a:bf:19:da:cd:7b:92:70:f5:cd:d1: 19:d9:70:13:17:2f:45:e8:af:39:86:5e:68:cc:c2: 93:77:0e:3a:f0:95:5b:9d:a6:b5:51:c2:69:46:54: 4f:47:c3:7d:31:4f:3e:87:04:b8:62:0f:a2:1a:23: fb:10:60:c0:c7:cd:b2:52:28:03:e3:c4:7a:40:c5: 48:13:f5:b8:f2:eb:40:8a:e8:77:d3:de:0e:3c:de: d4:7b:58:df:69:06:3e:27:4a:d4:0c:d2:a5:bf:f2: e7:2a:85:e7:b0:28:48:cc:8f:fc:5e:6c:63:79:70: 07:d9:4c:4e:e6:6c:c6:1c:5a:c6:6a:a4:bc:a1:88: aa:15:45:9c:b2:9f:c0:0f:7f:18:13:fe:3e:bf:ff: 54:43:c1:f0:84:09:3d:ba:f8:03:90:62:c5:be:bc: 7f:42:4a:ff:e3:3e:89:4c:2a:18:ea:39:60:dc:9d: 63:54:08:ce:6b:ae:98:aa:75:52:e1:19:d5:3f:82: 7f:0c:29:bc:8a:39:32:91:0f:1c:63:ad:2a:ac:2b: 5c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EF:C5:78:C9:5A:FE:AE:E5:33:25:E4:6D:C7:EE:CF:4D:EF:35:A9 X509v3 Authority Key Identifier: keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d3:ad:90:a9:7f:15:59:75:ce:1b:e3:ec:5f:ee:3f:9a:86: 73:4e:ef:78:e8:36:73:2a:ad:b8:1b:a6:25:c5:07:f0:b4:c4: 21:26:31:36:db:ed:86:8e:98:39:92:3b:79:90:19:71:56:d5: c1:52:4e:5f:67:f1:d4:d5:aa:30:a8:4b:fa:1f:5a:1f:3b:95: 2d:6d:ef:ce:06:0c:9c:08:48:60:1b:75:02:e8:21:75:b1:f8: 64:c4:f8:1f:b2:56:98:11:91:40:d6:d7:b1:7d:bf:5d:a1:f4: 64:81:cc:f4:57:8a:33:6b:3d:41:f5:b9:d5:80:12:62:9c:21: e7:a5:cb:8b:c8:72:73:21:02:ba:07:f2:8d:56:91:75:f0:d9: b8:6c:41:a4:37:42:7f:14:d9:5a:ad:08:0a:7a:ff:21:3e:0c: 7e:83:c0:05:40:f3:76:b0:5f:2c:b6:e7:00:f3:e2:cf:11:f0: 3a:b8:5a:7a:4f:56:71:b4:17:b0:29:00:07:8b:33:e5:a1:e9: 08:92:70:46:51:ee:0f:c6:65:ad:cb:63:e7:44:66:77:c6:c1: fc:32:91:1c:ca:78:3a:50:59:8a:17:2a:7b:82:99:d9:d8:9e: 22:18:49:fb:82:6d:f4:41:a3:20:ac:ee:97:7b:f5:04:af:45: 98:37:40:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 ODFENTExMC8GA1UEBRMoNTM0NEQ2QkIzN0VBMENDMzkxRDEyNDIwN0FEOTk1RkNE NzdCOUU5NTAeFw0yNDExMjMwNjA5NTRaFw0yNDExMzAwNjA5NTRaMBgxFjAUBgNV BAMTDTY3NDE3MWIyLWQ0NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8P1++lj6Gcg4joQj2u8PAHZu7NrErkIpTz8SF2ciSO3mJsQ/jYgkRSupVymbr HpMqvxnazXuScPXN0RnZcBMXL0XorzmGXmjMwpN3DjrwlVudprVRwmlGVE9Hw30x Tz6HBLhiD6IaI/sQYMDHzbJSKAPjxHpAxUgT9bjy60CK6HfT3g483tR7WN9pBj4n StQM0qW/8ucqheewKEjMj/xebGN5cAfZTE7mbMYcWsZqpLyhiKoVRZyyn8APfxgT /j6//1RDwfCECT26+AOQYsW+vH9CSv/jPolMKhjqOWDcnWNUCM5rrpiqdVLhGdU/ gn8MKbyKOTKRDxxjrSqsK1w/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYe/FeMla /q7lMyXkbcfuz03vNakwHwYDVR0jBBgwFoAUU0TWuzfqDMOR0SQgetmV/Nd7npUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4MUQ1LzY2NURCN0M2QTdD MDExRUY5OEJBNUUyQUM0RjlBRTAyL1UwVFd1emZxRE1PUjBTUWdldG1WX05kN25w VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVTBUV3V6ZnFETU9SMFNRZ2V0bVZfTmQ3bnBVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 MUQ1LzY2NURCN0M2QTdDMDExRUY5OEJBNUUyQUM0RjlBRTAyL1UwVFd1emZxRE1P UjBTUWdldG1WX05kN25wVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADLTrZCpfxVZdc4b4+xf7j+ahnNO73joNnMqrbgbpiXFB/C0xCEmMTbb 7YaOmDmSO3mQGXFW1cFSTl9n8dTVqjCoS/ofWh87lS1t784GDJwISGAbdQLoIXWx +GTE+B+yVpgRkUDW17F9v12h9GSBzPRXijNrPUH1udWAEmKcIeely4vIcnMhAroH 8o1WkXXw2bhsQaQ3Qn8U2VqtCAp6/yE+DH6DwAVA83awXyy25wDz4s8R8Dq4WnpP VnG0F7ApAAeLM+Wh6QiScEZR7g/GZa3LY+dEZnfGwfwykRzKeDpQWYoXKnuCmdnY niIYSfuCbfRBoyCs7pd79QSvRZg3QLI= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org