$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: CJX4fOqbYLGvhzxF8ni24t2lxKisw7yoM/1V1hGynk4= Subject key identifier: E0:04:B9:66:60:5A:2D:2E:11:F9:03:E6:6F:2A:B6:03:12:46:E1:C8 Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: 012B Signing time: Sat 23 Nov 2024 02:52:59 +0000 Manifest this update: Sat 23 Nov 2024 02:52:58 +0000 Manifest next update: Sat 30 Nov 2024 02:52:58 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: xutuVZize9mk2CIHfTmppH5+nr8vyZzX1Dv6b6219/0=) 2: 71F97AC0560E11EEA8088470C4F9AE02.roa (hash: 8kpq6ggiOvPDzABgylcMixzcZMr2vZ4NvVsGkSaMxFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: Nov 23 02:52:58 2024 GMT Not After : Nov 30 02:52:58 2024 GMT Subject: CN=6741438a-486a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:39:64:de:39:e9:3a:d3:14:af:6d:4c:e7: 92:f6:26:47:f1:10:05:68:e7:13:ee:45:2f:8a:2a: 96:ed:c2:78:4d:c7:2a:76:cd:31:20:67:eb:86:f9: 5b:19:31:51:fb:c6:a4:67:4f:6b:06:c4:8e:59:7e: 74:d4:f7:0b:c9:34:5f:78:d0:da:2a:f9:f4:c1:14: bc:a3:21:64:0b:d9:8e:01:cc:52:9b:77:a1:9e:74: 85:da:a8:db:6c:28:c6:5c:6e:77:f3:be:ba:85:e2: 3e:04:f0:2c:e9:ca:a1:95:25:82:54:13:39:26:02: 73:44:d3:83:44:f4:2e:eb:6b:b8:56:35:7f:9c:b4: a5:c6:9f:8c:0f:9b:01:e5:3b:9a:da:34:83:19:a9: 48:f6:56:71:fa:41:06:8c:41:a9:1f:df:5f:94:8c: 06:8b:47:bd:85:d4:6b:29:9f:b8:2c:01:58:9e:2c: 18:06:df:bc:1b:0c:e5:50:73:e5:b8:02:2c:67:1f: e0:2d:1d:77:dc:b1:3e:f4:91:f3:df:f5:d5:7d:73: 35:e5:d3:51:d4:74:24:2b:de:b2:0a:86:50:cd:d8: 70:36:4b:8b:08:af:69:11:1b:52:2b:ae:b7:99:0b: 07:f0:1b:c2:5d:d2:ea:66:b6:83:c3:0f:5f:c7:10: 4c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:04:B9:66:60:5A:2D:2E:11:F9:03:E6:6F:2A:B6:03:12:46:E1:C8 X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:55:87:9b:da:a2:3f:57:66:92:dd:15:30:d0:80:02:b0:35: a8:84:ca:d4:5e:f7:bb:19:75:f2:c1:29:39:83:ff:26:12:31: 22:46:ad:e5:13:29:cc:fe:db:d3:36:84:c5:54:39:33:65:35: e6:8c:78:fa:30:9f:4b:80:61:dd:b9:e9:f5:db:01:12:5e:a6: 36:9e:9e:59:a0:86:aa:c8:e1:1e:bd:89:89:c5:eb:7a:9d:bd: 78:83:c7:8b:dd:08:7b:02:15:79:a8:4c:0e:3c:ff:03:ef:1f: 63:b2:b6:0b:be:f0:73:a8:78:b3:4c:36:08:96:d8:c9:c5:17: 4d:c6:60:3d:fb:13:e8:e8:ad:55:13:2d:ee:7e:c5:29:71:ea: 5f:42:0a:ad:2b:82:0b:2a:12:47:31:db:b0:3b:0a:51:67:d4: 21:84:d0:26:00:c9:8d:51:3f:22:7b:b4:b7:ef:e2:4e:7c:46: 1f:09:3a:e2:28:0a:bb:7f:c9:8d:f0:de:d5:2a:1e:05:05:4c: 81:37:ec:67:21:91:8b:90:ea:cd:61:4d:fc:f9:86:d5:ad:bd: 17:07:cc:f8:b3:ce:a4:a2:25:4d:fd:fd:bf:bc:65:ff:62:b6: 0d:5e:ca:2b:cd:fe:1b:2a:1f:1a:bf:2b:3f:76:44:31:d5:b4: c2:9b:d8:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjQxMTIzMDI1MjU4WhcNMjQxMTMwMDI1MjU4WjAYMRYwFAYD VQQDEw02NzQxNDM4YS00ODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEY5ZN456TrTFK9tTOeS9iZH8RAFaOcT7kUviiqW7cJ4Tccqds0xIGfrhvlb GTFR+8akZ09rBsSOWX501PcLyTRfeNDaKvn0wRS8oyFkC9mOAcxSm3ehnnSF2qjb bCjGXG538766heI+BPAs6cqhlSWCVBM5JgJzRNODRPQu62u4VjV/nLSlxp+MD5sB 5Tua2jSDGalI9lZx+kEGjEGpH99flIwGi0e9hdRrKZ+4LAFYniwYBt+8GwzlUHPl uAIsZx/gLR133LE+9JHz3/XVfXM15dNR1HQkK96yCoZQzdhwNkuLCK9pERtSK663 mQsH8BvCXdLqZraDww9fxxBMmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAEuWZg Wi0uEfkD5m8qtgMSRuHIMB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrVYeb2qI/V2aS3RUw0IACsDWohMrUXve7GXXywSk5g/8mEjEiRq3l EynM/tvTNoTFVDkzZTXmjHj6MJ9LgGHduen12wESXqY2np5ZoIaqyOEevYmJxet6 nb14g8eL3Qh7AhV5qEwOPP8D7x9jsrYLvvBzqHizTDYIltjJxRdNxmA9+xPo6K1V Ey3ufsUpcepfQgqtK4ILKhJHMduwOwpRZ9QhhNAmAMmNUT8ie7S37+JOfEYfCTri KAq7f8mN8N7VKh4FBUyBN+xnIZGLkOrNYU38+YbVrb0XB8z4s86koiVN/f2/vGX/ YrYNXsorzf4bKh8avys/dkQx1bTCm9hV -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org