$ rpki-client -vvf rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft File: _nQHcdbqABLeOHBW-Iy-3TbEqGA.mft (raw, json) Hash identifier: s0xe+pn/4FDXGl/c2emUo6RJpc/zDNHezXXyDZbvOkw= Subject key identifier: D0:54:68:26:05:6A:FC:A1:C9:EF:E6:49:4D:7E:3F:EF:27:28:E4:45 Authority key identifier: FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 Certificate issuer: /CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft Manifest number: 0114 Signing time: Sat 23 Nov 2024 03:03:32 +0000 Manifest this update: Sat 23 Nov 2024 03:03:32 +0000 Manifest next update: Sat 30 Nov 2024 03:03:32 +0000 Files and hashes: 1: _nQHcdbqABLeOHBW-Iy-3TbEqGA.crl (hash: HJFtFFwYLzlN9htbPOzu74Kkm2v+JwotB7sa0y2oKvw=) 2: 37B318C0050111EEAFBCAE7EC4F9AE02.roa (hash: pZ0jtDypa9zbTRVdqPzNYcOmaqaH3zak3MFxphvTBnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889A4/serialNumber=FE740771D6EA0012DE387056F88CBEDD36C4A860 Validity Not Before: Nov 23 03:03:32 2024 GMT Not After : Nov 30 03:03:32 2024 GMT Subject: CN=67414604-89aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bd:5a:13:3b:74:bb:96:89:e6:d1:64:f6:cd: 95:6a:4a:e3:f8:07:f4:6e:ca:34:b9:18:e6:c7:98: 0e:c2:c3:50:e8:71:10:89:70:bf:61:c8:e5:52:46: ce:d5:e1:83:0c:cc:ee:a3:23:3f:e4:ca:f3:ee:19: ae:51:44:08:72:7f:f8:b4:be:48:f0:f6:c1:a7:1a: cd:e6:e6:61:e4:3a:dd:2f:02:56:87:2e:87:fe:8d: cf:c7:86:4d:31:9e:3e:c9:80:48:1b:52:a6:93:1e: 18:78:fa:07:96:47:03:f3:2d:8f:42:82:b8:e3:b7: 68:9f:7c:4c:9e:52:68:28:f2:4b:20:37:63:c4:57: 26:5f:8a:52:a6:9a:6e:81:4f:8d:88:91:6d:0a:05: cf:96:3b:f3:f2:72:99:6d:76:5e:92:f0:75:b6:c5: 1c:6c:9d:a9:14:5c:3b:75:7f:c7:39:fc:64:8e:18: 52:8e:62:9a:d9:3e:82:af:95:7d:94:56:80:e9:ad: a1:f0:46:63:ce:03:58:9c:61:ae:f4:61:33:f2:26: 80:20:ee:76:67:d5:d6:25:60:5c:2d:0d:d7:21:8a: d3:84:cc:2f:aa:7c:d9:f3:e6:bb:63:23:8e:a8:25: f4:de:7b:c3:45:1a:76:02:b4:ac:70:c5:e3:32:09: 4c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:54:68:26:05:6A:FC:A1:C9:EF:E6:49:4D:7E:3F:EF:27:28:E4:45 X509v3 Authority Key Identifier: keyid:FE:74:07:71:D6:EA:00:12:DE:38:70:56:F8:8C:BE:DD:36:C4:A8:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_nQHcdbqABLeOHBW-Iy-3TbEqGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889A4/27A25A5604FA11EE8D46E245C4F9AE02/_nQHcdbqABLeOHBW-Iy-3TbEqGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:a3:d7:8d:71:cf:0d:87:4c:54:51:80:f8:77:51:58:19:f2: f9:8f:f6:81:82:7c:1f:86:ef:61:c5:ef:02:f8:8d:4b:f5:dd: aa:a3:94:22:f9:ad:68:af:b3:33:4a:2a:11:0b:c2:b7:4e:f5: f9:79:17:50:7c:e6:5f:e4:ec:c3:dc:6b:c3:1b:09:65:1b:bd: f2:e5:12:94:b0:c6:0a:0b:f8:9e:a1:cc:5f:ed:98:3c:d1:de: 2a:fe:22:29:6d:eb:53:b8:3d:15:3c:c9:a9:a1:30:53:e7:7e: b0:70:5c:8c:5b:30:34:55:99:9f:62:7b:79:9d:98:10:dd:ea: a4:68:a4:a0:95:62:3a:d3:76:d5:b8:48:5f:b1:65:b3:fb:87: a1:ae:55:46:a7:59:dc:1a:58:79:84:32:65:b8:4a:ff:05:43: f5:ec:b6:84:de:0a:13:f6:78:d3:f8:f7:78:6a:5e:77:a1:33: 25:cb:70:b6:25:2b:21:1e:92:d5:27:56:d3:63:d8:98:ac:fb: 49:b3:f3:01:3e:09:f6:a0:70:b0:94:f1:47:ce:2e:97:37:95: ab:d5:87:8d:cd:02:6f:2e:a4:89:f2:10:8c:77:38:28:67:ce: 28:e7:94:59:25:68:f1:f9:c3:0f:53:9f:59:e3:1a:55:14:e0: 6a:fc:8a:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QTQxMTAvBgNVBAUTKEZFNzQwNzcxRDZFQTAwMTJERTM4NzA1NkY4OENCRURE MzZDNEE4NjAwHhcNMjQxMTIzMDMwMzMyWhcNMjQxMTMwMDMwMzMyWjAYMRYwFAYD VQQDEw02NzQxNDYwNC04OWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6b1aEzt0u5aJ5tFk9s2Vakrj+Af0bso0uRjmx5gOwsNQ6HEQiXC/YcjlUkbO 1eGDDMzuoyM/5Mrz7hmuUUQIcn/4tL5I8PbBpxrN5uZh5DrdLwJWhy6H/o3Px4ZN MZ4+yYBIG1Kmkx4YePoHlkcD8y2PQoK447don3xMnlJoKPJLIDdjxFcmX4pSpppu gU+NiJFtCgXPljvz8nKZbXZekvB1tsUcbJ2pFFw7dX/HOfxkjhhSjmKa2T6Cr5V9 lFaA6a2h8EZjzgNYnGGu9GEz8iaAIO52Z9XWJWBcLQ3XIYrThMwvqnzZ8+a7YyOO qCX03nvDRRp2ArSscMXjMglMkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBUaCYF avyhye/mSU1+P+8nKORFMB8GA1UdIwQYMBaAFP50B3HW6gAS3jhwVviMvt02xKhg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlBNC8yN0EyNUE1NjA0 RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFCTGVPSEJXLUl5LTNUYkVx R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19uUUhjZGJxQUJMZU9IQlctSXktM1RiRXFHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlBNC8yN0EyNUE1NjA0RkExMUVFOEQ0NkUyNDVDNEY5QUUwMi9fblFIY2RicUFC TGVPSEJXLUl5LTNUYkVxR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDo9eNcc8Nh0xUUYD4d1FYGfL5j/aBgnwfhu9hxe8C+I1L9d2qo5Qi +a1or7MzSioRC8K3TvX5eRdQfOZf5OzD3GvDGwllG73y5RKUsMYKC/ieocxf7Zg8 0d4q/iIpbetTuD0VPMmpoTBT536wcFyMWzA0VZmfYnt5nZgQ3eqkaKSglWI603bV uEhfsWWz+4ehrlVGp1ncGlh5hDJluEr/BUP17LaE3goT9njT+Pd4al53oTMly3C2 JSshHpLVJ1bTY9iYrPtJs/MBPgn2oHCwlPFHzi6XN5Wr1YeNzQJvLqSJ8hCMdzgo Z84o55RZJWjx+cMPU59Z4xpVFOBq/Ipk -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org