$ rpki-client -vvf rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft File: _un91LDoMTGIoIn3qH-30BUyU4g.mft (raw, json) Hash identifier: ThlNeYIG55OklUNForZ91twrN0JFibcvT2V/GNWVcWY= Subject key identifier: 4E:A5:EF:00:CA:FD:8A:58:74:FC:A5:2A:9D:C1:60:3E:CE:B6:3D:6B Authority key identifier: FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88 Certificate issuer: /CN=A918C673/serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388 Certificate serial: 0606 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft Manifest number: 0601 Signing time: Fri 22 Nov 2024 22:16:44 +0000 Manifest this update: Fri 22 Nov 2024 22:16:43 +0000 Manifest next update: Fri 29 Nov 2024 22:16:43 +0000 Files and hashes: 1: _un91LDoMTGIoIn3qH-30BUyU4g.crl (hash: ofkSvoTn83hBwPjssO1W2s4ee7785rVsOgPvPqbseYk=) 2: 5803FE3880CD11EB83E8035FC4F9AE02.roa (hash: HcCfcVBoj1/K3ZOCmOE1jjmUzFp6uT3H1sA4ECMTllM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1542 (0x606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C673/serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388 Validity Not Before: Nov 22 22:16:43 2024 GMT Not After : Nov 29 22:16:43 2024 GMT Subject: CN=674102cc-cd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:c1:74:dc:09:66:a0:7f:33:f6:b1:65:87: 3d:56:1e:64:a3:a9:31:66:ae:ee:27:88:30:d6:6b: 81:2f:81:0f:e8:db:51:6a:94:01:60:4a:fc:e2:0b: 1a:48:dc:56:32:13:f5:dc:ac:58:73:cc:cc:f9:23: d9:cf:81:93:eb:b2:27:0d:27:e7:c0:ec:31:3a:d1: 45:47:0f:27:5f:92:f7:23:40:77:ad:6a:d5:fc:85: bb:9b:a2:7b:88:54:d6:2a:9a:e9:0b:02:1e:3f:82: fd:3c:4d:d6:d6:5e:d1:10:6a:d7:eb:e9:56:19:fc: 53:cb:ad:92:47:8f:37:db:3a:91:c9:d2:97:fb:d1: 3c:57:48:36:48:49:f2:df:03:e6:0f:c4:aa:22:18: 89:d4:33:e7:3c:c7:27:c0:b7:c6:1e:19:3f:90:cc: c5:bc:7c:2a:d4:50:d2:a0:c9:d4:85:b5:88:0d:4a: 0c:33:24:f8:c5:3a:6c:e9:76:00:a5:f5:e8:e1:6c: d0:3a:7b:1f:2e:ca:f4:6f:c1:41:0d:c9:3c:6c:d5: fb:0a:72:aa:d5:04:60:63:41:14:28:f2:83:4f:cd: ea:0a:cb:de:96:e3:f6:7d:95:af:1f:97:d5:33:af: 3b:85:18:0c:03:09:26:2e:04:d7:d5:3b:7c:ae:ae: af:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A5:EF:00:CA:FD:8A:58:74:FC:A5:2A:9D:C1:60:3E:CE:B6:3D:6B X509v3 Authority Key Identifier: keyid:FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:80:09:1b:f8:2b:a8:54:1e:a3:31:94:9e:06:5d:f1:7f:8b: c5:c0:ac:20:06:36:7b:35:34:11:93:4c:d0:16:aa:df:23:80: 49:51:98:5c:94:92:7f:57:73:fb:2b:e2:69:e6:4d:6c:80:13: b6:4d:c0:df:6a:3e:c8:54:c1:04:a7:db:6e:2a:83:27:2d:4d: f9:99:fb:d8:c7:9b:ab:7d:eb:82:26:7f:3f:5c:6c:55:bd:90: c6:a8:81:ae:40:5b:d3:3e:c0:f2:23:1a:50:b2:38:51:36:d3: 70:87:a0:a5:6b:2b:01:4d:27:d0:7b:ef:e4:ba:fd:9d:42:1e: 77:0a:01:d0:a6:89:3f:7b:11:b0:4f:81:b6:0f:83:a2:81:5d: 23:e2:f8:72:3e:eb:48:b3:f2:22:9a:f5:34:5b:8e:5a:94:de: 9c:c1:95:a4:9f:03:74:c1:12:80:b8:11:0b:cd:ae:31:8d:5a: 66:08:bb:f9:6f:88:38:16:84:5a:0c:5d:46:27:e2:7f:d2:93: 78:a1:a0:e7:bb:f2:37:e9:fd:64:1a:87:19:c1:5b:46:06:90: b8:96:ac:6d:99:cd:c0:b7:e8:a5:db:de:f9:61:e5:08:64:3d: c3:a3:13:1a:11:d1:fa:35:1f:14:48:ed:d3:e2:40:3b:6b:fd: 08:33:0e:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NzMxMTAvBgNVBAUTKEZFRTlGREQ0QjBFODMxMzE4OEEwODlGN0E4N0ZCN0Qw MTUzMjUzODgwHhcNMjQxMTIyMjIxNjQzWhcNMjQxMTI5MjIxNjQzWjAYMRYwFAYD VQQDEw02NzQxMDJjYy1jZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDrBdNwJZqB/M/axZYc9Vh5ko6kxZq7uJ4gw1muBL4EP6NtRapQBYEr84gsa SNxWMhP13KxYc8zM+SPZz4GT67InDSfnwOwxOtFFRw8nX5L3I0B3rWrV/IW7m6J7 iFTWKprpCwIeP4L9PE3W1l7REGrX6+lWGfxTy62SR4832zqRydKX+9E8V0g2SEny 3wPmD8SqIhiJ1DPnPMcnwLfGHhk/kMzFvHwq1FDSoMnUhbWIDUoMMyT4xTps6XYA pfXo4WzQOnsfLsr0b8FBDck8bNX7CnKq1QRgY0EUKPKDT83qCsveluP2fZWvH5fV M687hRgMAwkmLgTX1Tt8rq6vFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6l7wDK /YpYdPylKp3BYD7Otj1rMB8GA1UdIwQYMBaAFP7p/dSw6DExiKCJ96h/t9AVMlOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY3My9BRTVGQjEwMjgw Q0IxMUVCQjc3QUI4NURDNEY5QUUwMi9fdW45MUxEb01UR0lvSW4zcUgtMzBCVXlV NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191bjkxTERvTVRHSW9JbjNxSC0zMEJVeVU0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY3My9BRTVGQjEwMjgwQ0IxMUVCQjc3QUI4NURDNEY5QUUwMi9fdW45MUxEb01U R0lvSW4zcUgtMzBCVXlVNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5gAkb+CuoVB6jMZSeBl3xf4vFwKwgBjZ7NTQRk0zQFqrfI4BJUZhc lJJ/V3P7K+Jp5k1sgBO2TcDfaj7IVMEEp9tuKoMnLU35mfvYx5urfeuCJn8/XGxV vZDGqIGuQFvTPsDyIxpQsjhRNtNwh6ClaysBTSfQe+/kuv2dQh53CgHQpok/exGw T4G2D4OigV0j4vhyPutIs/IimvU0W45alN6cwZWknwN0wRKAuBELza4xjVpmCLv5 b4g4FoRaDF1GJ+J/0pN4oaDnu/I36f1kGocZwVtGBpC4lqxtmc3At+il2975YeUI ZD3DoxMaEdH6NR8USO3T4kA7a/0IMw6b -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:30 2024 by rpki-client on console-fra.rpki-client.org