$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json) Hash identifier: BPG9YcGmMHt+AUa/dfUlLTto0a/FPEuLa6dPo0vmZuE= Subject key identifier: CC:93:AE:12:FD:2E:F5:3A:8C:7C:2E:39:BC:50:51:6F:19:5A:E7:13 Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Certificate serial: 1169 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft Manifest number: 1156 Signing time: Wed 20 Nov 2024 17:11:51 +0000 Manifest this update: Wed 20 Nov 2024 17:11:50 +0000 Manifest next update: Wed 27 Nov 2024 17:11:50 +0000 Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: geRW2iHUfmVJvYuH84hb5KvLTyYmO99EUsZzqZEtRhs=) 2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: sBWfqMdrbgHXkc/ZfAmcs+ee3JGLkHqnwdG8y4HuuaQ=) 3: DA0E6EFEE86411ECA54EC03BC4F9AE02.roa (hash: H4DVjhrQX80NkE2QeTyaoNeUxrpJLEpfDpSQExmSZjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4457 (0x1169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Validity Not Before: Nov 20 17:11:50 2024 GMT Not After : Nov 27 17:11:50 2024 GMT Subject: CN=673e1857-68dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3e:71:1c:7d:d9:d3:ea:18:b9:f0:c9:20:4c: 91:f3:1e:d7:b0:29:00:32:8d:42:c3:75:a3:f2:ab: 38:8f:b8:38:4a:43:74:b9:5d:d9:d1:9f:4c:ed:f6: 92:d4:e0:39:5e:99:91:d7:3b:ae:46:8b:c8:2d:da: 42:d3:b1:9d:14:3b:2f:37:ab:5f:6e:ee:59:f3:a5: 69:a8:42:56:8e:f6:de:0e:b6:90:54:ce:4a:c6:96: d7:c1:3f:d3:50:f0:53:9a:22:f5:b0:64:ee:03:cf: 60:20:09:34:42:b2:75:92:fa:9b:d8:18:e0:da:67: 4c:6f:37:5d:66:6e:a7:20:84:f6:c2:42:97:b9:70: a7:5e:20:10:49:96:7a:c0:b7:1c:34:15:4f:e0:41: 23:e5:25:07:ff:88:3e:cf:39:0a:47:e9:de:33:c6: 02:16:de:3d:16:6a:6e:96:06:a0:eb:87:4b:f9:77: c4:f3:c3:63:09:f9:26:70:6d:75:f7:f6:1b:6f:66: c2:81:74:a6:7b:9c:a8:63:a9:e6:8c:b3:6b:53:fd: 70:e0:fe:3d:28:5c:32:af:4e:11:ef:81:5f:88:f6: 14:8b:c5:8d:56:87:96:97:b9:c5:66:98:34:a3:ce: b5:11:f5:27:ba:a5:07:01:e7:f9:aa:4e:5d:22:41: 68:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:93:AE:12:FD:2E:F5:3A:8C:7C:2E:39:BC:50:51:6F:19:5A:E7:13 X509v3 Authority Key Identifier: keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:65:84:61:31:4f:6f:42:14:fa:8a:08:94:e4:c9:2f:1c:40: 4b:7a:9c:27:c6:2e:06:74:99:9a:d7:49:5e:4d:73:70:b8:64: 03:3a:d3:21:e0:9c:f7:75:04:16:ae:98:89:23:50:b8:3f:f6: 31:29:fd:21:75:92:e7:74:28:aa:f6:c8:5e:7a:25:8d:89:d6: 64:65:4a:a2:14:dd:ef:91:70:15:fb:e9:ab:10:9a:2a:13:00: 99:e5:a0:40:38:c1:b3:48:cf:14:93:0b:4f:ba:c5:19:51:28: 54:91:21:42:ff:02:f8:5a:f4:31:12:bf:f2:70:ee:91:24:ed: ef:66:ac:b6:4b:cf:37:00:1b:79:8e:61:59:87:50:61:60:ec: a4:6d:95:88:a5:f7:40:d7:2c:cb:9a:36:b5:e4:91:da:79:b0: 38:a9:16:d1:03:e6:99:51:f3:8b:35:e6:7f:24:18:f5:5b:d4: b6:e1:9f:e8:7f:5f:b4:e5:89:59:30:0c:c3:6d:da:31:50:17: db:ab:0d:a9:06:79:22:28:f6:55:17:16:c1:ce:a6:7f:15:95: a7:86:ec:f6:13:30:88:f1:50:d1:86:ae:68:da:fb:6b:bd:ca: 72:e8:6b:9c:ef:94:b8:6b:40:e1:d0:4b:43:02:76:6b:27:d6: fb:aa:55:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1 NDdFNDNFNzIwHhcNMjQxMTIwMTcxMTUwWhcNMjQxMTI3MTcxMTUwWjAYMRYwFAYD VQQDEw02NzNlMTg1Ny02OGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzz5xHH3Z0+oYufDJIEyR8x7XsCkAMo1Cw3Wj8qs4j7g4SkN0uV3Z0Z9M7faS 1OA5XpmR1zuuRovILdpC07GdFDsvN6tfbu5Z86VpqEJWjvbeDraQVM5KxpbXwT/T UPBTmiL1sGTuA89gIAk0QrJ1kvqb2Bjg2mdMbzddZm6nIIT2wkKXuXCnXiAQSZZ6 wLccNBVP4EEj5SUH/4g+zzkKR+neM8YCFt49Fmpulgag64dL+XfE88NjCfkmcG11 9/Ybb2bCgXSme5yoY6nmjLNrU/1w4P49KFwyr04R74FfiPYUi8WNVoeWl7nFZpg0 o861EfUnuqUHAef5qk5dIkFomwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyTrhL9 LvU6jHwuObxQUW8ZWucTMB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjY0Ni9DRUNFOEM5QUY0OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxB bG5kcTkxZlRyeFJVZmtQbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfZYRhMU9vQhT6igiU5MkvHEBLepwnxi4GdJma10leTXNwuGQDOtMh 4Jz3dQQWrpiJI1C4P/YxKf0hdZLndCiq9sheeiWNidZkZUqiFN3vkXAV++mrEJoq EwCZ5aBAOMGzSM8UkwtPusUZUShUkSFC/wL4WvQxEr/ycO6RJO3vZqy2S883ABt5 jmFZh1BhYOykbZWIpfdA1yzLmja15JHaebA4qRbRA+aZUfOLNeZ/JBj1W9S24Z/o f1+05YlZMAzDbdoxUBfbqw2pBnkiKPZVFxbBzqZ/FZWnhuz2EzCI8VDRhq5o2vtr vcpy6Guc75S4a0Dh0EtDAnZrJ9b7qlXO -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:02 2024 by rpki-client on console-fra.rpki-client.org