$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft File: _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json) Hash identifier: XVRk4qHlznHw2NRbYu0gm0HskQnPwEnDDCNnqZh720c= Subject key identifier: 00:CD:F6:CD:2B:A9:3E:1B:FF:98:02:DE:61:59:E1:16:54:A7:A6:B9 Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50 Certificate issuer: /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft Manifest number: 23 Signing time: Sat 23 Nov 2024 05:45:33 +0000 Manifest this update: Sat 23 Nov 2024 05:45:32 +0000 Manifest next update: Sat 30 Nov 2024 05:45:32 +0000 Files and hashes: 1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: Qu2CeIWxF0V2kOmI95459oVvPCRrkgFJo8QqyXd3i0Y=) 2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: 6DTPGl0cK90vpMXpajrInMal5HqM8aVrjHYhHLus/gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450 Validity Not Before: Nov 23 05:45:32 2024 GMT Not After : Nov 30 05:45:32 2024 GMT Subject: CN=67416bfc-8fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:84:f3:f8:4f:cf:62:55:bf:fa:2a:e6:b2: 1c:c2:aa:0d:f2:62:98:48:08:db:d6:8f:30:9c:2d: d5:04:fd:b5:79:f4:f2:ad:0f:b3:86:fc:59:52:cf: 6c:8c:42:fc:ca:37:0b:62:23:81:d0:e5:4e:9a:5d: 12:73:5e:d2:b0:18:ee:56:93:2e:0f:8a:80:b8:7d: c4:0f:1a:cd:cc:84:67:a6:6e:37:10:f2:e2:a9:96: f3:df:a5:54:58:aa:0c:b1:de:d1:a2:48:20:0c:b3: 25:c9:57:fe:77:50:bc:cd:1b:6e:a4:72:1a:f0:d9: 17:c7:68:d1:7e:7a:fe:2e:fe:d2:e9:ff:ff:47:51: 2c:f2:86:78:6d:24:b1:8e:a5:38:8c:16:75:18:70: ef:d9:bb:7f:6a:d5:be:2b:a7:17:50:8b:05:92:b4: f4:de:6a:b1:10:31:89:eb:97:2c:c2:d8:c0:3c:ed: bf:40:17:0e:7e:e7:99:61:fa:5b:c7:92:fa:aa:33: 69:13:13:e9:87:ad:aa:8d:eb:ee:f3:45:98:1b:c4: 1c:4b:56:17:52:3c:50:c1:b9:ae:65:b6:3b:53:6d: dc:a2:91:b6:e4:dd:95:19:be:00:5a:a0:21:fe:67: 4d:23:f1:7b:d5:4a:54:47:e3:5a:e8:be:b5:cc:b0: 54:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CD:F6:CD:2B:A9:3E:1B:FF:98:02:DE:61:59:E1:16:54:A7:A6:B9 X509v3 Authority Key Identifier: keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:31:10:42:87:0b:f9:d5:a3:ce:83:ae:81:34:5c:e4:d7:26: b8:94:c8:ee:47:f5:ab:83:8c:a8:38:1e:45:81:a4:64:7e:c7: fe:90:bb:9d:0f:a5:af:cf:a3:00:9b:00:62:aa:2e:cb:a2:39: 6b:4d:70:50:70:be:8b:04:5f:bf:64:fe:02:7e:9c:a3:c6:8a: 10:0e:26:d6:f5:0f:fe:f0:7f:e7:28:88:b0:55:13:25:02:7e: af:63:cc:5c:a0:a4:2c:9f:45:f9:f2:f6:b6:c4:99:36:52:84: e0:ff:b1:f2:fd:d4:af:f1:de:a7:29:55:8a:c7:c3:c9:c8:3d: 84:6e:dd:e0:b3:12:d0:81:0a:14:74:9f:fb:5e:3b:24:29:92: c2:fd:23:04:07:79:fa:30:26:a8:53:38:a3:fb:58:65:b6:9b: 19:22:d3:94:f4:bf:e0:86:b5:1a:2e:78:6e:4e:6d:af:f1:3a: b1:dc:1e:21:ae:a8:96:b1:eb:39:b9:87:e7:47:49:20:6f:9d: 54:35:26:eb:67:74:c9:89:a8:f8:0d:a1:29:a3:75:72:fc:34: ef:92:76:1a:51:75:23:69:a4:95:69:c0:24:56:be:66:f4:be: b6:5c:a9:4e:27:c8:ff:45:48:42:04:39:25:90:e3:ec:d0:91: 6b:21:9d:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTc2OTExMC8GA1UEBRMoRkY5MjM0N0Y1RDU0Njg4MTFGRDI1M0E0OEJGQzY5RkU1 NzBBQTQ1MDAeFw0yNDExMjMwNTQ1MzJaFw0yNDExMzAwNTQ1MzJaMBgxFjAUBgNV BAMTDTY3NDE2YmZjLThmYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGl4Tz+E/PYlW/+irmshzCqg3yYphICNvWjzCcLdUE/bV59PKtD7OG/FlSz2yM QvzKNwtiI4HQ5U6aXRJzXtKwGO5Wky4PioC4fcQPGs3MhGembjcQ8uKplvPfpVRY qgyx3tGiSCAMsyXJV/53ULzNG26kchrw2RfHaNF+ev4u/tLp//9HUSzyhnhtJLGO pTiMFnUYcO/Zu39q1b4rpxdQiwWStPTearEQMYnrlyzC2MA87b9AFw5+55lh+lvH kvqqM2kTE+mHraqN6+7zRZgbxBxLVhdSPFDBua5ltjtTbdyikbbk3ZUZvgBaoCH+ Z00j8XvVSlRH41rovrXMsFRJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAM32zSup Phv/mALeYVnhFlSnprkwHwYDVR0jBBgwFoAU/5I0f11UaIEf0lOki/xp/lcKpFAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxNzY5L0QyNkREREIwNzdC RTExRUY5RjJBNDU0N0M0RjlBRTAyL181STBmMTFVYUlFZjBsT2tpX3hwX2xjS3BG QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvXzVJMGYxMVVhSUVmMGxPa2lfeHBfbGNLcEZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkx NzY5L0QyNkREREIwNzdCRTExRUY5RjJBNDU0N0M0RjlBRTAyL181STBmMTFVYUlF ZjBsT2tpX3hwX2xjS3BGQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABIxEEKHC/nVo86DroE0XOTXJriUyO5H9auDjKg4HkWBpGR+x/6Qu50P pa/PowCbAGKqLsuiOWtNcFBwvosEX79k/gJ+nKPGihAOJtb1D/7wf+coiLBVEyUC fq9jzFygpCyfRfny9rbEmTZShOD/sfL91K/x3qcpVYrHw8nIPYRu3eCzEtCBChR0 n/teOyQpksL9IwQHefowJqhTOKP7WGW2mxki05T0v+CGtRoueG5Oba/xOrHcHiGu qJax6zm5h+dHSSBvnVQ1JutndMmJqPgNoSmjdXL8NO+SdhpRdSNppJVpwCRWvmb0 vrZcqU4nyP9FSEIEOSWQ4+zQkWshnQs= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org