$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json) Hash identifier: 8TumpGvqU2bC/FhYa/nSNzRAbVaSMicy2OKlbGZM0e0= Subject key identifier: 91:9A:76:0B:12:F7:1D:33:45:08:06:8A:0D:EE:17:AB:33:59:B8:DE Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft Manifest number: 0141 Signing time: Sat 23 Nov 2024 02:39:25 +0000 Manifest this update: Sat 23 Nov 2024 02:39:24 +0000 Manifest next update: Sat 30 Nov 2024 02:39:24 +0000 Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: xrR27uufqWkxubPWTbkPdRQYigrh1CL/egZEI3Ifx7A=) 2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: QVA6cnHl8Ur5a0kDBgQcj4pP7Ka7QThHbgUyDhuNztQ=) 3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: El263VSWEusvqzTfH9aiwLLR8nJJvv9GT054yDKZA+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Validity Not Before: Nov 23 02:39:24 2024 GMT Not After : Nov 30 02:39:24 2024 GMT Subject: CN=6741405d-2c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:50:34:30:b0:12:8d:92:2a:c0:9f:9f:5b: 06:60:be:ba:c4:bf:38:0c:2c:8b:3e:42:b8:7d:35: e3:bf:ab:7b:c3:3b:d3:08:12:cf:7d:45:7a:91:9c: 67:0f:e2:e9:b2:69:6b:09:b4:12:fc:bc:9b:69:6d: 6b:3e:47:ac:6c:d5:3d:f7:46:b5:d4:97:6f:69:e0: 86:60:0f:c0:7b:70:e6:13:d8:0d:cd:d5:fc:0f:42: e1:68:dc:d6:d7:b4:86:8f:ad:26:7b:9b:0c:68:43: 6a:3c:ca:08:29:c1:4e:01:48:75:42:98:4b:ca:9a: 01:6b:c3:54:78:16:49:c4:a6:c6:f5:35:55:09:78: 30:76:e8:7b:b2:56:b7:77:5d:6b:01:93:ee:5d:25: 9c:5f:ba:97:81:5c:77:50:48:94:a1:49:d4:4c:b1: ce:32:87:44:42:42:63:f6:ad:62:b0:93:d4:7a:1f: a5:f1:cb:97:ea:57:8b:c7:5b:74:5a:7c:fc:f4:00: 7a:40:77:d4:da:73:73:d7:d0:e8:d8:15:d2:18:00: 6a:ac:ec:c6:a4:b1:5f:80:18:11:f9:35:92:f7:49: c8:c7:04:a0:45:64:8c:29:cd:2b:5e:b5:c0:21:84: 1f:72:b1:cd:66:72:c9:5f:07:c8:11:2a:fa:ec:e5: 6e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9A:76:0B:12:F7:1D:33:45:08:06:8A:0D:EE:17:AB:33:59:B8:DE X509v3 Authority Key Identifier: keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:9c:da:f7:63:1a:e6:cc:6b:cf:eb:d7:33:fe:f8:be:c7:b1: 76:b4:c0:ff:dc:84:9f:60:bb:7e:ac:1a:e8:5a:12:6a:0e:ba: 5e:96:47:6f:c7:1f:ef:ef:a9:fa:cd:76:5e:e7:3f:ce:c6:cf: 28:ad:00:d7:71:dd:a5:2f:38:e6:68:c3:a6:4e:41:bd:3c:74: af:42:79:a7:d0:50:f0:b3:b0:ae:0b:02:6a:9b:ab:31:8d:7c: a8:fe:bd:b2:e5:96:40:15:4a:cf:53:c0:e5:04:e1:fc:b5:58: 71:29:fa:b6:41:27:28:00:b2:f5:9d:2f:05:67:7f:87:aa:fb: 28:6d:b6:b5:21:bf:fe:b2:4b:39:d0:29:61:c0:f5:ef:30:df: fe:72:f7:61:2c:95:3d:62:bf:f8:af:22:99:a0:8a:0d:8c:36: f4:71:a7:e2:27:e7:2e:e2:90:45:ca:35:b8:b1:3b:3c:8e:83: 12:15:c5:67:61:f8:6c:53:58:67:b8:d6:27:38:d5:a0:05:ad: 13:85:f2:93:4e:a8:b2:e7:1c:58:af:e4:c9:bf:e3:e8:eb:4a: 63:fc:37:16:38:e2:e9:a7:5a:41:76:75:e6:7d:a1:bd:f8:6d: c1:9f:f5:9f:c1:76:b1:b8:ec:e1:f2:84:dc:57:73:a6:cf:2b: a2:e5:2a:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz NTgyQTIwRUIwHhcNMjQxMTIzMDIzOTI0WhcNMjQxMTMwMDIzOTI0WjAYMRYwFAYD VQQDEw02NzQxNDA1ZC0yYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoeVQNDCwEo2SKsCfn1sGYL66xL84DCyLPkK4fTXjv6t7wzvTCBLPfUV6kZxn D+LpsmlrCbQS/LybaW1rPkesbNU990a11JdvaeCGYA/Ae3DmE9gNzdX8D0LhaNzW 17SGj60me5sMaENqPMoIKcFOAUh1QphLypoBa8NUeBZJxKbG9TVVCXgwduh7sla3 d11rAZPuXSWcX7qXgVx3UEiUoUnUTLHOModEQkJj9q1isJPUeh+l8cuX6leLx1t0 Wnz89AB6QHfU2nNz19Do2BXSGABqrOzGpLFfgBgR+TWS90nIxwSgRWSMKc0rXrXA IYQfcrHNZnLJXwfIESr67OVu+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGadgsS 9x0zRQgGig3uF6szWbjeMB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWnNr3YxrmzGvP69cz/vi+x7F2tMD/3ISfYLt+rBroWhJqDrpelkdv xx/v76n6zXZe5z/Oxs8orQDXcd2lLzjmaMOmTkG9PHSvQnmn0FDws7CuCwJqm6sx jXyo/r2y5ZZAFUrPU8DlBOH8tVhxKfq2QScoALL1nS8FZ3+Hqvsobba1Ib/+sks5 0ClhwPXvMN/+cvdhLJU9Yr/4ryKZoIoNjDb0cafiJ+cu4pBFyjW4sTs8joMSFcVn YfhsU1hnuNYnONWgBa0ThfKTTqiy5xxYr+TJv+Po60pj/DcWOOLpp1pBdnXmfaG9 +G3Bn/WfwXaxuOzh8oTcV3Omzyui5SrM -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:53 2024 by rpki-client on console-fra.rpki-client.org