$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft (raw, json) Hash identifier: U2oSv2uLvjVfyPT9+tecxZW+nqCoKMhAqcLoYfak5iU= Subject key identifier: 61:11:A0:6D:F7:D4:01:51:65:36:ED:B5:9B:AD:F8:72:DA:55:2E:20 Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Certificate serial: 359A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft Manifest number: 34EE Signing time: Wed 20 Nov 2024 14:24:31 +0000 Manifest this update: Wed 20 Nov 2024 14:24:30 +0000 Manifest next update: Wed 27 Nov 2024 14:24:30 +0000 Files and hashes: 1: s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl (hash: Ln5/I+SivdyF2nCM5O0DxLDqGXqdwmv9mNCXHWP/OHU=) 2: B36EA83C70B111E98CFFF710C4F9AE02.roa (hash: 7w8TQDuZrmu3C3e/zIooJnVlX1I5qMx17mzAe3kTVb0=) 3: A64BD8D8E04511EE9E52AC60C4F9AE02.roa (hash: Hsi0dnJ5S2M93il6VsbiI9fW0T0MPCqa7KUwEgIYSus=) 4: 160B219870BA11E99E0F6D2DC4F9AE02.roa (hash: l7mpSKPnJ6I/x2Ycg3w1AID9sdD9xgANWmQ8t5LXOCU=) 5: 26A143C291EB11EF8A024083C4F9AE02.roa (hash: B/XX1gy1rng//wLqtAZ0dbiuKH353JDnAfGOg4wukqE=) 6: 18F4FD76918111EC93DCA42AC4F9AE02.roa (hash: GqeKSjnh2zHCe2pCCUX3QxC9/PR5M9Agse6J8/JdhuU=) 7: B0EB27B470B811E9B32F6726C4F9AE02.roa (hash: 8zWKsKYuB2/eR/K5/iiHkZOCxM0bmwvPtpkDSNP+BIE=) 8: 9538F912A09511EE9616A86EC4F9AE02.roa (hash: XZQiCUHxbU9WbUq5AAsThn5sHBDxupklyQ+fnEc+W24=) 9: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (hash: QoNCxC2F1UvI8+aiOUsTGK8S+7ZkQLVuYM4NPAYbSBY=) 10: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (hash: Ajmtfmwu5a7QngoLh2Td17YJ0cHGpi1gJ1Cq6xMZ0yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13722 (0x359a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Validity Not Before: Nov 20 14:24:30 2024 GMT Not After : Nov 27 14:24:30 2024 GMT Subject: CN=673df11e-2fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:e4:9e:b5:d8:57:da:0e:f7:be:10:c5:92: 3f:93:23:13:aa:d4:ba:12:39:c7:a4:f4:c8:0f:5c: 3c:32:b8:7e:91:d7:4b:4b:9a:d0:9f:e6:5e:e7:ea: f7:c0:6c:3b:ce:33:61:4a:36:c8:ee:a5:15:0a:f1: 84:41:fc:1f:76:a8:72:d6:c9:aa:8c:c0:b5:fb:df: 44:7d:2f:21:a2:2f:ff:e6:ba:59:02:23:7a:6e:f8: 44:87:6c:00:92:ef:19:91:1b:00:bb:bf:6c:a2:92: 84:78:3e:e7:d6:f4:7d:f0:45:56:64:23:16:e9:ef: 3c:23:13:e3:d4:22:b8:28:eb:73:76:7c:b7:dc:4c: 6d:d1:7c:43:62:5c:78:c0:ac:2f:0e:32:62:95:06: a5:1e:c1:eb:86:b2:c3:38:bc:54:4b:8e:af:1d:a1: bc:09:6d:1a:34:0f:bc:cf:3d:05:ff:68:4c:31:e4: 1f:15:37:8c:f8:57:95:fb:b6:f0:46:74:ce:5e:cc: 3b:97:b8:ba:2c:af:bf:c8:04:a7:45:51:92:b1:0b: f9:ad:37:46:91:be:69:a5:6a:91:e1:9b:e8:c0:92: d2:f6:f7:2c:1e:c6:92:62:4e:21:c3:f0:57:c5:14: dd:a1:3f:9b:f4:6b:dc:09:66:14:18:19:b6:bc:5e: dd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:11:A0:6D:F7:D4:01:51:65:36:ED:B5:9B:AD:F8:72:DA:55:2E:20 X509v3 Authority Key Identifier: keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:a4:b1:f4:9f:27:82:bb:d0:78:d6:71:22:f8:d3:4c:23:81: c6:5b:93:3d:8e:dd:2a:ca:64:d5:7d:8d:3c:78:9a:c2:eb:d7: 8d:2f:fd:95:79:c4:35:21:71:b7:08:e9:45:f2:55:5b:36:ba: 25:fc:95:23:8e:52:ce:f8:e0:20:29:15:b2:6a:02:18:75:5b: 34:63:6c:2a:80:26:48:14:e0:07:10:62:cd:d0:18:3d:a1:f1: 7a:37:5d:78:34:32:25:a3:d3:74:2d:13:c4:6e:06:a2:61:c9: b0:c8:f7:0f:fd:82:0d:c8:e3:04:c2:c2:aa:f0:c3:a1:be:aa: b9:2f:c4:86:48:2a:b6:2a:dc:5b:2c:8c:c4:6a:d7:d9:7d:d7: e0:a2:9f:cb:49:59:3e:8d:78:f5:42:c2:b3:6e:d7:f3:f0:aa: 61:33:98:88:d0:9b:c7:7a:45:70:70:9a:39:8c:92:e2:c3:44: 72:e7:e9:51:38:91:07:37:e1:80:92:4d:cf:1a:64:16:55:e5: e1:69:75:68:fe:62:a3:52:8d:70:4f:36:32:fe:ae:61:bc:c1: 03:2b:ce:6e:87:5a:dc:d1:d0:d2:f0:da:5c:3a:71:ca:b5:26: fa:5c:82:d4:ac:97:ea:dc:48:f8:9b:8d:e6:34:aa:66:4c:7d: 9e:41:31:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUzQzg4QUQxNERB ODlBMTg2MjUwHhcNMjQxMTIwMTQyNDMwWhcNMjQxMTI3MTQyNDMwWjAYMRYwFAYD VQQDEw02NzNkZjExZS0yZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqL7knrXYV9oO974QxZI/kyMTqtS6EjnHpPTID1w8Mrh+kddLS5rQn+Ze5+r3 wGw7zjNhSjbI7qUVCvGEQfwfdqhy1smqjMC1+99EfS8hoi//5rpZAiN6bvhEh2wA ku8ZkRsAu79sopKEeD7n1vR98EVWZCMW6e88IxPj1CK4KOtzdny33Ext0XxDYlx4 wKwvDjJilQalHsHrhrLDOLxUS46vHaG8CW0aNA+8zz0F/2hMMeQfFTeM+FeV+7bw RnTOXsw7l7i6LK+/yASnRVGSsQv5rTdGkb5ppWqR4ZvowJLS9vcsHsaSYk4hw/BX xRTdoT+b9GvcCWYUGBm2vF7dGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGERoG33 1AFRZTbttZut+HLaVS4gMB8GA1UdIwQYMBaAFLOYZqmdHNn05+j1PIitFNqJoYYl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy9FNjU4NTExMjFE ODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJmVG42UFU4aUswVTJvbWho aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1aG1xWjBjMmZUbjZQVThpSzBVMm9taGhpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy9FNjU4NTExMjFEODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJm VG42UFU4aUswVTJvbWhoaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOpLH0nyeCu9B41nEi+NNMI4HGW5M9jt0qymTVfY08eJrC69eNL/2V ecQ1IXG3COlF8lVbNrol/JUjjlLO+OAgKRWyagIYdVs0Y2wqgCZIFOAHEGLN0Bg9 ofF6N114NDIlo9N0LRPEbgaiYcmwyPcP/YINyOMEwsKq8MOhvqq5L8SGSCq2Ktxb LIzEatfZfdfgop/LSVk+jXj1QsKzbtfz8KphM5iI0JvHekVwcJo5jJLiw0Ry5+lR OJEHN+GAkk3PGmQWVeXhaXVo/mKjUo1wTzYy/q5hvMEDK85uh1rc0dDS8NpcOnHK tSb6XILUrJfq3Ej4m43mNKpmTH2eQTGY -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:59 2024 by rpki-client on console-fra.rpki-client.org