$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft File: _j6YxMGnkStakW0WM0d4xKt6ZTA.mft (raw, json) Hash identifier: CPSjNhbVZRiM1/l9+7GoQ8+t5by+u2+dJ8bfeedRe5s= Subject key identifier: 05:73:3A:5D:5E:04:5F:0A:32:A7:B8:07:6C:FC:5E:AE:2B:94:33:F8 Authority key identifier: FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 Certificate issuer: /CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Certificate serial: 1483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft Manifest number: 1475 Signing time: Fri 22 Nov 2024 16:53:21 +0000 Manifest this update: Fri 22 Nov 2024 16:53:20 +0000 Manifest next update: Fri 29 Nov 2024 16:53:20 +0000 Files and hashes: 1: _j6YxMGnkStakW0WM0d4xKt6ZTA.crl (hash: gBHGxANeAV7jYU068SyQr6el38o29dUtH8yEot1LqUQ=) 2: 95DDE9D6909A11EF94AF3B26C4F9AE02.roa (hash: gSL+g9g3YpA7s5XesQRHZm3/7MvyodXEVF116j/i5W8=) 3: 3BA876C457A911E8A8A8B477C4F9AE02.roa (hash: bcEJ56A4BGIoa5B1+6LrUQhbZUOKKFrTO8YQb351Q9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5251 (0x1483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Validity Not Before: Nov 22 16:53:20 2024 GMT Not After : Nov 29 16:53:20 2024 GMT Subject: CN=6740b701-a676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:ea:23:92:36:a1:4d:8c:18:b0:19:4a:d0: a9:f6:77:20:cc:cf:0d:9c:88:28:e1:8d:7f:67:31: e9:40:39:d8:6c:2e:ca:de:dc:78:10:74:58:07:17: 7f:41:78:72:37:64:47:59:35:b0:8d:70:ae:05:df: e5:a8:71:11:89:9f:28:08:5d:da:73:0e:2b:19:88: d7:eb:8e:d7:5c:bc:03:19:7f:5b:ef:fe:fa:52:a8: 75:e9:ed:1e:fe:a4:ae:98:06:85:ed:48:b5:01:59: 8f:6e:0d:e9:87:6d:fd:8c:1b:42:53:81:78:4c:30: a1:f9:94:31:a6:d4:0b:b8:46:bc:32:93:0c:66:ad: 89:e7:66:57:c3:97:1c:1d:ad:3f:9a:d6:f7:4a:ff: 65:d4:67:41:de:2c:45:00:a5:93:0a:cb:9d:54:11: 04:56:ff:b9:c3:5f:d5:39:53:bf:a8:01:db:0a:7a: f4:16:6c:48:ec:d1:fe:f2:85:c3:11:67:53:95:7d: 17:f7:43:ff:3e:b4:75:9c:9f:4a:c2:1b:7e:d6:f5: 32:92:e8:53:92:d8:b6:7e:19:0b:b7:43:00:f4:c8: 33:b6:c5:fd:f6:61:59:0f:ef:52:5a:ce:42:4f:57: 55:c0:ea:3b:9c:0e:c2:68:d1:d5:62:d2:69:c2:17: 9e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:73:3A:5D:5E:04:5F:0A:32:A7:B8:07:6C:FC:5E:AE:2B:94:33:F8 X509v3 Authority Key Identifier: keyid:FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3e:74:ef:91:f0:79:60:60:a7:39:9b:83:85:61:d4:72:dc: 8d:2a:68:a8:6e:fc:7f:cc:c3:f5:d2:1f:b0:5a:e8:4a:0c:2a: 34:cb:e6:53:8c:1d:a4:07:4d:4f:3d:1b:04:3a:2e:24:1d:b1: 0e:2c:31:39:d7:57:b1:85:f8:a6:b6:6b:eb:7a:a5:36:7b:d1: a2:a7:d9:68:e9:3f:0f:07:cf:70:14:fa:77:14:f4:ba:fe:d6: 36:28:ae:96:16:4d:3f:8e:25:6f:6c:7a:c2:b2:e9:99:50:c3: de:ab:ff:b5:11:a6:62:e1:9e:cb:8e:6d:04:2e:01:a0:0d:e4: 42:69:45:9e:9c:64:7e:a0:4f:71:b6:57:3c:8c:37:89:f0:8a: 0b:b9:44:52:72:f4:03:ad:bc:82:29:ae:ea:c5:87:6e:c8:b2: 14:16:ee:0a:b2:8d:d0:e4:c9:b8:9d:9b:2a:de:c8:76:98:c2: ab:94:04:b1:d2:ec:56:7c:44:cc:ef:44:50:8e:a7:72:f4:10: bf:da:0b:c4:b7:43:8b:08:2c:05:62:29:99:42:ad:a7:5e:65: b9:9d:df:f9:73:8f:89:ce:79:87:78:6a:ba:c7:c1:35:bf:ec: 8f:14:55:ce:eb:01:38:0f:7c:9b:89:01:53:93:e2:f8:97:1a: d5:2e:52:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBEOUMxMTAvBgNVBAUTKEZFM0U5OEM0QzFBNzkxMkI1QTkxNkQxNjMzNDc3OEM0 QUI3QTY1MzAwHhcNMjQxMTIyMTY1MzIwWhcNMjQxMTI5MTY1MzIwWjAYMRYwFAYD VQQDEw02NzQwYjcwMS1hNjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwa3qI5I2oU2MGLAZStCp9ncgzM8NnIgo4Y1/ZzHpQDnYbC7K3tx4EHRYBxd/ QXhyN2RHWTWwjXCuBd/lqHERiZ8oCF3acw4rGYjX647XXLwDGX9b7/76Uqh16e0e /qSumAaF7Ui1AVmPbg3ph239jBtCU4F4TDCh+ZQxptQLuEa8MpMMZq2J52ZXw5cc Ha0/mtb3Sv9l1GdB3ixFAKWTCsudVBEEVv+5w1/VOVO/qAHbCnr0FmxI7NH+8oXD EWdTlX0X90P/PrR1nJ9Kwht+1vUykuhTkti2fhkLt0MA9MgztsX99mFZD+9SWs5C T1dVwOo7nA7CaNHVYtJpwhee2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVzOl1e BF8KMqe4B2z8Xq4rlDP4MB8GA1UdIwQYMBaAFP4+mMTBp5ErWpFtFjNHeMSremUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ5Qy85RTI4MzAwNjU3 QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtTdGFrVzBXTTBkNHhLdDZa VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qNll4TUdua1N0YWtXMFdNMGQ0eEt0NlpUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEQ5Qy85RTI4MzAwNjU3QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtT dGFrVzBXTTBkNHhLdDZaVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6PnTvkfB5YGCnOZuDhWHUctyNKmiobvx/zMP10h+wWuhKDCo0y+ZT jB2kB01PPRsEOi4kHbEOLDE511exhfimtmvreqU2e9Gip9lo6T8PB89wFPp3FPS6 /tY2KK6WFk0/jiVvbHrCsumZUMPeq/+1EaZi4Z7Ljm0ELgGgDeRCaUWenGR+oE9x tlc8jDeJ8IoLuURScvQDrbyCKa7qxYduyLIUFu4Kso3Q5Mm4nZsq3sh2mMKrlASx 0uxWfETM70RQjqdy9BC/2gvEt0OLCCwFYimZQq2nXmW5nd/5c4+JznmHeGq6x8E1 v+yPFFXO6wE4D3ybiQFTk+L4lxrVLlLF -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org