$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft File: AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft (raw, json) Hash identifier: nBhP1t6tmZnxafiMBMg/VsU8zxoaM7tcMZJ6mz1xyyg= Subject key identifier: 11:71:DC:1F:0A:05:5E:D5:63:56:C2:6B:DC:99:EF:0D:9B:7B:B1:63 Authority key identifier: 01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9 Certificate issuer: /CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft Manifest number: C3 Signing time: Sat 23 Nov 2024 03:57:38 +0000 Manifest this update: Sat 23 Nov 2024 03:57:38 +0000 Manifest next update: Sat 30 Nov 2024 03:57:38 +0000 Files and hashes: 1: AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl (hash: w7y8GX5Y5T64DfjaD7XGcISPllHvQsXC5xTNdb8cxwc=) 2: 110A7248841F11EEAF514B09C4F9AE02.roa (hash: 3UMzDkmaCKQSgaeBeiUzWqmgHjiQdo/Y4B6yGA1t2M4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9 Validity Not Before: Nov 23 03:57:38 2024 GMT Not After : Nov 30 03:57:38 2024 GMT Subject: CN=674152b2-c018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:f3:0b:98:1e:d4:1f:7e:94:45:f0:2c:30: 18:61:15:63:01:1a:20:b2:54:e3:cd:62:95:10:0e: 46:42:c8:f8:42:b6:0a:9c:ff:00:c0:b3:78:a7:37: bd:03:b7:f7:d1:d0:be:0c:c8:90:28:89:40:44:b1: 6f:ff:28:37:e8:a1:fc:14:fa:bb:90:04:ea:27:9f: 2c:78:42:8e:03:08:ed:f0:f7:21:02:67:16:f6:e1: 07:43:d0:f7:e3:7d:41:04:a7:2f:02:d9:2a:1b:46: 6c:4d:1d:36:4d:5e:ba:6d:e7:73:76:14:73:94:9b: 70:65:9b:a1:21:5c:f6:03:91:fe:14:82:74:ac:2f: c6:1a:f9:8c:ab:1b:07:c5:ee:d1:75:0b:97:d0:d3: b5:8e:d2:8b:33:2e:4a:aa:0e:76:0c:44:92:4a:c0: c6:d8:b7:d5:d6:a4:53:81:9b:24:b1:99:0e:3f:bc: 05:f4:ca:f6:51:0f:14:d2:0b:78:68:b4:15:3a:03: c8:69:db:33:59:72:4d:74:3b:c9:26:40:5d:db:d8: 9d:2f:19:67:c1:4e:4d:c6:e6:9d:f7:70:5d:43:7f: b5:6d:2d:ba:14:b4:29:81:59:82:41:9d:87:76:bb: c1:3b:68:62:41:15:e6:99:10:a0:31:2c:bc:10:da: 59:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:71:DC:1F:0A:05:5E:D5:63:56:C2:6B:DC:99:EF:0D:9B:7B:B1:63 X509v3 Authority Key Identifier: keyid:01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0e:9e:38:cb:3f:30:08:90:f8:fd:42:ff:95:0b:c9:20:11: 53:ba:fc:32:4a:fc:8f:d8:ff:d4:e7:2e:6a:1c:f5:64:b9:8f: cf:b7:6a:2e:fd:af:cf:bc:df:56:90:e0:f0:6b:8e:7f:0d:b1: 48:48:2b:93:4b:b5:cb:76:5b:c2:b0:cb:af:ec:73:37:dc:2e: b2:1c:93:89:ed:67:ca:43:46:a1:38:ee:fb:35:dc:76:5b:f4: d7:82:c3:dd:89:fe:b9:76:9c:eb:6c:61:49:12:09:10:14:47: 7d:7d:d8:11:91:c9:20:1a:56:2e:d1:f1:18:29:c8:0c:bc:ca: 42:85:2b:ee:93:77:79:5a:d0:42:5c:41:7d:2d:60:60:34:61: 2c:40:03:a4:d0:e5:db:ff:32:ab:66:a7:64:e6:d7:37:68:30: 96:2b:34:2c:18:35:3b:a8:d1:91:61:ef:4f:e6:e1:e9:00:2f: 0c:43:2a:b0:1d:e3:89:6c:e5:89:f6:a8:8f:09:b8:53:70:22: d0:d0:03:c4:15:c9:32:84:6e:b4:55:dc:5d:05:96:5c:b5:bd: b2:aa:86:75:e0:58:e4:77:ba:35:0b:c5:b7:4b:fe:27:57:54: 86:81:91:3f:4a:6b:a3:24:67:da:17:9c:4b:34:c6:b0:00:88: 73:a5:cd:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNDNTIxMTAvBgNVBAUTKDAxQjZEQjRCRjFEMzNBMzQxRjQ3NjBBOThDODVGODc2 MTAzRkFFRTkwHhcNMjQxMTIzMDM1NzM4WhcNMjQxMTMwMDM1NzM4WjAYMRYwFAYD VQQDEw02NzQxNTJiMi1jMDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonvzC5ge1B9+lEXwLDAYYRVjARogslTjzWKVEA5GQsj4QrYKnP8AwLN4pze9 A7f30dC+DMiQKIlARLFv/yg36KH8FPq7kATqJ58seEKOAwjt8PchAmcW9uEHQ9D3 431BBKcvAtkqG0ZsTR02TV66bedzdhRzlJtwZZuhIVz2A5H+FIJ0rC/GGvmMqxsH xe7RdQuX0NO1jtKLMy5Kqg52DESSSsDG2LfV1qRTgZsksZkOP7wF9Mr2UQ8U0gt4 aLQVOgPIadszWXJNdDvJJkBd29idLxlnwU5Nxuad93BdQ3+1bS26FLQpgVmCQZ2H drvBO2hiQRXmmRCgMSy8ENpZYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFx3B8K BV7VY1bCa9yZ7w2be7FjMB8GA1UdIwQYMBaAFAG220vx0zo0H0dgqYyF+HYQP67p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0M1Mi83REMzQTM0Mjg0 MUUxMUVFODg5ODMwODdDNEY5QUUwMi9BYmJiU19IVE9qUWZSMkNwaklYNGRoQV9y dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FiYmJTX0hUT2pRZlIyQ3BqSVg0ZGhBX3J1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0M1Mi83REMzQTM0Mjg0MUUxMUVFODg5ODMwODdDNEY5QUUwMi9BYmJiU19IVE9q UWZSMkNwaklYNGRoQV9ydWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLDp44yz8wCJD4/UL/lQvJIBFTuvwySvyP2P/U5y5qHPVkuY/Pt2ou /a/PvN9WkODwa45/DbFISCuTS7XLdlvCsMuv7HM33C6yHJOJ7WfKQ0ahOO77Ndx2 W/TXgsPdif65dpzrbGFJEgkQFEd9fdgRkckgGlYu0fEYKcgMvMpChSvuk3d5WtBC XEF9LWBgNGEsQAOk0OXb/zKrZqdk5tc3aDCWKzQsGDU7qNGRYe9P5uHpAC8MQyqw HeOJbOWJ9qiPCbhTcCLQ0APEFckyhG60VdxdBZZctb2yqoZ14Fjkd7o1C8W3S/4n V1SGgZE/SmujJGfaF5xLNMawAIhzpc2O -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org