$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft File: tBNlbNepj73iI3_FMUyf9-jxoJ4.mft (raw, json) Hash identifier: +QjLHRVV/rC1sF83S4zMr9B/cZjaizXAVcqwwiXS8oc= Subject key identifier: 3D:BD:C4:C7:16:BB:81:8D:15:04:D6:B7:96:EE:87:A9:0E:93:94:11 Authority key identifier: B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E Certificate issuer: /CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Certificate serial: 0683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft Manifest number: 0678 Signing time: Wed 20 Nov 2024 21:52:25 +0000 Manifest this update: Wed 20 Nov 2024 21:52:25 +0000 Manifest next update: Wed 27 Nov 2024 21:52:25 +0000 Files and hashes: 1: tBNlbNepj73iI3_FMUyf9-jxoJ4.crl (hash: ecpwV2AObNMUYuS5ciqTZDqreAGl8hUf1VUI+o81YKI=) 2: B61AFCF654A411EB88DE1D23C4F9AE02.roa (hash: J3rUZvVMouK6km5uMOBOGRXZYwSoT0RYai5nFCK9cxI=) 3: 4DB43F043E6611ECBD788C16C4F9AE02.roa (hash: sq8YvID2fGnJMN2LBB99ON+snBFPdQ2xKi28eJoQh7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E Validity Not Before: Nov 20 21:52:25 2024 GMT Not After : Nov 27 21:52:25 2024 GMT Subject: CN=673e5a19-3b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:b0:8d:ab:76:bb:23:b3:a0:b3:fc:7a:c7: c1:52:3e:c5:96:e6:04:36:f8:cb:b0:b5:6c:e5:13: 64:22:bc:69:85:79:50:21:a3:39:0d:35:6f:b6:e8: 26:7b:e4:be:2c:dd:e3:c3:94:48:87:1a:59:e3:e5: 3b:58:10:b8:7a:e4:ff:f0:1b:0c:91:d7:f0:e1:e7: 27:cc:ec:51:54:42:89:30:ba:7c:5c:05:6c:7c:9d: ad:e5:d1:cb:8b:01:cb:9f:ba:f4:61:fe:56:13:e2: a6:a1:57:2a:ad:fd:cb:e7:0f:bb:4e:1b:d6:ff:76: 73:d9:59:c9:f7:7d:2b:94:7e:f5:2b:6c:61:e7:cc: ff:4d:81:2a:5d:c5:ed:84:e9:84:85:de:a7:fe:c4: 0a:5e:ed:67:28:df:d8:48:fc:b1:40:72:5c:eb:57: e2:4c:6a:e8:02:dd:5e:99:4a:90:26:46:68:ec:2e: 01:23:bd:90:da:88:79:99:55:9c:fb:9c:b8:e4:89: 6c:98:e7:e6:30:ce:3d:10:60:e4:8b:5a:2b:fe:16: 92:e1:a9:2d:35:82:83:84:a6:4e:89:c2:fb:35:a3: f0:9a:9e:80:87:e6:02:e2:44:62:eb:8b:bd:df:14: 1a:ec:5a:9e:ed:1a:25:00:7e:20:9a:84:2a:e5:96: 7f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BD:C4:C7:16:BB:81:8D:15:04:D6:B7:96:EE:87:A9:0E:93:94:11 X509v3 Authority Key Identifier: keyid:B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9f:e7:47:e2:aa:64:b7:cc:75:2d:3b:40:12:61:2b:38:1c: f5:ce:28:6a:53:64:70:5e:03:f9:38:c5:b7:7f:c6:b4:49:bd: f6:03:74:f6:9d:86:66:c0:f5:61:3f:23:cf:e5:06:15:70:77: 64:04:15:a2:34:51:c5:12:ce:5e:d6:be:00:3e:92:cd:24:7c: 42:1e:ba:89:09:37:15:28:42:42:c7:f1:11:eb:bd:09:ef:47: 38:63:84:d1:a7:28:68:7b:65:ac:e3:5c:61:08:f1:27:47:f2: 17:40:9d:e7:0c:09:87:0f:97:12:6f:1b:16:96:6d:64:4c:46: 07:db:d3:84:36:ce:e3:a8:2b:61:13:a0:4b:39:c0:3a:df:5d: fb:33:e7:3f:8e:d1:ed:6c:15:aa:37:a4:67:e0:e3:1f:e0:db: 57:ed:f1:52:3b:b2:84:dc:3b:af:18:90:fc:6e:b8:2f:b2:16: 31:0b:8a:45:c1:0c:d8:e7:03:d5:d7:f6:5b:74:fe:da:ca:29: b3:34:99:47:bd:5b:68:8c:dc:9f:4e:11:b1:d5:6d:9b:00:05: ba:5a:3a:ba:02:3f:94:3f:7e:e5:3d:b4:ae:33:67:76:f5:e5: 3a:ce:3a:de:de:99:74:eb:f8:49:f4:60:47:e9:8d:cf:aa:a7: 44:41:4b:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyNTIxMTAvBgNVBAUTKEI0MTM2NTZDRDdBOThGQkRFMjIzN0ZDNTMxNEM5RkY3 RThGMUEwOUUwHhcNMjQxMTIwMjE1MjI1WhcNMjQxMTI3MjE1MjI1WjAYMRYwFAYD VQQDEw02NzNlNWExOS0zYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxM2wjat2uyOzoLP8esfBUj7FluYENvjLsLVs5RNkIrxphXlQIaM5DTVvtugm e+S+LN3jw5RIhxpZ4+U7WBC4euT/8BsMkdfw4ecnzOxRVEKJMLp8XAVsfJ2t5dHL iwHLn7r0Yf5WE+KmoVcqrf3L5w+7ThvW/3Zz2VnJ930rlH71K2xh58z/TYEqXcXt hOmEhd6n/sQKXu1nKN/YSPyxQHJc61fiTGroAt1emUqQJkZo7C4BI72Q2oh5mVWc +5y45IlsmOfmMM49EGDki1or/haS4aktNYKDhKZOicL7NaPwmp6Ah+YC4kRi64u9 3xQa7Fqe7RolAH4gmoQq5ZZ/PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD29xMcW u4GNFQTWt5buh6kOk5QRMB8GA1UdIwQYMBaAFLQTZWzXqY+94iN/xTFMn/fo8aCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTI1Mi9DRDE2M0JDQTU0 QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3M2lJM19GTVV5Zjktanhv SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCTmxiTmVwajczaUkzX0ZNVXlmOS1qeG9KNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTI1Mi9DRDE2M0JDQTU0QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3 M2lJM19GTVV5ZjktanhvSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKn+dH4qpkt8x1LTtAEmErOBz1zihqU2RwXgP5OMW3f8a0Sb32A3T2 nYZmwPVhPyPP5QYVcHdkBBWiNFHFEs5e1r4APpLNJHxCHrqJCTcVKEJCx/ER670J 70c4Y4TRpyhoe2Ws41xhCPEnR/IXQJ3nDAmHD5cSbxsWlm1kTEYH29OENs7jqCth E6BLOcA63137M+c/jtHtbBWqN6Rn4OMf4NtX7fFSO7KE3DuvGJD8brgvshYxC4pF wQzY5wPV1/ZbdP7ayimzNJlHvVtojNyfThGx1W2bAAW6Wjq6Aj+UP37lPbSuM2d2 9eU6zjre3pl06/hJ9GBH6Y3PqqdEQUuj -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:47 2024 by rpki-client on console-fra.rpki-client.org