$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft File: 5fjJ4D7R71BndlYU2mtRJq1vyz4.mft (raw, json) Hash identifier: 9d/WPVa4UyCBEM9+HIW40qmuuvQM45vW613/e/o1Rvk= Subject key identifier: DD:B1:7D:94:96:2D:97:F4:A6:E6:E8:31:30:21:70:02:9D:75:2A:93 Authority key identifier: E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E Certificate issuer: /CN=A91A6548/serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Certificate serial: 04A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft Manifest number: 04A2 Signing time: Fri 22 Nov 2024 23:31:11 +0000 Manifest this update: Fri 22 Nov 2024 23:31:11 +0000 Manifest next update: Fri 29 Nov 2024 23:31:11 +0000 Files and hashes: 1: 5fjJ4D7R71BndlYU2mtRJq1vyz4.crl (hash: Wg9ldSxFenysC3y4tQzBWG2Wq3NZUx+4pPAes3wMNY0=) 2: E6EC55EE0D7E11EC94917272C4F9AE02.roa (hash: ZFPLjWKhXylD4Z8vt5rlOjVNLoBd2B0qS7n8g9uJPA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6548/serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Validity Not Before: Nov 22 23:31:11 2024 GMT Not After : Nov 29 23:31:11 2024 GMT Subject: CN=6741143f-845e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:91:6d:dc:7b:cb:5c:ad:c2:05:ad:cb:4e: 38:08:07:a7:aa:d4:bc:a3:fe:9a:1b:6b:ac:b5:64: d0:52:ac:28:b8:5f:47:df:e2:ae:b4:a1:e1:4c:23: 04:51:cb:c5:1a:46:b6:a3:ab:48:26:76:8f:72:5f: b8:9a:92:63:45:da:6e:87:85:ca:92:ac:13:05:5f: e2:eb:9a:78:77:d6:6f:12:27:65:c4:42:be:ba:8c: a3:2d:62:40:b4:1e:3c:b5:99:b5:fa:63:98:b5:8c: e5:9e:77:04:9f:1d:26:cd:c7:24:32:56:d4:73:51: ae:39:14:5d:eb:75:af:70:2c:87:5c:b0:06:14:34: e0:cb:99:28:1a:6d:ff:5d:3d:73:f4:4d:45:18:c0: cf:05:17:85:8e:50:da:40:0c:22:28:7e:2f:2b:d5: 6c:9d:6b:f4:0d:b2:e3:e5:c0:30:92:8c:32:41:2e: ef:8a:4c:b7:1a:f4:5a:75:82:97:e5:92:3b:7d:b3: a5:2e:f3:69:57:b8:6c:c0:96:b8:03:09:cc:b3:a2: 20:7c:7e:26:bd:cb:21:8f:15:65:e6:06:07:3e:ab: 6d:b4:36:95:96:45:55:b6:8e:8f:f5:dc:07:0a:9a: a8:95:f2:e1:0c:a5:8a:22:c9:05:66:39:22:03:76: 1f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B1:7D:94:96:2D:97:F4:A6:E6:E8:31:30:21:70:02:9D:75:2A:93 X509v3 Authority Key Identifier: keyid:E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:55:02:ff:43:bf:6a:85:9a:05:93:a6:c3:17:6b:3b:d1:bb: 79:59:bb:65:01:cb:2e:25:6f:8d:97:57:7f:b8:44:a3:fb:0f: 98:a2:a3:d9:6f:d7:63:61:76:7e:27:11:ea:00:ec:ff:9d:10: 34:97:56:bc:9b:ef:62:8e:25:6a:5c:fc:36:bb:45:88:f9:d0: 4b:21:de:8f:8d:e9:01:35:51:be:b4:44:a0:1a:77:a9:74:e9: e7:77:b8:81:02:82:aa:ee:22:3a:74:2d:fa:12:36:06:5c:c1: fe:ec:68:44:9e:e5:d8:db:90:11:d9:a9:2f:d1:c9:ba:d7:ed: 46:fa:2f:bd:c7:65:63:70:77:54:c5:7d:60:44:8e:10:d3:eb: 48:65:e4:09:38:55:58:29:bf:68:a7:5f:0c:48:1f:bd:86:9b: d2:7e:14:6a:4b:f0:a6:9f:df:18:ed:4e:d2:a1:b3:8c:95:95: d6:c8:4f:ea:4b:14:5e:e3:0f:25:ca:3f:5a:e9:9e:72:b6:57: c1:b7:a0:cc:26:de:8b:89:e9:74:0a:dd:40:7c:dc:2d:3c:9c: 09:0e:d2:ed:ff:cb:33:89:06:69:74:64:88:8f:d5:12:45:f2: e2:ce:21:96:a9:26:3c:12:98:ad:f7:c8:0b:c4:1b:ed:53:25: e8:93:ff:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NDgxMTAvBgNVBAUTKEU1RjhDOUUwM0VEMUVGNTA2Nzc2NTYxNERBNkI1MTI2 QUQ2RkNCM0UwHhcNMjQxMTIyMjMzMTExWhcNMjQxMTI5MjMzMTExWjAYMRYwFAYD VQQDEw02NzQxMTQzZi04NDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1A2Rbdx7y1ytwgWty044CAenqtS8o/6aG2ustWTQUqwouF9H3+KutKHhTCME UcvFGka2o6tIJnaPcl+4mpJjRdpuh4XKkqwTBV/i65p4d9ZvEidlxEK+uoyjLWJA tB48tZm1+mOYtYzlnncEnx0mzcckMlbUc1GuORRd63WvcCyHXLAGFDTgy5koGm3/ XT1z9E1FGMDPBReFjlDaQAwiKH4vK9VsnWv0DbLj5cAwkowyQS7viky3GvRadYKX 5ZI7fbOlLvNpV7hswJa4AwnMs6IgfH4mvcshjxVl5gYHPqtttDaVlkVVto6P9dwH CpqolfLhDKWKIskFZjkiA3YfuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2xfZSW LZf0puboMTAhcAKddSqTMB8GA1UdIwQYMBaAFOX4yeA+0e9QZ3ZWFNprUSatb8s+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0OC83RENGMjQ4QTBE N0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3UjcxQm5kbFlVMm10UkpxMXZ5 ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVmako0RDdSNzFCbmRsWVUybXRSSnExdnl6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU0OC83RENGMjQ4QTBEN0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3Ujcx Qm5kbFlVMm10UkpxMXZ5ejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASVQL/Q79qhZoFk6bDF2s70bt5WbtlAcsuJW+Nl1d/uESj+w+YoqPZ b9djYXZ+JxHqAOz/nRA0l1a8m+9ijiVqXPw2u0WI+dBLId6PjekBNVG+tESgGnep dOnnd7iBAoKq7iI6dC36EjYGXMH+7GhEnuXY25AR2akv0cm61+1G+i+9x2VjcHdU xX1gRI4Q0+tIZeQJOFVYKb9op18MSB+9hpvSfhRqS/Cmn98Y7U7SobOMlZXWyE/q SxRe4w8lyj9a6Z5ytlfBt6DMJt6Liel0Ct1AfNwtPJwJDtLt/8sziQZpdGSIj9US RfLiziGWqSY8Epit98gLxBvtUyXok//2 -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org