$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json) Hash identifier: y5zu5fryNvSfNH8jNpZqCVeJMn44ZH7VunQCbP7aZ+k= Subject key identifier: B3:47:68:5C:0E:41:B1:88:B9:E2:AC:39:E2:1F:AD:26:ED:0A:0C:12 Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft Manifest number: 017A Signing time: Sat 23 Nov 2024 02:10:43 +0000 Manifest this update: Sat 23 Nov 2024 02:10:43 +0000 Manifest next update: Sat 30 Nov 2024 02:10:43 +0000 Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: 67QboHwvak32Ogq6YA6qEpXVrpdf4itvqSrG8qnWkp8=) 2: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (hash: MNxrpIPrHgM/agNjK/jcXHufvJo1kAtzpF1UchJEPbQ=) 3: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: nj7JmWAwqKap0yeUNgBy44jTuFtiDXjsATDjRH5UpQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: Nov 23 02:10:43 2024 GMT Not After : Nov 30 02:10:43 2024 GMT Subject: CN=674139a3-d1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:73:e9:17:a2:ab:0c:24:0d:46:0b:d5:ed:8d: f6:ea:22:8a:ff:36:19:d9:ad:b1:67:9c:8b:01:d3: ea:01:2a:58:92:2f:a8:83:c1:9f:ca:ec:af:ab:8f: 53:26:1c:e4:a3:9f:4c:52:57:1f:cf:95:c8:d0:fc: ff:fb:db:5f:12:38:c6:db:66:fb:0e:5a:15:c7:ce: a7:14:7c:b0:d3:41:c5:56:2a:12:57:08:61:e5:83: 4e:30:f1:91:e3:a1:36:d5:dc:f9:fc:18:2f:0c:85: 62:51:fa:2f:c1:03:cb:2c:16:61:34:68:35:4e:74: 16:c9:ae:66:a5:01:c4:3b:72:32:da:51:13:16:a5: 49:0e:c0:27:61:94:6b:ff:8f:75:3e:24:39:0e:d5: 9a:36:3e:08:82:34:d0:64:95:e3:9f:6a:9b:5c:cf: 20:28:21:c4:66:22:bf:69:5a:8c:58:0b:bd:3a:60: 8d:8c:67:c6:c6:f7:40:f6:30:42:bb:a5:63:54:cb: 3b:36:b2:a3:cb:97:f9:7a:1d:44:dc:c0:ce:5c:20: b5:03:7e:12:f4:08:0e:49:48:f1:ad:ab:8b:ca:5b: 36:77:b0:70:de:6c:59:d1:25:d7:7b:3c:46:46:57: b7:53:d0:e4:4d:ee:0b:ae:5c:c7:fc:6d:dd:aa:a5: c2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:47:68:5C:0E:41:B1:88:B9:E2:AC:39:E2:1F:AD:26:ED:0A:0C:12 X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:d2:c0:1e:df:23:6f:5e:9f:2c:e1:90:3b:c3:3b:95:fc:d2: d0:b3:a5:a7:93:79:de:8b:b1:34:ad:46:b6:eb:00:c5:bd:e7: 5e:ce:f1:84:6f:9f:b5:30:3b:59:38:a8:23:ce:38:8f:90:12: ad:f2:6b:e6:5d:13:8b:b9:34:12:fb:4c:10:2f:76:0a:a7:38: a0:06:5b:45:db:43:82:98:db:d6:c7:76:c8:fa:39:65:86:b4: ec:2a:0d:e9:2c:f9:a7:87:a3:ee:63:cf:50:d7:9e:8f:88:55: f5:db:32:e8:6b:4f:77:3f:b1:c9:86:5d:a4:a3:1a:47:d8:1f: cf:db:86:3d:15:e3:10:a8:5d:9d:54:05:29:27:51:4f:08:1e: 26:b1:5c:f2:05:5f:44:c8:1f:95:18:23:6f:9e:04:bf:91:db: 2c:a2:42:bb:99:94:1a:5c:fc:83:8b:52:9b:87:b0:64:86:99: 7c:97:48:e3:49:0f:48:3c:80:70:07:24:81:2f:9d:5e:f9:bd: 5b:80:05:4e:89:a1:a7:a8:35:d8:a4:b7:a8:70:86:e5:39:b4: ba:3f:7b:e7:af:ac:54:a2:51:92:4b:7c:ee:61:06:2c:f0:db: 6b:7e:6f:fe:13:af:d4:a7:3a:0a:a1:85:94:f5:0f:02:72:e8: 1f:d2:39:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjQxMTIzMDIxMDQzWhcNMjQxMTMwMDIxMDQzWjAYMRYwFAYD VQQDEw02NzQxMzlhMy1kMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnnPpF6KrDCQNRgvV7Y326iKK/zYZ2a2xZ5yLAdPqASpYki+og8Gfyuyvq49T Jhzko59MUlcfz5XI0Pz/+9tfEjjG22b7DloVx86nFHyw00HFVioSVwhh5YNOMPGR 46E21dz5/BgvDIViUfovwQPLLBZhNGg1TnQWya5mpQHEO3Iy2lETFqVJDsAnYZRr /491PiQ5DtWaNj4IgjTQZJXjn2qbXM8gKCHEZiK/aVqMWAu9OmCNjGfGxvdA9jBC u6VjVMs7NrKjy5f5eh1E3MDOXCC1A34S9AgOSUjxrauLyls2d7Bw3mxZ0SXXezxG Rle3U9DkTe4LrlzH/G3dqqXCdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNHaFwO QbGIueKsOeIfrSbtCgwSMB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254 anVuR1h6c0JNbkd0dng5VUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo0sAe3yNvXp8s4ZA7wzuV/NLQs6Wnk3nei7E0rUa26wDFvedezvGE b5+1MDtZOKgjzjiPkBKt8mvmXROLuTQS+0wQL3YKpzigBltF20OCmNvWx3bI+jll hrTsKg3pLPmnh6PuY89Q156PiFX12zLoa093P7HJhl2koxpH2B/P24Y9FeMQqF2d VAUpJ1FPCB4msVzyBV9EyB+VGCNvngS/kdssokK7mZQaXPyDi1Kbh7Bkhpl8l0jj SQ9IPIBwBySBL51e+b1bgAVOiaGnqDXYpLeocIblObS6P3vnr6xUolGSS3zuYQYs 8Ntrfm/+E6/UpzoKoYWU9Q8Ccugf0jlG -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:55 2024 by rpki-client on console-fra.rpki-client.org