$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: 0c2EL/SZ+kHYu6JrLIj5dNVJbRZrF2Q9GfGr2f8IQpY= Subject key identifier: 93:F2:27:CE:52:56:8E:2E:C6:27:74:E3:CB:D2:86:04:4A:8E:63:DD Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0C2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0C19 Signing time: Wed 20 Nov 2024 18:13:29 +0000 Manifest this update: Wed 20 Nov 2024 18:13:28 +0000 Manifest next update: Wed 27 Nov 2024 18:13:28 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: Rv0feZu2FQO07faWkAJUMUVrAWLKlE+Sa9aGMQA1hx8=) 2: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: kJqESF4QlMyVG/2/vUjwGWXp6ZiWLKmRChQ5GeCT1ak=) 3: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: n6K4eFBQQStBGPjOWI9UjtqimxuSa7JV9+htrnKW+a4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3115 (0xc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: Nov 20 18:13:28 2024 GMT Not After : Nov 27 18:13:28 2024 GMT Subject: CN=673e26c8-4837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:b9:d5:6e:88:ad:63:65:a9:2a:75:c0:ef: 4f:eb:e4:93:1d:8b:1c:b1:bc:35:9b:15:e3:60:2c: fe:62:b7:6c:15:4f:4c:b9:ac:31:83:39:99:eb:00: 3f:0d:52:04:e7:55:53:12:b0:33:6e:6e:e6:5b:25: 6b:cf:93:93:b1:80:b0:79:eb:c8:a5:c0:7b:6c:4f: a9:77:cc:f7:dd:b3:bb:dd:dc:e4:6b:9d:8f:44:a3: 7f:5c:34:b5:3d:2b:42:31:14:d7:c9:15:14:cc:fc: 0d:aa:5b:5e:d4:04:a7:c8:46:cf:85:f9:9b:39:f3: fe:7f:5a:b8:8e:e5:8e:41:73:62:bf:29:c7:3c:7e: de:22:02:1e:a9:cb:99:62:f2:55:26:e1:46:1c:35: 24:21:b4:c0:d1:7a:75:4a:46:6d:02:b1:64:c3:0e: 7b:0b:3e:d6:fd:99:52:90:c4:6a:92:4b:3e:89:df: 04:3c:01:e5:4b:ec:fd:6e:1e:f5:bc:a1:71:9c:b1: d3:85:19:15:86:0b:22:d4:5b:fc:77:cc:04:f8:91: 91:15:86:b5:2a:d1:f2:1e:aa:24:7a:d8:6d:8f:e9: 80:be:4d:15:1b:49:23:4d:77:89:f9:d9:1b:e1:57: 55:8d:46:28:38:07:ca:8c:9b:3a:a1:94:a9:86:9f: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F2:27:CE:52:56:8E:2E:C6:27:74:E3:CB:D2:86:04:4A:8E:63:DD X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b6:b5:ce:6c:9b:5b:af:7d:78:2d:be:43:d0:da:a0:87:7b: 40:a6:da:e2:dd:6e:5d:09:30:55:03:01:1a:17:c2:68:2e:ec: 68:42:6c:17:96:ab:08:3e:e1:cb:19:c0:33:b0:47:17:24:c9: 35:f2:08:24:ca:e5:9b:86:8b:8f:9e:24:11:2e:2b:0c:cb:12: eb:a8:32:6f:00:58:06:9a:0a:e6:ab:fe:33:c8:6b:66:8a:71: 7a:ea:05:76:d2:c4:fb:b8:8e:5b:cc:4c:a5:d8:f6:b5:1a:93: 33:47:a7:3f:45:eb:94:f6:7f:4e:0b:c2:65:88:f3:f3:2b:7f: 9a:a2:1a:0d:51:e1:39:fd:e0:4a:d1:c1:70:d3:97:94:05:cb: 48:54:be:a4:9e:d2:38:55:e1:9a:12:ef:70:91:cd:a8:c9:48: cb:eb:66:bd:62:5d:c4:e1:33:26:ed:fd:ac:57:ab:61:80:16: 6a:86:c3:f4:c4:48:0b:a3:85:e9:5f:f0:a1:55:b8:b5:bc:37: 26:d7:01:7d:92:5f:58:71:a4:30:9d:66:f2:d6:ff:14:2b:8f: 94:a5:4a:34:06:e9:ea:36:65:49:1c:9c:23:ca:89:21:fb:bb: 0b:78:6f:e8:e1:cc:c9:79:85:a1:af:50:8f:2b:81:b7:9c:3e: dc:63:09:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjQxMTIwMTgxMzI4WhcNMjQxMTI3MTgxMzI4WjAYMRYwFAYD VQQDEw02NzNlMjZjOC00ODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdS51W6IrWNlqSp1wO9P6+STHYscsbw1mxXjYCz+YrdsFU9MuawxgzmZ6wA/ DVIE51VTErAzbm7mWyVrz5OTsYCweevIpcB7bE+pd8z33bO73dzka52PRKN/XDS1 PStCMRTXyRUUzPwNqlte1ASnyEbPhfmbOfP+f1q4juWOQXNivynHPH7eIgIeqcuZ YvJVJuFGHDUkIbTA0Xp1SkZtArFkww57Cz7W/ZlSkMRqkks+id8EPAHlS+z9bh71 vKFxnLHThRkVhgsi1Fv8d8wE+JGRFYa1KtHyHqokethtj+mAvk0VG0kjTXeJ+dkb 4VdVjUYoOAfKjJs6oZSphp/p4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPyJ85S Vo4uxid048vShgRKjmPdMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCytrXObJtbr314Lb5D0Nqgh3tAptri3W5dCTBVAwEaF8JoLuxoQmwX lqsIPuHLGcAzsEcXJMk18ggkyuWbhouPniQRLisMyxLrqDJvAFgGmgrmq/4zyGtm inF66gV20sT7uI5bzEyl2Pa1GpMzR6c/ReuU9n9OC8JliPPzK3+aohoNUeE5/eBK 0cFw05eUBctIVL6kntI4VeGaEu9wkc2oyUjL62a9Yl3E4TMm7f2sV6thgBZqhsP0 xEgLo4XpX/ChVbi1vDcm1wF9kl9YcaQwnWby1v8UK4+UpUo0BunqNmVJHJwjyokh +7sLeG/o4czJeYWhr1CPK4G3nD7cYwlg -----END CERTIFICATE-----Generated at Wed Nov 20 20:07:26 2024 by rpki-client on console-fra.rpki-client.org