$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft File: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft (raw, json) Hash identifier: yc9NW37XTJEB9rFeXuWRW/3WLhXLmFbi/ycsUOdYp5g= Subject key identifier: 29:B1:A9:80:1C:06:06:1C:B3:EA:BF:B7:47:CF:9A:9F:1B:7C:81:58 Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5 Certificate issuer: /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft Manifest number: 0D Signing time: Wed 23 Oct 2024 06:44:43 +0000 Manifest this update: Wed 23 Oct 2024 06:44:43 +0000 Manifest next update: Wed 30 Oct 2024 06:44:43 +0000 Files and hashes: 1: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl (hash: /ofxROKzMmy5mCibjemyayZMMltcxQ4RNxdEAQx22f8=) 2: D1E54D607FF211EFB2910061C4F9AE02.roa (hash: K3X3GoEdbp40UjZvhBO+XoTewllnOfMeBiUtz3yrvW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5 Validity Not Before: Oct 23 06:44:43 2024 GMT Not After : Oct 30 06:44:43 2024 GMT Subject: CN=67189b5b-fced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c2:69:43:90:03:c7:8b:bf:6a:83:b9:af:2d: ff:7d:76:5c:60:de:0b:d0:68:fc:b2:0e:4a:64:52: e9:cb:da:1c:6e:48:29:ac:08:36:6c:ca:78:41:39: e8:d7:a4:cb:bc:3b:8b:09:87:2a:d1:5f:b2:9f:47: ec:d4:da:ca:60:b9:e0:4e:d4:49:35:63:6b:95:86: 55:a4:73:06:f0:a5:47:c4:f6:74:10:cb:eb:46:ae: 0f:5c:e1:04:3c:5a:ef:ba:76:83:6f:38:c9:44:6e: 45:79:df:7a:38:28:8a:1a:58:77:7f:01:51:2c:9a: 05:8a:f8:cb:47:a6:70:2b:b8:27:36:c2:06:a4:93: f6:c0:70:1f:6a:21:0e:58:1d:21:5b:f6:41:4f:17: e9:b6:91:79:0e:21:73:b6:e5:9b:0c:5d:0e:93:a8: 0d:4f:a5:f0:12:ad:0c:24:0c:a1:bd:dc:a0:dc:cc: 58:f3:e0:d7:30:08:98:1f:5a:85:4b:a2:2a:26:34: 60:a9:0c:6c:d6:46:67:35:e3:f6:e7:14:8d:cb:d2: fb:a0:3c:66:da:85:20:42:f5:8c:41:fe:f4:ba:3e: 3d:ff:70:45:cc:a9:c8:69:a7:c1:9d:60:f4:57:64: bf:23:7a:c2:cc:cf:ab:f6:95:ed:7d:1e:2b:bb:2e: 99:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B1:A9:80:1C:06:06:1C:B3:EA:BF:B7:47:CF:9A:9F:1B:7C:81:58 X509v3 Authority Key Identifier: keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:7a:41:1a:e7:fb:14:5e:95:47:59:51:bd:6c:e8:9d:fe:f5: 13:40:ab:9d:49:3e:04:18:4a:1a:16:03:93:41:0d:c2:49:59: e1:41:b5:a9:1d:6f:b4:15:4a:57:d4:57:fe:6a:54:a6:e9:7f: 67:2a:9e:c1:58:e5:5e:4b:00:5f:1f:d2:02:66:64:21:c6:c0: b0:a7:70:75:8a:a3:f7:8a:5b:af:9a:b7:ec:60:fb:2c:74:e4: f7:2c:e0:bd:f4:36:ab:8d:08:3b:b1:e6:f5:ce:fc:4b:be:02: 2e:24:91:21:84:8e:d2:43:e5:c4:76:2b:3f:39:9f:e8:7c:b2: 61:52:ef:6b:d1:b4:38:90:d2:8b:30:ac:73:88:82:50:d1:8d: c6:a9:bd:9e:86:d5:48:c3:d5:43:cd:15:ec:a4:0d:66:39:a6: 4b:fb:cf:dc:05:f6:15:7c:d5:b3:45:33:70:68:99:99:92:c1: 8b:08:d9:5e:cc:16:f5:ed:ee:aa:3a:b6:76:0e:a2:0f:1e:6f: 51:74:3b:fa:d3:08:5e:59:dd:76:6b:db:ac:05:a4:de:64:27: 1d:9d:b7:2f:7f:2b:f3:bf:5c:a0:37:aa:bb:dc:c2:7e:bb:97: 9f:bc:9f:e0:e2:88:f4:af:38:50:b7:61:ce:c5:f2:e8:99:6a: 8f:b2:ac:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNENTExMC8GA1UEBRMoRDI0MUY1NzFDRDYzOTc5NjMwREMxRjE2QUQ0ODk5RDVC RUQ1NjZFNTAeFw0yNDEwMjMwNjQ0NDNaFw0yNDEwMzAwNjQ0NDNaMBgxFjAUBgNV BAMTDTY3MTg5YjViLWZjZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNwmlDkAPHi79qg7mvLf99dlxg3gvQaPyyDkpkUunL2hxuSCmsCDZsynhBOejX pMu8O4sJhyrRX7KfR+zU2spgueBO1Ek1Y2uVhlWkcwbwpUfE9nQQy+tGrg9c4QQ8 Wu+6doNvOMlEbkV533o4KIoaWHd/AVEsmgWK+MtHpnAruCc2wgakk/bAcB9qIQ5Y HSFb9kFPF+m2kXkOIXO25ZsMXQ6TqA1PpfASrQwkDKG93KDczFjz4NcwCJgfWoVL oiomNGCpDGzWRmc14/bnFI3L0vugPGbahSBC9YxB/vS6Pj3/cEXMqchpp8GdYPRX ZL8jesLMz6v2le19Hiu7LplZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKbGpgBwG Bhyz6r+3R8+anxt8gVgwHwYDVR0jBBgwFoAU0kH1cc1jl5Yw3B8WrUiZ1b7VZuUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0Q1LzcxOTk1RjRFN0ZF RjExRUZBODJERjYzOUM0RjlBRTAyLzBrSDFjYzFqbDVZdzNCOFdyVWlaMWI3Vlp1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGtIMWNjMWpsNVl3M0I4V3JVaVoxYjdWWnVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0Q1LzcxOTk1RjRFN0ZFRjExRUZBODJERjYzOUM0RjlBRTAyLzBrSDFjYzFqbDVZ dzNCOFdyVWlaMWI3Vlp1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADd6QRrn+xRelUdZUb1s6J3+9RNAq51JPgQYShoWA5NBDcJJWeFBtakd b7QVSlfUV/5qVKbpf2cqnsFY5V5LAF8f0gJmZCHGwLCncHWKo/eKW6+at+xg+yx0 5Pcs4L30NquNCDux5vXO/Eu+Ai4kkSGEjtJD5cR2Kz85n+h8smFS72vRtDiQ0osw rHOIglDRjcapvZ6G1UjD1UPNFeykDWY5pkv7z9wF9hV81bNFM3BomZmSwYsI2V7M FvXt7qo6tnYOog8eb1F0O/rTCF5Z3XZr26wFpN5kJx2dty9/K/O/XKA3qrvcwn67 l5+8n+DiiPSvOFC3Yc7F8uiZao+yrJs= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:23 2024 by rpki-client on console-fra.rpki-client.org