$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft File: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft (raw, json) Hash identifier: pt/iBbyOfrSkyAqw2XT5rnIfEE9+Io5UDpgQCz5o3jI= Subject key identifier: A6:28:E0:94:7B:CB:77:96:35:D2:3B:0D:A7:73:45:4D:64:31:2F:D9 Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5 Certificate issuer: /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft Manifest number: 1D Signing time: Sat 23 Nov 2024 05:48:29 +0000 Manifest this update: Sat 23 Nov 2024 05:48:29 +0000 Manifest next update: Sat 30 Nov 2024 05:48:29 +0000 Files and hashes: 1: 0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl (hash: zFaDmrCrPtA9IXL1OZYgYjElmCzJL156JTjlcARVW0s=) 2: D1E54D607FF211EFB2910061C4F9AE02.roa (hash: K3X3GoEdbp40UjZvhBO+XoTewllnOfMeBiUtz3yrvW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5 Validity Not Before: Nov 23 05:48:29 2024 GMT Not After : Nov 30 05:48:29 2024 GMT Subject: CN=67416cad-ccd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:87:0e:6d:e9:fd:90:0e:62:88:33:f9:01:b7: d2:95:3e:b4:b1:47:a7:88:32:1c:28:31:13:6f:cf: 05:b7:0f:ae:d6:a3:cb:72:ea:72:b4:0f:58:78:18: a8:5f:f0:f5:fe:fa:81:7d:a5:34:9b:2c:b1:a8:a6: 99:57:97:c2:de:c7:f3:c4:40:a4:23:96:8c:63:70: 7b:36:8d:ca:4e:9f:43:f3:18:f6:a1:84:5f:34:e5: e8:e5:35:dd:1a:b0:ca:a0:3a:e9:5f:81:5c:a0:6f: d0:af:d4:60:09:8f:56:66:c3:f0:a0:a3:bf:03:0a: e4:4e:c3:8e:2b:85:fb:b7:5b:93:25:8e:a2:89:cb: 7b:fa:df:98:70:88:08:58:4d:98:08:f8:9b:5d:11: db:6e:2e:e7:a5:1e:24:c4:40:1e:06:97:4f:e4:dc: 05:c2:28:e4:18:49:08:8f:25:03:32:2d:ab:2a:47: 49:c0:a2:a7:bf:c4:8a:c3:ea:2c:ac:e2:2e:32:fa: 8d:e3:90:15:2c:c7:03:8a:7d:27:dd:59:42:59:27: 37:ba:81:93:15:8b:52:aa:a9:6e:ac:4e:df:84:38: 96:19:99:c8:59:cb:52:37:4b:5d:a3:8a:fb:35:f7: aa:28:50:c3:83:97:86:7c:87:47:d3:52:82:39:a6: 21:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:28:E0:94:7B:CB:77:96:35:D2:3B:0D:A7:73:45:4D:64:31:2F:D9 X509v3 Authority Key Identifier: keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:f6:cf:d0:d9:0f:96:3c:d7:ea:e2:26:57:54:dc:10:9e:8e: 5a:a6:59:a7:f1:e2:79:11:bb:17:6c:dd:d1:0c:f3:d4:e8:32: d2:54:d0:40:99:4f:7c:25:24:c6:b5:5f:f6:85:e1:6e:78:e7: 79:95:c8:a1:71:59:42:08:6c:0b:fe:10:77:43:dd:13:ee:30: 9c:52:95:01:e7:7d:89:d7:4f:2e:ee:31:52:ae:3c:77:97:22: 39:3a:ea:4d:25:82:82:69:b1:cd:1d:0f:8e:51:d5:07:3e:35: 32:58:1e:2f:9f:c5:b6:96:7d:d9:8e:f9:93:e3:ec:a8:7c:38: 49:bb:c6:22:4b:1c:19:bf:dc:d5:08:46:e9:ee:0b:d9:3e:22: 6f:d8:bd:9e:f7:99:64:ac:e1:a6:27:0e:19:2d:ea:7e:33:a8: 0c:8b:14:d7:cb:d4:a4:78:9d:da:4e:32:aa:1a:33:68:a4:75: f2:89:7b:93:f4:19:7c:cc:5c:dc:50:00:8d:1c:b6:7d:2b:ae: ea:8a:20:a1:9f:2b:0d:b9:33:a4:6e:e2:2c:80:fd:cf:4f:bb: 79:15:aa:5a:3c:96:09:11:4f:d1:62:a9:16:00:87:70:9e:ad: 11:3c:27:a1:b3:ea:fd:4d:fb:3b:0e:96:dd:a2:ca:6a:39:89: 22:1f:1f:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNENTExMC8GA1UEBRMoRDI0MUY1NzFDRDYzOTc5NjMwREMxRjE2QUQ0ODk5RDVC RUQ1NjZFNTAeFw0yNDExMjMwNTQ4MjlaFw0yNDExMzAwNTQ4MjlaMBgxFjAUBgNV BAMTDTY3NDE2Y2FkLWNjZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPhw5t6f2QDmKIM/kBt9KVPrSxR6eIMhwoMRNvzwW3D67Wo8ty6nK0D1h4GKhf 8PX++oF9pTSbLLGopplXl8Lex/PEQKQjloxjcHs2jcpOn0PzGPahhF805ejlNd0a sMqgOulfgVygb9Cv1GAJj1Zmw/Cgo78DCuROw44rhfu3W5MljqKJy3v635hwiAhY TZgI+JtdEdtuLuelHiTEQB4Gl0/k3AXCKOQYSQiPJQMyLasqR0nAoqe/xIrD6iys 4i4y+o3jkBUsxwOKfSfdWUJZJze6gZMVi1KqqW6sTt+EOJYZmchZy1I3S12jivs1 96ooUMODl4Z8h0fTUoI5piHLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpijglHvL d5Y10jsNp3NFTWQxL9kwHwYDVR0jBBgwFoAU0kH1cc1jl5Yw3B8WrUiZ1b7VZuUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0Q1LzcxOTk1RjRFN0ZF RjExRUZBODJERjYzOUM0RjlBRTAyLzBrSDFjYzFqbDVZdzNCOFdyVWlaMWI3Vlp1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGtIMWNjMWpsNVl3M0I4V3JVaVoxYjdWWnVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0Q1LzcxOTk1RjRFN0ZFRjExRUZBODJERjYzOUM0RjlBRTAyLzBrSDFjYzFqbDVZ dzNCOFdyVWlaMWI3Vlp1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHH2z9DZD5Y81+riJldU3BCejlqmWafx4nkRuxds3dEM89ToMtJU0ECZ T3wlJMa1X/aF4W5453mVyKFxWUIIbAv+EHdD3RPuMJxSlQHnfYnXTy7uMVKuPHeX Ijk66k0lgoJpsc0dD45R1Qc+NTJYHi+fxbaWfdmO+ZPj7Kh8OEm7xiJLHBm/3NUI RunuC9k+Im/YvZ73mWSs4aYnDhkt6n4zqAyLFNfL1KR4ndpOMqoaM2ikdfKJe5P0 GXzMXNxQAI0ctn0rruqKIKGfKw25M6Ru4iyA/c9Pu3kVqlo8lgkRT9FiqRYAh3Ce rRE8J6Gz6v1N+zsOlt2iymo5iSIfH4M= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org