$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft File: exrifTz1FJnFBW59qHNmXk5BUXk.mft (raw, json) Hash identifier: CGWRjo9jWYDdefY9RtzVRAgxw4GBqVLgpbC4QbWK3XE= Subject key identifier: 1E:65:43:36:D9:C7:41:62:A5:C3:06:FC:97:ED:71:0D:F4:B3:2A:68 Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 Certificate issuer: /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft Manifest number: 7B Signing time: Sat 23 Nov 2024 04:47:26 +0000 Manifest this update: Sat 23 Nov 2024 04:47:26 +0000 Manifest next update: Sat 30 Nov 2024 04:47:26 +0000 Files and hashes: 1: exrifTz1FJnFBW59qHNmXk5BUXk.crl (hash: GrfnNJGyY58PR2fZ0qD2VakY5smdjaMcymnJ5z87uSM=) 2: 0E3462143D2D11EFA4B90A1EC4F9AE02.roa (hash: WuVOWMIZsWaqgCf62FxXtIQArid3aP/swI50L4Fc9Qs=) 3: AC82414A392511EF88F70D39C4F9AE02.roa (hash: VLLI4apzU65MvbK7HK/CI33oFr6zuJC3PU4p9pha8w8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Validity Not Before: Nov 23 04:47:26 2024 GMT Not After : Nov 30 04:47:26 2024 GMT Subject: CN=67415e5e-4452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:dc:72:e4:f5:6e:64:25:13:fc:54:0a:c0: 75:8b:8e:ea:b6:91:71:c2:84:38:a5:41:23:17:7d: 9d:3d:6d:f0:97:12:03:32:ab:d2:dc:dc:90:e6:ba: d0:4b:de:b6:83:f5:6a:64:39:d6:8a:45:9a:50:a8: 57:fb:ab:18:77:e6:df:c8:17:bd:01:d6:90:b6:0c: f1:b3:1b:f5:38:2a:e8:36:22:b9:3b:eb:d8:14:52: f8:e6:ca:ea:6a:28:de:98:ba:39:67:77:1d:4c:71: c1:23:9b:2f:12:71:c5:a4:9b:3c:c5:18:3d:44:e2: 54:cf:3a:da:89:18:38:40:08:af:68:06:01:9f:d5: ba:90:8f:29:35:64:dd:68:69:c1:ca:7c:b6:d0:78: f1:7a:f3:3c:d2:35:20:a8:95:77:2a:59:77:e2:49: cf:fd:bb:61:6d:22:53:39:31:0e:b3:87:c5:0f:53: 20:06:25:48:12:e9:ea:96:ee:a3:44:e4:0e:29:b7: 7a:42:c2:e5:3e:df:72:32:6d:42:f8:58:26:08:eb: fc:47:aa:b1:ca:98:67:fd:8c:9b:ae:4f:90:8d:f3: e6:ea:23:ab:1a:84:48:4e:a9:53:a1:33:a9:e6:10: c8:7e:04:79:68:48:5a:d7:b1:c7:98:bf:18:cb:cc: d5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:65:43:36:D9:C7:41:62:A5:C3:06:FC:97:ED:71:0D:F4:B3:2A:68 X509v3 Authority Key Identifier: keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a0:39:7e:a5:5f:cf:c9:40:3f:67:52:3e:57:1e:af:6a:11: b5:4f:f1:3c:43:4e:0a:40:23:67:f0:b8:ce:bf:bf:fc:4e:14: 21:77:a3:1d:59:1f:3b:75:8e:e2:6d:d0:d9:e7:2a:de:65:dc: 71:88:a2:2d:ca:fc:13:bf:27:ab:e6:0a:de:ef:cd:00:a0:53: f3:8a:4b:eb:cc:48:b6:cf:84:81:eb:bc:55:89:6c:44:aa:75: 85:5d:c3:e6:b1:37:2c:d5:d3:c8:03:13:cf:9d:dc:19:59:e3: 74:7e:2b:15:4d:8d:fd:83:33:95:bd:99:03:8a:10:33:a0:45: 38:35:bb:96:6a:ab:d8:47:20:7f:9a:f5:78:e6:cd:27:2f:ea: 0b:50:a9:97:3f:9c:e2:d9:55:fc:e1:20:f7:8b:33:a9:47:49: 16:87:15:ff:9a:40:8c:84:0b:75:de:25:8b:8e:4b:96:86:25: 8c:3d:06:da:95:06:1e:7b:0e:f7:a1:3a:53:0a:0d:b2:3f:12: 0e:a6:69:a9:33:18:45:e6:96:10:de:8a:f0:d1:ed:3b:09:11: 78:63:c9:1c:82:cd:5d:bc:20:b0:5a:18:12:f5:98:7c:d1:69: 7a:1c:41:9a:2f:82:f4:ce:31:8f:5e:c4:92:74:2c:1c:df:4f: cf:93:54:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxOTMxMTAvBgNVBAUTKDdCMUFFMjdEM0NGNTE0OTlDNTA1NkU3REE4NzM2NjVF NEU0MTUxNzkwHhcNMjQxMTIzMDQ0NzI2WhcNMjQxMTMwMDQ0NzI2WjAYMRYwFAYD VQQDEw02NzQxNWU1ZS00NDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHvccuT1bmQlE/xUCsB1i47qtpFxwoQ4pUEjF32dPW3wlxIDMqvS3NyQ5rrQ S962g/VqZDnWikWaUKhX+6sYd+bfyBe9AdaQtgzxsxv1OCroNiK5O+vYFFL45srq aijemLo5Z3cdTHHBI5svEnHFpJs8xRg9ROJUzzraiRg4QAivaAYBn9W6kI8pNWTd aGnByny20HjxevM80jUgqJV3Kll34knP/bthbSJTOTEOs4fFD1MgBiVIEunqlu6j ROQOKbd6QsLlPt9yMm1C+FgmCOv8R6qxyphn/Yybrk+QjfPm6iOrGoRITqlToTOp 5hDIfgR5aEha17HHmL8Yy8zVzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5lQzbZ x0FipcMG/JftcQ30sypoMB8GA1UdIwQYMBaAFHsa4n089RSZxQVufahzZl5OQVF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjE5My85M0Q0RTQ5MEY2 MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZKbkZCVzU5cUhObVhrNUJV WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4cmlmVHoxRkpuRkJXNTlxSE5tWGs1QlVYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjE5My85M0Q0RTQ5MEY2MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZK bkZCVzU5cUhObVhrNUJVWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyoDl+pV/PyUA/Z1I+Vx6vahG1T/E8Q04KQCNn8LjOv7/8ThQhd6Md WR87dY7ibdDZ5yreZdxxiKItyvwTvyer5gre780AoFPzikvrzEi2z4SB67xViWxE qnWFXcPmsTcs1dPIAxPPndwZWeN0fisVTY39gzOVvZkDihAzoEU4NbuWaqvYRyB/ mvV45s0nL+oLUKmXP5zi2VX84SD3izOpR0kWhxX/mkCMhAt13iWLjkuWhiWMPQba lQYeew73oTpTCg2yPxIOpmmpMxhF5pYQ3orw0e07CRF4Y8kcgs1dvCCwWhgS9Zh8 0Wl6HEGaL4L0zjGPXsSSdCwc30/Pk1S5 -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org