$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json) Hash identifier: gFC97vxLdYfD4nyzINpNXFXFMB4V4QfdY0FTd1RBVSI= Subject key identifier: 48:B4:30:9A:DF:58:84:5D:8D:C9:D5:AF:03:BA:10:23:E0:CE:26:85 Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft Manifest number: 72 Signing time: Sat 23 Nov 2024 04:51:32 +0000 Manifest this update: Sat 23 Nov 2024 04:51:31 +0000 Manifest next update: Sat 30 Nov 2024 04:51:31 +0000 Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: sxGMLfds5JagTZmCztHFUr4gqk9Mqr4oCPSTcDWmtUY=) 2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: clTuA98QXCvhi5mCW68DYLjtbFWaH5Tnj/x9STwbSAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Validity Not Before: Nov 23 04:51:31 2024 GMT Not After : Nov 30 04:51:31 2024 GMT Subject: CN=67415f54-8133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:35:00:79:0f:25:98:95:da:15:46:cc:33:79: 0f:e4:b4:24:e1:8f:e9:b8:c9:8d:b4:e5:c3:67:0e: fa:54:37:7f:72:75:2e:90:78:c6:91:26:1a:bf:f0: cb:8d:1f:04:b9:a9:3f:78:96:9f:0d:b9:cb:d4:e2: b5:e6:9e:fe:42:b1:d8:c4:be:23:7e:c0:cd:7d:38: 35:47:2f:e4:ab:46:4b:09:0a:8f:26:d1:3e:c4:56: 2a:0f:9e:94:26:bc:fb:c0:3c:55:28:96:cb:2b:d8: df:f9:c0:b4:2b:29:e5:11:de:82:92:94:ad:4a:7b: 4a:12:1f:3e:2d:ee:58:37:8f:7b:09:45:a7:f8:45: ef:e8:2c:d6:95:7a:e6:67:39:fc:cb:8b:96:2a:1b: b4:83:5e:a2:51:65:7b:d0:e9:0c:45:57:08:58:38: a4:52:01:59:b6:30:a3:b3:44:01:14:05:5c:39:37: 51:9a:97:40:f3:95:34:b7:27:0f:e4:41:71:4b:4e: 79:d6:12:25:fd:f8:61:0a:26:1b:f0:2a:8b:6c:a8: ef:25:a3:b4:b3:85:15:17:73:ef:de:9f:05:3b:36: 8c:4e:ff:63:b8:af:ee:bd:c2:c5:b9:85:8b:03:06: 1f:3b:cc:80:22:41:c9:c6:22:42:ec:84:07:ed:fa: 88:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B4:30:9A:DF:58:84:5D:8D:C9:D5:AF:03:BA:10:23:E0:CE:26:85 X509v3 Authority Key Identifier: keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:79:8c:05:b6:bd:f2:43:b3:4e:2c:88:72:02:96:0f:8a:d3: 40:c5:6e:59:0f:55:12:a5:40:eb:1e:07:ad:65:12:85:1f:57: 15:34:6f:8c:95:73:f8:87:11:56:ac:a6:bc:cc:36:1c:b7:d1: f0:57:0f:82:f8:6f:a1:ff:7b:8f:87:3b:ef:ad:2a:de:bb:71: 67:ed:25:f3:23:02:f9:e3:9e:04:db:2a:d0:d9:ea:28:ce:e1: 43:46:b0:26:18:6f:08:97:10:45:c2:70:bb:ab:29:71:18:85: 5d:7e:41:52:eb:36:72:92:06:f5:2f:58:c5:e2:44:af:f5:1a: 5a:85:42:c9:e6:9b:ed:e4:08:df:95:94:33:fb:f5:48:12:83: 4f:77:40:6c:b3:8e:4d:de:e0:ce:2b:19:83:4a:6d:d1:19:ea: 94:7a:e3:49:1e:de:b5:02:d1:48:43:c1:96:1c:be:08:30:a2: 92:24:c6:d8:6b:09:a5:4a:a6:d1:3c:09:82:11:6a:af:d5:a1: 45:22:ca:14:ff:95:4a:f5:91:02:2d:ec:56:47:4a:57:bd:1d: 9b:76:03:69:aa:6a:1e:5d:16:fd:6d:94:e6:fa:ab:5f:5f:7d: 9c:ba:f0:c7:44:6a:bf:13:7f:e3:87:ac:01:10:31:fb:79:69: b3:86:53:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTFCNTExMC8GA1UEBRMoRUVDMEU5OTk4N0RDMUVBOUQ0MDJGODg0RkNEQTk3RTAz MTQ1QTRBMDAeFw0yNDExMjMwNDUxMzFaFw0yNDExMzAwNDUxMzFaMBgxFjAUBgNV BAMTDTY3NDE1ZjU0LTgxMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbNQB5DyWYldoVRswzeQ/ktCThj+m4yY205cNnDvpUN39ydS6QeMaRJhq/8MuN HwS5qT94lp8NucvU4rXmnv5CsdjEviN+wM19ODVHL+SrRksJCo8m0T7EVioPnpQm vPvAPFUolssr2N/5wLQrKeUR3oKSlK1Ke0oSHz4t7lg3j3sJRaf4Re/oLNaVeuZn OfzLi5YqG7SDXqJRZXvQ6QxFVwhYOKRSAVm2MKOzRAEUBVw5N1Gal0DzlTS3Jw/k QXFLTnnWEiX9+GEKJhvwKotsqO8lo7SzhRUXc+/enwU7NoxO/2O4r+69wsW5hYsD Bh87zIAiQcnGIkLshAft+ogXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSLQwmt9Y hF2NydWvA7oQI+DOJoUwHwYDVR0jBBgwFoAU7sDpmYfcHqnUAviE/NqX4DFFpKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFMUI1LzhCNDA1RTVFMDAz QjExRUY5MTFCOEY2OEM0RjlBRTAyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN3NEcG1ZZmNIcW5VQXZpRV9OcVg0REZGcEtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF MUI1LzhCNDA1RTVFMDAzQjExRUY5MTFCOEY2OEM0RjlBRTAyLzdzRHBtWWZjSHFu VUF2aUVfTnFYNERGRnBLQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC95jAW2vfJDs04siHIClg+K00DFblkPVRKlQOseB61lEoUfVxU0b4yV c/iHEVasprzMNhy30fBXD4L4b6H/e4+HO++tKt67cWftJfMjAvnjngTbKtDZ6ijO 4UNGsCYYbwiXEEXCcLurKXEYhV1+QVLrNnKSBvUvWMXiRK/1GlqFQsnmm+3kCN+V lDP79UgSg093QGyzjk3e4M4rGYNKbdEZ6pR640ke3rUC0UhDwZYcvggwopIkxthr CaVKptE8CYIRaq/VoUUiyhT/lUr1kQIt7FZHSle9HZt2A2mqah5dFv1tlOb6q19f fZy68MdEar8Tf+OHrAEQMft5abOGU5U= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:28 2024 by rpki-client on console-fra.rpki-client.org