$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft File: rKpuJqXy3KoUzfyezI6c9oKaQCE.mft (raw, json) Hash identifier: e+HQ0j7bSLIfrOdijOmzck167hBF2JfOq7frECWLyFI= Subject key identifier: 8B:39:56:48:F3:44:97:CE:DC:AE:82:4D:F8:75:18:E0:06:3F:9C:D4 Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 Certificate issuer: /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft Manifest number: 0330 Signing time: Sat 23 Nov 2024 00:40:28 +0000 Manifest this update: Sat 23 Nov 2024 00:40:27 +0000 Manifest next update: Sat 30 Nov 2024 00:40:27 +0000 Files and hashes: 1: rKpuJqXy3KoUzfyezI6c9oKaQCE.crl (hash: YGM71GNkoPCQno63ewoDubIce3jlwHJFbpgHiJAdAiM=) 2: 1AE323249F2D11EC897FD30CC4F9AE02.roa (hash: KeGUlxiblyObJWylXKCmQlAzDIkOWbFTSQRBaia1TDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Validity Not Before: Nov 23 00:40:27 2024 GMT Not After : Nov 30 00:40:27 2024 GMT Subject: CN=6741247b-4348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:af:b8:48:51:d3:20:27:7f:e0:9c:08:de:e6: 3e:b1:6a:d8:a3:a1:94:9f:17:ec:23:4e:00:0e:71: 00:c1:d1:d8:10:e7:d3:c2:e9:49:95:ca:74:85:c7: 47:46:fb:99:84:8d:94:44:dc:73:08:80:85:17:f5: 6b:e7:ff:6a:f5:0c:e6:8a:bf:2e:3e:65:96:a4:10: 1e:e1:71:b2:95:a7:67:c0:f0:f9:a6:e2:8e:4d:73: a9:15:05:d3:90:93:2b:b6:0d:62:8f:95:f4:8d:f7: 08:8f:86:0c:30:91:fe:c7:c5:47:a1:9a:ce:34:b8: a7:d3:cc:a2:4c:02:b8:04:5d:7b:7e:36:90:ad:93: d1:55:85:49:c1:c2:07:31:a4:ed:e6:71:f2:07:5b: 4d:da:b2:9c:9e:e6:9b:d3:2d:99:40:ef:96:5e:13: 34:eb:4d:95:3f:17:15:94:59:29:d7:40:3a:bc:4d: 5b:37:8b:fa:0c:21:55:af:1f:67:52:da:34:98:92: ac:02:2f:5e:1c:82:4d:37:a6:3e:7d:6c:ff:1b:0c: 61:bd:59:52:de:b9:9a:08:4c:1e:75:98:f4:06:4b: 36:ca:9a:9d:1c:5a:ff:ea:48:3b:92:c6:19:4c:cf: 41:0b:ba:f0:2b:c2:e5:29:2f:fe:8c:4e:13:05:93: 82:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:39:56:48:F3:44:97:CE:DC:AE:82:4D:F8:75:18:E0:06:3F:9C:D4 X509v3 Authority Key Identifier: keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:19:3d:cb:33:9a:eb:3d:e9:af:15:ab:59:cc:60:21:5f:37: a7:64:15:e0:32:0e:a2:af:e6:9f:ef:dc:d6:f2:b3:16:7e:d2: 9a:06:2b:24:7f:8e:3d:c4:cc:d6:9d:af:a1:7a:4b:d2:43:37: 49:3a:ad:2d:be:96:2a:36:d2:44:5a:23:d0:2e:52:6a:c6:44: 2d:4c:d0:f9:34:d2:59:50:8d:8f:d6:0b:d2:e8:5c:d8:15:4e: 0b:8b:48:cd:c7:c6:61:bd:ed:56:c3:8b:c1:da:a0:1a:df:12: ed:b6:c2:7c:f7:50:ca:c0:92:f6:cb:7a:50:8f:a8:d3:2f:93: bb:85:b7:cf:a9:75:a7:f2:98:0d:46:f6:84:87:3e:de:56:3d: ae:e7:8a:ba:4e:b2:7a:6c:36:45:93:4f:a1:cc:57:0c:9d:e3: 68:0a:d3:68:ba:9e:b2:78:ae:22:66:0c:aa:59:d8:dd:b7:0c: 89:0a:79:31:a1:2c:67:9c:fe:35:22:89:aa:fc:ca:1b:8e:ef: ab:c9:b5:25:7a:cb:f9:92:26:94:44:59:b4:dc:9b:9b:6c:fb: 07:9c:27:39:e4:71:9f:0a:d1:ee:c0:99:4c:26:4d:25:d8:57: 16:27:80:25:3b:e5:20:d9:36:c6:fb:e9:e6:fb:12:35:85:37: fd:18:98:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVGNDUxMTAvBgNVBAUTKEFDQUE2RTI2QTVGMkRDQUExNENERkM5RUNDOEU5Q0Y2 ODI5QTQwMjEwHhcNMjQxMTIzMDA0MDI3WhcNMjQxMTMwMDA0MDI3WjAYMRYwFAYD VQQDEw02NzQxMjQ3Yi00MzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAya+4SFHTICd/4JwI3uY+sWrYo6GUnxfsI04ADnEAwdHYEOfTwulJlcp0hcdH RvuZhI2URNxzCICFF/Vr5/9q9Qzmir8uPmWWpBAe4XGyladnwPD5puKOTXOpFQXT kJMrtg1ij5X0jfcIj4YMMJH+x8VHoZrONLin08yiTAK4BF17fjaQrZPRVYVJwcIH MaTt5nHyB1tN2rKcnuab0y2ZQO+WXhM0602VPxcVlFkp10A6vE1bN4v6DCFVrx9n Uto0mJKsAi9eHIJNN6Y+fWz/GwxhvVlS3rmaCEwedZj0Bks2ypqdHFr/6kg7ksYZ TM9BC7rwK8LlKS/+jE4TBZOCSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIs5Vkjz RJfO3K6CTfh1GOAGP5zUMB8GA1UdIwQYMBaAFKyqbial8tyqFM38nsyOnPaCmkAh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUY0NS81RDhCOUI4MjlG MkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNLb1V6Znllekk2YzlvS2FR Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JLcHVKcVh5M0tvVXpmeWV6STZjOW9LYVFDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUY0NS81RDhCOUI4MjlGMkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNL b1V6Znllekk2YzlvS2FRQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0GT3LM5rrPemvFatZzGAhXzenZBXgMg6ir+af79zW8rMWftKaBisk f449xMzWna+hekvSQzdJOq0tvpYqNtJEWiPQLlJqxkQtTND5NNJZUI2P1gvS6FzY FU4Li0jNx8Zhve1Ww4vB2qAa3xLttsJ891DKwJL2y3pQj6jTL5O7hbfPqXWn8pgN RvaEhz7eVj2u54q6TrJ6bDZFk0+hzFcMneNoCtNoup6yeK4iZgyqWdjdtwyJCnkx oSxnnP41Iomq/Mobju+rybUlesv5kiaURFm03JubbPsHnCc55HGfCtHuwJlMJk0l 2FcWJ4AlO+Ug2TbG++nm+xI1hTf9GJj4 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:43 2024 by rpki-client on console-fra.rpki-client.org