$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft File: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft (raw, json) Hash identifier: gMghmLIjZFnr75ruy1/vBsJHdGYuYLrSWrjie4V6bcU= Subject key identifier: 26:76:E8:1A:BC:D8:22:85:1F:94:59:39:23:34:37:AA:36:5B:BE:F9 Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75 Certificate issuer: /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75 Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft Manifest number: 0323 Signing time: Sat 23 Nov 2024 00:43:53 +0000 Manifest this update: Sat 23 Nov 2024 00:43:52 +0000 Manifest next update: Sat 30 Nov 2024 00:43:52 +0000 Files and hashes: 1: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl (hash: B/esJVA+eH2e2+wxGs0LYprwGQt7Rr+DyQzyHfmDwys=) 2: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (hash: ofcKtKRXFLwjQQ8YYS8NX0ZWZ1WuU2yrzgFaeIt1ut0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75 Validity Not Before: Nov 23 00:43:52 2024 GMT Not After : Nov 30 00:43:52 2024 GMT Subject: CN=67412549-81d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:af:ff:d9:16:3b:fa:ba:b5:cb:96:1f:a6: e4:79:d7:1f:7f:0e:35:5a:a3:27:48:39:70:ba:b4: d9:77:34:60:66:7b:0b:60:d4:ad:f6:5f:5f:57:e4: 29:2a:54:50:73:bb:d0:a4:77:79:ba:58:90:1e:3f: 2e:59:ba:a9:23:19:3d:7a:4a:67:a8:c0:ad:70:d9: 8c:5f:b6:1e:cf:be:50:dc:9c:10:58:62:6b:ee:ff: cf:18:26:ad:77:d5:27:43:67:b0:91:63:ce:cc:ef: 72:51:83:01:e8:df:f2:68:cf:31:ba:78:72:8e:c4: 8a:68:50:7e:57:df:d1:ef:8c:08:ea:a6:b7:3e:20: a3:e0:f6:f0:20:e5:71:d3:f9:73:5a:4b:01:0a:85: 87:8d:d8:c2:16:3c:67:7c:91:4f:2d:60:c7:4d:55: 1e:7c:d1:79:0b:53:58:86:34:f1:1d:c8:a1:0c:f1: a2:c7:ec:ed:f3:4d:45:68:af:d6:34:82:ed:9b:76: a1:0f:de:35:42:ef:24:dc:a4:46:51:22:79:34:4d: c7:74:18:b6:b6:da:17:b4:df:7b:c8:47:da:ce:d6: 48:1d:10:80:41:1a:ee:8e:38:be:a3:9a:5d:b6:87: 7f:8c:30:f3:b2:73:69:ec:8b:ce:ae:e2:cb:fa:0e: b6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:76:E8:1A:BC:D8:22:85:1F:94:59:39:23:34:37:AA:36:5B:BE:F9 X509v3 Authority Key Identifier: keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:53:bd:49:ed:d6:23:de:de:b1:4e:25:80:53:23:54:63:4f: 2d:73:17:22:78:e1:88:ee:0b:62:44:7f:8d:82:8c:85:ff:fa: b9:90:93:08:31:cd:f7:a2:87:1e:5a:95:01:96:fb:3c:fa:58: fb:6c:7e:ca:33:50:9b:87:f9:82:14:a9:3b:68:cd:ba:59:66: 19:2c:93:20:da:0b:4f:c0:7e:40:8e:56:20:1a:00:50:60:cd: 3c:14:ed:37:67:73:be:cf:de:c6:05:87:3a:fe:7f:dc:a5:5c: 28:42:fe:fb:68:71:a2:38:02:aa:70:7d:11:01:48:5c:7a:cc: 2a:5b:5d:40:ef:b7:a2:28:8f:88:8d:f7:0e:23:25:30:54:af: 19:a1:3c:35:ea:6f:55:2e:02:47:22:a4:00:c7:a3:63:61:80: 8b:7d:d5:11:15:70:e2:4d:e3:2c:86:de:03:25:c5:99:93:54: 77:6d:91:44:fa:a1:2d:12:bf:0b:5c:80:8f:20:fe:b6:fb:f4: df:ac:9f:79:59:9c:4e:2c:c1:56:20:a1:f6:d4:0b:74:80:d2: 8d:52:5f:38:3e:d5:00:2a:79:2d:f4:f2:cc:6e:cd:b7:d8:4d: dc:0c:d6:6e:22:40:70:00:e9:f6:ac:c6:f4:76:34:d2:58:12: be:77:6c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEQzExMTAvBgNVBAUTKEUxNDRDQ0Y0MURBMTA1QUY2Q0Q0NUJDM0Y4ODY2MjM0 RDM4RjdDNzUwHhcNMjQxMTIzMDA0MzUyWhcNMjQxMTMwMDA0MzUyWjAYMRYwFAYD VQQDEw02NzQxMjU0OS04MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaGv/9kWO/q6tcuWH6bkedcffw41WqMnSDlwurTZdzRgZnsLYNSt9l9fV+Qp KlRQc7vQpHd5uliQHj8uWbqpIxk9ekpnqMCtcNmMX7Yez75Q3JwQWGJr7v/PGCat d9UnQ2ewkWPOzO9yUYMB6N/yaM8xunhyjsSKaFB+V9/R74wI6qa3PiCj4PbwIOVx 0/lzWksBCoWHjdjCFjxnfJFPLWDHTVUefNF5C1NYhjTxHcihDPGix+zt801FaK/W NILtm3ahD941Qu8k3KRGUSJ5NE3HdBi2ttoXtN97yEfaztZIHRCAQRrujji+o5pd tod/jDDzsnNp7IvOruLL+g62jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZ26Bq8 2CKFH5RZOSM0N6o2W775MB8GA1UdIwQYMBaAFOFEzPQdoQWvbNRbw/iGYjTTj3x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0RDMS81MEM2MDI3QUE1 MDYxMUVDODJBMjQzN0RDNEY5QUUwMi80VVRNOUIyaEJhOXMxRnZELUlaaU5OT1Bm SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVVE05QjJoQmE5czFGdkQtSVppTk5PUGZIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0RDMS81MEM2MDI3QUE1MDYxMUVDODJBMjQzN0RDNEY5QUUwMi80VVRNOUIyaEJh OXMxRnZELUlaaU5OT1BmSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaU71J7dYj3t6xTiWAUyNUY08tcxcieOGI7gtiRH+NgoyF//q5kJMI Mc33ooceWpUBlvs8+lj7bH7KM1Cbh/mCFKk7aM26WWYZLJMg2gtPwH5AjlYgGgBQ YM08FO03Z3O+z97GBYc6/n/cpVwoQv77aHGiOAKqcH0RAUhceswqW11A77eiKI+I jfcOIyUwVK8ZoTw16m9VLgJHIqQAx6NjYYCLfdURFXDiTeMsht4DJcWZk1R3bZFE +qEtEr8LXICPIP62+/TfrJ95WZxOLMFWIKH21At0gNKNUl84PtUAKnkt9PLMbs23 2E3cDNZuIkBwAOn2rMb0djTSWBK+d2w3 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:44 2024 by rpki-client on console-fra.rpki-client.org