$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json) Hash identifier: jOSuvOKX0eLiJ8piFnJtRzPs0WfotduVqsaNZ/qrHyo= Subject key identifier: A1:64:48:C1:BA:0E:72:DF:93:46:09:96:59:B9:2A:46:48:8C:E3:9F Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft Manifest number: 064B Signing time: Sun 24 Nov 2024 21:51:22 +0000 Manifest this update: Sun 24 Nov 2024 21:51:22 +0000 Manifest next update: Sun 01 Dec 2024 21:51:22 +0000 Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: X9otuaG+SMSN0dcREHQ/3fZDSPGFvt72csrMwTaAljU=) 2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: taFGAacxq2sm6Y1QRRo3KlRLFJEopO93ww8dAQZR/68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Validity Not Before: Nov 24 21:51:22 2024 GMT Not After : Dec 1 21:51:22 2024 GMT Subject: CN=67439fda-9e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d5:63:82:1a:1d:2f:66:db:70:67:ef:22:98: a2:1f:68:2a:14:8d:39:37:ef:80:0d:3d:81:8d:f0: 99:17:4c:2c:50:32:3c:e4:c6:fe:6d:c4:dd:c2:a3: ce:06:81:b6:ad:67:1c:aa:9c:73:cf:53:de:63:0b: aa:0a:f8:ca:ad:bd:e7:e0:9c:1f:5c:c7:b9:27:dc: 2e:7a:f6:ac:64:f4:90:c0:17:b0:01:0f:3b:9a:71: 8c:b5:26:4b:2b:25:a4:6e:24:8d:41:86:cf:67:ac: 83:33:e4:5c:f2:b8:3d:8c:a7:39:80:f6:2c:e0:73: 6c:d2:bf:a6:3c:e3:87:c9:25:23:a0:44:4f:86:3d: 2c:50:1e:08:4b:77:ff:7c:e6:e5:0d:d2:74:c4:f1: 01:bf:8b:ac:95:5e:a6:81:fb:75:e4:c6:1d:2b:7a: a3:90:e5:be:21:38:d3:95:34:6e:31:a7:51:de:2d: 53:c3:3c:72:2a:3d:aa:0d:7e:08:7e:38:ff:32:1f: 31:f4:b2:7d:fe:f3:9c:16:21:d2:44:60:c3:79:17: bb:40:2d:6d:03:23:ec:f3:2e:48:33:e8:c4:63:1b: 9d:e5:16:cb:76:3c:9e:92:aa:00:4f:76:8b:5b:fc: 54:a8:75:87:4a:e3:ca:24:53:d4:65:fd:6c:e9:ca: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:64:48:C1:BA:0E:72:DF:93:46:09:96:59:B9:2A:46:48:8C:E3:9F X509v3 Authority Key Identifier: keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:87:31:2c:9b:ce:ac:28:2c:21:91:09:25:b0:e7:e4:22:93: e5:6d:1b:6d:97:a7:0a:46:00:9f:52:67:d5:66:37:96:53:79: c4:24:f8:7f:0a:8e:7c:b1:a3:03:aa:6f:4d:ac:1f:9f:8a:1e: 98:69:eb:d4:c2:9e:2d:f6:dc:a3:5c:7e:30:d1:6b:27:66:b6: da:b7:f3:1b:ac:d2:bf:9c:1f:41:4c:02:b0:b6:52:2a:d5:ef: 61:eb:86:6e:d1:4c:d2:7f:ee:c0:41:a3:c7:37:99:c9:72:3d: a8:e0:10:f9:47:fc:d8:54:e4:2d:a4:b2:75:df:c9:6d:6a:5f: 5f:34:7f:ce:01:3a:19:ff:08:b7:68:f8:86:d9:2b:13:0a:a1: f6:fb:a2:ac:c6:83:e1:81:a7:81:7d:6b:59:46:9c:5f:67:c7: 5f:1d:41:0f:4c:f5:fb:ca:f7:48:b8:5b:45:08:35:7a:c3:36: cc:c5:f8:2e:c6:37:8f:d3:c6:8e:ad:ca:6d:a3:a7:96:19:0c: 0f:51:81:18:54:6a:eb:4e:3d:50:90:25:a4:f7:dd:6e:e5:d5: be:f7:34:88:e5:43:87:58:83:5f:04:db:c8:83:9d:0c:ec:cc: 16:4b:9e:72:ab:f1:bb:4d:d7:e0:39:45:87:94:71:a1:f1:c3: 7c:ef:0d:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5 NkRCMDkxNTMwHhcNMjQxMTI0MjE1MTIyWhcNMjQxMjAxMjE1MTIyWjAYMRYwFAYD VQQDEw02NzQzOWZkYS05ZTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NVjghodL2bbcGfvIpiiH2gqFI05N++ADT2BjfCZF0wsUDI85Mb+bcTdwqPO BoG2rWccqpxzz1PeYwuqCvjKrb3n4JwfXMe5J9wuevasZPSQwBewAQ87mnGMtSZL KyWkbiSNQYbPZ6yDM+Rc8rg9jKc5gPYs4HNs0r+mPOOHySUjoERPhj0sUB4IS3f/ fOblDdJ0xPEBv4uslV6mgft15MYdK3qjkOW+ITjTlTRuMadR3i1TwzxyKj2qDX4I fjj/Mh8x9LJ9/vOcFiHSRGDDeRe7QC1tAyPs8y5IM+jEYxud5RbLdjyekqoAT3aL W/xUqHWHSuPKJFPUZf1s6cpFvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFkSMG6 DnLfk0YJllm5KkZIjOOfMB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1 MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1 Wm9JTzBfemlpcWVXMndrVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLhzEsm86sKCwhkQklsOfkIpPlbRttl6cKRgCfUmfVZjeWU3nEJPh/ Co58saMDqm9NrB+fih6YaevUwp4t9tyjXH4w0WsnZrbat/MbrNK/nB9BTAKwtlIq 1e9h64Zu0UzSf+7AQaPHN5nJcj2o4BD5R/zYVOQtpLJ138ltal9fNH/OAToZ/wi3 aPiG2SsTCqH2+6KsxoPhgaeBfWtZRpxfZ8dfHUEPTPX7yvdIuFtFCDV6wzbMxfgu xjeP08aOrcpto6eWGQwPUYEYVGrrTj1QkCWk991u5dW+9zSI5UOHWINfBNvIg50M 7MwWS55yq/G7TdfgOUWHlHGh8cN87w1q -----END CERTIFICATE-----Generated at Sun Nov 24 23:58:51 2024 by rpki-client on console-fra.rpki-client.org