$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft File: t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft (raw, json) Hash identifier: lvedZvnoS097agL4KkcXiWA1tH+63JNdzTILGbhsjho= Subject key identifier: 1D:2C:CD:91:FE:A9:3E:DC:45:EE:87:15:64:8A:0A:A0:84:5F:F6:EB Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 Certificate issuer: /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft Manifest number: 4B Signing time: Thu 17 Oct 2024 05:41:42 +0000 Manifest this update: Thu 17 Oct 2024 05:41:42 +0000 Manifest next update: Thu 24 Oct 2024 05:41:42 +0000 Files and hashes: 1: t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl (hash: z7dxwoFkXI20SBA7Ksu/IEz33GXToWxiO8pIqpirahE=) 2: A2939A381CB711EF8F98240CC4F9AE02.roa (hash: AIIOALhmpVgtbG/Y3VLxrUnP8fQ71eZKv8RmFzdHCHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Oct 2024 04:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Validity Not Before: Oct 17 05:41:42 2024 GMT Not After : Oct 24 05:41:42 2024 GMT Subject: CN=6710a396-b662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d0:4f:83:00:10:9a:8d:04:79:a9:15:0b:b0: 16:3f:79:75:61:d6:43:c7:3a:64:90:f1:cf:4c:35: 34:f9:78:ae:f1:f8:f7:b9:0c:57:15:06:21:ec:5a: 68:e1:50:4e:bb:8f:95:98:06:7a:2e:8e:fe:b3:4d: ab:43:53:dd:72:4c:5f:51:e5:06:3d:79:54:8c:43: 82:96:10:1d:da:d3:f1:b0:8a:97:72:5c:01:b4:60: e4:0d:0e:16:63:d8:eb:6e:25:77:7e:f1:ea:62:c7: d2:03:a6:ae:90:f3:76:0b:bf:da:c5:4c:14:f5:bd: 43:98:35:52:77:47:51:6e:da:ec:63:27:22:51:ae: bc:02:c2:d1:e4:39:43:3b:77:96:e5:a4:ab:a9:fc: bf:e9:b3:1b:c7:85:27:be:46:6d:3c:5b:96:90:c3: b2:f6:ff:ed:4a:de:f8:f5:4d:5c:d2:21:f4:e0:1c: 49:0e:0d:10:96:71:c3:41:20:86:73:e1:18:70:da: 19:2d:3d:19:1e:a9:73:61:3e:10:92:b2:ac:e6:67: 6d:b0:37:c6:26:be:77:7b:d4:59:a9:95:56:38:eb: 6d:4e:a0:c0:18:a2:32:d2:4c:22:82:68:76:24:21: 0a:e1:e3:79:78:36:89:6d:50:ad:2e:2c:90:ed:52: 9c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2C:CD:91:FE:A9:3E:DC:45:EE:87:15:64:8A:0A:A0:84:5F:F6:EB X509v3 Authority Key Identifier: keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d0:0d:f5:32:0a:b8:a5:ec:fa:37:2b:e3:ea:b6:3d:fc:f2: 7d:d5:6b:9b:c9:d2:1a:91:44:78:a6:46:9f:d3:3b:ac:1e:2b: 1e:38:39:fd:3b:16:96:32:04:e2:45:d6:30:fd:d3:47:4c:d9: 17:17:6f:b1:82:48:b3:51:08:14:90:55:32:9d:01:c2:18:dc: c8:3e:10:61:2d:37:8f:bb:2f:7f:32:40:8c:b9:53:48:70:25: d9:7b:a9:f0:5d:18:e2:ed:e6:d7:19:b9:3f:fd:c4:ac:87:a1: f1:27:b9:64:62:d5:bd:b8:6a:ea:0b:94:b0:4a:9a:b2:38:43: ff:8e:98:8c:57:86:82:c7:94:60:03:a7:04:fc:09:b5:a3:32: ba:7c:c3:b1:b7:b9:eb:e2:35:0b:cb:19:bd:96:e2:61:9d:f9: fa:40:f7:fa:1a:71:db:63:84:51:ce:2e:63:87:da:3b:a8:2a: 3b:13:cb:bb:4f:a8:97:8b:a1:14:87:a4:bb:31:bb:d4:e1:9e: 33:2b:27:52:f6:0b:46:9b:9b:65:f9:99:5f:11:c3:4b:b6:12: 32:26:54:16:06:27:35:68:f7:c4:73:44:db:37:3e:c0:a3:10: 01:80:1f:93:76:2c:0c:90:ca:03:62:9c:7e:59:d9:02:a7:41: 86:d4:9f:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEUxMTExMC8GA1UEBRMoQjc5NEY5OTczM0VFRkMzRkEwMDAzRjY4OEY2NEM5QzM1 MzkyNjZCNTAeFw0yNDEwMTcwNTQxNDJaFw0yNDEwMjQwNTQxNDJaMBgxFjAUBgNV BAMTDTY3MTBhMzk2LWI2NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc0E+DABCajQR5qRULsBY/eXVh1kPHOmSQ8c9MNTT5eK7x+Pe5DFcVBiHsWmjh UE67j5WYBnoujv6zTatDU91yTF9R5QY9eVSMQ4KWEB3a0/GwipdyXAG0YOQNDhZj 2OtuJXd+8epix9IDpq6Q83YLv9rFTBT1vUOYNVJ3R1Fu2uxjJyJRrrwCwtHkOUM7 d5blpKup/L/psxvHhSe+Rm08W5aQw7L2/+1K3vj1TVzSIfTgHEkODRCWccNBIIZz 4Rhw2hktPRkeqXNhPhCSsqzmZ22wN8Ymvnd71FmplVY4621OoMAYojLSTCKCaHYk IQrh43l4NoltUK0uLJDtUpxvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHSzNkf6p PtxF7ocVZIoKoIRf9uswHwYDVR0jBBgwFoAUt5T5lzPu/D+gAD9oj2TJw1OSZrUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0RTExLzdCQ0Y4MTI4MUNB ODExRUZBNTAzMEI0REM0RjlBRTAyL3Q1VDVselB1X0QtZ0FEOW9qMlRKdzFPU1py VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdDVUNWx6UHVfRC1nQUQ5b2oyVEp3MU9TWnJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 RTExLzdCQ0Y4MTI4MUNBODExRUZBNTAzMEI0REM0RjlBRTAyL3Q1VDVselB1X0Qt Z0FEOW9qMlRKdzFPU1pyVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC7QDfUyCril7Po3K+Pqtj388n3Va5vJ0hqRRHimRp/TO6weKx44Of07 FpYyBOJF1jD900dM2RcXb7GCSLNRCBSQVTKdAcIY3Mg+EGEtN4+7L38yQIy5U0hw Jdl7qfBdGOLt5tcZuT/9xKyHofEnuWRi1b24auoLlLBKmrI4Q/+OmIxXhoLHlGAD pwT8CbWjMrp8w7G3ueviNQvLGb2W4mGd+fpA9/oacdtjhFHOLmOH2juoKjsTy7tP qJeLoRSHpLsxu9ThnjMrJ1L2C0abm2X5mV8Rw0u2EjImVBYGJzVo98RzRNs3PsCj EAGAH5N2LAyQygNinH5Z2QKnQYbUnxk= -----END CERTIFICATE-----Generated at Thu Oct 17 06:46:20 2024 by rpki-client on console-fra.rpki-client.org