$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft File: t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft (raw, json) Hash identifier: XBIoaLykBJaAjXMEIUgVNbU9Cd/fCZs2hghykCnA7iU= Subject key identifier: D2:41:B9:27:F4:A1:20:CD:7C:F6:B9:D9:C2:1D:C7:05:44:E4:AF:27 Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 Certificate issuer: /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft Manifest number: 5E Signing time: Sat 23 Nov 2024 05:02:04 +0000 Manifest this update: Sat 23 Nov 2024 05:02:04 +0000 Manifest next update: Sat 30 Nov 2024 05:02:04 +0000 Files and hashes: 1: t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl (hash: omPyQLaBnAUR6Uup5qJXnIOv79uB3GWbdijin0zx+z0=) 2: A2939A381CB711EF8F98240CC4F9AE02.roa (hash: AIIOALhmpVgtbG/Y3VLxrUnP8fQ71eZKv8RmFzdHCHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Validity Not Before: Nov 23 05:02:04 2024 GMT Not After : Nov 30 05:02:04 2024 GMT Subject: CN=674161cc-138c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:a4:92:61:28:cc:2b:ff:74:a8:a7:82:4a: c9:18:e7:54:6f:11:4b:83:ba:b5:50:8e:28:00:90: d1:3f:3e:0a:b5:ee:d3:93:ac:d1:cd:62:5e:8a:45: dd:27:2e:82:e2:75:4c:d6:87:dc:d5:82:8a:74:1c: 63:8f:ea:f2:db:47:80:36:62:08:5f:13:de:4b:4d: 76:f7:9e:e9:8d:0c:db:f8:80:af:32:b2:53:3f:62: 02:4c:cf:9d:7c:e9:a3:b6:3d:6f:93:57:d8:ad:0e: 53:c0:cc:eb:8e:b5:1c:80:a3:b5:59:03:af:3f:32: 30:38:ed:33:0f:ef:d5:da:36:5d:5d:b5:f6:f2:4c: 20:6e:2b:c2:03:27:12:b4:60:b3:e3:1a:6f:2f:62: 40:fd:53:01:11:7f:73:51:d8:6a:8c:21:25:f3:91: cc:7c:53:d0:32:fd:31:16:9f:4e:7a:f7:8c:a8:17: b9:c1:7d:52:ca:bd:bc:0a:89:54:d5:9b:ce:f6:32: 48:5c:59:19:bb:4b:17:08:ce:e7:f8:c3:1d:f1:15: 77:ab:6f:b7:61:51:ca:05:b6:f3:23:b3:89:a1:4e: 58:c1:e1:2d:36:ce:0a:f5:f4:1a:a9:1b:14:4c:47: 04:db:1d:ca:ac:d6:f5:9f:58:44:41:34:6a:0d:28: e4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:41:B9:27:F4:A1:20:CD:7C:F6:B9:D9:C2:1D:C7:05:44:E4:AF:27 X509v3 Authority Key Identifier: keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:87:42:fd:bd:15:24:6b:3f:de:07:f4:3e:23:13:0c:f1:9f: 7d:b7:d8:52:06:2e:cf:35:b1:2b:d6:c5:29:f5:b6:93:5c:d5: 00:8e:9c:b5:87:62:86:33:33:c7:31:58:3f:09:9f:6d:fc:f2: 1a:36:9c:46:da:a5:eb:fd:3c:5e:4b:85:89:ef:3c:fc:79:1c: dd:a7:36:d7:b5:f6:00:54:84:ba:1e:21:e5:d3:a4:b9:93:70: 11:cb:fb:ac:e4:df:f2:3a:d4:34:05:9b:d5:db:9a:e3:2c:ce: 20:bf:25:c1:be:91:02:c1:b6:de:4a:90:28:33:5d:04:49:80: d0:c7:fc:9b:50:f2:73:3e:6c:d4:fd:ae:6a:a2:a6:e5:c0:8a: 3a:6c:27:ea:b7:b4:e4:f6:e7:86:ed:2a:70:d3:44:b0:7a:b4: 4e:d5:10:83:fa:51:5a:e7:95:d4:38:8a:be:45:2c:ef:a1:6a: 45:cb:dc:66:6b:c0:a6:39:fb:c0:83:6d:18:17:22:af:99:d8: 5e:17:c8:fd:10:53:be:2c:8c:2b:2d:1f:e6:ff:53:2f:23:a6: ff:db:4f:5d:1a:2f:21:a2:0e:51:70:52:bc:d9:5e:28:cf:9f: eb:f1:68:86:bf:f8:f5:c4:97:85:a9:9d:46:ad:41:72:d6:cb: c8:28:fe:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEUxMTExMC8GA1UEBRMoQjc5NEY5OTczM0VFRkMzRkEwMDAzRjY4OEY2NEM5QzM1 MzkyNjZCNTAeFw0yNDExMjMwNTAyMDRaFw0yNDExMzAwNTAyMDRaMBgxFjAUBgNV BAMTDTY3NDE2MWNjLTEzOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAyKSSYSjMK/90qKeCSskY51RvEUuDurVQjigAkNE/Pgq17tOTrNHNYl6KRd0n LoLidUzWh9zVgop0HGOP6vLbR4A2YghfE95LTXb3numNDNv4gK8yslM/YgJMz518 6aO2PW+TV9itDlPAzOuOtRyAo7VZA68/MjA47TMP79XaNl1dtfbyTCBuK8IDJxK0 YLPjGm8vYkD9UwERf3NR2GqMISXzkcx8U9Ay/TEWn05694yoF7nBfVLKvbwKiVTV m872MkhcWRm7SxcIzuf4wx3xFXerb7dhUcoFtvMjs4mhTljB4S02zgr19BqpGxRM RwTbHcqs1vWfWERBNGoNKOSjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0kG5J/Sh IM189rnZwh3HBUTkrycwHwYDVR0jBBgwFoAUt5T5lzPu/D+gAD9oj2TJw1OSZrUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0RTExLzdCQ0Y4MTI4MUNB ODExRUZBNTAzMEI0REM0RjlBRTAyL3Q1VDVselB1X0QtZ0FEOW9qMlRKdzFPU1py VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdDVUNWx6UHVfRC1nQUQ5b2oyVEp3MU9TWnJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 RTExLzdCQ0Y4MTI4MUNBODExRUZBNTAzMEI0REM0RjlBRTAyL3Q1VDVselB1X0Qt Z0FEOW9qMlRKdzFPU1pyVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAByHQv29FSRrP94H9D4jEwzxn3232FIGLs81sSvWxSn1tpNc1QCOnLWH YoYzM8cxWD8Jn2388ho2nEbapev9PF5LhYnvPPx5HN2nNte19gBUhLoeIeXTpLmT cBHL+6zk3/I61DQFm9XbmuMsziC/JcG+kQLBtt5KkCgzXQRJgNDH/JtQ8nM+bNT9 rmqipuXAijpsJ+q3tOT254btKnDTRLB6tE7VEIP6UVrnldQ4ir5FLO+hakXL3GZr wKY5+8CDbRgXIq+Z2F4XyP0QU74sjCstH+b/Uy8jpv/bT10aLyGiDlFwUrzZXijP n+vxaIa/+PXEl4WpnUatQXLWy8go/pA= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:29 2024 by rpki-client on console-fra.rpki-client.org