$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json) Hash identifier: N2TXKsowKHTvJiKWDDUUil22Td+O7tJdFKzAyZmZgzI= Subject key identifier: 64:FF:70:8A:E0:0D:A4:01:F7:86:CA:21:28:BB:1D:2D:68:80:EC:78 Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft Manifest number: 0F Signing time: Wed 25 Dec 2024 06:10:11 +0000 Manifest this update: Wed 25 Dec 2024 06:10:10 +0000 Manifest next update: Wed 01 Jan 2025 06:10:10 +0000 Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: 2ih36dQ43LkS57r2rJyunPtdpjyTmWQ/ZF4Ww7puGnI=) 2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: p/dRxP1LBQWHfzvWlGimyJXdHuSAV3oBElZDV2RjF3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91 Validity Not Before: Dec 25 06:10:10 2024 GMT Not After : Jan 1 06:10:10 2025 GMT Subject: CN=676ba1c2-13fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:4d:5c:62:27:7a:36:68:e5:8d:7d:4d:4a: 5d:71:09:9b:e1:91:a2:55:b8:ba:c6:93:81:81:b6: d5:16:9b:e0:f2:cf:bf:44:2a:db:81:da:e3:53:6a: f1:f2:37:ea:2a:f5:8b:c5:2b:4f:18:28:08:54:dd: ab:0d:1f:6f:1a:12:c3:16:03:b1:00:a7:5f:88:70: 58:dc:08:25:49:2e:76:64:c2:ec:1c:3c:6c:59:dc: 1f:39:9d:20:f9:82:da:3e:42:ec:47:50:c1:3a:c3: 49:f5:70:4c:16:bf:a1:a4:9d:02:bd:46:01:c4:84: 69:0c:a1:e9:70:58:f0:05:2f:9c:0f:1d:e5:02:3c: 6a:97:d4:c8:df:93:af:6a:e1:86:46:41:0b:99:76: 6d:72:13:07:8d:b3:dd:37:7d:bd:ce:2d:51:dd:bb: 76:2a:33:9b:97:ed:2a:05:7c:a3:c7:a1:86:4c:56: e7:c6:50:59:79:60:86:c5:48:d6:45:9c:72:41:3a: e4:f3:67:79:de:4c:9b:b3:12:5e:55:93:aa:b9:8d: a6:19:b8:13:c6:26:69:14:c3:df:cc:50:3a:a6:e7: 22:47:77:32:38:94:cf:82:b4:05:cb:5f:83:57:cd: 6a:74:84:5d:a9:8e:5d:b7:0d:3d:07:83:f1:a3:b6: 66:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FF:70:8A:E0:0D:A4:01:F7:86:CA:21:28:BB:1D:2D:68:80:EC:78 X509v3 Authority Key Identifier: keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:c6:fd:85:84:8a:19:8d:d4:25:b1:6e:2a:9f:f2:96:93:db: 9f:5f:8d:82:2f:55:4a:47:e0:f4:dc:3c:18:44:a1:0b:df:fc: c3:86:f1:d5:b2:db:fb:6d:2f:f7:ef:2c:97:bf:ef:05:b6:1c: 3b:35:1e:3d:95:d8:83:88:cd:95:9e:89:68:86:f2:fe:10:b7: aa:7b:d8:41:db:c7:e4:e6:6e:f7:8a:c6:6d:d2:77:5d:bb:f9: 00:aa:6c:be:f3:8e:8a:05:48:29:cd:a3:12:72:59:76:c2:1b: 7b:c8:7c:0a:ac:55:a8:dd:e8:e0:ac:71:31:8e:21:30:3d:f3: 06:60:df:7d:93:2d:5f:00:34:6d:46:31:91:84:b8:8b:7a:e5: c8:1f:9a:d2:c9:ab:5d:53:e2:00:89:a0:1d:61:2e:13:e3:24: 16:23:5b:ab:51:c1:18:92:c5:b2:3d:64:66:48:69:27:fb:f1: b7:da:12:4b:49:b7:1b:c5:9e:7e:b1:d1:9e:3c:a9:92:2f:92: e1:cb:a1:38:7e:9f:fc:90:0c:bf:12:f2:47:ce:42:03:43:01: 5d:dc:20:03:7f:b9:da:e3:6d:82:2c:8d:ef:2d:9e:95:24:9a: cb:dd:9d:a0:0a:3f:ef:c1:d9:08:4c:b4:09:b6:8e:43:d8:87: bc:ea:a7:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEFDODExMC8GA1UEBRMoRTJFNjMwNjY3NUQ1RjU0RDIwN0I2NzgyQTk2QzdBQTk2 N0IxRkM5MTAeFw0yNDEyMjUwNjEwMTBaFw0yNTAxMDEwNjEwMTBaMBgxFjAUBgNV BAMTDTY3NmJhMWMyLTEzZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpy01cYid6NmjljX1NSl1xCZvhkaJVuLrGk4GBttUWm+Dyz79EKtuB2uNTavHy N+oq9YvFK08YKAhU3asNH28aEsMWA7EAp1+IcFjcCCVJLnZkwuwcPGxZ3B85nSD5 gto+QuxHUME6w0n1cEwWv6GknQK9RgHEhGkMoelwWPAFL5wPHeUCPGqX1Mjfk69q 4YZGQQuZdm1yEweNs903fb3OLVHdu3YqM5uX7SoFfKPHoYZMVufGUFl5YIbFSNZF nHJBOuTzZ3neTJuzEl5Vk6q5jaYZuBPGJmkUw9/MUDqm5yJHdzI4lM+CtAXLX4NX zWp0hF2pjl23DT0Hg/Gjtmb5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZP9wiuAN pAH3hsohKLsdLWiA7HgwHwYDVR0jBBgwFoAU4uYwZnXV9U0ge2eCqWx6qWex/JEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QUM4L0U5QkUwNURDQjEz QzExRUZBQUY5RDczMUM0RjlBRTAyLzR1WXdablhWOVUwZ2UyZUNxV3g2cVdleF9K RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNHVZd1puWFY5VTBnZTJlQ3FXeDZxV2V4X0pFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QUM4L0U5QkUwNURDQjEzQzExRUZBQUY5RDczMUM0RjlBRTAyLzR1WXdablhWOVUw Z2UyZUNxV3g2cVdleF9KRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFTG/YWEihmN1CWxbiqf8paT259fjYIvVUpH4PTcPBhEoQvf/MOG8dWy 2/ttL/fvLJe/7wW2HDs1Hj2V2IOIzZWeiWiG8v4Qt6p72EHbx+TmbveKxm3Sd127 +QCqbL7zjooFSCnNoxJyWXbCG3vIfAqsVajd6OCscTGOITA98wZg332TLV8ANG1G MZGEuIt65cgfmtLJq11T4gCJoB1hLhPjJBYjW6tRwRiSxbI9ZGZIaSf78bfaEktJ txvFnn6x0Z48qZIvkuHLoTh+n/yQDL8S8kfOQgNDAV3cIAN/udrjbYIsje8tnpUk msvdnaAKP+/B2QhMtAm2jkPYh7zqpy8= -----END CERTIFICATE-----Generated at Wed Dec 25 08:01:25 2024 by rpki-client on console-fra.rpki-client.org