$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft File: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft (raw, json) Hash identifier: 1rWACgwEjCdk6dix18sVeRtaP5rH99MXwLPUol5tCH0= Subject key identifier: 80:76:26:8F:D3:9E:0E:EC:9E:BF:E6:BC:BE:64:C9:0C:1C:3A:7B:94 Authority key identifier: 8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B Certificate issuer: /CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B Certificate serial: 04E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft Manifest number: 04DA Signing time: Wed 20 Nov 2024 23:21:09 +0000 Manifest this update: Wed 20 Nov 2024 23:21:09 +0000 Manifest next update: Wed 27 Nov 2024 23:21:09 +0000 Files and hashes: 1: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl (hash: 9TxlvssIoWslcRbjyxa4hfsgIvNSuvKVIDhdDGAKMsE=) 2: F18DB130603911EF930C0567C4F9AE02.roa (hash: bMyNaPmBlCzUdt5NHJjdyDhr0LajMy+L36w7sDnDjCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1254 (0x4e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B Validity Not Before: Nov 20 23:21:09 2024 GMT Not After : Nov 27 23:21:09 2024 GMT Subject: CN=673e6ee5-29e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:49:f2:02:9a:47:d5:15:93:d4:f8:38:40: 4d:2b:6b:30:78:91:70:53:f6:15:09:e2:ef:ee:2f: 9c:df:43:18:66:f1:c3:17:d7:f8:16:17:79:ff:ac: 0c:55:a6:3d:26:35:b3:f5:bc:da:39:ae:99:1c:b4: 5a:b2:e4:d4:c7:2a:9f:15:79:3d:3f:fb:54:b1:0b: 21:44:c0:4b:a1:5a:0d:61:5a:32:c2:ec:de:a7:f0: df:12:23:e7:a0:ed:44:2e:b8:31:57:61:6d:ab:54: 59:bb:60:83:c1:0d:37:12:00:73:d6:c3:02:36:5c: 20:27:5d:97:b3:0f:70:81:d4:78:ec:4f:fd:0f:7d: aa:31:77:6f:37:db:2d:d0:e7:98:25:b3:6c:46:a3: 5c:f8:81:a1:4d:3a:d0:05:ac:17:ff:77:4f:1a:80: 39:ac:fb:b5:bb:ac:7e:80:ba:10:4a:57:00:f4:ea: c1:bf:98:c4:10:ea:a8:de:63:69:c2:36:44:2c:f5: 46:b8:9f:9a:89:41:1a:30:c7:ff:42:0e:24:4a:4d: 1e:f5:fb:ef:16:a3:6b:03:1b:98:10:5d:64:d7:b0: 71:ef:54:ec:e3:1e:f1:bc:db:e9:d4:cc:f1:b0:60: 35:d8:10:f2:f6:67:ea:11:0f:44:c3:dc:3a:cf:4d: c2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:76:26:8F:D3:9E:0E:EC:9E:BF:E6:BC:BE:64:C9:0C:1C:3A:7B:94 X509v3 Authority Key Identifier: keyid:8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ad:15:1a:df:3d:ca:0b:17:43:35:fd:15:a9:2d:f8:06:16: 2a:c1:81:da:cf:c4:28:4f:08:fd:2d:4c:d8:b9:3e:4a:7c:21: c1:0d:33:0f:4e:0a:e5:13:bd:71:6f:a1:27:8f:c2:17:7d:b5: b9:46:c3:e9:0b:37:18:fa:dd:37:d3:25:4d:57:2c:a9:06:64: 02:a4:13:91:0b:c3:c1:95:34:8c:8d:49:d5:16:e0:ea:d9:d1: 38:83:7d:a4:d0:dc:73:0d:31:f2:f3:6a:aa:56:de:1b:5a:1e: 3b:fb:9b:4b:9c:17:46:6c:9a:c5:76:e8:36:b6:d9:e1:68:53: d0:58:17:d2:a1:77:2c:20:12:c7:22:07:fe:1c:bd:b7:95:e8: 8d:bd:bf:c4:73:eb:04:c3:e4:c6:15:ce:ec:8d:09:a4:d0:90: 22:75:96:7a:96:3b:70:6a:e0:51:fb:e2:35:6e:df:1f:1d:bf: ac:8e:07:da:51:49:4a:3c:2b:db:65:47:19:a8:cd:4c:27:da: 09:25:40:a0:59:89:80:1c:2a:67:ca:cc:6e:d6:63:2d:66:52: 35:92:5f:85:cc:8b:f8:2d:55:c9:ab:ba:9c:e5:f7:a2:50:70: a2:d2:34:2c:9e:68:73:cf:a8:2b:f7:8d:30:2f:96:57:f4:ac: d2:1b:f3:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwNTYxMTAvBgNVBAUTKDhCQzAxQ0VBNDREM0VEODhGNDE1MzE3MkI3OTI0NTY3 MTVDNTI2MEIwHhcNMjQxMTIwMjMyMTA5WhcNMjQxMTI3MjMyMTA5WjAYMRYwFAYD VQQDEw02NzNlNmVlNS0yOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ1J8gKaR9UVk9T4OEBNK2sweJFwU/YVCeLv7i+c30MYZvHDF9f4Fhd5/6wM VaY9JjWz9bzaOa6ZHLRasuTUxyqfFXk9P/tUsQshRMBLoVoNYVoywuzep/DfEiPn oO1ELrgxV2Ftq1RZu2CDwQ03EgBz1sMCNlwgJ12Xsw9wgdR47E/9D32qMXdvN9st 0OeYJbNsRqNc+IGhTTrQBawX/3dPGoA5rPu1u6x+gLoQSlcA9OrBv5jEEOqo3mNp wjZELPVGuJ+aiUEaMMf/Qg4kSk0e9fvvFqNrAxuYEF1k17Bx71Ts4x7xvNvp1Mzx sGA12BDy9mfqEQ9Ew9w6z03CvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIB2Jo/T ng7snr/mvL5kyQwcOnuUMB8GA1UdIwQYMBaAFIvAHOpE0+2I9BUxcreSRWcVxSYL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni9GQjU5MzQ0RUZC MUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZajBGVEZ5dDVKRlp4WEZK Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k4QWM2a1RUN1lqMEZURnl0NUpGWnhYRkpncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA1Ni9GQjU5MzQ0RUZCMUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZ ajBGVEZ5dDVKRlp4WEZKZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtrRUa3z3KCxdDNf0VqS34BhYqwYHaz8QoTwj9LUzYuT5KfCHBDTMP TgrlE71xb6Enj8IXfbW5RsPpCzcY+t030yVNVyypBmQCpBORC8PBlTSMjUnVFuDq 2dE4g32k0NxzDTHy82qqVt4bWh47+5tLnBdGbJrFdug2ttnhaFPQWBfSoXcsIBLH Igf+HL23leiNvb/Ec+sEw+TGFc7sjQmk0JAidZZ6ljtwauBR++I1bt8fHb+sjgfa UUlKPCvbZUcZqM1MJ9oJJUCgWYmAHCpnysxu1mMtZlI1kl+FzIv4LVXJq7qc5fei UHCi0jQsnmhzz6gr940wL5ZX9KzSG/MB -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:24 2024 by rpki-client on console-fra.rpki-client.org