$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: qkbdLWOpzvrSwgtSRooZfnfwscElzeWsqj2ZsavQICU= Subject key identifier: DE:BD:75:9B:D5:C5:C4:73:B3:C8:67:7A:14:4F:FC:CB:B2:F1:07:AB Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 0149 Signing time: Thu 21 Nov 2024 02:35:27 +0000 Manifest this update: Thu 21 Nov 2024 02:35:27 +0000 Manifest next update: Thu 28 Nov 2024 02:35:27 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: E/hVx9BgmLHnveEWYmscmlQ3WM73I9HLf+7tHECwEYc=) 2: 9AB64290908211EF9877C022C4F9AE02.roa (hash: kBjJffmWH0hnmv2iS3P4OXsaabkURrp3QWa8pKlrDtM=) 3: B780E2A097F711EF89B09770C4F9AE02.roa (hash: ml/kq4DvdunFG6emIvOZeNFtW1s51mRlqAa26sB7GvQ=) 4: FD91D382FDFE11EEA991412FC4F9AE02.roa (hash: UJVqZVv2LvOtLV0E0fDBrYAFdyi9fTFpHu6AEr0aBjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Nov 21 02:35:27 2024 GMT Not After : Nov 28 02:35:27 2024 GMT Subject: CN=673e9c6f-30ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bc:08:fa:08:9d:b8:d7:86:4a:69:79:65:f8: 7c:52:38:32:07:06:cc:bd:a2:67:04:56:eb:b0:c4: b3:3f:66:c7:20:a4:9a:ef:a7:d2:3c:48:64:e4:ca: 88:2f:1a:0a:78:85:8d:ca:e3:e1:ed:e3:bd:f2:ba: 95:13:f5:3b:27:57:cc:34:8a:db:e1:e1:fc:f5:75: b8:06:0c:7b:c0:2e:21:65:b7:76:bf:34:e0:3e:4d: 24:08:de:ac:c0:a8:8f:1e:18:f9:46:ed:08:25:10: 39:26:71:13:89:32:6b:78:1d:c9:d1:3d:15:50:98: bb:e6:32:74:cd:7b:ff:97:3b:70:1d:31:3b:15:b5: 77:16:5d:30:05:28:6b:70:8f:52:99:06:ef:65:7c: 78:5e:2b:df:d4:e7:c7:65:31:0a:8d:db:50:fe:16: 1e:70:8a:71:69:c7:02:19:f8:bf:36:b3:06:47:e3: b0:66:05:08:f1:42:e7:1d:cb:1e:09:71:b2:6e:65: 3c:29:51:60:9a:27:53:9e:02:60:48:92:7c:24:d5: 82:a1:4a:11:f3:49:ef:84:90:ce:c2:23:a8:f2:c4: d1:ec:f2:3c:0c:e3:f7:d6:4f:7e:53:ee:ec:22:4b: 88:7f:06:16:cb:a3:25:46:db:4c:4d:51:f1:82:31: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BD:75:9B:D5:C5:C4:73:B3:C8:67:7A:14:4F:FC:CB:B2:F1:07:AB X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:bd:a3:3d:a1:23:c9:e9:da:86:57:45:29:2f:5f:23:76:1f: 03:38:95:45:4b:6b:59:1e:a1:e5:26:15:2a:2b:31:32:e6:0b: dd:6c:8a:1a:d0:b8:0a:5f:66:2e:5c:47:c9:9d:98:a1:9a:02: 37:43:7a:ea:e8:58:8c:c6:7b:81:0c:07:59:1f:ff:80:fa:16: 45:cf:eb:9f:9e:71:d6:b6:1e:4e:ea:ce:bb:f8:d4:5f:1e:ef: ea:48:c1:50:a3:23:64:45:46:12:65:06:0f:f9:cf:19:2c:22: c5:17:87:43:09:52:ec:d2:da:62:e9:73:93:f7:03:25:ab:43: 50:be:1d:00:6c:e4:bd:82:95:1d:a0:65:ba:de:a9:f3:8b:56: 96:1c:45:f5:ba:64:1a:60:aa:eb:af:2c:8b:db:b0:72:4a:5c: bd:7f:cd:9a:ff:20:79:45:61:22:83:8c:07:50:58:3a:dc:d5: ca:b5:d8:07:47:e4:57:ed:d5:3e:57:dc:57:5e:03:18:dd:b3: 0c:6e:e1:b2:b1:d7:07:42:51:e8:b7:56:9c:eb:4d:b0:d7:ba: 37:3a:c6:1c:84:03:98:8d:3d:b0:16:4c:75:69:d1:71:9d:95: cc:95:35:dc:9a:6c:b1:4c:32:41:75:5f:13:b5:02:b1:8c:4d: 52:ff:2d:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjQxMTIxMDIzNTI3WhcNMjQxMTI4MDIzNTI3WjAYMRYwFAYD VQQDEw02NzNlOWM2Zi0zMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlLwI+giduNeGSml5Zfh8UjgyBwbMvaJnBFbrsMSzP2bHIKSa76fSPEhk5MqI LxoKeIWNyuPh7eO98rqVE/U7J1fMNIrb4eH89XW4Bgx7wC4hZbd2vzTgPk0kCN6s wKiPHhj5Ru0IJRA5JnETiTJreB3J0T0VUJi75jJ0zXv/lztwHTE7FbV3Fl0wBShr cI9SmQbvZXx4Xivf1OfHZTEKjdtQ/hYecIpxaccCGfi/NrMGR+OwZgUI8ULnHcse CXGybmU8KVFgmidTngJgSJJ8JNWCoUoR80nvhJDOwiOo8sTR7PI8DOP31k9+U+7s IkuIfwYWy6MlRttMTVHxgjE/8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN69dZvV xcRzs8hnehRP/Muy8QerMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXvaM9oSPJ6dqGV0UpL18jdh8DOJVFS2tZHqHlJhUqKzEy5gvdbIoa 0LgKX2YuXEfJnZihmgI3Q3rq6FiMxnuBDAdZH/+A+hZFz+ufnnHWth5O6s67+NRf Hu/qSMFQoyNkRUYSZQYP+c8ZLCLFF4dDCVLs0tpi6XOT9wMlq0NQvh0AbOS9gpUd oGW63qnzi1aWHEX1umQaYKrrryyL27BySly9f82a/yB5RWEig4wHUFg63NXKtdgH R+RX7dU+V9xXXgMY3bMMbuGysdcHQlHot1ac602w17o3OsYchAOYjT2wFkx1adFx nZXMlTXcmmyxTDJBdV8TtQKxjE1S/y0p -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:04 2024 by rpki-client on console-fra.rpki-client.org