$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft File: SUICsDHp9CdkMVegbvqkwHDH8-0.mft (raw, json) Hash identifier: 6pdBBVJKbAgYfBRx2ZnV1wvkiqV950KCH5Brg/HmAYs= Subject key identifier: D4:A3:86:A6:0F:00:2F:AF:20:E8:4D:76:D3:C8:90:99:59:52:B4:9B Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 0474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft Manifest number: 045B Signing time: Sun 24 Nov 2024 23:37:23 +0000 Manifest this update: Sun 24 Nov 2024 23:37:22 +0000 Manifest next update: Sun 01 Dec 2024 23:37:22 +0000 Files and hashes: 1: SUICsDHp9CdkMVegbvqkwHDH8-0.crl (hash: s9/E4HZc4DjzaLIOHhkgK+IcN557SjhD6G1a/OtSbFM=) 2: A042865C3DB211EE9EB40D3DC4F9AE02.roa (hash: 00gQlkZJ/La3W11cygPUEyOgfEz6qTJK4E6QUbIb+4w=) 3: B1FD800CF32111EEB820DB5BC4F9AE02.roa (hash: h8Cn0q3McR7P4xiiOqk2s7pmYyQ4a4pHCFcF2i6fJFs=) 4: E1B834D0F5D911EE878F7B7CC4F9AE02.roa (hash: AY+8DTHkr2vJtlLXSQfHDYYi6BNU94WVzll8RISRiyA=) 5: 242EC19CCA6C11EEA57DF83EC4F9AE02.roa (hash: 2qXlPaFenQASAW3HlIN5Ug8FhCiSb/b8zKcXYOGxOb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: Nov 24 23:37:22 2024 GMT Not After : Dec 1 23:37:22 2024 GMT Subject: CN=6743b8b3-9ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:f6:63:e0:20:2e:d1:68:96:16:a8:05:87: c1:36:06:4c:ed:5f:3b:92:6e:57:2f:a7:0e:16:65: 11:ca:37:b2:62:52:5b:74:cf:9b:89:ce:a0:c8:5a: 97:23:de:75:38:b5:65:79:6c:93:e7:ea:b1:e7:5f: 80:e6:5b:08:fb:df:3a:84:37:fd:90:d8:de:c1:84: a9:62:1e:a4:bd:ea:e5:95:54:4f:97:19:3d:2e:69: 53:a4:ee:68:48:b1:d3:f1:53:04:2c:75:29:2a:f6: b2:34:81:36:72:90:46:9b:b2:7b:2f:b8:d2:2b:db: 9d:84:68:ed:6e:26:a7:19:d1:96:a9:5e:f2:2a:1d: d0:1e:f9:d3:7b:2b:ea:4e:ba:8b:75:f0:d0:b9:dc: ce:b0:c0:06:46:03:94:4f:1d:8b:47:7b:23:84:0f: d4:48:d7:49:03:c2:c1:e4:0c:0f:1f:f1:19:f3:c2: f3:bc:2f:2d:72:b8:49:65:76:f4:e8:45:ca:41:18: 50:69:39:c4:3f:bb:78:2b:e9:ef:27:5b:70:ed:60: f1:d4:4e:21:91:38:42:22:c9:7f:c0:ab:8d:a0:88: ea:0b:68:35:6f:1d:86:6a:0f:77:bf:17:bb:87:d5: 11:ac:a3:b8:dd:92:63:5d:5e:9c:2a:e3:4b:bf:45: 01:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A3:86:A6:0F:00:2F:AF:20:E8:4D:76:D3:C8:90:99:59:52:B4:9B X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e7:8e:2a:82:f8:ae:66:97:35:74:8f:06:d5:83:3d:3e:78: ee:51:d9:50:5c:9d:c5:bf:bf:d1:f2:a9:9e:82:43:27:d9:9b: 27:cd:ad:d5:0a:a1:e8:6f:61:9c:9e:80:a3:2d:02:4d:22:ae: 17:7e:b5:92:28:a9:7e:c7:67:8f:88:87:07:97:87:16:4f:bb: 06:32:40:72:8d:01:6d:d8:1b:8e:e3:c4:f4:2e:45:1b:8e:94: 27:64:78:d6:38:f5:48:5d:04:f7:bc:1c:8b:a9:70:c9:7f:07: ba:64:e6:37:a3:8f:2e:11:90:c2:26:ba:40:13:99:0c:97:bd: b6:fc:b6:5f:34:c4:b2:7f:bb:86:0e:de:4b:54:75:e0:3e:62: 2e:78:1e:73:c7:b2:02:f9:48:32:96:86:00:db:22:41:1e:97: 3b:c9:f9:93:11:8d:e3:db:5e:59:3f:ff:1e:3f:9d:89:97:91: d0:45:af:fe:6f:c6:6f:7d:af:75:67:70:12:e4:e3:94:43:79: bd:a6:28:74:5b:08:ba:d8:cd:a2:0d:d1:55:be:4d:4b:e5:f7: 69:db:91:fc:ca:29:1f:21:42:36:7f:69:78:8a:2f:71:1c:d6: 9d:d7:89:c3:2b:53:6a:3e:bd:98:77:5f:e0:44:74:e4:1e:3a: 5a:99:52:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjQxMTI0MjMzNzIyWhcNMjQxMjAxMjMzNzIyWjAYMRYwFAYD VQQDEw02NzQzYjhiMy05ZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoi72Y+AgLtFolhaoBYfBNgZM7V87km5XL6cOFmURyjeyYlJbdM+bic6gyFqX I951OLVleWyT5+qx51+A5lsI+986hDf9kNjewYSpYh6kverllVRPlxk9LmlTpO5o SLHT8VMELHUpKvayNIE2cpBGm7J7L7jSK9udhGjtbianGdGWqV7yKh3QHvnTeyvq TrqLdfDQudzOsMAGRgOUTx2LR3sjhA/USNdJA8LB5AwPH/EZ88LzvC8tcrhJZXb0 6EXKQRhQaTnEP7t4K+nvJ1tw7WDx1E4hkThCIsl/wKuNoIjqC2g1bx2Gag93vxe7 h9URrKO43ZJjXV6cKuNLv0UBiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSjhqYP AC+vIOhNdtPIkJlZUrSbMB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM5Qi9BNDZFOTg5QTMyMkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlD ZGtNVmVnYnZxa3dIREg4LTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd544qgviuZpc1dI8G1YM9PnjuUdlQXJ3Fv7/R8qmegkMn2Zsnza3V CqHob2GcnoCjLQJNIq4XfrWSKKl+x2ePiIcHl4cWT7sGMkByjQFt2BuO48T0LkUb jpQnZHjWOPVIXQT3vByLqXDJfwe6ZOY3o48uEZDCJrpAE5kMl722/LZfNMSyf7uG Dt5LVHXgPmIueB5zx7IC+UgyloYA2yJBHpc7yfmTEY3j215ZP/8eP52Jl5HQRa/+ b8Zvfa91Z3AS5OOUQ3m9pih0Wwi62M2iDdFVvk1L5fdp25H8yikfIUI2f2l4ii9x HNad14nDK1NqPr2Yd1/gRHTkHjpamVJw -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:32 2024 by rpki-client on console-fra.rpki-client.org