$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: Wgo1wRX+ZG2DIb8AgI7Ni6Sti71mKBiqqKWP2HbrhxA= Subject key identifier: 3B:09:47:79:17:30:6D:66:D7:E4:6F:0B:94:29:0A:21:F4:3A:8C:B1 Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 08BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 08B4 Signing time: Fri 22 Nov 2024 20:14:27 +0000 Manifest this update: Fri 22 Nov 2024 20:14:26 +0000 Manifest next update: Fri 29 Nov 2024 20:14:26 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: 3rr2JzvpnFpp14xYgZJ3ycAevEOCUQ8QpJjIU3xO3uo=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: y624BzVkuEiikHslOtq6hgxDkVhcX1eWu3QlNuMQNRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2234 (0x8ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: Nov 22 20:14:26 2024 GMT Not After : Nov 29 20:14:26 2024 GMT Subject: CN=6740e623-0c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:50:39:bf:87:7b:1c:23:75:c3:9a:c4:10: 03:cb:59:5f:04:d6:26:04:96:f7:26:01:23:20:c2: dc:b2:fd:1c:f0:ab:07:1d:73:3a:58:36:ed:fc:b5: d6:e9:bc:b2:a2:56:05:26:0d:e5:cf:9c:74:f0:5c: 3e:09:b9:f4:87:d2:17:b3:99:d0:23:ba:db:63:8c: c6:83:75:3c:66:78:40:e8:35:07:97:e5:c1:fd:18: 24:5f:b8:d5:cf:98:55:b5:db:15:ef:bd:93:b0:d9: 7a:cf:6d:73:68:3d:d9:10:04:fe:b7:99:0a:fe:47: b8:e8:f7:52:c1:36:33:69:5e:fb:39:01:d5:ac:7a: c1:2e:08:29:f4:c4:b3:4e:52:43:3c:bd:9a:f0:a1: ee:d9:61:e5:cc:bb:3e:f0:5e:7e:b5:bb:5c:52:f5: 33:94:81:8a:b0:c0:36:09:95:65:16:53:08:c4:19: b7:48:30:c7:81:18:83:68:0f:d5:3c:e6:7b:a5:6e: 16:12:31:a5:fc:e5:e6:eb:39:7b:d4:96:67:4b:31: b7:3b:33:13:9a:73:1b:ac:85:b7:f2:2e:2c:5d:fb: 5b:e8:56:a8:93:dc:37:38:39:38:44:ba:2b:68:cd: 8f:15:4d:44:a7:4c:c7:5b:2e:27:98:6a:07:6f:a7: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:09:47:79:17:30:6D:66:D7:E4:6F:0B:94:29:0A:21:F4:3A:8C:B1 X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:79:9c:ff:0e:f9:8b:a5:b3:2f:5a:aa:15:5d:30:67:66:9e: 34:22:17:cc:d4:82:d1:93:c8:89:01:fd:65:20:07:15:59:96: 1e:b0:92:20:76:2d:00:29:e2:89:8f:c5:98:59:e9:4b:bd:d3: 7e:c4:fa:64:08:18:83:51:2a:1e:2c:d0:70:6b:f7:14:ee:50: e0:73:39:03:16:52:43:36:5b:ed:09:0e:81:b8:0a:48:6e:c9: 18:ad:70:66:53:21:1d:a6:c3:c8:d0:d3:db:0b:85:8c:e7:dd: c5:7d:51:c4:42:3d:75:20:ca:36:14:94:36:e2:8d:9f:27:c9: 3f:74:ee:dc:9a:bb:82:86:5f:98:a1:5b:aa:75:c7:09:8a:8e: 6c:f3:22:d6:1a:93:1a:2e:61:32:f4:75:ad:04:7c:00:30:69: b6:49:d4:20:4e:3d:fb:83:64:34:86:80:18:f9:5f:54:84:60: cb:d3:8f:15:36:6a:3d:f5:c5:b1:55:f6:8f:1f:47:5d:af:46: 2a:ce:e9:91:ee:22:90:ed:2f:53:44:46:26:f7:e7:2f:80:b4: b1:43:97:3e:c4:03:04:24:71:ed:c0:3a:88:70:47:16:9f:01: 4c:8a:ab:8c:fd:93:ed:b2:21:3e:99:30:8e:93:d3:17:0d:bf: 78:85:28:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjQxMTIyMjAxNDI2WhcNMjQxMTI5MjAxNDI2WjAYMRYwFAYD VQQDEw02NzQwZTYyMy0wYzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPNQOb+HexwjdcOaxBADy1lfBNYmBJb3JgEjIMLcsv0c8KsHHXM6WDbt/LXW 6byyolYFJg3lz5x08Fw+Cbn0h9IXs5nQI7rbY4zGg3U8ZnhA6DUHl+XB/RgkX7jV z5hVtdsV772TsNl6z21zaD3ZEAT+t5kK/ke46PdSwTYzaV77OQHVrHrBLggp9MSz TlJDPL2a8KHu2WHlzLs+8F5+tbtcUvUzlIGKsMA2CZVlFlMIxBm3SDDHgRiDaA/V POZ7pW4WEjGl/OXm6zl71JZnSzG3OzMTmnMbrIW38i4sXftb6Faok9w3ODk4RLor aM2PFU1Ep0zHWy4nmGoHb6fMfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsJR3kX MG1m1+RvC5QpCiH0OoyxMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4eZz/DvmLpbMvWqoVXTBnZp40IhfM1ILRk8iJAf1lIAcVWZYesJIg di0AKeKJj8WYWelLvdN+xPpkCBiDUSoeLNBwa/cU7lDgczkDFlJDNlvtCQ6BuApI bskYrXBmUyEdpsPI0NPbC4WM593FfVHEQj11IMo2FJQ24o2fJ8k/dO7cmruChl+Y oVuqdccJio5s8yLWGpMaLmEy9HWtBHwAMGm2SdQgTj37g2Q0hoAY+V9UhGDL048V Nmo99cWxVfaPH0ddr0YqzumR7iKQ7S9TREYm9+cvgLSxQ5c+xAMEJHHtwDqIcEcW nwFMiquM/ZPtsiE+mTCOk9MXDb94hSjU -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org