$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: 2gPPlEJoKU85cCvAcezHT61S2jXEgSBtB/ScDSlfKbM= Subject key identifier: ED:8B:BD:3F:3B:59:02:66:DC:F7:6D:BD:95:B6:F9:C9:A9:E3:BF:CF Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 0172 Signing time: Sat 23 Nov 2024 02:13:28 +0000 Manifest this update: Sat 23 Nov 2024 02:13:27 +0000 Manifest next update: Sat 30 Nov 2024 02:13:27 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: aie7BofuZpgp4vXqhUSDIrSTKSj2tHOgBYOQGFER3w0=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: tRn5pXPKK2uEloHBe0GH9yfzRyq3HlL5LYvlAIQdS38=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: dJsLSVlZN9Pxyi6rXrFH13Jbq2ezDlbcKNiOzrGi8Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Nov 23 02:13:27 2024 GMT Not After : Nov 30 02:13:27 2024 GMT Subject: CN=67413a48-58d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:96:c4:55:98:63:ec:b3:07:c2:4e:c5:62: 2c:c8:e4:82:40:5c:11:c5:79:95:39:b2:82:58:a1: 1e:76:25:d0:69:a7:8e:85:4a:34:8b:90:44:6b:e8: 18:e8:ec:70:79:bc:92:96:30:9f:18:6f:d7:d9:de: 6e:db:fc:09:17:54:33:4e:1a:cf:0a:21:76:30:73: d0:d6:a5:e8:ac:e7:29:eb:6e:ce:e8:35:3f:ec:77: 47:e5:05:d6:ad:b7:20:1d:90:7d:5b:3f:6e:24:ea: 37:16:92:9b:d8:af:1f:f2:e8:9e:5a:72:17:c1:38: f8:39:1b:c6:15:1a:bc:b8:d6:61:03:dc:2c:bc:dd: 13:a2:b0:4f:e5:e1:b0:bd:a4:30:3f:31:95:cd:fe: 35:93:47:21:16:f8:b5:71:8d:eb:93:37:03:ec:2c: d9:ad:1a:3b:ff:3a:c1:a5:bd:69:6f:c5:aa:87:04: 5d:09:7d:67:da:3a:08:e1:96:7e:16:e8:b8:98:ba: 60:64:36:6a:a7:cd:7f:cf:4c:84:c7:70:3a:39:f9: fa:9e:44:ec:07:b6:78:ae:ed:13:fa:71:50:47:ea: ca:5a:aa:c2:92:11:dd:75:d7:e4:28:0f:78:47:a8: ec:bc:6f:d9:a4:76:19:67:b2:04:45:7b:e4:29:af: b2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8B:BD:3F:3B:59:02:66:DC:F7:6D:BD:95:B6:F9:C9:A9:E3:BF:CF X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:13:fa:38:7c:4a:f1:f4:a8:7c:5b:d7:3b:3f:54:6e:12:7b: 6b:02:77:ec:e3:09:c8:d7:be:e5:ae:a5:b2:0e:8d:dd:ce:14: 21:87:8f:0b:a6:c6:2c:05:a4:4e:fc:99:6e:5f:05:f2:0a:92: c6:a2:56:ae:b6:08:66:58:5f:f5:e8:fe:fb:cb:f6:1c:76:07: a1:02:fd:f5:e7:cc:77:b3:87:31:d4:4a:89:91:f5:cd:a6:58: 5b:6a:e7:63:1e:f8:7a:3e:0d:36:33:fa:53:ec:56:96:34:ed: a3:7d:db:4b:1a:ad:1d:65:77:61:60:b5:3f:11:84:c3:53:f6: fb:fc:b7:ab:2a:f5:63:65:75:69:c6:b3:f3:4d:c2:e2:43:26: 8d:84:a2:c3:b6:23:4a:02:bf:8a:e2:69:5b:4b:b1:49:07:7f: e5:fb:68:87:ac:54:f3:fe:7c:b6:66:5e:1c:e5:b8:d2:44:5a: a2:b9:e5:3b:6b:ef:41:96:7b:e5:80:24:c1:9f:cd:1c:a5:52: 1e:bc:81:dd:a4:45:af:02:8c:59:bd:f1:85:6e:d4:c9:d9:1b: e6:0b:ca:c0:5b:18:5b:44:de:11:09:26:b7:84:23:2c:ef:22: 5e:19:33:ed:66:90:cb:93:b4:36:e9:f9:39:6a:93:d1:66:9a: 2a:e5:ba:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjQxMTIzMDIxMzI3WhcNMjQxMTMwMDIxMzI3WjAYMRYwFAYD VQQDEw02NzQxM2E0OC01OGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsSWxFWYY+yzB8JOxWIsyOSCQFwRxXmVObKCWKEediXQaaeOhUo0i5BEa+gY 6OxwebySljCfGG/X2d5u2/wJF1QzThrPCiF2MHPQ1qXorOcp627O6DU/7HdH5QXW rbcgHZB9Wz9uJOo3FpKb2K8f8uieWnIXwTj4ORvGFRq8uNZhA9wsvN0TorBP5eGw vaQwPzGVzf41k0chFvi1cY3rkzcD7CzZrRo7/zrBpb1pb8WqhwRdCX1n2joI4ZZ+ Fui4mLpgZDZqp81/z0yEx3A6Ofn6nkTsB7Z4ru0T+nFQR+rKWqrCkhHdddfkKA94 R6jsvG/ZpHYZZ7IERXvkKa+yAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2LvT87 WQJm3PdtvZW2+cmp47/PMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsE/o4fErx9Kh8W9c7P1RuEntrAnfs4wnI177lrqWyDo3dzhQhh48L psYsBaRO/JluXwXyCpLGolautghmWF/16P77y/YcdgehAv3158x3s4cx1EqJkfXN plhbaudjHvh6Pg02M/pT7FaWNO2jfdtLGq0dZXdhYLU/EYTDU/b7/LerKvVjZXVp xrPzTcLiQyaNhKLDtiNKAr+K4mlbS7FJB3/l+2iHrFTz/ny2Zl4c5bjSRFqiueU7 a+9BlnvlgCTBn80cpVIevIHdpEWvAoxZvfGFbtTJ2RvmC8rAWxhbRN4RCSa3hCMs 7yJeGTPtZpDLk7Q26fk5apPRZpoq5bol -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org