$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft File: 0rwrzA84njpcUzzEc6fENrsbdNk.mft (raw, json) Hash identifier: qsEkgZMqH8IqazXCnmcRypm5/k/fW5N14ulTToM2jOg= Subject key identifier: 4E:88:0A:82:51:11:C2:AD:6D:9D:DB:9D:04:1C:B9:87:4D:AC:AC:99 Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Certificate serial: 2D08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft Manifest number: 2CE4 Signing time: Fri 22 Nov 2024 15:32:54 +0000 Manifest this update: Fri 22 Nov 2024 15:32:53 +0000 Manifest next update: Fri 29 Nov 2024 15:32:53 +0000 Files and hashes: 1: 0rwrzA84njpcUzzEc6fENrsbdNk.crl (hash: GJMTSCqeD4NraU6H+702SEbklLNqNtM+itwA9M9jqWk=) 2: E2AD90E813E811E9B287C144C4F9AE02.roa (hash: bLM4hecBjp4+kZrFBYpUYh3+T8MNWN7sNl7r7CCqW6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11528 (0x2d08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Validity Not Before: Nov 22 15:32:53 2024 GMT Not After : Nov 29 15:32:53 2024 GMT Subject: CN=6740a425-692e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:21:80:93:9e:e6:fd:96:f3:30:28:9b:e0:33: 30:45:b7:cd:23:50:be:f7:61:1c:60:5e:66:41:22: a7:76:a3:a3:4d:c4:70:da:13:c6:f5:67:f3:08:25: 40:ec:03:b9:ff:6b:f0:71:d6:37:b2:20:90:91:55: 39:5e:1a:c7:91:fb:d5:e5:8c:70:4f:e6:e2:a7:51: 9e:ea:8d:cc:1d:86:22:9a:37:ab:95:49:ee:9a:05: ff:02:df:51:e3:32:32:d1:2b:3f:82:a9:3d:a1:04: 6b:0a:74:c9:dd:ee:66:1f:a4:86:32:bb:87:d4:7e: 69:09:32:1e:6e:69:1a:6f:aa:b6:ff:ef:4a:ba:58: 48:07:c7:89:eb:07:83:e3:cd:6a:33:06:0a:d8:f8: fb:29:ed:a4:c5:19:69:58:1c:dc:76:d6:6e:b2:39: a1:e6:be:ad:60:e8:25:be:5a:6e:e8:f7:87:52:4f: c9:a4:a6:ef:51:4b:52:e2:8e:ae:6d:af:33:8e:22: 85:fe:cd:63:88:b1:de:83:0b:4e:72:3c:b3:ac:96: de:7e:74:81:02:a6:3b:37:6c:7b:ea:e1:bc:78:9e: 5a:16:d0:b5:d4:ea:85:8c:99:ca:31:23:1a:4f:1d: 25:69:67:c0:e5:63:fd:c6:5b:ff:44:69:b1:31:15: 81:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:88:0A:82:51:11:C2:AD:6D:9D:DB:9D:04:1C:B9:87:4D:AC:AC:99 X509v3 Authority Key Identifier: keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:07:5c:33:c9:b1:9d:41:98:64:c2:f5:be:20:c4:30:db:b2: 72:ad:3a:9f:d1:94:e5:3d:c3:a0:eb:a3:f7:b0:fd:7b:78:35: 36:c1:da:d2:1e:00:70:82:29:85:1c:61:cc:fd:18:6a:be:2c: 6d:68:7b:e2:74:6f:54:c9:37:eb:f4:08:c1:7d:a8:be:45:a8: 73:1a:94:50:59:72:33:66:44:98:bc:d9:85:64:ac:03:52:c3: 65:2c:b0:3e:13:b8:18:91:1c:bc:b0:f4:23:02:14:2b:80:04: 60:48:45:75:09:e3:b0:b0:eb:bc:cb:92:4d:47:73:b0:6f:bf: 65:7d:a6:dd:5b:ae:3e:66:a3:cf:50:cd:b6:75:fe:cf:75:81: 0f:a9:24:42:cc:7d:6a:d6:f2:0b:cc:67:97:8d:e8:e6:ac:25: bd:f7:7a:79:14:f5:5d:98:73:1c:48:dd:7c:d9:c8:f0:dc:62: c9:74:f4:e7:d2:1e:f8:11:64:b3:91:9b:07:93:21:f9:91:32: 21:1c:72:c5:67:04:97:ea:84:0b:82:df:8a:a3:8e:cd:08:f7: b7:28:d0:54:3f:d1:8b:5a:83:75:f6:75:a8:8d:b5:d6:a9:d2: d7:41:19:5b:55:80:c4:76:0c:00:48:a8:71:e1:e3:f1:40:a9: 9b:b1:de:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2 QkIxQjc0RDkwHhcNMjQxMTIyMTUzMjUzWhcNMjQxMTI5MTUzMjUzWjAYMRYwFAYD VQQDEw02NzQwYTQyNS02OTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSGAk57m/ZbzMCib4DMwRbfNI1C+92EcYF5mQSKndqOjTcRw2hPG9WfzCCVA 7AO5/2vwcdY3siCQkVU5XhrHkfvV5YxwT+bip1Ge6o3MHYYimjerlUnumgX/At9R 4zIy0Ss/gqk9oQRrCnTJ3e5mH6SGMruH1H5pCTIebmkab6q2/+9KulhIB8eJ6weD 481qMwYK2Pj7Ke2kxRlpWBzcdtZusjmh5r6tYOglvlpu6PeHUk/JpKbvUUtS4o6u ba8zjiKF/s1jiLHegwtOcjyzrJbefnSBAqY7N2x76uG8eJ5aFtC11OqFjJnKMSMa Tx0laWfA5WP9xlv/RGmxMRWBzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6ICoJR EcKtbZ3bnQQcuYdNrKyZMB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjFDNy81NDIyMkZEMDhGQUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5q cGNVenpFYzZmRU5yc2JkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqB1wzybGdQZhkwvW+IMQw27JyrTqf0ZTlPcOg66P3sP17eDU2wdrS HgBwgimFHGHM/RhqvixtaHvidG9UyTfr9AjBfai+RahzGpRQWXIzZkSYvNmFZKwD UsNlLLA+E7gYkRy8sPQjAhQrgARgSEV1CeOwsOu8y5JNR3Owb79lfabdW64+ZqPP UM22df7PdYEPqSRCzH1q1vILzGeXjejmrCW993p5FPVdmHMcSN182cjw3GLJdPTn 0h74EWSzkZsHkyH5kTIhHHLFZwSX6oQLgt+Ko47NCPe3KNBUP9GLWoN19nWojbXW qdLXQRlbVYDEdgwASKhx4ePxQKmbsd4Z -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org