$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft File: P32buu18W_27o6NJq-lrIa0n2mc.mft (raw, json) Hash identifier: 0pKkJAq0hBBALofDiQA8DW4HsPBG5SpXAu7fmclMxTs= Subject key identifier: 58:84:12:B3:44:87:92:11:3A:37:29:E0:0E:4A:51:37:15:1E:AA:5D Authority key identifier: 3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 Certificate issuer: /CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Certificate serial: 0BE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft Manifest number: 0BDE Signing time: Fri 22 Nov 2024 18:28:29 +0000 Manifest this update: Fri 22 Nov 2024 18:28:29 +0000 Manifest next update: Fri 29 Nov 2024 18:28:29 +0000 Files and hashes: 1: P32buu18W_27o6NJq-lrIa0n2mc.crl (hash: 84dVKGeQD9QUamAOlxHraRBXORENcwd7DC9hgAct7+M=) 2: C9FF2A7E06A511EAA1FFDB3DC4F9AE02.roa (hash: JA2HpzDCryHkDWNPe1iufz5VrqW0EsAeEdiwzkNRDX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3045 (0xbe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D8E/serialNumber=3F7D9BBAED7C5BFDBBA3A349ABE96B21AD27DA67 Validity Not Before: Nov 22 18:28:29 2024 GMT Not After : Nov 29 18:28:29 2024 GMT Subject: CN=6740cd4d-dab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:e1:1c:0a:15:6b:b1:bf:7f:85:5a:64:17: 07:5c:c6:f1:b6:91:99:7b:67:85:c5:59:fe:79:ed: 1f:71:e7:eb:29:48:04:58:7e:63:88:e9:20:7b:8b: 6b:bc:f9:7c:42:26:21:51:f7:73:90:4c:45:bb:da: 88:ba:c0:4e:f1:14:1c:6f:90:9d:7b:97:53:71:43: f3:2b:ee:e9:eb:0c:84:fc:1d:e0:01:f4:06:a0:cf: fd:d4:dd:aa:9a:7c:2b:57:66:ba:a3:8e:e6:ea:b7: d0:bb:e7:08:5e:e8:b4:ac:86:3b:77:10:b5:a1:ff: 77:c6:3c:f8:9a:42:b6:fb:be:0f:6e:79:4a:d3:76: 4a:66:65:2a:77:b0:8a:13:87:c9:80:1c:f0:ef:b8: 08:82:a2:48:8d:82:33:74:21:53:6e:2c:5d:bf:fd: fc:94:e7:28:43:65:7d:96:68:41:98:3b:80:7a:45: a2:89:cb:35:91:96:c6:80:a8:b5:1c:b5:6e:12:36: 4c:a1:66:b5:4c:99:32:97:ba:fc:3d:dc:7f:1e:cc: 0a:15:d0:2f:78:7e:0b:1d:e5:2f:e5:52:ec:f2:fe: 10:97:ca:e7:f2:6b:ee:68:8a:8c:d7:b1:b2:8f:7a: 79:b6:ef:80:84:e1:95:01:64:38:da:cc:1e:1c:1c: db:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:84:12:B3:44:87:92:11:3A:37:29:E0:0E:4A:51:37:15:1E:AA:5D X509v3 Authority Key Identifier: keyid:3F:7D:9B:BA:ED:7C:5B:FD:BB:A3:A3:49:AB:E9:6B:21:AD:27:DA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P32buu18W_27o6NJq-lrIa0n2mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D8E/589B933C06A411EAB3C66B38C4F9AE02/P32buu18W_27o6NJq-lrIa0n2mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:04:ee:d1:78:97:d3:0e:47:e4:68:ec:9c:91:17:90:f0:bb: 8e:f8:de:3f:62:74:fd:3d:bf:9d:07:02:26:ff:6b:72:d5:8d: 9a:0d:dd:30:a4:3f:1b:f1:de:12:4c:70:47:75:be:5d:d7:e2: 71:e6:20:e4:c8:2b:f2:ef:1d:87:97:65:e6:a2:a6:12:c2:3c: 88:f4:47:68:fb:a0:6d:c5:1e:3f:e8:48:be:63:d8:c8:75:e5: 8c:10:1c:8c:6a:bd:65:b9:c8:70:21:32:84:16:85:79:9e:b4: ad:75:b6:0e:62:b2:1d:84:b1:0d:eb:23:45:0a:fe:41:70:94: a5:44:ca:92:ba:01:99:ec:16:12:e4:86:1a:4d:b4:ad:20:b6: b7:33:b8:ce:db:70:1b:ea:5b:64:f5:67:52:c0:58:5a:53:54: 5f:77:0e:ea:75:7d:9d:53:08:a3:14:86:44:d8:2f:23:dc:8f: ff:42:5e:46:b5:03:ad:6b:8f:d1:2f:68:7c:0a:e9:32:a5:89: 16:45:82:36:e4:06:13:79:f2:8b:95:61:32:6b:9c:1a:4a:56: e5:4f:8d:f1:a1:c0:d7:8b:c2:cf:e9:4f:70:92:b5:a9:77:fa: 7e:e9:59:74:cf:ff:bd:09:78:ea:c9:ca:07:6d:c7:24:c4:11: 72:fd:c9:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREOEUxMTAvBgNVBAUTKDNGN0Q5QkJBRUQ3QzVCRkRCQkEzQTM0OUFCRTk2QjIx QUQyN0RBNjcwHhcNMjQxMTIyMTgyODI5WhcNMjQxMTI5MTgyODI5WjAYMRYwFAYD VQQDEw02NzQwY2Q0ZC1kYWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtT3hHAoVa7G/f4VaZBcHXMbxtpGZe2eFxVn+ee0fcefrKUgEWH5jiOkge4tr vPl8QiYhUfdzkExFu9qIusBO8RQcb5Cde5dTcUPzK+7p6wyE/B3gAfQGoM/91N2q mnwrV2a6o47m6rfQu+cIXui0rIY7dxC1of93xjz4mkK2+74PbnlK03ZKZmUqd7CK E4fJgBzw77gIgqJIjYIzdCFTbixdv/38lOcoQ2V9lmhBmDuAekWiics1kZbGgKi1 HLVuEjZMoWa1TJkyl7r8Pdx/HswKFdAveH4LHeUv5VLs8v4Ql8rn8mvuaIqM17Gy j3p5tu+AhOGVAWQ42sweHBzblQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiEErNE h5IROjcp4A5KUTcVHqpdMB8GA1UdIwQYMBaAFD99m7rtfFv9u6OjSavpayGtJ9pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQ4RS81ODlCOTMzQzA2 QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdfMjdvNk5KcS1scklhMG4y bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzMmJ1dTE4V18yN282TkpxLWxySWEwbjJtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEQ4RS81ODlCOTMzQzA2QTQxMUVBQjNDNjZCMzhDNEY5QUUwMi9QMzJidXUxOFdf MjdvNk5KcS1scklhMG4ybWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvBO7ReJfTDkfkaOyckReQ8LuO+N4/YnT9Pb+dBwIm/2ty1Y2aDd0w pD8b8d4STHBHdb5d1+Jx5iDkyCvy7x2Hl2XmoqYSwjyI9Edo+6BtxR4/6Ei+Y9jI deWMEByMar1luchwITKEFoV5nrStdbYOYrIdhLEN6yNFCv5BcJSlRMqSugGZ7BYS 5IYaTbStILa3M7jO23Ab6ltk9WdSwFhaU1Rfdw7qdX2dUwijFIZE2C8j3I//Ql5G tQOta4/RL2h8CukypYkWRYI25AYTefKLlWEya5waSlblT43xocDXi8LP6U9wkrWp d/p+6Vl0z/+9CXjqycoHbcckxBFy/clZ -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org