$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: SGb4203P0rUOxZyv+/jBsPE5A6KHpojJIxIkVg70YF0= Subject key identifier: E5:4D:64:BC:91:90:EA:01:FC:52:F2:BA:D4:EC:3E:79:06:5F:61:9A Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 13F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 13D7 Signing time: Wed 20 Nov 2024 16:55:36 +0000 Manifest this update: Wed 20 Nov 2024 16:55:36 +0000 Manifest next update: Wed 27 Nov 2024 16:55:36 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: LOHr5QxDeQX0qjXrVW47Sewrd/xXYAtKBQOeFVzRdD4=) 2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: TyzdfixbvhgTgVbeTj4apy/zB+wf6IDh1/Lzfu3rZJM=) 3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: 0LjZpONzgJ6xRmwAyv6QVE86pcOrLtlD9gU4D1tfLto=) 4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: z0fyXCO60lkejMfyEE4mQL9l0P7nQ3XY65wfTKmQOmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5107 (0x13f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: Nov 20 16:55:36 2024 GMT Not After : Nov 27 16:55:36 2024 GMT Subject: CN=673e1488-8661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cb:06:bf:b7:40:c8:e2:53:c4:d7:c8:db:14: 42:5b:fb:ca:e7:5d:69:51:f0:85:3d:51:64:e9:04: c7:40:78:36:2d:be:63:40:d4:6b:9d:49:5d:8a:b7: 51:30:77:cc:be:e3:53:0f:8c:17:73:78:7e:2d:ba: 63:39:84:ec:7a:fb:5c:b8:21:24:65:7b:0a:c5:f5: 57:7d:03:61:a1:4e:6f:48:7d:0d:ee:0b:60:16:ef: 02:ca:ed:0e:fc:9c:bb:d7:5e:81:f8:4f:b1:fc:13: c8:35:17:31:48:21:a8:8c:c5:fe:a3:67:9e:e3:15: ca:ea:80:7a:5c:c5:e6:9c:a6:d9:e3:2b:b4:71:5e: be:99:96:74:77:c6:c4:76:9b:99:8c:09:df:aa:60: f3:87:e9:64:d6:80:49:e4:41:5e:92:2a:30:ae:b2: 96:7c:28:89:95:f0:fd:64:cc:77:d3:ba:bd:21:d6: 4d:20:5e:d6:b0:8e:69:53:93:a6:77:7b:51:d0:c1: ea:f0:02:ec:8b:1a:99:95:24:06:88:94:58:ff:c5: 85:62:fd:8b:94:ba:9d:e0:3d:bc:74:22:b1:10:d2: e1:52:ef:80:57:97:e6:f5:9a:94:65:0d:c7:52:0d: d8:bd:77:a6:17:3d:c6:36:17:92:38:09:5d:34:ed: d9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4D:64:BC:91:90:EA:01:FC:52:F2:BA:D4:EC:3E:79:06:5F:61:9A X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:cd:9f:41:24:b9:07:98:63:a2:76:ab:05:59:68:62:3f:3b: 82:28:42:8b:cb:b3:97:40:20:df:e8:56:42:09:fa:41:b9:7e: b4:eb:d2:96:3b:5c:af:0f:be:e3:10:8b:c1:44:81:4c:39:e3: c0:a8:0a:7d:4b:c9:c9:db:f3:09:e2:ba:6c:49:74:62:0c:b3: 25:7b:85:0c:92:7a:78:2a:96:02:ff:f4:59:a0:b1:50:34:79: 71:9e:b9:0d:b4:24:a0:a1:2f:88:d3:8b:8c:11:76:12:62:81: 04:b3:19:0a:27:89:c8:f9:41:f0:45:47:e1:47:ca:87:ba:38: b9:a9:4f:03:28:78:5c:f1:4b:89:30:0c:e0:c4:3a:75:b4:32: e4:18:35:f5:ac:62:c1:e1:bd:3d:c7:5f:31:a5:aa:e8:fe:31: dd:44:41:b7:3e:a9:a8:68:fb:c9:c5:ae:8a:7c:c6:54:6d:fd: 36:3f:94:5b:c5:e2:bd:30:b8:a0:90:bb:cd:89:ba:1d:f7:c6: a4:e6:89:53:6c:2a:dc:b5:12:e5:64:c6:f6:97:0a:de:6f:55: 0f:cb:e4:36:3e:da:cd:88:64:f8:65:33:bb:0c:cd:99:38:41: c5:9f:6d:f4:78:f0:30:5e:df:40:ee:4d:ea:e0:01:a0:d7:eb: 12:3c:0a:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjQxMTIwMTY1NTM2WhcNMjQxMTI3MTY1NTM2WjAYMRYwFAYD VQQDEw02NzNlMTQ4OC04NjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7csGv7dAyOJTxNfI2xRCW/vK511pUfCFPVFk6QTHQHg2Lb5jQNRrnUldirdR MHfMvuNTD4wXc3h+LbpjOYTsevtcuCEkZXsKxfVXfQNhoU5vSH0N7gtgFu8Cyu0O /Jy7116B+E+x/BPINRcxSCGojMX+o2ee4xXK6oB6XMXmnKbZ4yu0cV6+mZZ0d8bE dpuZjAnfqmDzh+lk1oBJ5EFekiowrrKWfCiJlfD9ZMx307q9IdZNIF7WsI5pU5Om d3tR0MHq8ALsixqZlSQGiJRY/8WFYv2LlLqd4D28dCKxENLhUu+AV5fm9ZqUZQ3H Ug3YvXemFz3GNheSOAldNO3ZCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVNZLyR kOoB/FLyutTsPnkGX2GaMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHzZ9BJLkHmGOidqsFWWhiPzuCKEKLy7OXQCDf6FZCCfpBuX6069KW O1yvD77jEIvBRIFMOePAqAp9S8nJ2/MJ4rpsSXRiDLMle4UMknp4KpYC//RZoLFQ NHlxnrkNtCSgoS+I04uMEXYSYoEEsxkKJ4nI+UHwRUfhR8qHuji5qU8DKHhc8UuJ MAzgxDp1tDLkGDX1rGLB4b09x18xparo/jHdREG3PqmoaPvJxa6KfMZUbf02P5Rb xeK9MLigkLvNibod98ak5olTbCrctRLlZMb2lwreb1UPy+Q2PtrNiGT4ZTO7DM2Z OEHFn230ePAwXt9A7k3q4AGg1+sSPAo4 -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:05 2024 by rpki-client on console-fra.rpki-client.org