$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: /qwrCJFi3FONaOQZrqUit/1GiQdGJJ438oN3rfODn/s= Subject key identifier: 5F:9F:BC:DC:FB:40:EA:C7:AE:1E:3B:90:ED:68:5B:D6:84:C5:0C:CE Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 0346 Signing time: Thu 21 Nov 2024 00:36:44 +0000 Manifest this update: Thu 21 Nov 2024 00:36:43 +0000 Manifest next update: Thu 28 Nov 2024 00:36:43 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: ri3gpxVx8box7MIMrT2T0YvNOAth1LYompUIxLX8x+4=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: krhsFK4PFWTrjNJ4p9/c55q/gQAKBPQnFLQMSNIsQfk=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: jcldHkQ5FFmg/MXlqtsVZ+VaudO8txN/6DH5hAk06uA=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: FkQAfdMiMVRkFmDG7OCPPtDI1TM4+1FS9ZFrS9JgM34=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 4ZluWaRFJyFeOP9xnmq3elh/rOt90VuN3X6ZFi8v76c=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: 2xYkc0CBHJO1BA1IWYUatPbE+AVeAURXevuFcb34wYs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: J+kNwKbZA9+MvDuLAMY45SZRzBH7dIz40cdBHlCeLTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Nov 21 00:36:43 2024 GMT Not After : Nov 28 00:36:43 2024 GMT Subject: CN=673e809b-1f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3c:b9:e0:69:7f:58:b4:fa:cc:20:c3:23:62: d5:ec:81:16:73:d3:75:eb:be:19:e4:0a:4e:9b:10: 10:b4:f0:da:9c:47:fd:0c:6a:59:4d:8d:5a:ca:1f: b5:42:06:14:8b:86:03:64:b9:45:55:3b:98:a5:16: b9:b4:57:96:19:e0:ea:25:0e:bb:3c:41:7c:d9:94: 9d:62:a1:27:3f:b3:37:64:f4:94:d1:35:16:a8:af: 15:b1:af:cb:8c:f9:bd:b1:23:48:b0:27:c3:ab:86: 66:80:36:f2:08:7d:87:e1:3d:5a:3c:9c:48:67:b7: ef:9b:cf:ae:76:d7:8f:21:be:ac:7a:41:ae:31:0d: a0:dd:29:23:ec:89:b4:3b:2e:a2:c0:cc:30:5d:0f: 09:9d:70:be:3b:2a:2d:28:1b:e4:6d:59:ca:4c:66: 8e:5f:b6:2b:6b:fb:aa:9d:e7:30:08:ac:78:e7:62: 6e:31:95:e5:12:2f:28:1c:65:54:53:eb:05:29:32: c6:95:7a:f6:5a:6c:a8:dd:9a:b7:3a:90:fe:18:53: 9a:d9:ed:9e:df:f6:70:96:b3:ea:0c:93:57:cb:7e: 1b:69:7c:68:6f:8a:91:7b:49:5a:bf:f6:40:b1:91: bb:65:7f:65:54:c1:25:9f:c8:e6:22:68:61:ff:03: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9F:BC:DC:FB:40:EA:C7:AE:1E:3B:90:ED:68:5B:D6:84:C5:0C:CE X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:9a:7b:77:37:55:5e:12:4e:c7:23:77:fd:56:bd:95:e3:18: 5f:01:89:12:76:ac:ee:de:ae:86:d4:fd:c3:eb:b9:0b:42:b8: 28:8e:50:fd:dc:1c:83:53:7a:30:7a:89:1b:c6:b8:7b:19:21: ea:b3:ab:c3:22:f2:f6:2f:6c:2a:65:f7:92:f9:76:e7:f5:6d: 86:8d:70:f2:d2:2e:a1:ed:14:f9:47:e8:e0:59:50:09:93:53: 7c:de:cf:fe:87:95:84:92:11:12:4d:c8:80:ea:af:80:d5:b0: cd:e3:3e:8f:e3:f9:92:12:4c:b8:da:64:47:23:4a:4c:d2:a0: b9:cc:27:31:b4:92:8b:36:c3:44:dc:2c:43:8d:21:9b:75:e9: 8e:e3:95:19:2c:79:50:07:5e:0d:f7:11:08:d7:e2:0d:61:95: eb:b4:a9:70:66:d7:a5:07:08:c4:f0:ea:2a:50:c5:f2:35:28: 35:a4:6b:ae:71:cb:fd:a1:13:93:5b:a5:67:0d:a1:52:f3:20: 32:ef:49:b5:24:87:5b:3e:ff:bf:af:6c:e7:71:13:a0:a3:80: fe:70:a6:b6:81:27:a9:9e:ef:8c:a8:53:aa:b7:66:63:32:51: 6b:b0:82:86:8b:e2:35:5f:7a:07:8b:f7:55:db:8f:dd:93:c6: b2:bb:5c:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjQxMTIxMDAzNjQzWhcNMjQxMTI4MDAzNjQzWjAYMRYwFAYD VQQDEw02NzNlODA5Yi0xZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zy54Gl/WLT6zCDDI2LV7IEWc9N1674Z5ApOmxAQtPDanEf9DGpZTY1ayh+1 QgYUi4YDZLlFVTuYpRa5tFeWGeDqJQ67PEF82ZSdYqEnP7M3ZPSU0TUWqK8Vsa/L jPm9sSNIsCfDq4ZmgDbyCH2H4T1aPJxIZ7fvm8+udtePIb6sekGuMQ2g3Skj7Im0 Oy6iwMwwXQ8JnXC+OyotKBvkbVnKTGaOX7Yra/uqnecwCKx452JuMZXlEi8oHGVU U+sFKTLGlXr2Wmyo3Zq3OpD+GFOa2e2e3/ZwlrPqDJNXy34baXxob4qRe0lav/ZA sZG7ZX9lVMEln8jmImhh/wOVfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+fvNz7 QOrHrh47kO1oW9aExQzOMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChmnt3N1VeEk7HI3f9Vr2V4xhfAYkSdqzu3q6G1P3D67kLQrgojlD9 3ByDU3oweokbxrh7GSHqs6vDIvL2L2wqZfeS+Xbn9W2GjXDy0i6h7RT5R+jgWVAJ k1N83s/+h5WEkhESTciA6q+A1bDN4z6P4/mSEky42mRHI0pM0qC5zCcxtJKLNsNE 3CxDjSGbdemO45UZLHlQB14N9xEI1+INYZXrtKlwZtelBwjE8OoqUMXyNSg1pGuu ccv9oROTW6VnDaFS8yAy70m1JIdbPv+/r2zncROgo4D+cKa2gSepnu+MqFOqt2Zj MlFrsIKGi+I1X3oHi/dV24/dk8ayu1xE -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:57 2024 by rpki-client on console-fra.rpki-client.org