$ rpki-client -vvf rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft File: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft (raw, json) Hash identifier: ZevF0aZUI4dwZQ0DOzInxuHhzVDTg7p0MgsUg7CGHPU= Subject key identifier: F2:02:32:4F:82:16:32:07:46:EC:0B:7B:66:61:19:CB:FC:FC:6A:55 Authority key identifier: 83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1 Certificate issuer: /CN=A91C705E/serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1 Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft Manifest number: 0256 Signing time: Sat 23 Nov 2024 01:17:01 +0000 Manifest this update: Sat 23 Nov 2024 01:17:00 +0000 Manifest next update: Sat 30 Nov 2024 01:17:00 +0000 Files and hashes: 1: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl (hash: nxAbnd9c9hqOVRyTxDomtNKCersM5a/388tFr6U61Wk=) 2: CB5ED75AF62811EC9205771CC4F9AE02.roa (hash: NW6HBZRtebEmp/7i48MrWPcyNaPh4Ushzt7ufQ/dX6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C705E/serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1 Validity Not Before: Nov 23 01:17:00 2024 GMT Not After : Nov 30 01:17:00 2024 GMT Subject: CN=67412d0c-edd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:34:e3:97:db:bd:a8:9d:74:31:bd:b8:e6: 05:b4:52:7e:d4:5b:3b:eb:1f:8e:fa:85:38:1a:ab: 2e:67:3b:3d:0c:39:cb:86:8d:02:42:4e:26:a7:47: 8e:75:21:cc:3f:51:d3:4b:23:48:6e:a5:e3:9d:0b: e8:39:f0:97:b1:3e:3b:7a:dc:e3:a8:d1:4a:05:3e: fe:32:0e:9d:b9:20:11:34:f1:76:0e:75:8c:52:15: b8:54:b7:25:69:b2:5b:ce:b3:6c:7f:f2:14:43:38: 42:f4:27:1c:85:38:1f:a2:2b:e4:d7:6f:23:ea:1e: 51:4c:68:05:24:a6:f5:d8:d0:7b:0a:21:a0:c2:21: 3f:1d:a3:93:10:1b:e5:7f:f9:35:ec:7c:43:1c:b5: 10:5c:a6:e6:9f:6e:9f:1c:db:82:41:4e:a8:bb:1c: 47:a4:c4:ac:39:fe:30:98:51:b4:97:3a:ce:f9:0f: 01:96:05:94:16:e4:0f:16:12:70:ec:c0:0a:ca:d2: cd:6f:f1:2c:ee:ca:ec:e5:eb:4d:4d:48:78:3e:41: 28:bd:a2:58:d4:31:1b:8f:6c:96:49:23:ff:57:37: 90:ae:2b:78:f6:d5:9a:e9:8b:53:72:b4:7f:c7:d1: 2b:f0:c8:c0:2f:eb:83:20:81:84:cd:c8:7a:a9:c4: b9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:02:32:4F:82:16:32:07:46:EC:0B:7B:66:61:19:CB:FC:FC:6A:55 X509v3 Authority Key Identifier: keyid:83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:a4:a4:1f:9b:53:1e:5d:85:74:4f:c0:a8:cc:cc:10:84:4f: 1f:14:e8:7b:61:b8:70:d1:64:c8:ea:92:36:21:48:fa:cc:b2: 67:50:96:c1:fc:f6:29:c1:12:43:82:85:5e:42:cf:70:4e:41: 28:a0:78:39:81:6a:2a:7b:f8:5d:62:07:74:1f:1e:95:63:d6: 8a:5a:8d:d0:f7:2a:c8:32:73:ea:61:ad:9d:d7:8c:a1:b0:51: c8:a6:fe:3e:fa:19:5f:2d:89:de:f4:cf:77:6f:d9:b6:0a:3b: 6a:95:d1:6d:6c:41:1d:6d:95:36:81:84:30:a1:db:22:67:ce: ca:7a:4c:03:01:94:77:de:77:ab:34:45:91:bf:69:36:76:ce: a5:7d:12:ed:49:ad:b1:9b:e9:2d:b8:7f:c7:43:63:b9:c7:6b: 27:8b:34:1d:b4:2f:87:1a:a7:44:20:6c:75:52:67:cb:4c:67: d8:e7:71:8c:03:bd:32:cd:74:34:1e:77:b8:8a:9d:2c:0e:2d: bb:f3:6a:4a:57:7d:15:dd:3d:47:3c:ea:0c:1b:39:14:64:e4: bf:1f:47:cb:c0:ba:97:3d:2c:26:9e:85:80:9b:7f:ef:49:c1: 33:78:56:d8:42:48:cd:b1:1d:ed:56:eb:04:ef:95:15:00:8c: 8e:9b:01:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcwNUUxMTAvBgNVBAUTKDgzQUNCNTBGOTZGNjQ0M0Y0QjgzRDM5MUY4NTdCRTdD QjU3RTM0QzEwHhcNMjQxMTIzMDExNzAwWhcNMjQxMTMwMDExNzAwWjAYMRYwFAYD VQQDEw02NzQxMmQwYy1lZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2E045fbvaiddDG9uOYFtFJ+1Fs76x+O+oU4GqsuZzs9DDnLho0CQk4mp0eO dSHMP1HTSyNIbqXjnQvoOfCXsT47etzjqNFKBT7+Mg6duSARNPF2DnWMUhW4VLcl abJbzrNsf/IUQzhC9CcchTgfoivk128j6h5RTGgFJKb12NB7CiGgwiE/HaOTEBvl f/k17HxDHLUQXKbmn26fHNuCQU6ouxxHpMSsOf4wmFG0lzrO+Q8BlgWUFuQPFhJw 7MAKytLNb/Es7srs5etNTUh4PkEovaJY1DEbj2yWSSP/VzeQrit49tWa6YtTcrR/ x9Er8MjAL+uDIIGEzch6qcS51QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPICMk+C FjIHRuwLe2ZhGcv8/GpVMB8GA1UdIwQYMBaAFIOstQ+W9kQ/S4PTkfhXvny1fjTB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzA1RS8zNERENEVFNkY2 MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJEOUxnOU9SLUZlLWZMVi1O TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c2eTFENWIyUkQ5TGc5T1ItRmUtZkxWLU5NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzA1RS8zNERENEVFNkY2MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJE OUxnOU9SLUZlLWZMVi1OTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBopKQfm1MeXYV0T8CozMwQhE8fFOh7Ybhw0WTI6pI2IUj6zLJnUJbB /PYpwRJDgoVeQs9wTkEooHg5gWoqe/hdYgd0Hx6VY9aKWo3Q9yrIMnPqYa2d14yh sFHIpv4++hlfLYne9M93b9m2CjtqldFtbEEdbZU2gYQwodsiZ87KekwDAZR33ner NEWRv2k2ds6lfRLtSa2xm+ktuH/HQ2O5x2snizQdtC+HGqdEIGx1UmfLTGfY53GM A70yzXQ0Hne4ip0sDi2782pKV30V3T1HPOoMGzkUZOS/H0fLwLqXPSwmnoWAm3/v ScEzeFbYQkjNsR3tVusE75UVAIyOmwGE -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:45 2024 by rpki-client on console-fra.rpki-client.org