$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft File: kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft (raw, json) Hash identifier: 0K4PLl/M6itrhU0lyGAvN6vv/QQo8DKZhLGqVRIbYtw= Subject key identifier: 6F:2D:09:29:DD:51:A9:5D:40:94:DA:A0:9D:29:D0:57:36:81:3B:BF Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5 Certificate issuer: /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5 Certificate serial: 1821 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft Manifest number: 17EF Signing time: Wed 20 Nov 2024 16:30:17 +0000 Manifest this update: Wed 20 Nov 2024 16:30:16 +0000 Manifest next update: Wed 27 Nov 2024 16:30:16 +0000 Files and hashes: 1: kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl (hash: SRshVtivV6dxVloATYP+Uk1J0M3GQvViMeEENVug6oQ=) 2: 4EE90B48FFC211EC84726555C4F9AE02.roa (hash: 0Hk/JTzfSmJcP+g4AF1rCd/nSi8tK+tRLevIlcCpxuc=) 3: 8EF27886A20C11EDB188BD36C4F9AE02.roa (hash: RTd1gy6ZyYYTKEcSbAQaQ+DXLhKHMG+bXISIBRDublA=) 4: C6EB748CDE7911EDB5D88539C4F9AE02.roa (hash: fqb531+0yEI8UHFqrZYc/bXnwHc5QFyzq+zP+SK3xx8=) 5: 7B9B345895F711EBB7B18033C4F9AE02.roa (hash: CNF2bQbvx54fbqlbE6d9eIkZgGR9D+Dhe0VNtxI5HFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6177 (0x1821) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5 Validity Not Before: Nov 20 16:30:16 2024 GMT Not After : Nov 27 16:30:16 2024 GMT Subject: CN=673e0e99-cb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e0:7f:53:ca:a7:7d:5d:10:88:94:8e:d9:72: d1:cc:af:6c:06:a4:c6:64:1a:ac:2e:a9:b8:8f:80: 2e:d4:53:15:a6:ee:77:c1:1c:b2:78:56:66:eb:f4: 74:89:4d:fa:a1:49:6b:63:e8:de:91:2a:62:33:9e: 22:54:f2:cd:30:0a:b3:63:9a:42:fc:80:1e:e0:5b: bb:39:fb:9e:1d:23:7d:f0:40:1d:91:e3:ae:69:9c: c3:95:3d:cf:2f:ce:3e:79:43:77:a5:01:70:43:ec: d1:71:94:ff:b2:ec:29:b8:d4:be:a9:7b:e1:7e:51: 7f:cd:e3:3b:e6:51:6b:1b:db:b7:99:b5:97:b1:6e: 33:e7:60:e6:68:93:07:69:4c:18:9a:5b:98:06:71: 0b:34:57:25:c0:06:cb:72:6c:83:fe:2d:ed:14:b7: 47:61:69:0b:1a:c4:10:d0:2a:25:30:fa:ea:86:08: 97:af:c2:78:80:68:0d:70:a1:f7:cd:cd:38:ff:2c: 63:06:12:76:02:f7:f4:37:ec:64:5d:b5:24:a4:da: 96:4b:2c:d9:db:ea:f0:24:33:55:fa:e3:e9:0d:50: 9b:c7:b9:d2:24:03:57:3d:dc:97:72:54:26:e0:c3: 4c:26:05:16:ab:ef:66:5b:03:a2:ac:76:99:b9:8d: 8f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2D:09:29:DD:51:A9:5D:40:94:DA:A0:9D:29:D0:57:36:81:3B:BF X509v3 Authority Key Identifier: keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:64:0f:e3:6a:20:5e:04:57:e6:ac:6f:1e:d8:bd:3f:21:40: 8d:d5:fe:fa:b2:06:13:bf:24:19:c1:8a:4b:d1:f2:07:49:08: d3:1e:44:25:f1:9d:b1:ec:09:9f:22:f7:25:04:3c:e3:9f:dd: f8:83:cc:93:77:ff:a4:6a:19:8e:fb:93:76:c0:cc:81:d6:e6: 97:51:99:c2:d5:ab:32:86:c0:62:d7:7a:e7:dc:3b:90:99:cc: 18:20:bb:cf:8d:d2:18:4e:22:ab:34:ee:53:d7:f9:98:50:e4: 34:8d:e2:b5:03:d0:d1:cc:cb:53:f1:5d:ef:c0:f5:66:13:45: 4e:43:98:15:49:67:5c:6f:76:01:50:d8:5e:47:3b:23:20:c1: 1c:97:1d:5b:10:04:90:bc:d6:07:48:c3:de:bf:0e:87:4c:6e: 15:87:bc:dd:1e:20:68:79:0c:31:7e:d5:e9:0c:a2:c9:1a:f4: c7:b9:a8:e8:5f:53:77:a9:f6:3f:28:55:3d:a8:dd:01:f0:4a: a1:41:a0:82:fe:3f:6e:70:fc:3b:83:e0:3f:4c:00:1a:70:b7: 24:4c:5b:b4:0e:ba:93:55:7f:05:5b:24:13:9b:61:16:bc:0d: b6:f1:2b:9a:95:41:18:c2:da:50:c3:d5:ec:b5:5e:7f:4f:d4: f9:90:5a:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNjkxMTAvBgNVBAUTKDkwMEI4NzBDODBDMEVCM0Y4NDY4RjUzRTc2NzJGQTc0 MTc1MkM1RDUwHhcNMjQxMTIwMTYzMDE2WhcNMjQxMTI3MTYzMDE2WjAYMRYwFAYD VQQDEw02NzNlMGU5OS1jYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmeB/U8qnfV0QiJSO2XLRzK9sBqTGZBqsLqm4j4Au1FMVpu53wRyyeFZm6/R0 iU36oUlrY+jekSpiM54iVPLNMAqzY5pC/IAe4Fu7OfueHSN98EAdkeOuaZzDlT3P L84+eUN3pQFwQ+zRcZT/suwpuNS+qXvhflF/zeM75lFrG9u3mbWXsW4z52DmaJMH aUwYmluYBnELNFclwAbLcmyD/i3tFLdHYWkLGsQQ0ColMPrqhgiXr8J4gGgNcKH3 zc04/yxjBhJ2Avf0N+xkXbUkpNqWSyzZ2+rwJDNV+uPpDVCbx7nSJANXPdyXclQm 4MNMJgUWq+9mWwOirHaZuY2PWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8tCSnd UaldQJTaoJ0p0Fc2gTu/MB8GA1UdIwQYMBaAFJALhwyAwOs/hGj1PnZy+nQXUsXV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE2OS81MDI2MDhCNEFE OTAxMUU3OTI2N0ZGMEZDNEY5QUUwMi9rQXVIRElEQTZ6LUVhUFUtZG5MNmRCZFN4 ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBdUhESURBNnotRWFQVS1kbkw2ZEJkU3hkVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE2OS81MDI2MDhCNEFEOTAxMUU3OTI2N0ZGMEZDNEY5QUUwMi9rQXVIRElEQTZ6 LUVhUFUtZG5MNmRCZFN4ZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAZA/jaiBeBFfmrG8e2L0/IUCN1f76sgYTvyQZwYpL0fIHSQjTHkQl 8Z2x7AmfIvclBDzjn934g8yTd/+kahmO+5N2wMyB1uaXUZnC1asyhsBi13rn3DuQ mcwYILvPjdIYTiKrNO5T1/mYUOQ0jeK1A9DRzMtT8V3vwPVmE0VOQ5gVSWdcb3YB UNheRzsjIMEclx1bEASQvNYHSMPevw6HTG4Vh7zdHiBoeQwxftXpDKLJGvTHuajo X1N3qfY/KFU9qN0B8EqhQaCC/j9ucPw7g+A/TAAacLckTFu0DrqTVX8FWyQTm2EW vA228SualUEYwtpQw9XstV5/T9T5kFqD -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:05 2024 by rpki-client on console-fra.rpki-client.org