$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft File: 4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json) Hash identifier: BKX5Gj+SAHcNR7PURAopMygQI0q6Ejl8ZQlX1G5H40Q= Subject key identifier: C6:E7:1C:E3:9B:4F:9C:2C:93:7A:FD:8A:79:EC:4F:0D:FD:58:BA:97 Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 Certificate issuer: /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft Manifest number: 016A Signing time: Thu 21 Nov 2024 02:18:32 +0000 Manifest this update: Thu 21 Nov 2024 02:18:32 +0000 Manifest next update: Thu 28 Nov 2024 02:18:32 +0000 Files and hashes: 1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: YWVE5ECErCTvpmGj3XBxcfELBNlyPEbkNbxKeHuV98U=) 2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: zRdos/o+mb+OSdMpMggoSh17MEeYkJt0eDW/UfdGZq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3 Validity Not Before: Nov 21 02:18:32 2024 GMT Not After : Nov 28 02:18:32 2024 GMT Subject: CN=673e9878-dff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ee:9a:c7:08:72:61:0b:ed:0c:8c:0d:f4:7a: 26:d1:0f:1a:45:a5:f5:a4:be:b4:a0:fc:f3:6d:e6: 35:d7:81:f0:f9:22:fa:d5:65:7c:70:17:d6:af:99: 0a:10:3c:4d:5c:81:33:a3:d0:98:9b:f5:0f:83:9f: ca:28:70:ee:44:e2:6a:69:4a:07:93:63:7c:7a:91: 2e:3f:3c:c2:92:43:87:e8:0d:79:63:2f:ad:a2:a1: 12:97:6b:71:43:7f:93:11:b1:01:5a:b7:98:7f:aa: e1:fd:c9:96:37:7c:0a:f3:92:08:9b:18:97:2a:14: 1f:ed:1b:21:a2:7d:5d:39:8a:b7:cb:6b:30:c6:52: 12:86:e4:d3:56:61:ef:23:87:a2:41:2f:3f:bb:8b: be:c6:5c:04:f3:99:76:e4:ee:b7:7b:3d:f2:27:26: 9d:4b:3e:7b:ce:cb:38:38:d1:27:3d:b0:48:64:b4: 23:50:c8:4a:3b:26:9c:54:b1:68:2e:1f:dd:71:04: 23:e7:35:5c:27:a2:57:c5:a6:d8:89:71:30:41:c3: 10:38:3a:4e:7a:7d:7d:d5:32:f2:0f:25:c4:5d:dd: 60:8b:ee:1a:0c:5f:13:9f:df:4c:29:1d:ef:7c:78: ee:52:b5:eb:da:6d:50:c9:7a:8c:05:03:85:7e:be: 6a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E7:1C:E3:9B:4F:9C:2C:93:7A:FD:8A:79:EC:4F:0D:FD:58:BA:97 X509v3 Authority Key Identifier: keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:88:62:51:58:fe:1c:47:b6:fb:55:d7:71:d4:f7:8f:9d:84: b7:0a:90:1b:b0:ac:ce:2b:77:b8:1f:86:ee:40:89:71:99:dd: 8a:10:65:00:b2:49:fa:58:05:d8:63:b4:3a:d1:2b:a4:be:a9: 03:56:f5:3d:1f:0e:07:7f:4c:5b:65:94:76:64:f1:9b:c4:ff: ef:30:3b:58:11:a0:de:8c:ae:b3:ee:98:96:76:4c:01:bb:cf: a7:24:d0:b8:4d:db:ff:8f:bb:a3:5e:44:17:1d:3d:14:0d:03: ac:81:cf:85:4c:76:90:f1:a5:e0:aa:30:db:c5:e1:11:b8:a5: 9e:74:49:5c:58:42:76:44:5a:d0:ec:a1:fc:ed:15:b9:c5:2b: 86:20:50:5d:63:f0:40:9c:15:56:8c:59:54:06:a2:1c:7e:41: a0:e7:55:30:d1:6a:ec:49:81:c0:c5:a1:a3:63:2c:bb:f3:5f: e8:3f:eb:a2:bf:d2:e2:82:b3:f2:2c:11:cf:52:7d:65:31:95: 21:b8:b5:44:03:0d:6b:0f:9a:cd:3a:e8:52:54:e3:1d:a2:09: 11:61:89:ca:af:d9:7d:ac:39:ba:ba:23:1e:b9:ec:62:8a:b2: 7a:f5:98:4a:67:62:52:29:52:41:bf:e3:70:44:c5:4c:7e:f6: f7:e4:cc:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdGNkExMTAvBgNVBAUTKEUzM0RCNzkzQkJFRkU0NkNCQ0Y3NURCMzRFNzA5NDI3 QTcyRUYwRjMwHhcNMjQxMTIxMDIxODMyWhcNMjQxMTI4MDIxODMyWjAYMRYwFAYD VQQDEw02NzNlOTg3OC1kZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+6axwhyYQvtDIwN9Hom0Q8aRaX1pL60oPzzbeY114Hw+SL61WV8cBfWr5kK EDxNXIEzo9CYm/UPg5/KKHDuROJqaUoHk2N8epEuPzzCkkOH6A15Yy+toqESl2tx Q3+TEbEBWreYf6rh/cmWN3wK85IImxiXKhQf7Rshon1dOYq3y2swxlIShuTTVmHv I4eiQS8/u4u+xlwE85l25O63ez3yJyadSz57zss4ONEnPbBIZLQjUMhKOyacVLFo Lh/dcQQj5zVcJ6JXxabYiXEwQcMQODpOen191TLyDyXEXd1gi+4aDF8Tn99MKR3v fHjuUrXr2m1QyXqMBQOFfr5qHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbnHOOb T5wsk3r9innsTw39WLqXMB8GA1UdIwQYMBaAFOM9t5O77+RsvPdds05wlCenLvDz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0Y2QS8wNjc5MjUwMDdG NDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVHeTg5MTJ6VG5DVUo2Y3U4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzR6MjNrN3Z2NUd5ODkxMnpUbkNVSjZjdThQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0Y2QS8wNjc5MjUwMDdGNDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVH eTg5MTJ6VG5DVUo2Y3U4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7iGJRWP4cR7b7Vddx1PePnYS3CpAbsKzOK3e4H4buQIlxmd2KEGUA skn6WAXYY7Q60SukvqkDVvU9Hw4Hf0xbZZR2ZPGbxP/vMDtYEaDejK6z7piWdkwB u8+nJNC4Tdv/j7ujXkQXHT0UDQOsgc+FTHaQ8aXgqjDbxeERuKWedElcWEJ2RFrQ 7KH87RW5xSuGIFBdY/BAnBVWjFlUBqIcfkGg51Uw0WrsSYHAxaGjYyy781/oP+ui v9LigrPyLBHPUn1lMZUhuLVEAw1rD5rNOuhSVOMdogkRYYnKr9l9rDm6uiMeuexi irJ69ZhKZ2JSKVJBv+NwRMVMfvb35MyV -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:04 2024 by rpki-client on console-fra.rpki-client.org