$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json) Hash identifier: E3PHPhgJ4kCzKjT8B2mHVc7hk94DjvzHYabnYK8Fj5U= Subject key identifier: 40:4C:0D:2D:40:EE:E7:03:3B:06:4B:87:12:F7:CA:BE:09:FC:39:A6 Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Certificate serial: 044E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft Manifest number: 044A Signing time: Wed 20 Nov 2024 23:46:22 +0000 Manifest this update: Wed 20 Nov 2024 23:46:22 +0000 Manifest next update: Wed 27 Nov 2024 23:46:22 +0000 Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: XkS1YI3CxSeZGjy8/MA8wL+TFLvH0KW9b4i2CN+DzJU=) 2: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: GUemBUoRxTOE4NY+lhniSImDaHPscG6H/j1TRpTZiFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Validity Not Before: Nov 20 23:46:22 2024 GMT Not After : Nov 27 23:46:22 2024 GMT Subject: CN=673e74ce-7a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:95:cb:11:d5:83:f7:34:c1:24:93:6d:11:5a: 8b:5e:01:0a:bf:95:e5:10:a1:1c:52:ed:df:a3:68: 83:19:7d:0e:09:03:90:41:57:83:09:8a:6b:8c:a9: fe:96:d8:c3:58:3f:06:10:21:08:a7:b6:45:67:81: e5:5c:43:7a:a3:bf:0b:31:a1:f1:93:6d:84:03:cf: 25:8f:80:c6:96:4e:5b:2e:65:e2:d4:9a:fb:4e:28: f5:c7:a3:77:09:3d:5b:d4:0a:0a:80:37:3d:4d:da: c6:8c:95:63:5e:33:6c:f7:fe:36:1e:c2:a8:72:9e: 5b:eb:5b:21:92:58:5e:b2:0c:45:46:09:df:36:5b: f7:c4:bf:da:09:35:68:61:68:27:4e:a9:20:8c:6b: 4e:87:3f:cb:c7:a8:dc:44:0d:7f:22:bf:5e:8e:d4: d8:15:0b:f0:af:bf:25:b9:49:13:36:d0:ba:6b:3c: 51:46:ba:45:69:96:4d:43:7b:6d:82:78:cd:91:e9: 9b:bd:6c:04:99:d2:bc:35:c6:6a:01:09:ea:33:72: 36:52:76:99:6c:69:ae:d8:a1:82:82:35:a5:36:26: 4f:40:49:38:fa:7f:d8:5d:ea:2f:cd:14:d6:8e:7f: 29:46:83:0f:1e:92:d9:13:96:23:e0:47:00:64:18: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4C:0D:2D:40:EE:E7:03:3B:06:4B:87:12:F7:CA:BE:09:FC:39:A6 X509v3 Authority Key Identifier: keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:6d:37:72:5c:85:f7:63:30:a2:1a:4d:57:f6:3c:30:5b:ec: c2:95:91:d2:59:14:de:1a:68:22:4f:b1:2a:1e:94:d7:e5:91: 1e:c2:f3:23:7c:0d:d8:c6:6a:b6:49:16:18:df:8a:3b:5f:e5: dc:da:2e:f4:76:fe:29:f9:9d:d8:34:06:e9:61:00:ce:5c:eb: e4:97:31:ce:20:57:1c:42:7f:77:67:84:88:dc:9e:74:05:35: 9d:c4:7d:cf:f1:db:de:85:a3:34:38:58:07:3f:70:2d:5e:e1: c4:81:0f:7d:e1:8c:2a:08:bf:f8:e0:fa:51:c9:2c:c5:a4:5b: c2:78:2d:15:fc:63:78:48:82:e7:6b:a1:4f:9e:5f:3f:12:81: d6:df:a9:0c:aa:12:d2:4b:98:ed:b7:69:1e:13:53:93:65:d0: 05:e1:2d:f0:21:81:62:cd:72:e2:b7:8d:a2:00:91:e7:6c:d5: a1:5f:7a:58:48:cb:aa:0b:7e:9c:78:74:3a:cf:87:c1:ec:c5: cc:11:cb:71:c0:1b:ed:c4:f3:d7:a1:46:32:78:1d:bd:ef:7e: 5b:09:6c:c7:0a:61:fe:ad:a3:b1:00:f3:d6:84:6f:b9:3a:8b: a5:c0:d7:ff:16:27:34:df:61:51:dc:69:9e:55:47:ea:d1:c2: d1:e5:d1:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg3OTAxMTAvBgNVBAUTKEU1QTRENEY5NTYwQjVCNUM1QzVGRTREMDYxQjRCODgx QzhEMjIzNTIwHhcNMjQxMTIwMjM0NjIyWhcNMjQxMTI3MjM0NjIyWjAYMRYwFAYD VQQDEw02NzNlNzRjZS03YTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5XLEdWD9zTBJJNtEVqLXgEKv5XlEKEcUu3fo2iDGX0OCQOQQVeDCYprjKn+ ltjDWD8GECEIp7ZFZ4HlXEN6o78LMaHxk22EA88lj4DGlk5bLmXi1Jr7Tij1x6N3 CT1b1AoKgDc9TdrGjJVjXjNs9/42HsKocp5b61shklhesgxFRgnfNlv3xL/aCTVo YWgnTqkgjGtOhz/Lx6jcRA1/Ir9ejtTYFQvwr78luUkTNtC6azxRRrpFaZZNQ3tt gnjNkembvWwEmdK8NcZqAQnqM3I2UnaZbGmu2KGCgjWlNiZPQEk4+n/YXeovzRTW jn8pRoMPHpLZE5Yj4EcAZBgz7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBMDS1A 7ucDOwZLhxL3yr4J/DmmMB8GA1UdIwQYMBaAFOWk1PlWC1tcXF/k0GG0uIHI0iNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODc5MC8zM0ZFMzYyNjMw QjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcxeGNYLVRRWWJTNGdjalNJ MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVhVFUtVllMVzF4Y1gtVFFZYlM0Z2NqU0kxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODc5MC8zM0ZFMzYyNjMwQjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcx eGNYLVRRWWJTNGdjalNJMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4bTdyXIX3YzCiGk1X9jwwW+zClZHSWRTeGmgiT7EqHpTX5ZEewvMj fA3Yxmq2SRYY34o7X+Xc2i70dv4p+Z3YNAbpYQDOXOvklzHOIFccQn93Z4SI3J50 BTWdxH3P8dvehaM0OFgHP3AtXuHEgQ994YwqCL/44PpRySzFpFvCeC0V/GN4SILn a6FPnl8/EoHW36kMqhLSS5jtt2keE1OTZdAF4S3wIYFizXLit42iAJHnbNWhX3pY SMuqC36ceHQ6z4fB7MXMEctxwBvtxPPXoUYyeB29735bCWzHCmH+raOxAPPWhG+5 OoulwNf/Fic032FR3GmeVUfq0cLR5dEf -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:57 2024 by rpki-client on console-fra.rpki-client.org