$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: e2dNsLyuRkyIPjO5pcoXkeYQL3Gp3aNeuA7QU4YEkGk= Subject key identifier: F0:E2:58:F5:78:8A:E1:91:2B:DC:D9:99:4F:75:AA:4B:F9:F9:C0:4A Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 342E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 342B Signing time: Fri 22 Nov 2024 14:31:57 +0000 Manifest this update: Fri 22 Nov 2024 14:31:57 +0000 Manifest next update: Fri 29 Nov 2024 14:31:57 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: F1WTXLecMra7WkqnGCDi5DZYl9nvSb8DPgEUU+bIh7o=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: njnvlZhJpg+O1H7mK6/K1EfgkaOPGFRep0ckaeGXK3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13358 (0x342e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Nov 22 14:31:57 2024 GMT Not After : Nov 29 14:31:57 2024 GMT Subject: CN=674095dd-09e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:92:06:3a:ef:a1:73:62:fd:5a:7b:0a:d3:88: 98:41:15:78:f1:b7:bd:e1:bd:39:cd:ca:d9:c7:3f: e8:8e:45:45:26:3b:2c:39:d5:00:be:c8:4d:dc:13: dc:15:7a:f8:a1:2d:c3:2b:0a:a4:2b:db:cb:bb:8e: 67:a5:98:7a:a1:f1:27:13:38:fa:24:05:4f:31:6c: ac:02:fd:d0:38:a7:e8:f4:f7:a0:e8:78:4f:67:27: df:77:33:81:74:c1:7c:cb:ab:be:5a:89:50:b9:d3: aa:c4:c9:20:5f:98:59:16:70:52:e8:b9:5c:e1:4e: fd:4b:fb:ac:a9:6c:82:61:0f:bc:7f:3c:8b:b9:2f: 57:2d:74:3e:79:f2:82:b9:57:a9:8f:5b:85:7d:05: 23:b5:92:bd:91:7d:b7:ca:9d:44:8f:38:ee:2b:8d: 09:4c:0f:d6:fc:75:82:fb:4b:d5:df:b0:fc:c5:68: 8f:2e:ce:49:61:d0:25:7e:8d:08:63:18:52:3a:77: ed:b1:4f:6b:48:21:15:4d:16:72:04:1a:19:02:26: 7f:bd:d4:42:8f:da:0f:f3:65:6e:df:d2:43:57:d9: 9c:e3:72:fe:51:8f:ef:9b:aa:a3:72:ca:2c:60:bc: 96:d6:7f:29:fa:92:da:5b:dd:14:e4:a7:dd:c2:d0: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E2:58:F5:78:8A:E1:91:2B:DC:D9:99:4F:75:AA:4B:F9:F9:C0:4A X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a7:e4:52:e8:82:79:c2:62:d6:eb:3d:63:89:59:17:fd:25: 79:cb:2d:f4:38:7a:f2:da:95:10:04:85:5e:ab:9c:c2:9d:31: 57:82:bc:d4:58:16:67:95:ec:11:88:39:20:7b:8b:61:6d:58: 5a:2b:08:55:5a:82:0c:6d:fb:9d:82:7e:4c:5c:a4:d3:7b:a7: 06:d3:63:0c:fe:7f:2b:29:dd:0e:d7:6b:66:14:24:89:96:df: 0b:08:e3:04:07:39:5a:cd:37:9c:5d:4d:6d:c4:3d:2e:2e:84: 72:9b:00:3a:3f:e8:65:86:43:68:49:7d:06:63:d7:03:d0:c3: 6d:00:bb:cb:c9:e7:41:a0:bc:37:00:74:af:23:38:63:dc:52: 42:8a:2b:20:10:df:3d:04:e3:e1:33:be:c1:15:d0:0a:c8:36: 20:ee:09:e0:54:65:f3:99:40:d8:39:b8:aa:f7:b1:6a:43:ec: 7e:be:8b:67:68:4e:f1:77:ba:bf:dc:e9:90:d4:26:a2:74:8c: 37:1d:06:7e:15:1c:cd:65:9e:17:37:3a:c5:23:8d:2e:5f:c1: 56:02:a0:e6:e5:84:9d:dc:9b:12:48:d7:7a:88:61:f9:47:05: 84:3c:d7:9c:c9:e4:96:51:44:c6:4c:6d:ef:d6:88:8f:e5:09: 70:c5:f7:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjQxMTIyMTQzMTU3WhcNMjQxMTI5MTQzMTU3WjAYMRYwFAYD VQQDEw02NzQwOTVkZC0wOWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA75IGOu+hc2L9WnsK04iYQRV48be94b05zcrZxz/ojkVFJjssOdUAvshN3BPc FXr4oS3DKwqkK9vLu45npZh6ofEnEzj6JAVPMWysAv3QOKfo9Peg6HhPZyffdzOB dMF8y6u+WolQudOqxMkgX5hZFnBS6Llc4U79S/usqWyCYQ+8fzyLuS9XLXQ+efKC uVepj1uFfQUjtZK9kX23yp1EjzjuK40JTA/W/HWC+0vV37D8xWiPLs5JYdAlfo0I YxhSOnftsU9rSCEVTRZyBBoZAiZ/vdRCj9oP82Vu39JDV9mc43L+UY/vm6qjcsos YLyW1n8p+pLaW90U5KfdwtAafQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDiWPV4 iuGRK9zZmU91qkv5+cBKMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWp+RS6IJ5wmLW6z1jiVkX/SV5yy30OHry2pUQBIVeq5zCnTFXgrzU WBZnlewRiDkge4thbVhaKwhVWoIMbfudgn5MXKTTe6cG02MM/n8rKd0O12tmFCSJ lt8LCOMEBzlazTecXU1txD0uLoRymwA6P+hlhkNoSX0GY9cD0MNtALvLyedBoLw3 AHSvIzhj3FJCiisgEN89BOPhM77BFdAKyDYg7gngVGXzmUDYObiq97FqQ+x+votn aE7xd7q/3OmQ1CaidIw3HQZ+FRzNZZ4XNzrFI40uX8FWAqDm5YSd3JsSSNd6iGH5 RwWEPNecyeSWUUTGTG3v1oiP5Qlwxfe+ -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:44 2024 by rpki-client on console-fra.rpki-client.org