$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: JIHX5bZjZHIVzvVjTUwqgtrFYPPo/UlUVcQrCSCMbjY= Subject key identifier: A9:1D:16:78:C9:3D:1A:AA:7C:5B:CC:21:9B:02:E9:F7:39:F6:19:A6 Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 1871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 1853 Signing time: Wed 20 Nov 2024 16:28:03 +0000 Manifest this update: Wed 20 Nov 2024 16:28:03 +0000 Manifest next update: Wed 27 Nov 2024 16:28:03 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: F/qgLdEQE3eGCSksRUuNxyvg9oQEvs1lithmwYtA/38=) 2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: dkIdUkxS0d2PbrqHHzMK0XKv4nvJXGsXU3jrSo/hWKk=) 3: A6ACA298858911E88026B416C4F9AE02.roa (hash: Bm6Hg3gh1j1a80wR2XX7xwyi1WY27Wumi8LE07BcSR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6257 (0x1871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: Nov 20 16:28:03 2024 GMT Not After : Nov 27 16:28:03 2024 GMT Subject: CN=673e0e13-42cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:12:17:9b:76:66:be:45:50:9a:cf:69:b6: a6:27:37:eb:2e:c6:8a:4c:d1:bf:dc:d6:01:ce:c4: 7c:7a:57:d1:09:79:33:dd:17:f4:08:ea:a7:d6:b7: 51:86:ce:2d:e9:a5:6d:9f:96:36:2f:bb:08:24:fd: 43:d5:b4:92:f9:5f:5d:5b:69:14:a2:74:e0:1a:b1: 1d:bc:25:08:f0:d4:d0:bc:99:bc:9a:aa:40:f6:ca: d8:36:cb:d0:7c:bc:2c:12:68:a6:fa:43:10:8c:68: 24:e6:a7:19:67:5d:ce:60:c2:b1:ff:63:16:b0:64: 05:46:d6:53:d9:01:9e:cc:fb:0b:c0:03:45:a8:28: 92:4b:b0:22:a6:69:48:09:59:a5:a2:71:2f:6c:fb: a1:a0:32:d2:72:5b:f8:40:fa:1c:9f:fc:6b:84:02: c4:30:f0:b1:51:4b:85:00:f0:b0:a2:ed:06:fc:42: 03:09:2b:8a:e6:d9:43:cf:43:9f:91:7b:aa:80:5c: e4:b3:50:f4:4c:fc:81:54:58:ea:90:9b:a8:56:67: 33:89:d8:c7:b9:b5:27:c9:30:94:d5:b2:37:d5:fe: 39:95:ca:9c:c1:dc:a0:e1:5c:f3:5b:08:2b:5b:e6: a9:64:d1:c2:fb:07:71:1c:6d:7f:85:21:f3:41:0f: cb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1D:16:78:C9:3D:1A:AA:7C:5B:CC:21:9B:02:E9:F7:39:F6:19:A6 X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ed:30:de:fd:4f:48:46:1a:69:47:30:14:58:ee:6d:4f:93: a4:57:6b:c7:d0:1a:5e:3f:03:94:2c:ed:be:56:84:27:76:2e: 0f:bd:35:a1:ba:98:1a:18:28:0c:ee:99:b0:54:95:b2:d7:3e: 0b:d2:ee:7d:b4:27:39:ed:44:e0:6b:33:b9:ad:20:8d:43:e0: aa:b6:42:8c:44:98:59:4f:fe:78:0e:23:26:93:33:64:44:99: f9:55:c1:5d:8b:f2:fc:9a:1d:c9:3b:e0:6e:a1:75:ae:fb:40: dd:4e:53:0a:f7:cd:ea:27:e4:ea:01:12:8b:6e:0f:b3:d3:71: f4:e6:6b:8a:ad:65:78:9e:26:74:3c:21:8c:ff:37:42:7d:8a: 96:94:d9:af:94:b8:76:e7:d3:a5:b7:a2:92:0e:9a:bd:00:51: 33:db:e7:0c:73:35:ee:b7:ef:e5:be:b2:51:44:d0:b8:ec:e8: 18:f3:3a:82:98:ce:e1:28:b8:ab:bb:88:0e:1c:d7:fd:43:3e: a9:75:8d:fa:55:e2:a1:34:98:c3:20:2f:69:2a:18:92:14:27: 6a:f9:b0:fc:dd:87:e3:fa:9a:39:66:10:1b:09:37:3d:6b:d3: 42:f7:b4:d2:7e:54:ef:e3:0f:f7:11:8f:59:76:23:cd:51:08: 00:a1:90:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjQxMTIwMTYyODAzWhcNMjQxMTI3MTYyODAzWjAYMRYwFAYD VQQDEw02NzNlMGUxMy00MmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQ0SF5t2Zr5FUJrPabamJzfrLsaKTNG/3NYBzsR8elfRCXkz3Rf0COqn1rdR hs4t6aVtn5Y2L7sIJP1D1bSS+V9dW2kUonTgGrEdvCUI8NTQvJm8mqpA9srYNsvQ fLwsEmim+kMQjGgk5qcZZ13OYMKx/2MWsGQFRtZT2QGezPsLwANFqCiSS7AipmlI CVmlonEvbPuhoDLSclv4QPocn/xrhALEMPCxUUuFAPCwou0G/EIDCSuK5tlDz0Of kXuqgFzks1D0TPyBVFjqkJuoVmczidjHubUnyTCU1bI31f45lcqcwdyg4VzzWwgr W+apZNHC+wdxHG1/hSHzQQ/L1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkdFnjJ PRqqfFvMIZsC6fc59hmmMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC7TDe/U9IRhppRzAUWO5tT5OkV2vH0BpePwOULO2+VoQndi4PvTWh upgaGCgM7pmwVJWy1z4L0u59tCc57UTgazO5rSCNQ+CqtkKMRJhZT/54DiMmkzNk RJn5VcFdi/L8mh3JO+BuoXWu+0DdTlMK983qJ+TqARKLbg+z03H05muKrWV4niZ0 PCGM/zdCfYqWlNmvlLh259Olt6KSDpq9AFEz2+cMczXut+/lvrJRRNC47OgY8zqC mM7hKLiru4gOHNf9Qz6pdY36VeKhNJjDIC9pKhiSFCdq+bD83Yfj+po5ZhAbCTc9 a9NC97TSflTv4w/3EY9ZdiPNUQgAoZDW -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:05 2024 by rpki-client on console-fra.rpki-client.org