$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json) Hash identifier: y8GjToT7ijEOhIiXTCBnxRG1vzv+Gnfp1egKmq2iWnw= Subject key identifier: 56:50:9D:E1:47:C0:C7:5B:F8:67:C8:14:8D:AD:6D:5D:CC:6C:FA:6A Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Certificate serial: 063D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft Manifest number: 0620 Signing time: Fri 22 Nov 2024 22:14:23 +0000 Manifest this update: Fri 22 Nov 2024 22:14:22 +0000 Manifest next update: Fri 29 Nov 2024 22:14:22 +0000 Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: S1CDWSU1HzXFvMf4D93oBvX+f68+ttVJ/E2mdPiwqfQ=) 2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: RSMVC0D0tBk2Fp59m5jA59HhRZpxrqk4YRYpw+Pzr0g=) 3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: aE8ILqsqa75udSkv7yAA18S8PO5yG42/7QwpuX3oUy8=) 4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: /9xJi3PLMQkKlzkomr7AvtnsuMXJh+Vt8LpT6XO4pUs=) 5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: ooqccoiogCkkJFxNvgTBDRvRTl072blE1cY1UXNoB0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1597 (0x63d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B Validity Not Before: Nov 22 22:14:22 2024 GMT Not After : Nov 29 22:14:22 2024 GMT Subject: CN=6741023f-8e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3d:c3:0d:fb:0b:6e:31:4e:58:cb:d5:ac:ab: ff:11:a4:36:23:f9:b5:88:ec:ed:8c:59:ad:4b:54: eb:50:5e:ca:96:3a:cb:1c:e9:71:d6:05:f3:f9:c2: 4b:e5:36:6b:60:39:b5:11:c4:7f:3b:eb:33:73:44: 37:8f:f0:1d:c6:5a:11:3a:47:e2:e9:a8:7d:c0:ff: 5c:1f:d4:1a:df:37:1c:fc:54:87:f1:6c:6a:ac:7b: 50:01:c7:ab:4b:19:db:db:2b:c3:a2:4f:8b:39:37: 7e:59:f1:56:19:35:60:be:73:1c:4d:10:7a:d8:bf: 5b:b9:f6:d0:71:70:fb:b0:39:a1:23:48:ac:6d:4e: fd:59:fb:9a:bc:7b:e3:a5:97:60:a7:f2:57:1d:31: 10:9e:92:25:5a:4c:10:0e:9b:d1:61:0b:92:cb:02: 02:6a:2e:c0:a3:15:c1:60:a6:24:19:92:ce:c7:c7: a3:ca:f3:e7:86:da:36:79:04:3f:41:fa:75:47:b7: a9:7f:69:54:a1:ec:ad:02:df:c7:1b:b5:b7:78:a9: bc:5a:ed:b5:89:18:8e:dc:0d:c3:18:10:b3:cc:31: ad:90:67:32:e1:1f:71:84:58:57:4f:47:fd:8f:78: 03:5f:4c:40:21:70:fc:1d:dd:e5:26:d0:0c:9f:9f: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:50:9D:E1:47:C0:C7:5B:F8:67:C8:14:8D:AD:6D:5D:CC:6C:FA:6A X509v3 Authority Key Identifier: keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e4:80:50:17:80:91:36:e8:5f:e7:3b:1a:96:d9:81:a8:e0: f5:bb:5f:2f:db:e7:b3:30:0b:af:c4:4d:32:3a:5e:ec:72:25: 2d:c5:1b:8b:1d:d3:59:03:4b:05:8a:89:b4:c6:86:df:3c:77: b6:98:f5:24:5e:eb:c8:5a:9e:07:2e:2c:31:27:09:75:fe:36: b1:6b:e8:ad:5e:5b:76:4e:0a:0b:b4:47:79:d8:61:8b:56:53: 7f:54:ad:6b:10:f9:cb:89:b4:b5:a9:51:b9:36:94:ff:16:de: 37:c4:d6:f5:ab:c8:a0:2f:17:b6:37:4d:5a:92:43:40:23:73: 85:b2:b5:22:e9:78:a4:44:7e:4b:ba:65:fd:f8:b2:be:77:75: 3a:0b:c2:75:5b:29:da:e1:95:06:59:db:61:6c:ec:88:48:7a: b7:c0:b2:f8:e5:97:f6:ce:14:e9:b2:da:b3:75:48:45:07:53: cb:c0:c0:c7:9e:21:83:66:41:4d:97:c1:51:bf:be:01:27:fe: c9:fd:07:0b:e1:0b:2f:a9:de:4c:ae:0d:9c:57:c5:a4:35:45: 58:1f:6e:43:74:a3:0b:0b:40:f8:dc:53:9b:96:0f:c3:76:0f: d6:bf:62:c2:13:85:65:cc:7b:1e:8c:a9:dd:fb:6d:62:71:a1: 70:1a:ea:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEZDQUQ0NjExNTdERjY4MUMwNTBCRDNCRUVFQTJFQUNE RkI2RDUyNEIwHhcNMjQxMTIyMjIxNDIyWhcNMjQxMTI5MjIxNDIyWjAYMRYwFAYD VQQDEw02NzQxMDIzZi04ZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj3DDfsLbjFOWMvVrKv/EaQ2I/m1iOztjFmtS1TrUF7KljrLHOlx1gXz+cJL 5TZrYDm1EcR/O+szc0Q3j/AdxloROkfi6ah9wP9cH9Qa3zcc/FSH8WxqrHtQAcer Sxnb2yvDok+LOTd+WfFWGTVgvnMcTRB62L9bufbQcXD7sDmhI0isbU79WfuavHvj pZdgp/JXHTEQnpIlWkwQDpvRYQuSywICai7AoxXBYKYkGZLOx8ejyvPnhto2eQQ/ Qfp1R7epf2lUoeytAt/HG7W3eKm8Wu21iRiO3A3DGBCzzDGtkGcy4R9xhFhXT0f9 j3gDX0xAIXD8Hd3lJtAMn5/qkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZQneFH wMdb+GfIFI2tbV3MbPpqMB8GA1UdIwQYMBaAFPytRhFX32gcBQvTvu6i6s37bVJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC83NjkyMjc4QTdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFCd0ZDOU8tN3FMcXpmdHRV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19LMUdFVmZmYUJ3RkM5Ty03cUxxemZ0dFVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNDNC83NjkyMjc4QTdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFC d0ZDOU8tN3FMcXpmdHRVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe5IBQF4CRNuhf5zsaltmBqOD1u18v2+ezMAuvxE0yOl7sciUtxRuL HdNZA0sFiom0xobfPHe2mPUkXuvIWp4HLiwxJwl1/jaxa+itXlt2TgoLtEd52GGL VlN/VK1rEPnLibS1qVG5NpT/Ft43xNb1q8igLxe2N01akkNAI3OFsrUi6XikRH5L umX9+LK+d3U6C8J1Wyna4ZUGWdthbOyISHq3wLL45Zf2zhTpstqzdUhFB1PLwMDH niGDZkFNl8FRv74BJ/7J/QcL4Qsvqd5Mrg2cV8WkNUVYH25DdKMLC0D43FOblg/D dg/Wv2LCE4VlzHsejKnd+21icaFwGuok -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:34 2024 by rpki-client on console-fra.rpki-client.org