$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft File: 148wkE5135TOt1lmr4OOdj6ol2I.mft (raw, json) Hash identifier: eL3fiX1qgVC+TNp/0MYi0zQ+nWdsAQIWBDmchu6ut9g= Subject key identifier: EC:BF:AD:1A:6F:7F:0C:3D:1E:28:FB:80:10:7F:D0:ED:9E:B5:A5:7D Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 Certificate issuer: /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft Manifest number: 5F Signing time: Sat 23 Nov 2024 05:00:17 +0000 Manifest this update: Sat 23 Nov 2024 05:00:16 +0000 Manifest next update: Sat 30 Nov 2024 05:00:16 +0000 Files and hashes: 1: 148wkE5135TOt1lmr4OOdj6ol2I.crl (hash: 1QH0dmVz/XzzaUc8eeehS6Rg+8I1XEFjXf004uiWyBk=) 2: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (hash: AxkYcRwZSnao8zH0VaeL2puNq47Z8ulmK+DHFGZowcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Validity Not Before: Nov 23 05:00:16 2024 GMT Not After : Nov 30 05:00:16 2024 GMT Subject: CN=67416161-0dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:57:5f:08:78:d7:4c:b8:8a:41:a2:d4:1d:33: 29:d8:1e:f7:4b:a1:a9:29:cc:f6:0c:f0:fe:1c:21: cb:18:a0:3d:fd:02:1f:31:c7:ca:b7:49:6d:a5:63: b0:15:08:07:ff:e4:8f:22:41:98:1f:e3:90:db:2a: d1:5c:fc:8c:ed:aa:b3:b4:1d:9a:c8:1e:b8:89:ed: e6:de:11:84:d9:85:42:53:80:a8:7b:00:52:6f:98: a1:b8:92:0f:5e:6a:e8:a5:3b:b0:c1:a6:1b:75:9a: ed:f4:9a:91:a8:79:57:ff:aa:5a:05:bc:df:2d:c7: 9a:c4:f3:a3:16:3b:ee:9d:99:2a:14:95:77:f8:0d: e2:2e:2d:e5:83:74:cb:3a:36:ae:46:3c:a9:e8:77: 86:36:21:7d:c8:14:a3:96:9e:d7:c6:23:04:a6:9e: 8f:c5:6c:e4:9a:01:36:be:ac:64:0c:32:e4:46:db: fd:1b:9a:33:6f:dc:be:59:17:d0:11:7d:44:aa:5d: 1f:a9:0a:d7:5a:3f:f3:67:f7:fc:38:42:8a:77:71: 10:93:bd:5c:a2:40:d2:4c:87:5c:c0:76:39:bb:6b: 89:35:10:9a:9e:21:df:b0:fa:04:36:e9:13:ab:6b: fd:34:b5:05:d0:b2:09:19:78:2c:8a:d5:4f:ee:a0: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BF:AD:1A:6F:7F:0C:3D:1E:28:FB:80:10:7F:D0:ED:9E:B5:A5:7D X509v3 Authority Key Identifier: keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:20:99:2c:d0:b1:27:7d:0b:7e:34:56:02:a3:a9:ee:9e:42: 39:ef:21:3f:76:36:a4:19:f8:38:ba:c3:83:a8:1d:49:5c:00: 73:1c:4a:50:d7:1f:01:72:b4:65:3a:72:27:a1:08:27:21:b9: 2d:86:04:d2:aa:1c:35:07:57:c0:5a:97:89:f8:b6:24:1e:40: 47:94:ce:4d:67:2b:6b:ce:8d:f3:1c:8e:51:6d:42:e0:c7:4c: 96:5d:83:f3:be:64:5d:04:57:76:7a:08:d8:44:8d:f8:5b:c1: 78:41:d5:cd:cd:a3:5c:7a:f1:93:50:32:35:d6:3f:e8:4a:1e: 2b:0b:5b:58:e1:78:79:d3:9a:81:de:1a:e9:9e:80:5a:7a:08: 31:be:c8:f4:f8:6d:8a:c2:04:a3:39:3f:72:90:2d:12:1d:53: 1a:2f:7d:ad:0e:6e:2f:1f:36:97:f2:de:db:1a:41:97:4e:65: e0:20:18:92:e7:55:e8:b3:43:4d:48:77:3f:3e:76:39:39:c3: d9:93:13:c8:98:68:25:0d:84:78:cf:ee:19:2a:cf:94:94:48: 47:51:f0:d7:ee:f7:85:d9:05:2e:f1:14:35:50:30:5f:69:ef: ef:5b:d7:ba:d6:b7:7d:3e:d8:1a:d1:f6:29:4b:be:52:72:7a: 91:6d:6d:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTQwMzExMC8GA1UEBRMoRDc4RjMwOTA0RTc1REY5NENFQjc1OTY2QUY4MzhFNzYz RUE4OTc2MjAeFw0yNDExMjMwNTAwMTZaFw0yNDExMzAwNTAwMTZaMBgxFjAUBgNV BAMTDTY3NDE2MTYxLTBkZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLV18IeNdMuIpBotQdMynYHvdLoakpzPYM8P4cIcsYoD39Ah8xx8q3SW2lY7AV CAf/5I8iQZgf45DbKtFc/IztqrO0HZrIHriJ7ebeEYTZhUJTgKh7AFJvmKG4kg9e auilO7DBpht1mu30mpGoeVf/qloFvN8tx5rE86MWO+6dmSoUlXf4DeIuLeWDdMs6 Nq5GPKnod4Y2IX3IFKOWntfGIwSmno/FbOSaATa+rGQMMuRG2/0bmjNv3L5ZF9AR fUSqXR+pCtdaP/Nn9/w4Qop3cRCTvVyiQNJMh1zAdjm7a4k1EJqeId+w+gQ26ROr a/00tQXQsgkZeCyK1U/uoPmbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7L+tGm9/ DD0eKPuAEH/Q7Z61pX0wHwYDVR0jBBgwFoAU148wkE5135TOt1lmr4OOdj6ol2Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFNDAzLzgwMjA3MkU4MThC RTExRUZBREE3RTUxREM0RjlBRTAyLzE0OHdrRTUxMzVUT3QxbG1yNE9PZGo2b2wy SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTQ4d2tFNTEzNVRPdDFsbXI0T09kajZvbDJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF NDAzLzgwMjA3MkU4MThCRTExRUZBREE3RTUxREM0RjlBRTAyLzE0OHdrRTUxMzVU T3QxbG1yNE9PZGo2b2wySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANggmSzQsSd9C340VgKjqe6eQjnvIT92NqQZ+Di6w4OoHUlcAHMcSlDX HwFytGU6ciehCCchuS2GBNKqHDUHV8Bal4n4tiQeQEeUzk1nK2vOjfMcjlFtQuDH TJZdg/O+ZF0EV3Z6CNhEjfhbwXhB1c3No1x68ZNQMjXWP+hKHisLW1jheHnTmoHe GumegFp6CDG+yPT4bYrCBKM5P3KQLRIdUxovfa0Obi8fNpfy3tsaQZdOZeAgGJLn VeizQ01Idz8+djk5w9mTE8iYaCUNhHjP7hkqz5SUSEdR8Nfu94XZBS7xFDVQMF9p 7+9b17rWt30+2BrR9ilLvlJyepFtbXM= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:30 2024 by rpki-client on console-fra.rpki-client.org