$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft File: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft (raw, json) Hash identifier: zFXBl2HtXHMHZadQLYL0AsRtWDBFfvDU4PsIU4Cutks= Subject key identifier: B0:CE:3E:A0:D4:7B:32:43:A7:EB:58:F0:53:DB:C9:AD:97:B3:B5:EA Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2 Certificate issuer: /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft Manifest number: 3F Signing time: Sat 23 Nov 2024 05:24:28 +0000 Manifest this update: Sat 23 Nov 2024 05:24:27 +0000 Manifest next update: Sat 30 Nov 2024 05:24:27 +0000 Files and hashes: 1: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl (hash: jfeWcQFBFh5caBjlU0xiAfphSrMUiazJG/4vWGlM+vw=) 2: CA8007604A3011EFB101441AC4F9AE02.roa (hash: n0scqmjw+mL6oy2aKSd+h7xv61rcn17HzY6G2dTe7Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2 Validity Not Before: Nov 23 05:24:27 2024 GMT Not After : Nov 30 05:24:27 2024 GMT Subject: CN=6741670c-28d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:04:62:35:be:6b:f8:17:54:54:b8:58:19:e0: 1c:a3:3e:81:8d:73:f8:15:27:0c:09:bc:a4:c0:52: 73:03:ee:a8:0e:44:e1:26:51:7c:f4:65:48:74:c1: b4:09:9a:d0:dd:50:50:7d:25:88:0e:63:99:0a:a2: 4e:45:38:19:69:c9:66:a2:cf:5a:3f:bb:ce:ff:7d: df:c0:16:e9:db:04:1c:37:16:71:09:cd:18:40:8c: b7:ae:41:10:14:7b:ce:02:cb:ad:05:b6:10:35:6d: e9:f1:b3:1d:14:78:38:15:0d:3b:b3:fb:a8:65:40: 4e:55:ea:fd:b1:1f:63:5a:43:8e:3c:c1:c6:f3:e5: 71:74:f0:27:b8:63:0b:85:19:e5:e9:cb:d2:3f:c3: 07:69:0b:c3:bf:72:9f:70:b1:07:17:ef:2a:87:f0: 14:d9:36:68:75:df:a4:c9:74:2b:0b:3d:35:46:d4: 49:37:02:77:c0:76:94:c0:1d:23:76:f1:33:7d:28: 07:30:d3:e0:d0:cf:5b:e0:4b:ae:0e:ae:6f:64:c6: 9e:4a:5a:43:34:9d:97:27:20:47:14:7b:52:05:19: 84:e5:ed:e2:17:ef:93:07:0f:6f:e7:e6:20:ba:d7: 90:45:7c:57:f0:8c:4c:27:8d:6e:b7:4a:78:1c:ff: 60:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CE:3E:A0:D4:7B:32:43:A7:EB:58:F0:53:DB:C9:AD:97:B3:B5:EA X509v3 Authority Key Identifier: keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4b:a2:41:e9:61:8c:b9:c3:43:fa:8d:e4:f1:20:26:60:c4: c4:0e:43:c7:35:3b:c7:c7:3c:13:36:08:f8:ed:00:ea:78:fe: 8f:a2:b9:1a:8f:04:d8:a9:96:ee:12:e6:07:f5:68:eb:ec:23: 74:c1:7b:7c:14:7f:ce:10:dd:3c:53:7e:aa:33:47:03:71:0f: c3:a3:c0:ef:55:88:81:80:22:63:de:38:54:da:66:a5:4d:f9: c9:b4:7d:7f:c8:fa:ab:48:16:04:9f:d1:6d:00:3a:36:be:9b: 1d:f2:fa:f5:c3:f0:30:ff:e3:52:d3:26:f5:af:5b:90:b4:f5: 57:94:a1:4c:b4:f2:95:c9:ed:f7:47:3e:6c:e5:a5:66:5a:8e: 03:4b:48:b3:a4:9d:9a:02:b2:9b:26:78:31:8e:03:18:72:d8: 83:93:cf:ad:88:b0:fa:c2:b8:0f:cc:aa:3a:f5:53:16:e8:29: 8d:87:8f:9c:20:af:d9:56:9a:ef:0f:c1:d1:85:08:8c:a8:43: 9c:f0:cc:bc:75:b3:fd:f8:20:0c:d9:f7:b1:ae:39:5a:e2:ed: c5:52:6e:62:28:39:b6:15:7c:c5:a7:62:79:f1:f2:e3:b3:66: d8:cc:aa:12:ce:d3:a5:fb:ee:e1:33:f7:33:de:7b:b3:48:06: f2:ec:4b:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTgxNDExMC8GA1UEBRMoMTE4RDlCREUzMTc1NEY5ODU0Q0I1NTQ3NDBBMjk5RjEz N0UyNDFFMjAeFw0yNDExMjMwNTI0MjdaFw0yNDExMzAwNTI0MjdaMBgxFjAUBgNV BAMTDTY3NDE2NzBjLTI4ZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2BGI1vmv4F1RUuFgZ4ByjPoGNc/gVJwwJvKTAUnMD7qgOROEmUXz0ZUh0wbQJ mtDdUFB9JYgOY5kKok5FOBlpyWaiz1o/u87/fd/AFunbBBw3FnEJzRhAjLeuQRAU e84Cy60FthA1benxsx0UeDgVDTuz+6hlQE5V6v2xH2NaQ448wcbz5XF08Ce4YwuF GeXpy9I/wwdpC8O/cp9wsQcX7yqH8BTZNmh136TJdCsLPTVG1Ek3AnfAdpTAHSN2 8TN9KAcw0+DQz1vgS64Orm9kxp5KWkM0nZcnIEcUe1IFGYTl7eIX75MHD2/n5iC6 15BFfFfwjEwnjW63Sngc/2BdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsM4+oNR7 MkOn61jwU9vJrZezteowHwYDVR0jBBgwFoAUEY2b3jF1T5hUy1VHQKKZ8TfiQeIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFODE0LzhDNTdGMTVBNEEz MDExRUZBODMwNzcxOUM0RjlBRTAyL0VZMmIzakYxVDVoVXkxVkhRS0taOFRmaVFl SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRVkyYjNqRjFUNWhVeTFWSFFLS1o4VGZpUWVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF ODE0LzhDNTdGMTVBNEEzMDExRUZBODMwNzcxOUM0RjlBRTAyL0VZMmIzakYxVDVo VXkxVkhRS0taOFRmaVFlSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ9LokHpYYy5w0P6jeTxICZgxMQOQ8c1O8fHPBM2CPjtAOp4/o+iuRqP BNiplu4S5gf1aOvsI3TBe3wUf84Q3TxTfqozRwNxD8OjwO9ViIGAImPeOFTaZqVN +cm0fX/I+qtIFgSf0W0AOja+mx3y+vXD8DD/41LTJvWvW5C09VeUoUy08pXJ7fdH PmzlpWZajgNLSLOknZoCspsmeDGOAxhy2IOTz62IsPrCuA/Mqjr1UxboKY2Hj5wg r9lWmu8PwdGFCIyoQ5zwzLx1s/34IAzZ97GuOVri7cVSbmIoObYVfMWnYnnx8uOz ZtjMqhLO06X77uEz9zPee7NIBvLsSz8= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:30 2024 by rpki-client on console-fra.rpki-client.org