$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft File: PgzfiCrujHIh1YijxSYBjh1kyWg.mft (raw, json) Hash identifier: oCSEnddjFK0QAkK2hs2ay60I+fEbLnZqUmU5hEdn51I= Subject key identifier: 63:71:29:92:EA:13:68:63:60:83:51:5C:D2:29:7F:5E:A6:04:68:43 Authority key identifier: 3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 Certificate issuer: /CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft Manifest number: A5 Signing time: Thu 21 Nov 2024 04:20:55 +0000 Manifest this update: Thu 21 Nov 2024 04:20:54 +0000 Manifest next update: Thu 28 Nov 2024 04:20:54 +0000 Files and hashes: 1: PgzfiCrujHIh1YijxSYBjh1kyWg.crl (hash: KVBw3Os/xN3aKfjJ8Cvj2pgEoK4JgSMqCJOyGBSvIsg=) 2: 41E0B402AE1F11EE96A5C977C4F9AE02.roa (hash: Kfpmzio926KrwrXS9ARoXX7rw2DWUze5A4CZAJAWeqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30/serialNumber=3E0CDF882AEE8C7221D588A3C526018E1D64C968 Validity Not Before: Nov 21 04:20:54 2024 GMT Not After : Nov 28 04:20:54 2024 GMT Subject: CN=673eb526-289b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4a:88:be:ad:b6:e3:0c:01:2a:d2:a0:18:ad: 28:5b:3d:d9:5f:53:8c:ff:17:bb:72:6b:1d:43:ae: 16:b7:6e:53:7f:16:ca:5d:83:74:ea:7a:ef:be:ba: b2:5a:30:ab:da:a3:4e:db:9f:df:65:f5:ff:ca:86: 46:2b:e6:b4:48:0a:b7:53:83:94:63:9a:8d:c1:82: db:ab:fa:a2:5b:68:09:bf:4c:78:73:96:03:d0:7f: ee:0d:06:ab:df:e8:b6:d6:74:78:78:13:25:0a:38: 8d:2a:0d:7d:ae:01:b2:91:b6:5b:ed:7d:5e:c4:cf: 69:73:fd:00:b5:f5:ad:c0:34:2e:10:63:9d:1a:0a: 29:de:e6:c3:cc:3c:7c:e3:94:53:05:bd:5b:94:6f: f8:f4:97:1a:11:f0:f8:a7:9f:4f:6a:0b:a2:ee:f5: 33:36:b6:22:cd:e3:11:20:9e:a2:60:44:1e:bf:92: 3c:99:b2:c4:93:bd:2d:f8:a0:be:76:8a:cb:62:f4: 82:61:93:6a:49:2b:8d:1a:0b:1e:36:75:d6:61:5c: 21:90:c1:40:bb:a1:d9:f0:1f:f8:c5:f6:47:e8:00: 29:c8:d8:5f:20:d5:20:d7:04:b1:af:fd:8f:7a:14: eb:d5:ec:d2:bd:18:f5:18:6e:0f:c8:cc:2a:4d:84: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:71:29:92:EA:13:68:63:60:83:51:5C:D2:29:7F:5E:A6:04:68:43 X509v3 Authority Key Identifier: keyid:3E:0C:DF:88:2A:EE:8C:72:21:D5:88:A3:C5:26:01:8E:1D:64:C9:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PgzfiCrujHIh1YijxSYBjh1kyWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/BE80C6A6AE1E11EEA7EA0A77C4F9AE02/PgzfiCrujHIh1YijxSYBjh1kyWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:ed:a6:ef:92:cc:ad:3e:67:47:71:11:ec:5f:29:f6:86:ae: 35:3a:d0:a9:d7:d4:90:1a:4e:d2:2c:7d:bd:66:9b:a9:b4:6f: ad:f8:50:e3:ad:72:80:3c:28:cc:36:30:0b:6a:e2:36:ba:9b: d4:20:15:e5:ff:15:3a:14:ad:ca:ec:5d:c4:a0:a7:32:59:bb: a8:f3:21:f2:e6:10:be:7b:8f:66:54:69:ea:33:c0:6a:06:72: c1:ae:8f:2a:cf:a9:af:03:1c:d7:1a:f6:c2:72:04:54:80:d1: 4b:54:2e:7f:13:57:0a:79:83:b3:09:85:d3:6c:be:e8:8a:23: b2:07:54:4e:2e:cd:31:a8:eb:a9:e3:88:5f:77:60:73:05:85: dc:a0:df:91:db:d0:f3:84:d3:b0:5c:26:8a:05:f6:6b:46:9f: 23:da:08:c6:cf:49:29:a1:36:33:d9:f8:ef:a3:d5:48:78:de: 66:53:ca:b7:71:5b:2a:ad:ea:bb:5d:5d:24:4e:c4:fd:fb:6b: fa:ec:ca:bd:b7:aa:23:1e:e1:06:94:c6:2e:97:e2:18:75:db: 7a:30:eb:7c:c6:a6:66:bd:85:22:25:f5:ea:58:5a:ae:cf:c9: 2d:23:c7:e6:78:74:f1:fd:e3:1f:7c:8c:67:82:1c:89:92:fb: 96:a1:be:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDNFMENERjg4MkFFRThDNzIyMUQ1ODhBM0M1MjYwMThF MUQ2NEM5NjgwHhcNMjQxMTIxMDQyMDU0WhcNMjQxMTI4MDQyMDU0WjAYMRYwFAYD VQQDEw02NzNlYjUyNi0yODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUqIvq224wwBKtKgGK0oWz3ZX1OM/xe7cmsdQ64Wt25TfxbKXYN06nrvvrqy WjCr2qNO25/fZfX/yoZGK+a0SAq3U4OUY5qNwYLbq/qiW2gJv0x4c5YD0H/uDQar 3+i21nR4eBMlCjiNKg19rgGykbZb7X1exM9pc/0AtfWtwDQuEGOdGgop3ubDzDx8 45RTBb1blG/49JcaEfD4p59Pagui7vUzNrYizeMRIJ6iYEQev5I8mbLEk70t+KC+ dorLYvSCYZNqSSuNGgseNnXWYVwhkMFAu6HZ8B/4xfZH6AApyNhfINUg1wSxr/2P ehTr1ezSvRj1GG4PyMwqTYRQJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNxKZLq E2hjYINRXNIpf16mBGhDMB8GA1UdIwQYMBaAFD4M34gq7oxyIdWIo8UmAY4dZMlo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9CRTgwQzZBNkFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpISWgxWWlqeFNZQmpoMWt5 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BnemZpQ3J1akhJaDFZaWp4U1lCamgxa3lXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9CRTgwQzZBNkFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9QZ3pmaUNydWpI SWgxWWlqeFNZQmpoMWt5V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQ7abvksytPmdHcRHsXyn2hq41OtCp19SQGk7SLH29ZpuptG+t+FDj rXKAPCjMNjALauI2upvUIBXl/xU6FK3K7F3EoKcyWbuo8yHy5hC+e49mVGnqM8Bq BnLBro8qz6mvAxzXGvbCcgRUgNFLVC5/E1cKeYOzCYXTbL7oiiOyB1ROLs0xqOup 44hfd2BzBYXcoN+R29DzhNOwXCaKBfZrRp8j2gjGz0kpoTYz2fjvo9VIeN5mU8q3 cVsqreq7XV0kTsT9+2v67Mq9t6ojHuEGlMYul+IYddt6MOt8xqZmvYUiJfXqWFqu z8ktI8fmeHTx/eMffIxnghyJkvuWob7p -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:05 2024 by rpki-client on console-fra.rpki-client.org