$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft File: SokSJxJpPqAI66ehAaxiJpX67CQ.mft (raw, json) Hash identifier: KkR/hNjqVh5biCSzAzjVh6zTxfOrQReayWDaCKFGhPM= Subject key identifier: AE:80:A1:67:AC:D5:8B:3C:60:AD:2E:3C:16:36:DA:9C:AB:48:9F:5B Authority key identifier: 4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 Certificate issuer: /CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Certificate serial: 0408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft Manifest number: 0402 Signing time: Sat 23 Nov 2024 00:01:35 +0000 Manifest this update: Sat 23 Nov 2024 00:01:35 +0000 Manifest next update: Sat 30 Nov 2024 00:01:35 +0000 Files and hashes: 1: SokSJxJpPqAI66ehAaxiJpX67CQ.crl (hash: 8z45utRYJ/Lp09nWmYIuoQPxnpjfuTCrUT8GbxQZ8n0=) 2: 69BD1776579A11EEB2386282C4F9AE02.roa (hash: fvrI/G4/lZDcaHvJtqlBwFbuS2mrAEvqsqBeZAnHlsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1032 (0x408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF20/serialNumber=4A89122712693EA008EBA7A101AC622695FAEC24 Validity Not Before: Nov 23 00:01:35 2024 GMT Not After : Nov 30 00:01:35 2024 GMT Subject: CN=67411b5f-1c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:f7:de:00:d2:06:2c:c7:05:6f:d8:40:e8: 52:22:f4:8a:d6:f1:54:d1:12:fd:01:f5:12:8b:50: d8:86:7e:06:1f:70:f9:d5:85:18:ae:c7:f2:5e:9c: 9f:87:6f:77:a5:5b:2b:8c:5c:d5:8f:66:fe:e7:64: 90:d7:37:0d:df:ff:88:fb:b9:d7:d1:73:ef:66:94: 7b:15:4d:2a:89:d8:af:93:46:0b:9b:f4:1d:82:4d: 33:f4:aa:64:cb:e2:2c:78:5f:ca:b3:58:4d:0e:f1: 49:71:f9:20:75:a8:b4:30:6b:4d:2f:46:76:1c:b7: cb:fd:f3:bb:68:b0:1a:c3:df:d7:5f:db:bf:a8:93: 94:d3:bf:2c:be:87:ce:a3:00:01:e7:32:02:ef:96: cc:62:8e:cf:ce:cc:3f:e5:e7:0f:95:48:f7:8a:31: 8a:6e:fd:18:d8:2f:73:68:f1:93:80:d6:63:b7:a8: b9:ca:92:c5:56:ed:7a:f8:95:6a:8d:83:97:0d:0e: 77:59:17:2d:75:9b:77:56:26:67:8d:67:2c:9d:24: 52:11:72:f5:6f:04:f3:41:da:2c:fb:7e:16:ee:9c: e4:bf:33:af:09:58:e6:49:21:db:d8:43:1a:ac:73: 3b:e9:8d:27:43:31:73:6d:2e:d5:0c:b3:79:94:d0: f7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:80:A1:67:AC:D5:8B:3C:60:AD:2E:3C:16:36:DA:9C:AB:48:9F:5B X509v3 Authority Key Identifier: keyid:4A:89:12:27:12:69:3E:A0:08:EB:A7:A1:01:AC:62:26:95:FA:EC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SokSJxJpPqAI66ehAaxiJpX67CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF20/F26715B24F5F11ECB03B9E1BC4F9AE02/SokSJxJpPqAI66ehAaxiJpX67CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:d6:b1:15:aa:8c:98:1f:91:1e:e8:56:20:41:f2:6d:e9:0e: 73:94:c1:14:85:21:d3:f5:38:6c:1c:36:33:75:75:93:0f:7a: 81:55:37:5e:25:bf:f1:ef:1e:08:6a:1a:bf:8a:d5:56:3f:61: 38:cd:da:f7:9c:7d:cf:ab:71:ba:85:e6:14:5f:20:49:8c:c7: 6a:61:a2:de:c6:e3:d1:fc:fa:16:7d:16:c4:80:bb:08:0a:04: 7e:03:5e:34:fb:bb:34:53:68:c1:34:08:54:90:00:ac:d2:12: 65:aa:1e:27:f5:95:f9:1b:ae:08:83:40:36:b7:5d:e6:25:ed: 19:4d:c2:71:61:95:5d:9a:1f:44:f6:b8:53:4b:2d:1d:eb:4d: 77:2d:da:43:e9:63:36:5a:ec:14:f5:31:11:50:36:8b:94:ed: d6:14:84:b5:8f:87:3c:09:41:c3:08:b5:3b:f7:65:79:d9:24: 59:d4:d9:12:60:37:57:2e:90:52:63:f2:6f:46:cd:be:9c:2a: ad:04:d6:5a:29:20:de:b5:40:5a:2a:fa:63:ef:0c:e9:c0:ae: 61:fe:c3:6d:82:02:e2:18:db:bc:59:a0:90:79:77:9b:e1:2b: dd:37:84:b0:4e:cf:a7:8e:e3:b2:aa:17:bf:3f:1b:c2:f1:2f: 44:90:3a:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGMjAxMTAvBgNVBAUTKDRBODkxMjI3MTI2OTNFQTAwOEVCQTdBMTAxQUM2MjI2 OTVGQUVDMjQwHhcNMjQxMTIzMDAwMTM1WhcNMjQxMTMwMDAwMTM1WjAYMRYwFAYD VQQDEw02NzQxMWI1Zi0xYzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPf33gDSBizHBW/YQOhSIvSK1vFU0RL9AfUSi1DYhn4GH3D51YUYrsfyXpyf h293pVsrjFzVj2b+52SQ1zcN3/+I+7nX0XPvZpR7FU0qidivk0YLm/Qdgk0z9Kpk y+IseF/Ks1hNDvFJcfkgdai0MGtNL0Z2HLfL/fO7aLAaw9/XX9u/qJOU078svofO owAB5zIC75bMYo7Pzsw/5ecPlUj3ijGKbv0Y2C9zaPGTgNZjt6i5ypLFVu16+JVq jYOXDQ53WRctdZt3ViZnjWcsnSRSEXL1bwTzQdos+34W7pzkvzOvCVjmSSHb2EMa rHM76Y0nQzFzbS7VDLN5lND38wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6AoWes 1Ys8YK0uPBY22pyrSJ9bMB8GA1UdIwQYMBaAFEqJEicSaT6gCOunoQGsYiaV+uwk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYyMC9GMjY3MTVCMjRG NUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBxQUk2NmVoQWF4aUpwWDY3 Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nva1NKeEpwUHFBSTY2ZWhBYXhpSnBYNjdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYyMC9GMjY3MTVCMjRGNUYxMUVDQjAzQjlFMUJDNEY5QUUwMi9Tb2tTSnhKcFBx QUk2NmVoQWF4aUpwWDY3Q1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy1rEVqoyYH5Ee6FYgQfJt6Q5zlMEUhSHT9ThsHDYzdXWTD3qBVTde Jb/x7x4Iahq/itVWP2E4zdr3nH3Pq3G6heYUXyBJjMdqYaLexuPR/PoWfRbEgLsI CgR+A140+7s0U2jBNAhUkACs0hJlqh4n9ZX5G64Ig0A2t13mJe0ZTcJxYZVdmh9E 9rhTSy0d6013LdpD6WM2WuwU9TERUDaLlO3WFIS1j4c8CUHDCLU792V52SRZ1NkS YDdXLpBSY/JvRs2+nCqtBNZaKSDetUBaKvpj7wzpwK5h/sNtggLiGNu8WaCQeXeb 4SvdN4SwTs+njuOyqhe/PxvC8S9EkDoG -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org