$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft File: 4_fO9uelaeRrLZA5MitpdVMcJWY.mft (raw, json) Hash identifier: kdwQP6aA6RkBcOzJ+SV5RwqryZTX8HCuYXUjqURC0N0= Subject key identifier: 21:D4:29:D6:E0:A9:D6:18:B1:09:D9:A3:9F:24:0E:8A:02:D3:C3:22 Authority key identifier: E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 Certificate issuer: /CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft Manifest number: 0167 Signing time: Sat 23 Nov 2024 02:17:39 +0000 Manifest this update: Sat 23 Nov 2024 02:17:38 +0000 Manifest next update: Sat 30 Nov 2024 02:17:38 +0000 Files and hashes: 1: 4_fO9uelaeRrLZA5MitpdVMcJWY.crl (hash: 0oWrbtVjkkWW9qiu2RbQ/skHDYFVRAscMJvxlzOhUrI=) 2: 24F87CC2810611EDA756F886C4F9AE02.roa (hash: 8hmKlSyIYm+hEMbljQN7ZPJxD7JA/JzX6lz/de7dJIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0077/serialNumber=E3F7CEF6E7A569E46B2D9039322B6975531C2566 Validity Not Before: Nov 23 02:17:38 2024 GMT Not After : Nov 30 02:17:38 2024 GMT Subject: CN=67413b43-c0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:05:f6:7f:d4:b8:c8:05:41:0c:aa:37:68: ae:7a:10:57:f8:ed:85:f9:fe:f1:e9:be:d5:f8:b1: 7f:34:cf:30:82:f7:43:b0:55:87:7f:94:3e:62:98: 0f:f7:5f:fb:7e:7a:b9:05:0d:e7:e1:5e:73:39:23: 57:30:ea:4e:05:03:ef:25:08:96:83:38:98:78:5f: a6:60:2f:e1:c2:81:81:64:69:46:43:be:93:84:24: cb:bd:53:80:47:a6:d5:64:ef:c6:89:f0:dd:93:ea: 60:9c:d1:4c:79:d7:54:e3:1f:33:da:d0:53:08:6a: 8c:51:2b:10:f4:96:80:fe:e6:17:f2:ac:b5:64:76: 68:38:be:d4:d0:2c:f4:80:ea:51:d9:6b:bb:6c:15: e9:14:6e:56:d4:42:4b:ca:09:cd:72:21:12:7d:38: bb:db:77:5f:40:8b:33:22:24:09:e1:b5:4e:bf:ce: 6f:7d:db:23:84:76:63:e7:99:bf:8d:34:75:ec:a5: e9:d8:c0:6d:f1:c4:99:f7:d0:7f:2b:58:f5:d3:c5: a8:2b:4c:d1:a8:e8:d9:ab:c1:83:32:90:b1:52:ea: 64:d0:51:7a:a4:39:40:a1:f3:65:18:16:ae:ad:76: 1d:9b:a9:75:5e:02:aa:55:b5:b3:b8:9d:70:9e:4b: 48:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D4:29:D6:E0:A9:D6:18:B1:09:D9:A3:9F:24:0E:8A:02:D3:C3:22 X509v3 Authority Key Identifier: keyid:E3:F7:CE:F6:E7:A5:69:E4:6B:2D:90:39:32:2B:69:75:53:1C:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_fO9uelaeRrLZA5MitpdVMcJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0077/506AE230810311EDA847CD85C4F9AE02/4_fO9uelaeRrLZA5MitpdVMcJWY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d3:56:78:87:69:c2:1e:c5:5a:d9:c3:04:14:87:30:f7:bd: f2:c3:ec:7c:7a:84:ee:41:d6:db:6c:93:15:8f:5a:8b:4a:f8: 24:a2:db:d1:b3:13:80:29:4b:90:95:1c:b9:2a:82:dc:01:4a: 70:de:36:50:b6:dd:be:8e:ef:d0:a6:bf:13:4f:9f:9b:af:6b: 4a:3b:87:96:9d:6f:4c:15:cb:69:53:65:b1:ba:1d:37:32:9d: a4:16:fb:6e:e3:84:5c:b5:5e:31:7c:5a:bc:86:1c:46:0a:34: 03:cd:67:2d:d8:f9:99:1c:88:d3:52:7e:88:0c:32:5d:b8:04: 5a:c8:07:68:2c:47:fe:ab:62:f9:86:50:ab:ee:4f:b8:a0:af: 68:15:1e:a9:7d:cf:61:cb:1d:31:37:ee:e0:27:90:06:ef:e8: 66:38:04:69:64:81:1f:0a:05:74:ec:44:4c:e4:b2:a9:6f:66: c5:22:db:ec:92:fe:37:0a:0a:ae:0a:6b:0b:ca:07:29:03:bd: 61:13:eb:7a:d6:9a:5d:eb:3c:c1:07:78:c2:1e:ff:a1:a7:d2: 8e:09:ca:4f:3b:12:0f:c4:cc:f2:c6:6c:98:f7:97:97:9d:d9: e5:70:25:b5:95:c1:db:4d:91:67:fb:2f:45:3b:c7:e0:06:56: 9d:69:95:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAwNzcxMTAvBgNVBAUTKEUzRjdDRUY2RTdBNTY5RTQ2QjJEOTAzOTMyMkI2OTc1 NTMxQzI1NjYwHhcNMjQxMTIzMDIxNzM4WhcNMjQxMTMwMDIxNzM4WjAYMRYwFAYD VQQDEw02NzQxM2I0My1jMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFkF9n/UuMgFQQyqN2iuehBX+O2F+f7x6b7V+LF/NM8wgvdDsFWHf5Q+YpgP 91/7fnq5BQ3n4V5zOSNXMOpOBQPvJQiWgziYeF+mYC/hwoGBZGlGQ76ThCTLvVOA R6bVZO/GifDdk+pgnNFMeddU4x8z2tBTCGqMUSsQ9JaA/uYX8qy1ZHZoOL7U0Cz0 gOpR2Wu7bBXpFG5W1EJLygnNciESfTi723dfQIszIiQJ4bVOv85vfdsjhHZj55m/ jTR17KXp2MBt8cSZ99B/K1j108WoK0zRqOjZq8GDMpCxUupk0FF6pDlAofNlGBau rXYdm6l1XgKqVbWzuJ1wnktIJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHUKdbg qdYYsQnZo58kDooC08MiMB8GA1UdIwQYMBaAFOP3zvbnpWnkay2QOTIraXVTHCVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDA3Ny81MDZBRTIzMDgx MDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFlUnJMWkE1TWl0cGRWTWNK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRfZk85dWVsYWVSckxaQTVNaXRwZFZNY0pXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDA3Ny81MDZBRTIzMDgxMDMxMUVEQTg0N0NEODVDNEY5QUUwMi80X2ZPOXVlbGFl UnJMWkE1TWl0cGRWTWNKV1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr01Z4h2nCHsVa2cMEFIcw973yw+x8eoTuQdbbbJMVj1qLSvgkotvR sxOAKUuQlRy5KoLcAUpw3jZQtt2+ju/Qpr8TT5+br2tKO4eWnW9MFctpU2Wxuh03 Mp2kFvtu44RctV4xfFq8hhxGCjQDzWct2PmZHIjTUn6IDDJduARayAdoLEf+q2L5 hlCr7k+4oK9oFR6pfc9hyx0xN+7gJ5AG7+hmOARpZIEfCgV07ERM5LKpb2bFItvs kv43CgquCmsLygcpA71hE+t61ppd6zzBB3jCHv+hp9KOCcpPOxIPxMzyxmyY95eX ndnlcCW1lcHbTZFn+y9FO8fgBladaZVA -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:58 2024 by rpki-client on console-fra.rpki-client.org