$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft File: c0CQ78N5g_0XW-AvSUlmiiFDciE.mft (raw, json) Hash identifier: 66nP5za1Pkb3m42bLXbWxMPYzqgHOUB32P86kCGCbqY= Subject key identifier: 0F:DD:CC:F9:04:8E:CD:69:09:4B:ED:BB:5A:8C:82:EE:C0:6E:E0:1A Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221 Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft Manifest number: 044F Signing time: Fri 22 Nov 2024 23:46:44 +0000 Manifest this update: Fri 22 Nov 2024 23:46:44 +0000 Manifest next update: Fri 29 Nov 2024 23:46:44 +0000 Files and hashes: 1: c0CQ78N5g_0XW-AvSUlmiiFDciE.crl (hash: 7SkiJMWRytU/p7qCkuVeXACKsulIMjk0EEAIVaIglOg=) 2: 2110795ED38E11EDADA86381C4F9AE02.roa (hash: 3scFbI2eqJmRXNfrH/g1NhiMJkdzFzRzL2hCN9j3R/w=) 3: 4B95A58630B111ECAC3FE61DC4F9AE02.roa (hash: Jk80jeO05hd8HdpNBJKbydf23WQjdBY/wJrAaPYnYxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221 Validity Not Before: Nov 22 23:46:44 2024 GMT Not After : Nov 29 23:46:44 2024 GMT Subject: CN=674117e4-a999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:53:6e:5e:30:a0:b3:e1:8b:86:83:35:e1:0a: 7b:c7:b4:3c:81:ba:5d:96:6f:57:18:89:7d:e4:40: 23:03:d9:20:54:11:fe:b4:6b:7d:7c:a2:68:f4:56: b1:42:02:16:fa:99:28:e0:e3:41:a3:37:4c:95:96: 55:8f:d2:dc:cb:e9:b7:33:44:e4:e9:d1:44:98:bc: c7:88:6d:87:29:df:68:26:88:b0:26:be:2b:31:fd: cc:f1:90:05:f4:0d:78:4e:f0:a6:6d:cf:d4:a4:d1: a0:a2:2c:7a:c2:c0:2e:8c:90:e5:a6:07:18:93:ea: 3c:36:09:66:b6:a0:6c:ea:56:f6:f0:7a:77:d6:1a: 65:38:5b:6a:bd:a8:95:0a:73:91:05:82:9f:34:08: fb:35:34:66:cf:d0:ae:01:7d:1e:1a:24:9a:e9:0c: a1:f6:35:8a:91:c7:e4:04:7f:c3:97:19:49:48:5c: 0a:87:be:5c:2d:b6:78:d9:07:5c:60:98:b6:91:99: f3:54:e3:8d:45:e7:ef:7e:28:43:ad:7f:c2:a8:e2: 62:00:0a:e1:22:78:bd:d4:68:72:60:f4:89:12:ce: fe:3a:19:d8:d8:47:62:09:cf:60:60:e3:8e:90:63: c4:a4:f4:17:e8:cb:6b:7f:db:8a:1c:44:0e:fa:7b: a7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DD:CC:F9:04:8E:CD:69:09:4B:ED:BB:5A:8C:82:EE:C0:6E:E0:1A X509v3 Authority Key Identifier: keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:8d:ae:ac:22:e4:86:67:84:05:21:e6:d5:44:e4:02:b5:84: b3:b9:bd:b1:54:62:e3:13:42:65:a4:fa:de:07:f5:a6:61:c6: dc:5c:4b:1e:d5:2e:a5:fc:2e:ea:46:62:75:cf:25:a9:5a:40: ef:9e:b2:e3:64:32:b4:22:21:19:85:8c:d1:37:2b:fc:8b:14: 66:72:76:61:3f:4f:98:e9:9b:d4:ed:81:19:ac:cf:d3:84:61: 55:51:4d:58:ef:21:34:bc:7a:4b:55:20:59:f5:fd:29:9a:19: 4b:07:80:ec:90:4d:02:75:27:bb:51:9d:df:26:63:c0:9b:1e: 39:50:3b:c0:0d:58:41:b2:28:c1:e3:df:fd:e3:44:59:14:30: ba:bb:e0:e0:bd:0e:77:b5:9d:a1:4e:0b:2d:13:a3:14:27:07: 58:72:cf:15:a6:58:cd:33:76:a9:04:d4:86:9c:1f:c1:76:27: 02:8c:08:12:da:8c:f5:65:47:86:60:a1:89:eb:72:00:5f:37: cd:3a:e7:95:4e:8e:14:00:5f:3f:c1:ab:e9:b2:8f:1c:f3:33: 53:7f:19:e2:a0:53:ed:85:b0:45:22:1b:d0:e0:04:95:62:4c: 77:7b:68:7e:ee:36:8b:52:5a:1d:b1:a8:8f:ea:e8:1f:b2:f7: b0:b5:09:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAyNUExMTAvBgNVBAUTKDczNDA5MEVGQzM3OTgzRkQxNzVCRTAyRjQ5NDk2NjhB MjE0MzcyMjEwHhcNMjQxMTIyMjM0NjQ0WhcNMjQxMTI5MjM0NjQ0WjAYMRYwFAYD VQQDEw02NzQxMTdlNC1hOTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVNuXjCgs+GLhoM14Qp7x7Q8gbpdlm9XGIl95EAjA9kgVBH+tGt9fKJo9Fax QgIW+pko4ONBozdMlZZVj9Lcy+m3M0Tk6dFEmLzHiG2HKd9oJoiwJr4rMf3M8ZAF 9A14TvCmbc/UpNGgoix6wsAujJDlpgcYk+o8NglmtqBs6lb28Hp31hplOFtqvaiV CnORBYKfNAj7NTRmz9CuAX0eGiSa6Qyh9jWKkcfkBH/DlxlJSFwKh75cLbZ42Qdc YJi2kZnzVOONRefvfihDrX/CqOJiAArhIni91GhyYPSJEs7+OhnY2EdiCc9gYOOO kGPEpPQX6Mtrf9uKHEQO+nunOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/dzPkE js1pCUvtu1qMgu7AbuAaMB8GA1UdIwQYMBaAFHNAkO/DeYP9F1vgL0lJZoohQ3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDI1QS9ENUVGMUE5MDMw QUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdfMFhXLUF2U1VsbWlpRkRj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwQ1E3OE41Z18wWFctQXZTVWxtaWlGRGNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDI1QS9ENUVGMUE5MDMwQUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdf MFhXLUF2U1VsbWlpRkRjaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyja6sIuSGZ4QFIebVROQCtYSzub2xVGLjE0JlpPreB/WmYcbcXEse 1S6l/C7qRmJ1zyWpWkDvnrLjZDK0IiEZhYzRNyv8ixRmcnZhP0+Y6ZvU7YEZrM/T hGFVUU1Y7yE0vHpLVSBZ9f0pmhlLB4DskE0CdSe7UZ3fJmPAmx45UDvADVhBsijB 49/940RZFDC6u+DgvQ53tZ2hTgstE6MUJwdYcs8VpljNM3apBNSGnB/BdicCjAgS 2oz1ZUeGYKGJ63IAXzfNOueVTo4UAF8/wavpso8c8zNTfxnioFPthbBFIhvQ4ASV Ykx3e2h+7jaLUlodsaiP6ugfsvewtQk6 -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org