$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft File: SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft (raw, json) Hash identifier: iHaomMd523XIikQPfup+qOB9DzPWCqMAbacVhmu3Nmo= Subject key identifier: 6C:E8:92:C0:31:EA:A8:DD:5A:97:84:54:B8:09:49:9C:61:7C:85:B5 Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 0745 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft Manifest number: 073D Signing time: Fri 22 Nov 2024 21:12:05 +0000 Manifest this update: Fri 22 Nov 2024 21:12:04 +0000 Manifest next update: Fri 29 Nov 2024 21:12:04 +0000 Files and hashes: 1: SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl (hash: 0SU7LjIFew22zcEn5PlY++kj8d4aSMZyvTXUmht8Yv4=) 2: 484CDD48084B11EBA5FDD126C4F9AE02.roa (hash: Y7eFgzF/UlzHZlIaZMMT6p/6Ir1lnrNlq+1rkd8Vdws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1861 (0x745) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: Nov 22 21:12:04 2024 GMT Not After : Nov 29 21:12:04 2024 GMT Subject: CN=6740f3a4-7c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0b:cd:2a:8f:6e:0f:33:3f:b9:39:cd:25:13: 4e:08:5c:e4:29:cf:f0:bc:8d:6e:0a:7d:04:0e:42: c4:c2:30:1f:3c:cf:a6:cc:da:00:3f:19:06:d4:b6: bb:ae:61:25:d9:1c:95:82:51:a3:3b:3e:a6:c8:98: 0b:67:c4:9a:e7:9e:db:dd:9e:93:17:f2:00:ea:77: 58:00:81:55:9a:d4:f9:da:11:b7:b0:ea:d6:21:f7: c6:29:06:d1:d2:aa:74:2d:a6:aa:15:78:52:c2:a3: fe:b6:a7:c4:39:33:5f:13:2b:e8:c0:0a:d9:0c:c0: 32:04:f7:7b:f4:ac:89:f5:e9:04:34:6c:fb:34:14: eb:0e:c0:47:b2:70:e6:b0:a3:3b:5f:a5:e5:cb:b8: bc:db:c6:6f:09:03:4f:cc:22:06:93:fd:5a:eb:a3: 75:e8:a8:d3:5d:6e:1f:27:23:bb:bd:79:b4:a9:dd: 63:b4:64:54:ed:e6:bd:b0:26:72:5e:09:00:cc:bc: db:fc:cc:2b:50:8f:b2:c9:74:32:91:a5:a8:dc:03: eb:35:b0:a3:53:9c:98:df:52:83:6f:b6:12:d8:53: cc:c8:93:fd:41:21:dc:30:eb:65:5d:53:70:4e:26: c8:f4:6b:fe:a8:59:c8:98:83:33:66:6e:86:09:d6: d0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E8:92:C0:31:EA:A8:DD:5A:97:84:54:B8:09:49:9C:61:7C:85:B5 X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:42:72:ee:a0:5a:90:3c:0e:8c:3a:d0:7d:62:ef:b0:d9:5d: 62:5a:bc:d2:3c:68:2e:e3:42:55:72:f7:ea:fb:e7:df:d0:2f: f9:25:0c:63:6e:a0:4f:99:2d:26:b9:55:20:42:da:a2:d8:45: f1:46:4b:fe:e7:70:9d:f2:90:68:be:fd:0c:7d:60:ac:55:d4: f2:01:d0:29:08:36:1b:60:63:70:8d:68:0e:83:4a:fa:f9:15: ac:d5:df:58:04:8f:b3:5c:1a:07:58:ca:75:f8:14:ef:e1:00: 8b:d8:80:c9:44:40:e1:fa:ad:8a:e5:b9:4b:4c:f9:30:09:0e: 0d:bf:66:72:e9:35:c5:b3:b2:b5:a7:b2:bc:f8:53:05:84:61: 90:c1:f5:18:bc:f0:da:dd:36:0f:98:5f:3a:03:3b:fd:6e:fc: d0:09:34:83:3a:f3:2c:6c:72:30:cd:ef:c6:43:59:ce:4b:cf: 1c:11:3c:f4:df:93:cd:d2:75:ff:4a:bc:d5:1f:ce:51:17:6a: 05:fb:86:ec:0e:94:21:7c:17:c9:fe:8d:4e:9b:c4:6d:a1:2e: 0a:9d:ee:62:ef:64:96:05:47:8e:18:8c:87:39:94:8b:90:e1: bc:29:17:73:3a:2f:b9:c2:48:ec:d7:b7:12:e1:b6:01:2d:75: e3:4b:57:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjQxMTIyMjExMjA0WhcNMjQxMTI5MjExMjA0WjAYMRYwFAYD VQQDEw02NzQwZjNhNC03YzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgvNKo9uDzM/uTnNJRNOCFzkKc/wvI1uCn0EDkLEwjAfPM+mzNoAPxkG1La7 rmEl2RyVglGjOz6myJgLZ8Sa557b3Z6TF/IA6ndYAIFVmtT52hG3sOrWIffGKQbR 0qp0LaaqFXhSwqP+tqfEOTNfEyvowArZDMAyBPd79KyJ9ekENGz7NBTrDsBHsnDm sKM7X6Xly7i828ZvCQNPzCIGk/1a66N16KjTXW4fJyO7vXm0qd1jtGRU7ea9sCZy XgkAzLzb/MwrUI+yyXQykaWo3APrNbCjU5yY31KDb7YS2FPMyJP9QSHcMOtlXVNw TibI9Gv+qFnImIMzZm6GCdbQ/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzoksAx 6qjdWpeEVLgJSZxhfIW1MB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlENC82MDI4OUNFRTA4NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhD Tld4ZmlCY0JqejJmSUo5QjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpQnLuoFqQPA6MOtB9Yu+w2V1iWrzSPGgu40JVcvfq++ff0C/5JQxj bqBPmS0muVUgQtqi2EXxRkv+53Cd8pBovv0MfWCsVdTyAdApCDYbYGNwjWgOg0r6 +RWs1d9YBI+zXBoHWMp1+BTv4QCL2IDJREDh+q2K5blLTPkwCQ4Nv2Zy6TXFs7K1 p7K8+FMFhGGQwfUYvPDa3TYPmF86Azv9bvzQCTSDOvMsbHIwze/GQ1nOS88cETz0 35PN0nX/SrzVH85RF2oF+4bsDpQhfBfJ/o1Om8RtoS4Kne5i72SWBUeOGIyHOZSL kOG8KRdzOi+5wkjs17cS4bYBLXXjS1d5 -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org