$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json) Hash identifier: X5Xr5twdf+ry60E7EC4Sv1wZ7skglCevt0Zu6+6LTuQ= Subject key identifier: 77:BA:38:AB:7B:82:6D:7D:D0:60:6D:62:1C:FF:B8:C9:CF:62:F4:2C Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Certificate serial: 025D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft Manifest number: 0259 Signing time: Sat 23 Nov 2024 01:16:33 +0000 Manifest this update: Sat 23 Nov 2024 01:16:33 +0000 Manifest next update: Sat 30 Nov 2024 01:16:33 +0000 Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: vJW8Ju8BiUBm4QMaaPxyEng5you5NxZJN7xWSzMglvo=) 2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: ExzYB06HJpyuOOBGVjUQqoKVQKzLlz5Pavi1Akx/Pyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF Validity Not Before: Nov 23 01:16:33 2024 GMT Not After : Nov 30 01:16:33 2024 GMT Subject: CN=67412cf1-25c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ba:59:7d:8d:00:72:dd:e3:72:80:33:a5:27: de:cc:8e:12:08:64:9e:58:e4:7a:52:a6:15:dd:40: bf:7c:73:e1:27:9a:0d:0c:da:d9:bb:71:c2:26:8c: 93:f4:74:52:22:56:86:74:a9:1f:2e:9c:bf:a2:5f: 45:67:6e:79:b5:7e:b2:53:6b:98:cc:19:a2:1a:bc: 65:6d:10:70:17:3b:5b:7f:9a:86:a8:2b:cc:18:9b: e9:f8:36:91:7d:b5:4a:49:3c:af:b8:91:36:50:01: 22:50:e2:43:dd:3d:62:e5:6a:57:41:38:29:a3:e0: 25:bb:1c:7b:9d:a6:96:b2:f1:e8:47:e9:97:52:32: 69:6a:73:ba:3c:9b:03:fa:2c:8d:08:45:4b:68:72: ad:cf:15:93:a8:f5:a0:cb:3d:14:04:aa:39:f1:e2: b1:da:03:f8:c5:6b:ac:2b:87:7e:c4:64:39:06:1a: 94:85:d3:c4:d7:3d:26:5d:d8:76:96:f7:9c:87:fc: 4b:e7:30:60:14:ce:d4:54:90:c2:88:78:73:89:d2: 04:c7:bb:13:2f:f4:dd:b8:88:3e:8f:85:66:20:95: 7c:c8:7b:aa:01:8a:64:7c:c4:23:f2:74:6e:a6:9e: 09:fd:28:b8:33:7b:96:13:19:e9:b2:6c:39:71:9f: 5f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BA:38:AB:7B:82:6D:7D:D0:60:6D:62:1C:FF:B8:C9:CF:62:F4:2C X509v3 Authority Key Identifier: keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:50:4e:7a:db:77:37:4d:72:4a:9e:9e:04:d8:0e:8e:03:38: 7c:f8:09:e6:1a:d3:cc:4d:9a:07:2f:d5:b4:4c:b6:61:0e:e9: a0:76:52:63:19:81:63:34:d2:3c:8f:27:cb:c7:90:86:54:95: 67:ff:de:b5:05:ea:c8:b4:bf:4e:b4:20:c4:e5:b2:5d:a0:d5: 3e:ae:5d:55:13:fd:d1:3f:22:40:c5:e7:8e:63:a5:c3:ee:73: 39:2a:3e:31:61:43:49:a2:e2:b6:ab:7b:09:22:4b:46:72:95: 37:db:b0:c7:67:be:70:13:b9:8c:5b:04:52:4b:28:61:b1:ab: 6c:57:2a:8e:d6:61:24:95:a2:e0:26:87:fd:3e:44:35:78:f6: 14:44:c3:b7:99:c9:f0:39:15:46:0d:ea:da:a8:0c:7e:98:f5: 77:e7:33:7d:76:25:87:08:57:08:29:bb:6c:6b:92:60:a5:17: 66:ef:10:8c:eb:c0:dd:a1:bb:d2:14:27:03:5f:12:55:8f:c6: 61:bf:43:b5:18:14:2f:d7:d9:6f:8e:5a:d4:b2:d8:e1:63:6d: ac:ab:1d:57:c2:ea:89:33:9e:b5:c0:06:f4:d2:67:36:07:69: 9f:f6:a5:21:63:3c:b6:81:b8:91:ea:b8:53:66:ee:59:30:cf: 70:d7:da:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4 RDc3NTY3QUYwHhcNMjQxMTIzMDExNjMzWhcNMjQxMTMwMDExNjMzWjAYMRYwFAYD VQQDEw02NzQxMmNmMS0yNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLpZfY0Act3jcoAzpSfezI4SCGSeWOR6UqYV3UC/fHPhJ5oNDNrZu3HCJoyT 9HRSIlaGdKkfLpy/ol9FZ255tX6yU2uYzBmiGrxlbRBwFztbf5qGqCvMGJvp+DaR fbVKSTyvuJE2UAEiUOJD3T1i5WpXQTgpo+Aluxx7naaWsvHoR+mXUjJpanO6PJsD +iyNCEVLaHKtzxWTqPWgyz0UBKo58eKx2gP4xWusK4d+xGQ5BhqUhdPE1z0mXdh2 lvech/xL5zBgFM7UVJDCiHhzidIEx7sTL/TduIg+j4VmIJV8yHuqAYpkfMQj8nRu pp4J/Si4M3uWExnpsmw5cZ9fgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHe6OKt7 gm190GBtYhz/uMnPYvQsMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0 NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw YUZFelFWTXNjaGlOZDFaNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrUE5623c3TXJKnp4E2A6OAzh8+AnmGtPMTZoHL9W0TLZhDumgdlJj GYFjNNI8jyfLx5CGVJVn/961BerItL9OtCDE5bJdoNU+rl1VE/3RPyJAxeeOY6XD 7nM5Kj4xYUNJouK2q3sJIktGcpU327DHZ75wE7mMWwRSSyhhsatsVyqO1mEklaLg Jof9PkQ1ePYURMO3mcnwORVGDeraqAx+mPV35zN9diWHCFcIKbtsa5JgpRdm7xCM 68DdobvSFCcDXxJVj8Zhv0O1GBQv19lvjlrUstjhY22sqx1XwuqJM561wAb00mc2 B2mf9qUhYzy2gbiR6rhTZu5ZMM9w19rP -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:46 2024 by rpki-client on console-fra.rpki-client.org