$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json) Hash identifier: jWBSz/eU4U3Dg/00RmgoWh0f0NPQtOQgp2wXvkvM0hM= Subject key identifier: AA:A5:FE:FE:CA:B7:2A:45:AD:CD:94:D1:FC:41:9C:C6:2C:48:CF:DA Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 03C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft Manifest number: 03A0 Signing time: Thu 21 Nov 2024 00:23:36 +0000 Manifest this update: Thu 21 Nov 2024 00:23:36 +0000 Manifest next update: Thu 28 Nov 2024 00:23:36 +0000 Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: omy31uxenYPxDISAmsxTykaJwqQi1+PMAh1S9oIbnBA=) 2: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: RXAdqmSBa5R8pArnqqd3C38h3ZgnJT4nvm5yTc/m5SQ=) 3: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: KeTueCm3z2LBug4KnXXzF4iTTZQ8It6Q070daguo0jI=) 4: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: e7+o0oFCUhzzHHgIWSNACl9jZuC2f8qoowBsWPxw+Fs=) 5: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: P0OlJRLvIMDdrF/RijM8YcE19SRlKeRCGV8u4qFW30s=) 6: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: 2EXYCICBvAeJltk6VH8XYxe2JtqWcKEjv0iqiczQGfw=) 7: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: b/gp19EaEtfqCK263TvkCdJtfuwUtevQan/MP233wis=) 8: 5F14A15442D111EF8424E65BC4F9AE02.roa (hash: 93Kt6LwZj8vpnkAC/zmxnrwkVwaQ3ULBvZN+SYlceu0=) 9: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: 7CVfnyqnIiLW71WuBjnEZ7aaTtwRTAZvuVVY0lHLWVc=) 10: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: EMqyfxPHhDkEirOZ3LxPHg+w+AohZeB5bS2RIkYA/qk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: Nov 21 00:23:36 2024 GMT Not After : Nov 28 00:23:36 2024 GMT Subject: CN=673e7d88-6cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:47:d7:c0:95:ca:2f:74:7c:9d:4f:1f:7a: 54:3b:69:02:1f:fc:14:e8:88:f6:49:9e:0b:37:04: 17:d5:7f:8c:26:c5:dd:cf:9f:08:82:67:a9:c4:58: 93:14:02:2c:71:f1:bb:f8:30:3f:94:b4:55:0b:10: ef:ca:c4:4e:f0:bd:cc:70:74:96:84:63:cb:cc:06: 8b:30:e0:6e:a6:89:6c:90:91:d4:f1:89:06:66:fb: ec:a1:ca:67:a5:af:fb:2f:8e:fa:02:8a:7f:c3:dc: 3b:fa:6c:a5:01:61:3e:7b:7d:54:a8:35:c5:82:c5: 46:f3:74:8a:4e:fe:5c:ae:cb:a1:13:80:ca:b9:bc: 29:6e:f6:74:73:0d:c4:aa:b2:f0:3c:d9:1e:d2:95: 51:37:93:75:8e:b6:b1:cf:8e:0f:b1:69:5b:57:1d: 5c:85:b3:bc:87:a1:60:76:f6:57:67:16:6f:ec:a3: 2e:16:08:79:a2:87:cf:99:8b:7e:10:54:24:5b:f8: e4:91:89:dc:41:33:76:0c:6f:00:73:b1:29:df:ac: 1e:5d:bc:5e:fd:22:16:2e:b8:1a:ce:6a:26:9c:7c: 8f:05:49:aa:c5:94:58:5a:ad:7a:ed:7b:c0:80:8d: f5:f9:1c:52:99:52:73:9f:a8:aa:83:d5:56:d5:c9: fa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A5:FE:FE:CA:B7:2A:45:AD:CD:94:D1:FC:41:9C:C6:2C:48:CF:DA X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:1f:25:77:a7:9c:29:1a:d0:74:64:2f:11:5a:e7:ec:91:37: ff:a4:60:fb:70:2a:36:fd:95:a8:23:52:0a:6d:8e:68:be:02: 4a:44:0b:8f:85:50:2d:7d:56:e0:ac:86:73:01:76:f5:26:75: 7e:8f:f1:62:51:94:22:b6:ce:b4:35:ab:ce:7b:64:20:3f:1a: 70:71:c6:15:57:51:33:0c:33:b8:08:d0:57:41:4a:8a:b4:8a: 71:8d:5c:39:f9:d0:96:3b:ec:12:29:bb:96:0b:aa:1c:01:b7: 7e:e6:17:e6:e2:4f:ae:e0:a6:6c:29:2c:28:49:37:0d:f3:c5: 02:6e:07:98:e7:de:81:63:19:aa:a5:89:99:18:09:de:5a:e2: ab:88:1f:a5:74:e1:22:3f:43:57:06:a8:80:21:67:e6:9f:ba: 88:db:55:cb:7f:be:eb:07:70:e5:98:02:32:fb:a3:97:f3:00: 7f:07:85:49:20:e9:5b:e0:23:6c:41:6d:c4:87:aa:11:77:40: 79:1a:7e:ac:4d:b7:ca:09:73:c2:96:12:15:e1:e6:1b:5d:97: 1a:e3:6a:4c:fa:f8:a3:44:c4:81:3d:d6:50:54:bd:fd:fd:e6: 87:04:a5:60:b9:60:91:d5:10:0c:9a:6a:f1:53:84:17:e4:d3: 61:ca:88:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjQxMTIxMDAyMzM2WhcNMjQxMTI4MDAyMzM2WjAYMRYwFAYD VQQDEw02NzNlN2Q4OC02Y2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrhH18CVyi90fJ1PH3pUO2kCH/wU6Ij2SZ4LNwQX1X+MJsXdz58IgmepxFiT FAIscfG7+DA/lLRVCxDvysRO8L3McHSWhGPLzAaLMOBupolskJHU8YkGZvvsocpn pa/7L476Aop/w9w7+mylAWE+e31UqDXFgsVG83SKTv5crsuhE4DKubwpbvZ0cw3E qrLwPNke0pVRN5N1jraxz44PsWlbVx1chbO8h6FgdvZXZxZv7KMuFgh5oofPmYt+ EFQkW/jkkYncQTN2DG8Ac7Ep36weXbxe/SIWLrgazmomnHyPBUmqxZRYWq167XvA gI31+RxSmVJzn6iqg9VW1cn6dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKql/v7K typFrc2U0fxBnMYsSM/aMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1 TERMaHhNdmhSOC16bVpKVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQHyV3p5wpGtB0ZC8RWufskTf/pGD7cCo2/ZWoI1IKbY5ovgJKRAuP hVAtfVbgrIZzAXb1JnV+j/FiUZQits60NavOe2QgPxpwccYVV1EzDDO4CNBXQUqK tIpxjVw5+dCWO+wSKbuWC6ocAbd+5hfm4k+u4KZsKSwoSTcN88UCbgeY596BYxmq pYmZGAneWuKriB+ldOEiP0NXBqiAIWfmn7qI21XLf77rB3DlmAIy+6OX8wB/B4VJ IOlb4CNsQW3Eh6oRd0B5Gn6sTbfKCXPClhIV4eYbXZca42pM+vijRMSBPdZQVL39 /eaHBKVguWCR1RAMmmrxU4QX5NNhyoiL -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:58 2024 by rpki-client on console-fra.rpki-client.org