$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: hqqXocVXxF0HiUKrj0d2Mn8UKxlHW83ItOkiAjsp+AI= Subject key identifier: 25:4E:2A:BF:CB:9F:B1:81:B1:83:A6:C1:49:5F:1F:D9:F4:B0:AD:FE Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 0579 Signing time: Fri 22 Nov 2024 22:50:26 +0000 Manifest this update: Fri 22 Nov 2024 22:50:25 +0000 Manifest next update: Fri 29 Nov 2024 22:50:25 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: mc7e3Xx7OOEAjtnLUVM37nY6MPP8jj15e4C5rHAjE3U=) 2: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: UVYU38/2P4ZcsBnZKHRUezkcR8i0kOVNyl3hZT7lyzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: Nov 22 22:50:25 2024 GMT Not After : Nov 29 22:50:25 2024 GMT Subject: CN=67410ab1-6308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:d6:05:25:5a:5e:d8:fe:40:2b:1b:ce:65: bd:be:5e:34:5d:ba:ce:3e:b2:19:f4:1c:28:c5:27: 78:e5:cc:7f:09:2a:09:f0:d3:79:6c:45:78:53:18: 29:df:80:48:2c:9f:29:5e:40:47:0f:c9:14:5f:ac: f1:92:f7:14:f0:af:3b:68:89:ec:18:22:9e:62:89: 39:19:d8:c3:11:c6:ac:cd:51:12:1d:e5:25:6c:61: d0:4f:ca:41:7a:19:5b:f4:b0:15:0a:cf:bd:75:2b: 21:b6:f4:2f:a5:98:3a:f4:af:34:b3:56:4a:d2:28: 37:85:46:4a:d0:cf:f2:3e:8a:58:04:b4:a0:f5:68: b7:12:0c:c3:95:bc:6c:f6:40:a3:ea:dc:53:38:22: d2:5a:cd:36:cb:e1:d2:f5:a4:a8:71:f9:84:bc:b2: 90:40:e4:e8:08:d0:b5:5b:59:19:d3:71:06:e6:24: 79:1f:40:c3:ee:c6:46:74:8c:a3:78:aa:43:cd:71: d8:9c:d6:ef:dc:f0:95:c6:73:1b:8f:d8:e9:2f:7e: 54:b9:6e:3d:82:0e:5a:d1:07:dd:6b:1f:c2:15:ff: 67:c2:3b:78:1a:5e:b5:99:61:25:76:0a:06:4d:e0: 9b:ad:53:21:9b:64:4c:10:83:38:b5:fd:41:c8:4e: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4E:2A:BF:CB:9F:B1:81:B1:83:A6:C1:49:5F:1F:D9:F4:B0:AD:FE X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:ba:89:be:39:dd:da:6d:8e:f5:26:30:4a:43:a6:43:83:6a: 42:65:3e:af:cb:e2:d6:e3:09:98:69:4c:39:6d:d0:5c:cd:96: 0f:96:d0:60:24:0f:2d:ba:e0:b1:45:62:d1:d5:91:23:75:b8: 8f:bb:73:bf:20:ca:7f:d3:37:36:2a:87:0f:f3:47:be:13:56: 1b:66:ad:12:53:a1:bb:fe:03:7f:66:6b:74:3c:42:66:54:af: 4d:b0:a2:b6:79:01:53:12:87:bb:69:a6:6a:3a:3f:4e:a2:17: 09:c3:fc:cb:db:42:48:bb:00:8b:38:cb:84:fc:44:fc:4a:d6: 84:49:c9:33:d4:5c:38:3f:7e:da:79:9d:1b:09:d1:c6:f6:02: d9:bc:b7:bd:6d:de:09:5c:42:27:09:56:e3:b2:dc:08:58:8e: 1f:97:5a:08:f8:83:a6:2f:4b:3a:16:ad:a6:c4:bb:58:71:db: 35:7f:fb:69:be:f4:b4:63:ff:c9:15:48:93:91:b8:49:b7:f0: 8e:bc:4d:86:e8:77:04:48:3d:7a:9b:aa:49:62:a4:ab:0f:2e: eb:6a:1a:0f:3a:90:25:9a:ab:4b:b1:4b:ac:e4:e6:ba:76:66: aa:94:91:69:7e:b7:56:77:1e:5e:34:b4:d4:b5:dd:f0:6f:f5: 06:31:c9:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjQxMTIyMjI1MDI1WhcNMjQxMTI5MjI1MDI1WjAYMRYwFAYD VQQDEw02NzQxMGFiMS02MzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAPWBSVaXtj+QCsbzmW9vl40XbrOPrIZ9BwoxSd45cx/CSoJ8NN5bEV4Uxgp 34BILJ8pXkBHD8kUX6zxkvcU8K87aInsGCKeYok5GdjDEcaszVESHeUlbGHQT8pB ehlb9LAVCs+9dSshtvQvpZg69K80s1ZK0ig3hUZK0M/yPopYBLSg9Wi3EgzDlbxs 9kCj6txTOCLSWs02y+HS9aSocfmEvLKQQOToCNC1W1kZ03EG5iR5H0DD7sZGdIyj eKpDzXHYnNbv3PCVxnMbj9jpL35UuW49gg5a0Qfdax/CFf9nwjt4Gl61mWEldgoG TeCbrVMhm2RMEIM4tf1ByE617wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVOKr/L n7GBsYOmwUlfH9n0sK3+MB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZuom+Od3abY71JjBKQ6ZDg2pCZT6vy+LW4wmYaUw5bdBczZYPltBg JA8tuuCxRWLR1ZEjdbiPu3O/IMp/0zc2KocP80e+E1YbZq0SU6G7/gN/Zmt0PEJm VK9NsKK2eQFTEoe7aaZqOj9OohcJw/zL20JIuwCLOMuE/ET8StaESckz1Fw4P37a eZ0bCdHG9gLZvLe9bd4JXEInCVbjstwIWI4fl1oI+IOmL0s6Fq2mxLtYcds1f/tp vvS0Y//JFUiTkbhJt/COvE2G6HcESD16m6pJYqSrDy7rahoPOpAlmqtLsUus5Oa6 dmaqlJFpfrdWdx5eNLTUtd3wb/UGMclf -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:35 2024 by rpki-client on console-fra.rpki-client.org