$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft File: 594x-t7TeUFNZ_u89R2XZRTjQiU.mft (raw, json) Hash identifier: MdXb254MpCBU+bxf/HbqaFY8fci3OLCq6EaLqJZqfrg= Subject key identifier: 83:51:DF:C1:DD:93:6F:EC:D0:5D:B1:67:1E:5F:D8:E1:C2:DD:AF:62 Authority key identifier: E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 Certificate issuer: /CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Certificate serial: 0D0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft Manifest number: 0CEF Signing time: Fri 22 Nov 2024 18:01:28 +0000 Manifest this update: Fri 22 Nov 2024 18:01:28 +0000 Manifest next update: Fri 29 Nov 2024 18:01:28 +0000 Files and hashes: 1: 594x-t7TeUFNZ_u89R2XZRTjQiU.crl (hash: SoO1MFkaeG442ajouU8A2jEE9s3wvs/AuOvoOrdyfrk=) 2: CAE1D9E2404611EB913D5C10C4F9AE02.roa (hash: Ax63BRCrGm3rOVIvpURoa8KAyGx4REQ36ZFskHiV9Hs=) 3: 06F741E24D6611EC904C6735C4F9AE02.roa (hash: Tr0TcDaKhs0IrtjnJscJEzvi3eMRx7BRWAy9HhlMWk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3341 (0xd0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9FF0/serialNumber=E7DE31FADED379414D67FBBCF51D976514E34225 Validity Not Before: Nov 22 18:01:28 2024 GMT Not After : Nov 29 18:01:28 2024 GMT Subject: CN=6740c6f8-8980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:34:61:76:d4:51:6c:e8:07:ec:ed:a9:73:b8: 91:c3:86:3d:14:18:eb:a2:e9:d5:7b:db:ac:6e:f5: a9:56:00:ab:59:e1:40:33:41:23:90:a8:c5:31:43: fc:dd:3c:62:49:a3:ee:3c:f7:f6:37:35:e1:0e:c4: e4:8e:91:21:1e:44:cd:7e:e9:36:4a:8e:66:ad:77: 3f:5e:04:0e:4e:a0:c6:3c:a3:9f:da:0c:89:cd:4a: e5:de:32:a1:dd:10:1b:10:82:cf:9b:1e:72:58:d1: 1b:5b:95:45:5b:39:c7:92:bb:63:a7:b4:cd:c2:06: 29:47:80:d1:0e:0c:31:f9:e3:99:3b:9e:f9:b7:48: d5:d1:b3:8c:28:a6:b9:1a:c0:af:19:6e:7c:2f:58: c8:36:88:6d:c8:89:c4:d4:ad:68:37:7d:ba:d2:ed: 88:e8:7f:51:74:0b:7b:d2:b7:0d:48:3f:4a:6f:23: 90:48:2e:69:b5:a2:ad:25:a8:db:67:b7:94:14:74: 4d:9f:05:c1:4d:8f:94:d9:4c:61:3a:a6:0f:00:68: 86:93:f6:13:93:e0:9f:ab:3f:ec:35:58:e3:3a:04: f9:fc:69:02:69:01:af:03:87:2a:51:48:56:a0:cd: 4e:19:cb:72:57:9c:f4:e4:2c:c3:a1:9d:0b:db:cf: b5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:51:DF:C1:DD:93:6F:EC:D0:5D:B1:67:1E:5F:D8:E1:C2:DD:AF:62 X509v3 Authority Key Identifier: keyid:E7:DE:31:FA:DE:D3:79:41:4D:67:FB:BC:F5:1D:97:65:14:E3:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/594x-t7TeUFNZ_u89R2XZRTjQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9FF0/94330FE6D46911E98F01982CC4F9AE02/594x-t7TeUFNZ_u89R2XZRTjQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c2:63:f9:d8:47:ed:ca:d5:66:a1:3d:7f:c7:ec:18:51:7a: 29:0c:a2:12:88:8e:a1:df:1d:70:30:c8:f8:f5:c1:ad:2f:c8: a6:01:13:37:2b:2f:b9:2d:e2:f8:c0:f1:15:9c:b1:92:3c:08: c8:3f:c3:2e:ab:70:f4:54:74:9b:97:5b:4b:8e:a7:ff:29:9f: 59:72:ed:a3:37:31:84:ad:cd:0e:fc:9d:97:9b:7b:d8:25:7d: a2:b5:aa:d3:a4:8b:38:7a:35:36:99:c0:fa:fa:cf:a4:88:62: 64:d6:2c:b3:8e:37:d0:94:e8:f4:76:12:b7:b5:a0:93:ca:82: 45:d5:3d:b2:76:d3:d7:24:01:bc:70:77:26:8a:cc:9b:a5:fd: 9a:f5:33:33:77:99:c3:63:ea:08:94:fc:33:a6:2e:da:93:32: 66:9e:b6:c0:79:6e:e5:cf:04:8c:f1:d6:f7:bb:f2:71:c5:c6: 99:59:d0:82:3e:d9:92:2c:dc:31:57:f5:14:29:2c:4f:d1:1e: ec:b2:56:89:1d:e8:00:98:41:83:fe:f9:d3:0d:f4:63:19:17: 88:5b:16:63:86:33:a0:79:8e:4b:76:fa:6c:7b:f0:65:46:0a: f0:cc:b1:23:1c:49:df:98:d9:f2:3c:9b:fd:04:83:1c:10:11: ba:e0:c4:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGRjAxMTAvBgNVBAUTKEU3REUzMUZBREVEMzc5NDE0RDY3RkJCQ0Y1MUQ5NzY1 MTRFMzQyMjUwHhcNMjQxMTIyMTgwMTI4WhcNMjQxMTI5MTgwMTI4WjAYMRYwFAYD VQQDEw02NzQwYzZmOC04OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTRhdtRRbOgH7O2pc7iRw4Y9FBjrounVe9usbvWpVgCrWeFAM0EjkKjFMUP8 3TxiSaPuPPf2NzXhDsTkjpEhHkTNfuk2So5mrXc/XgQOTqDGPKOf2gyJzUrl3jKh 3RAbEILPmx5yWNEbW5VFWznHkrtjp7TNwgYpR4DRDgwx+eOZO575t0jV0bOMKKa5 GsCvGW58L1jINohtyInE1K1oN3260u2I6H9RdAt70rcNSD9KbyOQSC5ptaKtJajb Z7eUFHRNnwXBTY+U2UxhOqYPAGiGk/YTk+Cfqz/sNVjjOgT5/GkCaQGvA4cqUUhW oM1OGctyV5z05CzDoZ0L28+1twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINR38Hd k2/s0F2xZx5f2OHC3a9iMB8GA1UdIwQYMBaAFOfeMfre03lBTWf7vPUdl2UU40Il MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUZGMC85NDMzMEZFNkQ0 NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVVRk5aX3U4OVIyWFpSVGpR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU5NHgtdDdUZVVGTlpfdTg5UjJYWlJUalFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUZGMC85NDMzMEZFNkQ0NjkxMUU5OEYwMTk4MkNDNEY5QUUwMi81OTR4LXQ3VGVV Rk5aX3U4OVIyWFpSVGpRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/wmP52EftytVmoT1/x+wYUXopDKISiI6h3x1wMMj49cGtL8imARM3 Ky+5LeL4wPEVnLGSPAjIP8Muq3D0VHSbl1tLjqf/KZ9Zcu2jNzGErc0O/J2Xm3vY JX2itarTpIs4ejU2mcD6+s+kiGJk1iyzjjfQlOj0dhK3taCTyoJF1T2ydtPXJAG8 cHcmisybpf2a9TMzd5nDY+oIlPwzpi7akzJmnrbAeW7lzwSM8db3u/JxxcaZWdCC PtmSLNwxV/UUKSxP0R7sslaJHegAmEGD/vnTDfRjGReIWxZjhjOgeY5Ldvpse/Bl RgrwzLEjHEnfmNnyPJv9BIMcEBG64MSi -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org