$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft File: 9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json) Hash identifier: aJ8kTfC6MxeNTrQXV3GO+YAaMjsUHWkws/FXitPnmSk= Subject key identifier: 91:2F:5A:F7:BE:23:88:68:99:22:EF:03:8B:0D:A5:75:38:17:47:F0 Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft Manifest number: 083F Signing time: Wed 20 Nov 2024 20:26:38 +0000 Manifest this update: Wed 20 Nov 2024 20:26:37 +0000 Manifest next update: Wed 27 Nov 2024 20:26:37 +0000 Files and hashes: 1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: f/xPcPpepDPWVCKP2r4Eq8Mt/2uvSmeKN25uifbk1z0=) 2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: 9l2BnAHuJJyrHEmwkIwIFNFXNdEVQXjPc/3IgeT+NA4=) 3: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: 44jc2HCK3ANOLLqkUGNn4VzJW+fDcOLIoQKKCEkW6FQ=) 4: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: uiQHUpFXfMyV6JWHHfyojaNEZ38IK1RSRYCfDGxO9D0=) 5: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: /dh2BYyOs2T7d9tTc6SvzUzA1l6MPCZkZgm7SbaZhYs=) 6: 7DE1B508BC8A11EABAFA684CC4F9AE02.roa (hash: aLYKuPmQ5XZ+o/2rxrD1UHlOU4eVMiGT8zGiWBda0Do=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Nov 20 20:26:37 2024 GMT Not After : Nov 27 20:26:37 2024 GMT Subject: CN=673e45fd-0d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:d2:79:89:fc:5e:eb:1a:30:0f:fb:16:65: c6:d9:ed:57:28:cb:19:5e:31:8f:83:01:ab:f9:b4: b4:67:52:f3:7a:f8:31:9e:36:ed:10:c6:28:2e:fe: cb:82:dd:35:bf:34:63:52:a7:52:52:f4:28:8e:f1: 60:1c:22:a1:3b:1e:f6:19:7b:d7:24:ef:75:47:ce: dd:e9:d2:2c:7a:31:7d:aa:70:3c:fc:f6:36:94:46: 49:e1:41:c5:88:7b:cd:27:7d:13:94:a4:31:1c:f1: e3:d1:3b:76:17:d7:d4:e1:3b:71:8c:79:d1:ad:55: 3a:e4:7c:d8:c0:76:99:f1:39:e7:4f:e1:a3:91:23: d1:36:3b:3c:7d:8e:8b:d4:cd:6d:5e:47:36:74:e9: 88:51:bb:f7:55:f6:b4:51:e2:13:d6:d8:6b:e9:0d: d8:1f:97:75:df:c5:01:b8:0f:58:e8:9f:d1:32:1a: ce:8d:47:0f:a0:a8:1f:bb:cf:47:a4:bf:ce:12:df: b9:32:e7:30:70:11:21:fd:0d:98:3d:a8:52:f6:ff: 45:22:98:d8:f4:15:c8:49:32:96:8d:c0:4a:97:6f: 6c:7d:9d:91:a1:30:f1:06:30:68:80:93:81:de:20: a6:bf:dc:07:e4:05:6a:c3:cd:22:64:24:8b:a4:08: af:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2F:5A:F7:BE:23:88:68:99:22:EF:03:8B:0D:A5:75:38:17:47:F0 X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:8e:31:81:4a:06:c6:3f:98:30:19:e8:05:5f:da:05:83:d6: ca:5d:8f:6b:94:2d:f9:4d:2e:a1:f2:d5:54:3e:e0:78:bc:14: 23:90:fb:d4:3b:73:bd:ca:bf:a8:6e:8a:e9:66:e7:04:63:6d: 9f:78:86:6d:ac:2f:1e:eb:21:d7:42:c4:39:37:33:cd:e0:97: f6:a7:43:46:1a:7a:12:8a:b9:eb:76:41:8e:9b:56:d8:26:de: 2c:27:1b:02:64:9c:5d:da:c4:ca:1d:49:7a:66:6b:3a:2e:d1: fe:2d:71:6c:e3:88:3b:32:f5:6c:9a:6d:04:8f:22:1a:1b:85: 9b:30:41:ba:8b:f9:c1:de:e5:b5:30:12:26:8c:5a:44:a5:cd: aa:eb:6e:23:0d:29:8f:eb:b6:ed:92:90:c6:b8:2a:a0:43:13: 4f:3f:b5:95:fb:d8:da:b6:07:a4:da:c6:e6:fc:98:00:cd:b6: 8f:d8:ac:3c:d8:2b:b8:09:d5:23:ee:ad:c0:b3:11:0a:7b:70: 6d:b2:9c:99:bc:2b:df:c6:4d:cb:be:48:53:30:83:93:02:c4: 9b:af:fc:b4:c6:42:05:f6:2d:c6:40:da:0a:8b:6b:fd:5e:12: fb:41:30:2a:d9:02:7e:89:80:27:c3:ac:f1:87:53:0a:f8:42: e6:16:1c:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjQxMTIwMjAyNjM3WhcNMjQxMTI3MjAyNjM3WjAYMRYwFAYD VQQDEw02NzNlNDVmZC0wZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9/SeYn8XusaMA/7FmXG2e1XKMsZXjGPgwGr+bS0Z1LzevgxnjbtEMYoLv7L gt01vzRjUqdSUvQojvFgHCKhOx72GXvXJO91R87d6dIsejF9qnA8/PY2lEZJ4UHF iHvNJ30TlKQxHPHj0Tt2F9fU4TtxjHnRrVU65HzYwHaZ8TnnT+GjkSPRNjs8fY6L 1M1tXkc2dOmIUbv3Vfa0UeIT1thr6Q3YH5d138UBuA9Y6J/RMhrOjUcPoKgfu89H pL/OEt+5MucwcBEh/Q2YPahS9v9FIpjY9BXISTKWjcBKl29sfZ2RoTDxBjBogJOB 3iCmv9wH5AVqw80iZCSLpAivJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJEvWve+ I4homSLvA4sNpXU4F0fwMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkjjGBSgbGP5gwGegFX9oFg9bKXY9rlC35TS6h8tVUPuB4vBQjkPvU O3O9yr+oborpZucEY22feIZtrC8e6yHXQsQ5NzPN4Jf2p0NGGnoSirnrdkGOm1bY Jt4sJxsCZJxd2sTKHUl6Zms6LtH+LXFs44g7MvVsmm0EjyIaG4WbMEG6i/nB3uW1 MBImjFpEpc2q624jDSmP67btkpDGuCqgQxNPP7WV+9jatgek2sbm/JgAzbaP2Kw8 2Cu4CdUj7q3AsxEKe3BtspyZvCvfxk3LvkhTMIOTAsSbr/y0xkIF9i3GQNoKi2v9 XhL7QTAq2QJ+iYAnw6zxh1MK+ELmFhzS -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:47 2024 by rpki-client on console-fra.rpki-client.org