$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json) Hash identifier: r1Os8cf9aqt35hMZmb0QD/gW7toeaN/kqOIgh4gdjgU= Subject key identifier: B8:23:58:42:4C:44:5D:48:14:BA:75:9E:3F:85:F2:39:CD:F0:DF:43 Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0A75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft Manifest number: 0A51 Signing time: Sun 24 Nov 2024 19:21:54 +0000 Manifest this update: Sun 24 Nov 2024 19:21:53 +0000 Manifest next update: Sun 01 Dec 2024 19:21:53 +0000 Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: HezEFLZl+tzwjH1nQDEygJaw2dFXmsivhsUBBY9MJJw=) 2: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: wiUyotEbzoedB/Q0gb7W+sDI78aGSUuE5BSMkTbJBXA=) 3: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: o8EszhqBbS63QDwDle8oJR0ZCRZ42AQ9Rrdqe6ZMAPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2677 (0xa75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Nov 24 19:21:53 2024 GMT Not After : Dec 1 19:21:53 2024 GMT Subject: CN=67437cd1-acb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:65:42:74:8f:7f:08:8d:de:35:e4:2d:14:cf: 22:ab:ae:ef:19:7f:63:72:24:45:23:d5:d6:7d:5f: dd:8f:10:1d:d6:e4:c2:85:2b:77:48:88:0b:34:63: af:22:1f:f9:31:8a:7f:7b:41:80:bc:91:80:03:47: e4:bd:d7:eb:8d:b6:d2:5c:43:e7:13:1a:90:12:c0: c3:0a:f0:af:26:f1:33:17:25:7e:18:11:78:e0:29: 60:7f:eb:7f:d9:66:6e:67:47:a0:7c:9d:25:35:f4: c2:b5:49:b1:42:7a:4b:ef:62:e2:40:05:1b:f5:82: f8:12:da:68:45:ea:3b:65:44:ad:b1:25:3a:e8:8f: 55:b5:76:ed:ab:a6:36:df:49:7e:7a:95:4c:c8:07: 1e:e2:2d:c4:52:f2:24:fe:d3:5e:3d:5a:67:4a:91: ba:57:31:5e:91:2d:27:4a:76:25:f0:65:ec:75:af: 87:21:64:19:9d:cd:e5:fb:41:70:79:16:8a:67:0e: 3e:44:f0:8a:9c:a4:e9:92:57:bc:4e:0d:43:c6:56: 1a:2e:7e:97:e9:a9:c0:9b:08:b5:19:6e:eb:48:56: 55:f1:dc:2a:42:39:14:38:70:e5:8c:cf:a8:7a:57: 6a:6e:cc:42:b5:fd:07:a9:7a:c4:64:61:14:7b:de: 26:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:23:58:42:4C:44:5D:48:14:BA:75:9E:3F:85:F2:39:CD:F0:DF:43 X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:32:3e:d5:24:0a:81:ad:af:5f:3b:11:f0:6c:1b:c8:33:b4: 08:5b:7a:ea:d0:3a:94:6d:6b:1b:39:6a:63:88:42:cf:2a:7b: 57:42:ee:69:5f:f0:14:42:ae:b0:f2:dd:b6:3d:a4:99:85:6d: e2:e4:89:d1:8a:71:f1:ce:cf:c6:dd:ac:34:b4:dc:a5:c0:e0: a1:37:dd:78:ae:9d:63:67:3a:f6:12:8d:28:65:a3:30:ce:42: 57:b3:d7:94:14:29:ae:7d:7a:9f:02:9a:64:d3:db:b9:60:6c: 99:c0:c8:e6:77:2e:29:e3:c4:14:99:ef:a4:2b:c9:b5:95:d9: 9e:9d:52:1e:f8:9d:10:1c:64:80:b1:97:2a:e0:7c:0d:69:94: 02:14:df:18:b3:2d:36:66:dc:c1:99:1d:19:c8:72:b5:dc:92: 53:da:a4:32:57:26:e3:23:d0:1a:e5:47:3f:f0:ed:5a:06:77: c0:70:f9:9e:72:74:47:88:48:25:4c:71:52:18:ce:a0:61:05: 47:24:31:a4:b4:5b:c5:81:95:d5:96:ec:0e:b4:f0:f6:f7:bb: fd:0c:b9:3f:27:e5:aa:e6:08:07:9b:27:a4:f4:29:c7:51:f9: ce:1a:bc:7f:23:5c:bb:9a:ff:da:05:77:4a:8d:1c:ea:6c:12: c5:31:25:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjQxMTI0MTkyMTUzWhcNMjQxMjAxMTkyMTUzWjAYMRYwFAYD VQQDEw02NzQzN2NkMS1hY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8WVCdI9/CI3eNeQtFM8iq67vGX9jciRFI9XWfV/djxAd1uTChSt3SIgLNGOv Ih/5MYp/e0GAvJGAA0fkvdfrjbbSXEPnExqQEsDDCvCvJvEzFyV+GBF44Clgf+t/ 2WZuZ0egfJ0lNfTCtUmxQnpL72LiQAUb9YL4EtpoReo7ZUStsSU66I9VtXbtq6Y2 30l+epVMyAce4i3EUvIk/tNePVpnSpG6VzFekS0nSnYl8GXsda+HIWQZnc3l+0Fw eRaKZw4+RPCKnKTpkle8Tg1DxlYaLn6X6anAmwi1GW7rSFZV8dwqQjkUOHDljM+o eldqbsxCtf0HqXrEZGEUe94mAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgjWEJM RF1IFLp1nj+F8jnN8N9DMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv N1I4UTNvUm1MbFVqOVZ6STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzMj7VJAqBra9fOxHwbBvIM7QIW3rq0DqUbWsbOWpjiELPKntXQu5p X/AUQq6w8t22PaSZhW3i5InRinHxzs/G3aw0tNylwOChN914rp1jZzr2Eo0oZaMw zkJXs9eUFCmufXqfAppk09u5YGyZwMjmdy4p48QUme+kK8m1ldmenVIe+J0QHGSA sZcq4HwNaZQCFN8Ysy02ZtzBmR0ZyHK13JJT2qQyVybjI9Aa5Uc/8O1aBnfAcPme cnRHiEglTHFSGM6gYQVHJDGktFvFgZXVluwOtPD297v9DLk/J+Wq5ggHmyek9CnH UfnOGrx/I1y7mv/aBXdKjRzqbBLFMSXQ -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:17 2024 by rpki-client on console-fra.rpki-client.org