$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft File: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft (raw, json) Hash identifier: cOuD+JXvT51dKCS//Ygve2u0BmzA9X1aGIfKGGKj4Aw= Subject key identifier: 9B:41:0C:16:49:FA:21:6A:91:76:C6:5F:88:A9:D2:30:28:13:FE:2A Authority key identifier: E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 Certificate issuer: /CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Certificate serial: 0A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft Manifest number: 0A55 Signing time: Fri 22 Nov 2024 19:27:09 +0000 Manifest this update: Fri 22 Nov 2024 19:27:08 +0000 Manifest next update: Fri 29 Nov 2024 19:27:08 +0000 Files and hashes: 1: 4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl (hash: ExMiZOt65us7Omq7SsYXY0K+/QRZ1S+yf3+TrPOkKyU=) 2: 29B9D5B8524111EABEF0A119C4F9AE02.roa (hash: TWQ1ADwa1K2dZAFElhYa7BYiQdhNeF1NWXVQTSgNoBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CA1/serialNumber=E1D95A3CBDD92029AEBE1E1308099E6249CD3624 Validity Not Before: Nov 22 19:27:08 2024 GMT Not After : Nov 29 19:27:08 2024 GMT Subject: CN=6740db0d-f0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:e0:1d:78:5b:36:0e:1c:c8:1e:2d:e4:90: fb:6f:39:44:87:a2:ba:dd:2e:20:9f:18:c5:36:4c: 77:3c:ec:8f:e7:c5:4f:cb:2a:e4:4c:b1:c0:77:25: c0:93:53:97:c4:ad:54:15:ea:e2:ed:f8:e4:80:5d: 33:6f:e0:47:5f:77:03:16:fa:02:7d:5b:82:48:7b: 70:97:aa:d1:ec:99:16:5f:f1:d6:c2:c1:5b:a9:cc: 94:5a:6d:12:1a:96:39:96:79:b3:0f:a6:c2:8e:0f: 7f:ef:26:41:f1:b4:0d:2a:38:04:79:3f:27:73:47: 88:8e:76:2a:f0:cb:ae:04:39:e6:ba:42:66:87:79: 96:4a:c7:bd:96:ef:ff:86:c0:96:2e:48:59:33:44: 64:c4:ce:bf:14:c9:64:58:64:71:35:0c:90:65:18: dc:cd:68:e4:b2:13:d4:76:4d:56:53:fa:6c:6b:30: b9:57:8c:64:c8:44:4c:6c:04:b0:1b:b9:41:cf:b4: c5:b7:6e:10:be:fa:24:b2:e3:2d:73:88:b5:5e:a3: af:b3:df:ea:b2:96:19:b6:fd:9a:a3:53:58:a8:43: a8:f0:86:8c:61:15:90:88:f2:4f:03:aa:b8:6c:5a: e0:5d:a2:04:79:fb:17:11:74:a7:f9:6e:9c:54:ae: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:41:0C:16:49:FA:21:6A:91:76:C6:5F:88:A9:D2:30:28:13:FE:2A X509v3 Authority Key Identifier: keyid:E1:D9:5A:3C:BD:D9:20:29:AE:BE:1E:13:08:09:9E:62:49:CD:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dlaPL3ZICmuvh4TCAmeYknNNiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CA1/7063E424523F11EA8C9CF016C4F9AE02/4dlaPL3ZICmuvh4TCAmeYknNNiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:fd:6a:09:c9:fd:f8:f2:13:f2:2c:e6:26:4b:f4:62:ce:04: 7e:2f:7b:e1:f8:5e:7c:2e:4e:9e:c2:77:82:16:91:ae:87:69: c7:63:45:4e:24:df:e6:53:c8:a7:91:a6:ed:b6:74:70:70:88: f2:36:a8:81:d8:4e:11:74:f8:b8:00:3a:77:f6:93:59:5c:b6: 88:9f:84:a0:78:31:f4:8b:ed:fa:f3:e2:da:9d:9c:42:34:81: 6e:23:e8:d3:b6:2d:04:ce:52:0a:c8:96:26:89:8e:e7:14:05: fb:8e:37:38:c6:ad:a6:93:75:c7:19:50:72:7e:da:48:92:83: 89:6d:f6:6c:24:3a:d5:e1:31:05:a5:48:74:81:f1:20:68:1f: 38:8c:3b:35:29:86:c1:dc:86:04:8d:e7:3b:51:b9:50:1b:e9: 7e:71:f0:98:b0:19:94:59:04:fa:dd:0f:11:98:bd:a2:d0:ea: 80:14:61:c6:71:77:c6:3f:6b:e6:7d:0a:c9:f5:73:98:ce:97: ee:b0:9d:17:c1:f2:de:dc:bd:1d:6f:8b:f5:e7:24:86:9b:10: 08:b6:f6:40:62:9e:4b:5e:f9:7c:cb:b4:c3:2f:8b:49:48:97: d8:b7:27:a4:95:40:e0:a0:e3:1b:52:65:db:63:6b:bc:69:bb: 93:97:ff:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDQTExMTAvBgNVBAUTKEUxRDk1QTNDQkREOTIwMjlBRUJFMUUxMzA4MDk5RTYy NDlDRDM2MjQwHhcNMjQxMTIyMTkyNzA4WhcNMjQxMTI5MTkyNzA4WjAYMRYwFAYD VQQDEw02NzQwZGIwZC1mMGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyngHXhbNg4cyB4t5JD7bzlEh6K63S4gnxjFNkx3POyP58VPyyrkTLHAdyXA k1OXxK1UFeri7fjkgF0zb+BHX3cDFvoCfVuCSHtwl6rR7JkWX/HWwsFbqcyUWm0S GpY5lnmzD6bCjg9/7yZB8bQNKjgEeT8nc0eIjnYq8MuuBDnmukJmh3mWSse9lu// hsCWLkhZM0RkxM6/FMlkWGRxNQyQZRjczWjkshPUdk1WU/psazC5V4xkyERMbASw G7lBz7TFt24QvvoksuMtc4i1XqOvs9/qspYZtv2ao1NYqEOo8IaMYRWQiPJPA6q4 bFrgXaIEefsXEXSn+W6cVK72oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtBDBZJ +iFqkXbGX4ip0jAoE/4qMB8GA1UdIwQYMBaAFOHZWjy92SAprr4eEwgJnmJJzTYk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENBMS83MDYzRTQyNDUy M0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklDbXV2aDRUQ0FtZVlrbk5O aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkbGFQTDNaSUNtdXZoNFRDQW1lWWtuTk5pUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENBMS83MDYzRTQyNDUyM0YxMUVBOEM5Q0YwMTZDNEY5QUUwMi80ZGxhUEwzWklD bXV2aDRUQ0FtZVlrbk5OaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS/WoJyf348hPyLOYmS/RizgR+L3vh+F58Lk6ewneCFpGuh2nHY0VO JN/mU8inkabttnRwcIjyNqiB2E4RdPi4ADp39pNZXLaIn4SgeDH0i+368+LanZxC NIFuI+jTti0EzlIKyJYmiY7nFAX7jjc4xq2mk3XHGVByftpIkoOJbfZsJDrV4TEF pUh0gfEgaB84jDs1KYbB3IYEjec7UblQG+l+cfCYsBmUWQT63Q8RmL2i0OqAFGHG cXfGP2vmfQrJ9XOYzpfusJ0XwfLe3L0db4v15ySGmxAItvZAYp5LXvl8y7TDL4tJ SJfYtyeklUDgoOMbUmXbY2u8abuTl/+E -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org