$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft File: h88dAWBFUehsJECeSB2vnGZZS_Q.mft (raw, json) Hash identifier: IMQMYXN9RQ85p9vmbgSNMI0WMUAZu+IgUChyNbfLCGA= Subject key identifier: 84:F7:C4:EE:2E:4E:62:1B:5C:85:4D:96:EF:2B:CF:CF:DB:01:BE:95 Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft Manifest number: D5 Signing time: Sat 23 Nov 2024 03:43:38 +0000 Manifest this update: Sat 23 Nov 2024 03:43:38 +0000 Manifest next update: Sat 30 Nov 2024 03:43:38 +0000 Files and hashes: 1: h88dAWBFUehsJECeSB2vnGZZS_Q.crl (hash: wgdmT0lca1skJL4MkmBQiV1mxz/2yXTJauP5wa0PCJ8=) 2: A4E0754863B411EEAADB3A7CC4F9AE02.roa (hash: TbBCV9YqWUCY2Wq1gBoigXibaMg8V4tyOlNdcsB7waU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Nov 23 03:43:38 2024 GMT Not After : Nov 30 03:43:38 2024 GMT Subject: CN=67414f6a-26f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:be:65:ce:03:33:8d:29:1a:9f:3b:63:95: ac:d0:f8:f2:5b:f7:55:67:9e:77:6a:fb:02:87:f4: e9:44:61:1c:7f:40:72:77:aa:12:72:fc:a7:74:9e: a0:45:e1:74:38:f0:34:21:15:0c:75:e2:98:2c:39: 64:18:87:0a:72:37:2e:59:84:de:2f:9d:df:83:2a: ed:d8:d8:e8:e6:96:db:f2:8e:22:a9:06:bb:7c:fa: f1:a2:18:36:25:ea:81:15:fd:69:7b:ab:59:b5:0e: 95:22:72:96:57:31:89:5f:df:7a:78:6e:eb:0d:53: 7d:93:61:e5:5a:97:38:10:ab:d0:3f:a7:aa:1d:84: d8:94:fa:e3:14:5b:51:22:bf:39:03:e2:e9:a5:f2: 9b:eb:5b:51:a3:d7:34:56:ce:42:5b:b4:36:5f:42: 72:9e:a0:60:0d:5e:f9:bd:9d:ef:92:e4:55:e9:7a: 82:7c:b2:fd:cd:c7:e0:cc:16:f4:9a:a9:1d:c4:e6: dc:dc:ec:9c:99:dc:24:38:b9:b8:d6:31:60:c0:dc: 75:4c:6f:30:f5:e8:dc:15:3c:e3:33:31:d6:2a:59: 3e:6d:4c:c7:71:66:38:3f:b5:65:6e:6b:5b:54:90: 2e:10:f3:91:ac:a1:d4:df:97:e0:39:63:99:9a:52: 08:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F7:C4:EE:2E:4E:62:1B:5C:85:4D:96:EF:2B:CF:CF:DB:01:BE:95 X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:f8:61:e5:46:fb:0e:90:c5:51:d8:e6:c8:6d:d0:67:79:ea: 98:4d:09:3f:15:89:fb:48:db:ca:77:fc:b0:b1:a9:d8:43:f2: d9:eb:9b:30:e0:bc:8f:1d:10:3d:36:e1:78:17:77:01:1e:fc: 3d:b4:b0:16:85:17:8b:84:6e:3b:ae:5c:f9:81:00:3a:c2:8d: c4:01:78:99:52:c3:47:ae:07:08:45:7c:42:86:97:df:49:73: 32:16:0c:e5:a4:02:46:5f:2f:79:b5:30:cb:08:8f:e9:58:10: 5b:fc:03:31:87:d1:af:53:71:5e:13:54:0c:74:f3:30:1a:6c: 37:4e:5d:e3:33:de:fb:73:34:c8:4a:da:73:14:2d:81:82:91: 97:00:54:c1:5e:26:94:c4:57:06:b5:e3:cb:ce:54:19:ca:3e: f7:2a:3e:db:d2:04:22:a5:bd:4d:3f:87:c6:4f:89:49:0b:77: e3:df:22:4a:a7:b7:35:bd:c2:7c:af:1f:ab:aa:ae:54:e9:69: 3a:e8:32:28:a3:89:51:c8:1d:f8:86:44:6b:bd:f9:6d:39:b4: 1b:64:61:f6:b9:5a:c3:51:f6:20:51:ba:d7:cc:79:d5:06:97: c6:3e:3d:52:aa:25:36:26:92:82:20:c0:51:f4:aa:f4:92:b5: ea:2f:e5:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjQxMTIzMDM0MzM4WhcNMjQxMTMwMDM0MzM4WjAYMRYwFAYD VQQDEw02NzQxNGY2YS0yNmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw12+Zc4DM40pGp87Y5Ws0PjyW/dVZ553avsCh/TpRGEcf0Byd6oScvyndJ6g ReF0OPA0IRUMdeKYLDlkGIcKcjcuWYTeL53fgyrt2Njo5pbb8o4iqQa7fPrxohg2 JeqBFf1pe6tZtQ6VInKWVzGJX996eG7rDVN9k2HlWpc4EKvQP6eqHYTYlPrjFFtR Ir85A+LppfKb61tRo9c0Vs5CW7Q2X0JynqBgDV75vZ3vkuRV6XqCfLL9zcfgzBb0 mqkdxObc3OycmdwkOLm41jFgwNx1TG8w9ejcFTzjMzHWKlk+bUzHcWY4P7Vlbmtb VJAuEPORrKHU35fgOWOZmlIIOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIT3xO4u TmIbXIVNlu8rz8/bAb6VMB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjA0Mi8wQUVDMUQwQzYzQjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVl aHNKRUNlU0Iydm5HWlpTX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5+GHlRvsOkMVR2ObIbdBneeqYTQk/FYn7SNvKd/ywsanYQ/LZ65sw 4LyPHRA9NuF4F3cBHvw9tLAWhReLhG47rlz5gQA6wo3EAXiZUsNHrgcIRXxChpff SXMyFgzlpAJGXy95tTDLCI/pWBBb/AMxh9GvU3FeE1QMdPMwGmw3Tl3jM977czTI StpzFC2BgpGXAFTBXiaUxFcGtePLzlQZyj73Kj7b0gQipb1NP4fGT4lJC3fj3yJK p7c1vcJ8rx+rqq5U6Wk66DIoo4lRyB34hkRrvfltObQbZGH2uVrDUfYgUbrXzHnV BpfGPj1SqiU2JpKCIMBR9Kr0krXqL+Vw -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org