$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft File: t45_48stS1oeuSimkLxled-IG-k.mft (raw, json) Hash identifier: gJN01gq0qrtdHar70P2N39kNuYKyLZl0VyiyQWo386M= Subject key identifier: 40:67:BA:F0:E8:E8:50:D1:41:6E:96:60:0B:5E:B3:3A:81:C9:99:3E Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 Certificate issuer: /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft Manifest number: 63 Signing time: Thu 21 Nov 2024 05:07:00 +0000 Manifest this update: Thu 21 Nov 2024 05:07:00 +0000 Manifest next update: Thu 28 Nov 2024 05:07:00 +0000 Files and hashes: 1: t45_48stS1oeuSimkLxled-IG-k.crl (hash: AlyVBvrV4mVkHz55uBnxXzFg1H40HV5vCpNZxgieUbE=) 2: 60E63D04171011EFA738EE2BC4F9AE02.roa (hash: iReDfLqRxfTZkPayNDNmZrUu0wmrLzIrP8Y6SS0tvkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Validity Not Before: Nov 21 05:07:00 2024 GMT Not After : Nov 28 05:07:00 2024 GMT Subject: CN=673ebff4-231f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:64:8b:4e:ba:19:96:8b:f8:2b:a5:1e:68:75: 16:6d:b5:5f:94:ce:cf:e5:00:ad:77:7a:2a:9c:c1: 76:1f:e2:8e:be:ee:ff:64:a6:3d:e4:07:7b:5d:7d: f2:c9:b9:b4:91:83:b0:24:e3:b2:9c:c8:6c:06:ad: 20:7b:a1:65:be:7e:88:3d:68:4a:e2:5d:f7:94:b4: b3:50:c8:59:87:2f:91:9a:79:44:3d:ec:2d:4d:33: 66:5c:33:98:03:70:c1:f7:e8:f4:02:96:d2:7c:8a: 86:38:af:bb:49:fd:3e:15:9c:0e:af:d3:1e:0c:a9: 5b:75:0f:f3:1f:c3:b7:50:e3:d8:d6:f0:d7:75:59: 8c:ba:a6:75:d6:3e:d7:af:cb:07:12:66:66:a9:67: 7e:f3:a5:f4:cb:82:59:fb:25:7a:65:98:fb:75:a1: bd:dc:57:27:e5:f1:53:24:3e:2f:49:38:5e:7c:1e: 6d:e3:1c:f7:ad:27:b0:bd:4c:c8:d5:60:5f:6b:60: 8f:4d:ef:77:16:ae:19:dc:79:b2:7a:e5:d1:aa:e2: a0:7d:3a:09:72:79:18:64:f0:60:8d:4d:8c:b5:01: ae:dd:6d:a8:84:3a:1c:4c:0e:94:04:42:59:51:25: 32:14:78:ec:48:ab:57:fc:81:7b:e3:b6:a0:b7:1d: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:67:BA:F0:E8:E8:50:D1:41:6E:96:60:0B:5E:B3:3A:81:C9:99:3E X509v3 Authority Key Identifier: keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:73:e0:44:a1:bc:d1:12:db:2b:8f:7b:5f:f8:02:a0:a7:e1: d3:a1:03:94:8e:8e:be:98:69:f7:66:f5:b1:9a:bc:fc:ca:f1: f6:c2:a5:c4:51:fa:71:f3:4f:1e:9f:73:8f:fd:5a:be:9a:84: cc:b6:9f:4e:f0:71:70:81:7d:30:aa:15:28:7c:07:18:ac:4c: 0b:53:e7:48:07:41:67:49:d8:3d:22:c0:3e:e3:64:4d:8b:31: 90:61:a0:b5:d9:3a:14:0c:ae:15:79:d6:3d:6d:3d:f1:6e:03: 06:5d:05:d5:e4:9c:5d:50:37:dc:d1:3e:72:44:71:88:13:4f: 41:43:89:f4:03:81:ea:99:7e:b3:23:89:8e:23:b3:05:9e:08: 2f:73:ce:b6:29:72:d9:b4:07:e0:ef:21:d8:d1:8c:94:36:db: 10:3e:9d:72:45:81:aa:09:34:09:52:7e:66:fd:ed:1a:55:ff: fd:53:66:c9:7c:3d:1e:08:98:0b:7f:e5:69:72:0b:ad:7d:51: 21:33:e3:e0:00:b6:f1:1a:06:e2:d7:bb:50:32:79:bf:a9:42: d4:1b:9e:75:6b:d9:bf:40:ed:cc:78:59:00:24:d8:45:f4:15: 62:ad:c0:b0:4b:93:c0:f8:c1:c7:2a:01:9d:0b:72:87:65:3e: 84:be:5e:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MjJFMzExMC8GA1UEBRMoQjc4RTdGRTNDQjJENEI1QTFFQjkyOEE2OTBCQzY1NzlE Rjg4MUJFOTAeFw0yNDExMjEwNTA3MDBaFw0yNDExMjgwNTA3MDBaMBgxFjAUBgNV BAMTDTY3M2ViZmY0LTIzMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUZItOuhmWi/grpR5odRZttV+Uzs/lAK13eiqcwXYf4o6+7v9kpj3kB3tdffLJ ubSRg7Ak47KcyGwGrSB7oWW+fog9aEriXfeUtLNQyFmHL5GaeUQ97C1NM2ZcM5gD cMH36PQCltJ8ioY4r7tJ/T4VnA6v0x4MqVt1D/Mfw7dQ49jW8Nd1WYy6pnXWPtev ywcSZmapZ37zpfTLgln7JXplmPt1ob3cVyfl8VMkPi9JOF58Hm3jHPetJ7C9TMjV YF9rYI9N73cWrhncebJ65dGq4qB9OglyeRhk8GCNTYy1Aa7dbaiEOhxMDpQEQllR JTIUeOxIq1f8gXvjtqC3HTpbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQGe68Ojo UNFBbpZgC16zOoHJmT4wHwYDVR0jBBgwFoAUt45/48stS1oeuSimkLxled+IG+kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyMkUzLzdBQTg5NDNFMTcw QzExRUY5NEYxN0MxNEM0RjlBRTAyL3Q0NV80OHN0UzFvZXVTaW1rTHhsZWQtSUct ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdDQ1XzQ4c3RTMW9ldVNpbWtMeGxlZC1JRy1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy MkUzLzdBQTg5NDNFMTcwQzExRUY5NEYxN0MxNEM0RjlBRTAyL3Q0NV80OHN0UzFv ZXVTaW1rTHhsZWQtSUctay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIZz4EShvNES2yuPe1/4AqCn4dOhA5SOjr6Yafdm9bGavPzK8fbCpcRR +nHzTx6fc4/9Wr6ahMy2n07wcXCBfTCqFSh8BxisTAtT50gHQWdJ2D0iwD7jZE2L MZBhoLXZOhQMrhV51j1tPfFuAwZdBdXknF1QN9zRPnJEcYgTT0FDifQDgeqZfrMj iY4jswWeCC9zzrYpctm0B+DvIdjRjJQ22xA+nXJFgaoJNAlSfmb97RpV//1TZsl8 PR4ImAt/5WlyC619USEz4+AAtvEaBuLXu1Ayeb+pQtQbnnVr2b9A7cx4WQAk2EX0 FWKtwLBLk8D4wccqAZ0LcodlPoS+Xhc= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:39 2024 by rpki-client on console-ams.rpki-client.org