$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft File: t45_48stS1oeuSimkLxled-IG-k.mft (raw, json) Hash identifier: t9JkyWldulaN4U8IREboNJaGceaLyyLlcA+CzB1fQ/g= Subject key identifier: F4:68:A8:0E:24:67:4A:63:35:6C:DE:C9:6D:49:C6:7B:C8:AF:71:46 Authority key identifier: B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 Certificate issuer: /CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft Manifest number: 43 Signing time: Thu 19 Sep 2024 05:44:23 +0000 Manifest this update: Thu 19 Sep 2024 05:44:23 +0000 Manifest next update: Thu 26 Sep 2024 05:44:23 +0000 Files and hashes: 1: t45_48stS1oeuSimkLxled-IG-k.crl (hash: SUNonkT2RH27n5XOxYdP/3t+NQmpRi+Hv6LZeL6MQMs=) 2: 60E63D04171011EFA738EE2BC4F9AE02.roa (hash: iReDfLqRxfTZkPayNDNmZrUu0wmrLzIrP8Y6SS0tvkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3/serialNumber=B78E7FE3CB2D4B5A1EB928A690BC6579DF881BE9 Validity Not Before: Sep 19 05:44:23 2024 GMT Not After : Sep 26 05:44:23 2024 GMT Subject: CN=66ebba37-be4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:de:2b:f9:90:4c:0c:b6:e5:9f:ee:31:3e: 01:6f:4a:bf:2b:52:52:70:a3:eb:1f:07:f1:5c:9d: 31:e2:61:14:4a:99:ee:cd:a5:b0:fd:7a:16:2a:f9: 64:e7:cc:6a:8e:0c:f5:1a:db:d7:f2:83:df:a3:52: 0f:7b:a2:c6:c5:c9:6b:53:7b:85:86:9f:0e:c5:21: 88:de:b6:1f:fa:3c:b9:39:90:c6:5f:b5:ac:c3:d4: b9:d3:44:a7:fd:e3:04:1f:ea:e7:c8:79:f2:3d:3d: 54:b8:c7:9f:ad:42:06:15:bd:75:b8:8f:cb:6d:86: 9a:f7:23:17:c4:a8:bb:10:26:a5:55:51:32:45:5a: c3:7b:c3:29:43:7e:d9:c9:37:c2:85:19:f9:27:2a: 9a:3c:b7:c9:88:47:81:ac:5d:a0:63:d9:f4:b2:b5: 4e:3e:8c:d3:9f:cb:ed:2c:23:6a:5e:67:3f:44:b0: 34:52:11:03:12:93:78:bb:12:c6:bc:b9:db:7b:25: 19:11:26:26:97:0a:cd:a0:0a:00:b2:08:bc:ab:7a: 2c:9a:3f:00:c1:a8:cb:b0:99:38:47:ef:bf:60:cb: 3d:b9:51:52:77:4d:e9:84:d4:75:e8:12:93:3e:05: 56:19:4a:45:53:d5:2c:bf:a9:52:08:a7:17:c6:57: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:68:A8:0E:24:67:4A:63:35:6C:DE:C9:6D:49:C6:7B:C8:AF:71:46 X509v3 Authority Key Identifier: keyid:B7:8E:7F:E3:CB:2D:4B:5A:1E:B9:28:A6:90:BC:65:79:DF:88:1B:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t45_48stS1oeuSimkLxled-IG-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/7AA8943E170C11EF94F17C14C4F9AE02/t45_48stS1oeuSimkLxled-IG-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:73:fb:c6:4c:bf:fc:a3:b8:d9:82:62:7c:9a:f7:e8:c5:3a: f8:0c:b4:0c:98:0b:d9:33:10:f1:0c:9b:e3:43:24:f8:3b:cf: 9e:31:9d:a8:67:a0:f2:56:f4:40:f3:f0:cd:e1:ff:19:32:b3: 49:18:85:98:95:aa:a0:d4:16:54:1e:57:45:18:2d:36:b2:f2: 99:95:4e:a5:ac:d3:a2:1c:0b:ad:b1:23:6f:ed:a3:d0:41:8b: f8:fc:92:8e:12:96:0c:ca:1b:2a:f5:fd:a5:db:a4:d6:03:63: 0f:35:2e:8e:a4:4e:ce:bb:c4:24:5d:31:27:88:95:69:d8:f6: da:5e:16:a7:7c:a2:4e:a9:0a:85:4b:fd:b9:95:33:98:1f:33: ca:c3:02:ab:9c:2b:b7:11:a5:cd:7e:66:12:67:01:75:19:ab: c0:15:78:46:e4:60:3f:59:c6:83:1a:5c:90:68:d4:9a:cf:e9: 15:73:48:2b:e4:74:a5:17:c4:da:f3:4f:a9:5c:e0:cb:a6:68: f7:2a:07:ac:cb:5f:94:e8:43:87:82:68:44:ab:16:44:fc:fd: 0e:17:fc:80:c9:a2:a8:c5:cb:22:9c:01:84:f3:a5:5c:f4:25: d1:c1:c3:f0:79:57:51:52:3a:34:0d:2a:9f:49:bb:80:94:0a: d8:47:1a:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MjJFMzExMC8GA1UEBRMoQjc4RTdGRTNDQjJENEI1QTFFQjkyOEE2OTBCQzY1NzlE Rjg4MUJFOTAeFw0yNDA5MTkwNTQ0MjNaFw0yNDA5MjYwNTQ0MjNaMBgxFjAUBgNV BAMTDTY2ZWJiYTM3LWJlNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC43t4r+ZBMDLbln+4xPgFvSr8rUlJwo+sfB/FcnTHiYRRKme7NpbD9ehYq+WTn zGqODPUa29fyg9+jUg97osbFyWtTe4WGnw7FIYjeth/6PLk5kMZftazD1LnTRKf9 4wQf6ufIefI9PVS4x5+tQgYVvXW4j8tthpr3IxfEqLsQJqVVUTJFWsN7wylDftnJ N8KFGfknKpo8t8mIR4GsXaBj2fSytU4+jNOfy+0sI2peZz9EsDRSEQMSk3i7Esa8 udt7JRkRJiaXCs2gCgCyCLyreiyaPwDBqMuwmThH779gyz25UVJ3TemE1HXoEpM+ BVYZSkVT1Sy/qVIIpxfGVz0tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9GioDiRn SmM1bN7JbUnGe8ivcUYwHwYDVR0jBBgwFoAUt45/48stS1oeuSimkLxled+IG+kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUyMkUzLzdBQTg5NDNFMTcw QzExRUY5NEYxN0MxNEM0RjlBRTAyL3Q0NV80OHN0UzFvZXVTaW1rTHhsZWQtSUct ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdDQ1XzQ4c3RTMW9ldVNpbWtMeGxlZC1JRy1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUy MkUzLzdBQTg5NDNFMTcwQzExRUY5NEYxN0MxNEM0RjlBRTAyL3Q0NV80OHN0UzFv ZXVTaW1rTHhsZWQtSUctay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEtz+8ZMv/yjuNmCYnya9+jFOvgMtAyYC9kzEPEMm+NDJPg7z54xnahn oPJW9EDz8M3h/xkys0kYhZiVqqDUFlQeV0UYLTay8pmVTqWs06IcC62xI2/to9BB i/j8ko4SlgzKGyr1/aXbpNYDYw81Lo6kTs67xCRdMSeIlWnY9tpeFqd8ok6pCoVL /bmVM5gfM8rDAqucK7cRpc1+ZhJnAXUZq8AVeEbkYD9ZxoMaXJBo1JrP6RVzSCvk dKUXxNrzT6lc4MumaPcqB6zLX5ToQ4eCaESrFkT8/Q4X/IDJoqjFyyKcAYTzpVz0 JdHBw/B5V1FSOjQNKp9Ju4CUCthHGsI= -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:25 2024 by rpki-client on console-fra.rpki-client.org