$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json) Hash identifier: qOKYfaeX+ytJcLmr5L1EzA+MrP+n7b2nOFw+CFQpdxw= Subject key identifier: 29:2B:BF:BB:84:75:72:9F:94:D7:25:C7:09:2B:DF:87:DA:AA:54:DD Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA Certificate issuer: /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Certificate serial: 05BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft Manifest number: 05B9 Signing time: Fri 22 Nov 2024 22:38:17 +0000 Manifest this update: Fri 22 Nov 2024 22:38:17 +0000 Manifest next update: Fri 29 Nov 2024 22:38:17 +0000 Files and hashes: 1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: KXLKuWFxiIonVOQA3V1cAmZ/qZl63+6cd5PT9n0hf/4=) 2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: 926TgVrFLI48lAWa3hhPjtJO/GgYWtJWROrDl79qu6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Validity Not Before: Nov 22 22:38:17 2024 GMT Not After : Nov 29 22:38:17 2024 GMT Subject: CN=674107d9-1fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d6:0d:25:eb:78:88:bb:5c:80:59:27:e2:ff: bc:ff:89:5e:b5:1c:fd:dc:26:c2:c5:c1:f0:50:d1: 65:ee:3a:9d:cf:cb:d2:05:da:7e:56:ac:ee:4a:ad: e5:6e:c4:20:d5:e2:99:cb:a2:b9:07:8f:1b:97:70: c9:fc:1c:53:08:37:04:38:a7:df:68:e0:61:02:1d: 29:f0:3b:37:c0:08:ce:39:ee:a6:1e:21:29:c0:c9: e0:fa:ba:ad:41:8c:db:5e:bf:7d:91:2e:74:ad:5d: 32:ee:e9:5d:50:b2:30:bc:64:c1:a8:3e:90:d8:3f: 11:7a:d4:b2:73:44:d3:ab:06:39:db:1d:7a:5c:d7: d4:60:b1:2c:53:b2:73:f9:ac:69:cb:81:af:7c:4c: de:10:4c:68:cb:8d:a9:34:42:65:1a:2a:bb:ee:49: 83:72:e1:54:7f:d6:4c:64:1e:06:f7:65:4c:7b:aa: 7c:b2:e7:c3:5f:b8:20:f5:8d:94:f6:c5:23:2f:1c: 0f:be:0e:63:1b:0a:55:9f:3b:4f:e5:29:9c:41:92: 17:4b:d6:eb:c0:12:e1:7b:2f:57:84:5a:4e:db:a2: 9a:87:e2:5f:14:24:61:0d:0f:fe:4f:ac:c1:4b:df: 68:d0:22:c6:fc:a0:f0:26:37:bd:cb:64:4a:69:6c: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2B:BF:BB:84:75:72:9F:94:D7:25:C7:09:2B:DF:87:DA:AA:54:DD X509v3 Authority Key Identifier: keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:fa:f5:17:68:26:4b:07:06:8b:b3:6d:93:f9:28:22:10:3d: b0:11:36:98:97:80:b0:e0:05:4b:cd:e2:31:2d:dd:04:c6:04: 40:2b:e0:ab:bc:99:ba:c7:92:d5:5e:03:08:6b:c1:91:df:ed: 33:ad:51:56:24:09:d1:60:0c:fd:f4:b5:87:55:4e:40:fe:82: 93:88:40:ee:d3:bc:fa:b9:94:a8:4e:8d:05:0f:bb:55:5d:94: 65:3f:d8:e5:96:b7:a4:9a:3f:9d:a0:83:51:a7:59:7d:63:22: 61:d4:b5:91:e5:72:d0:d1:64:ff:2c:33:ac:05:db:08:82:30: be:11:67:f8:0a:43:45:1b:4e:18:c4:ca:d8:58:68:24:1b:55: e6:65:2b:93:00:0b:f2:d5:ba:0b:0e:ac:55:2e:6d:de:72:c6: 32:d1:5e:a5:25:09:9a:e4:c7:30:dd:ea:76:b1:53:c4:64:09: 55:d8:aa:b6:51:93:29:7a:b3:e9:25:f3:04:19:5f:e9:62:45: 0c:0b:36:25:18:34:e9:6c:2f:98:89:99:bc:c6:3a:e0:7d:46: bc:10:06:63:20:f9:c7:8b:f5:5b:03:ae:e0:5e:74:a4:55:82: 32:88:a1:72:9b:87:ed:be:b6:1a:18:f1:d5:1b:8d:bf:1c:88: 24:53:0d:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3M0YxMTAvBgNVBAUTKDkzNDFGOUI3MEY3MTRGMTMxQzUyRTFGRTRCRTVFNUFC OEMyNkVCRUEwHhcNMjQxMTIyMjIzODE3WhcNMjQxMTI5MjIzODE3WjAYMRYwFAYD VQQDEw02NzQxMDdkOS0xZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dYNJet4iLtcgFkn4v+8/4letRz93CbCxcHwUNFl7jqdz8vSBdp+VqzuSq3l bsQg1eKZy6K5B48bl3DJ/BxTCDcEOKffaOBhAh0p8Ds3wAjOOe6mHiEpwMng+rqt QYzbXr99kS50rV0y7uldULIwvGTBqD6Q2D8RetSyc0TTqwY52x16XNfUYLEsU7Jz +axpy4GvfEzeEExoy42pNEJlGiq77kmDcuFUf9ZMZB4G92VMe6p8sufDX7gg9Y2U 9sUjLxwPvg5jGwpVnztP5SmcQZIXS9brwBLhey9XhFpO26Kah+JfFCRhDQ/+T6zB S99o0CLG/KDwJje9y2RKaWxQJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkrv7uE dXKflNclxwkr34faqlTdMB8GA1UdIwQYMBaAFJNB+bcPcU8THFLh/kvl5auMJuvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDczRi9ENkU1NDAzODlE QjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4TWNVdUgtUy1YbHE0d202 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swSDV0dzl4VHhNY1V1SC1TLVhscTR3bTYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDczRi9ENkU1NDAzODlEQjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4 TWNVdUgtUy1YbHE0d202LW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx+vUXaCZLBwaLs22T+SgiED2wETaYl4Cw4AVLzeIxLd0ExgRAK+Cr vJm6x5LVXgMIa8GR3+0zrVFWJAnRYAz99LWHVU5A/oKTiEDu07z6uZSoTo0FD7tV XZRlP9jllrekmj+doINRp1l9YyJh1LWR5XLQ0WT/LDOsBdsIgjC+EWf4CkNFG04Y xMrYWGgkG1XmZSuTAAvy1boLDqxVLm3ecsYy0V6lJQma5Mcw3ep2sVPEZAlV2Kq2 UZMperPpJfMEGV/pYkUMCzYlGDTpbC+YiZm8xjrgfUa8EAZjIPnHi/VbA67gXnSk VYIyiKFym4ftvrYaGPHVG42/HIgkUw2X -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:36 2024 by rpki-client on console-fra.rpki-client.org