$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json) Hash identifier: jdej3OIukOlpriqjgQFmX9CCg29OJ5p7+INY2moc3Bo= Subject key identifier: F7:25:51:FF:22:8F:6A:DE:F9:8C:83:44:85:FB:3F:49:BA:7D:EC:E3 Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft Manifest number: 13 Signing time: Sat 23 Nov 2024 05:59:20 +0000 Manifest this update: Sat 23 Nov 2024 05:59:19 +0000 Manifest next update: Sat 30 Nov 2024 05:59:19 +0000 Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: lalqB6ZfkqoIUIfcmQnApQcRFMx7j8IhUcOukHnhI1o=) 2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: JjgqoANmsusAqQnFWaBmauCJuNgw+HQl/ZcBjvaDkfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Validity Not Before: Nov 23 05:59:19 2024 GMT Not After : Nov 30 05:59:19 2024 GMT Subject: CN=67416f37-de67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:0e:c5:d7:65:34:cc:b1:17:4e:7b:a7:91: e1:b6:5d:1c:f5:f5:77:c6:ee:f3:34:fe:47:1a:99: f5:12:bb:52:3c:2d:4a:25:1a:51:7f:55:00:cc:14: e6:13:b0:ec:9e:9a:50:10:76:ac:61:a4:af:3c:d8: 82:22:95:36:66:3b:07:01:ae:33:41:92:d5:40:1e: a2:a9:b8:3c:70:e7:84:5e:04:4a:a6:be:f9:a2:40: e3:0e:0e:f1:c6:15:14:ca:af:04:07:9f:99:02:21: d6:8e:8d:d7:c9:d8:d9:3b:62:c5:cb:1e:f7:cc:34: 2f:64:4d:70:5a:9b:3b:d6:07:d5:52:13:17:38:65: 7a:fe:22:c2:d9:98:17:59:34:69:85:a2:a2:c2:b0: 8d:18:aa:44:40:f6:28:20:7b:17:09:b4:50:9d:be: 88:4d:35:38:52:3f:f7:df:cd:f2:5d:40:25:7b:8b: e4:c8:6b:33:a6:a1:2e:ef:af:e4:9a:a1:b5:16:6f: 8d:9d:d0:11:94:19:54:4a:ed:b5:b8:b7:2b:a5:b6: 1c:42:a4:fa:0d:df:eb:96:f6:a6:eb:85:8e:a7:d8: 91:32:f5:c9:13:6a:3b:5e:0f:30:0a:54:79:3b:db: 45:12:98:ac:49:61:06:b4:35:87:75:49:90:28:f9: 3b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:25:51:FF:22:8F:6A:DE:F9:8C:83:44:85:FB:3F:49:BA:7D:EC:E3 X509v3 Authority Key Identifier: keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a9:25:95:b7:69:1b:07:13:fd:33:18:0b:fc:4f:42:3b:04: 3f:77:c1:dd:41:3d:d3:ac:47:36:0e:46:9b:cb:ba:8d:df:a6: ef:84:9a:0d:29:40:bf:4f:bf:20:64:c0:4c:3e:f1:a5:4a:aa: e2:cd:46:77:b3:ca:16:5a:3d:bf:25:4a:b3:4d:cf:84:a8:61: 21:81:5c:76:5a:0d:f4:45:7d:f4:ff:60:bc:f2:58:88:84:2d: 80:a4:68:b3:5d:f7:2b:5c:0a:5c:7d:f3:98:64:20:50:a3:b1: 9e:ff:ba:47:d3:f6:e0:26:fd:f2:f4:d6:c1:17:01:05:76:2f: 59:32:bb:8f:9f:d9:2e:7c:58:59:2d:eb:2a:cd:57:6d:8c:a3: 2a:24:25:2d:5c:a4:ce:36:90:0b:bf:ff:3a:93:38:ea:4c:3c: e0:ee:49:a8:94:02:b8:4b:77:4b:10:3e:86:42:f6:a7:17:e2: 9a:e9:40:ad:2f:b2:1c:bf:25:d4:cc:cb:6d:96:fd:cd:44:c0: 65:84:22:6d:32:fa:ac:cf:ef:4e:30:5e:38:20:7c:31:c1:65: b0:b9:cd:0a:9d:de:5f:e6:a9:a3:9a:ab:cc:d1:65:48:fa:89: c3:fe:d2:12:10:e1:0d:67:92:57:b0:96:1d:fa:74:84:aa:08: 2b:2d:37:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTU0QTExMC8GA1UEBRMoRTY3NThCOUEzNzU5ODJDMkM0RDFDNzY0OUEzMUU0Q0Yy N0Q1QTY4MDAeFw0yNDExMjMwNTU5MTlaFw0yNDExMzAwNTU5MTlaMBgxFjAUBgNV BAMTDTY3NDE2ZjM3LWRlNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIMA7F12U0zLEXTnunkeG2XRz19XfG7vM0/kcamfUSu1I8LUolGlF/VQDMFOYT sOyemlAQdqxhpK882IIilTZmOwcBrjNBktVAHqKpuDxw54ReBEqmvvmiQOMODvHG FRTKrwQHn5kCIdaOjdfJ2Nk7YsXLHvfMNC9kTXBamzvWB9VSExc4ZXr+IsLZmBdZ NGmFoqLCsI0YqkRA9iggexcJtFCdvohNNThSP/ffzfJdQCV7i+TIazOmoS7vr+Sa obUWb42d0BGUGVRK7bW4tyulthxCpPoN3+uW9qbrhY6n2JEy9ckTajteDzAKVHk7 20USmKxJYQa0NYd1SZAo+TvlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9yVR/yKP at75jINEhfs/Sbp97OMwHwYDVR0jBBgwFoAU5nWLmjdZgsLE0cdkmjHkzyfVpoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1NTRBLzgyMkZDMjIwOTFG NzExRUZBREUxMTI2NkM0RjlBRTAyLzVuV0xtamRaZ3NMRTBjZGttakhrenlmVnBv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNW5XTG1qZFpnc0xFMGNka21qSGt6eWZWcG9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 NTRBLzgyMkZDMjIwOTFGNzExRUZBREUxMTI2NkM0RjlBRTAyLzVuV0xtamRaZ3NM RTBjZGttakhrenlmVnBvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC2pJZW3aRsHE/0zGAv8T0I7BD93wd1BPdOsRzYORpvLuo3fpu+Emg0p QL9PvyBkwEw+8aVKquLNRnezyhZaPb8lSrNNz4SoYSGBXHZaDfRFffT/YLzyWIiE LYCkaLNd9ytcClx985hkIFCjsZ7/ukfT9uAm/fL01sEXAQV2L1kyu4+f2S58WFkt 6yrNV22MoyokJS1cpM42kAu//zqTOOpMPODuSaiUArhLd0sQPoZC9qcX4prpQK0v shy/JdTMy22W/c1EwGWEIm0y+qzP704wXjggfDHBZbC5zQqd3l/mqaOaq8zRZUj6 icP+0hIQ4Q1nklewlh36dISqCCstN8c= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org