$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: MJZAv3UV6WcDzT7fuqLBtQapn9a2p8bnX0O6opbCfTI= Subject key identifier: 43:67:82:05:E5:F3:C2:28:BA:3E:E4:45:1C:7A:D1:01:4F:D3:3B:64 Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: 32 Signing time: Thu 21 Nov 2024 05:43:23 +0000 Manifest this update: Thu 21 Nov 2024 05:43:22 +0000 Manifest next update: Thu 28 Nov 2024 05:43:22 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: oOqpDt00vso5QZ6tsn7UHt4eexE+BCOXjTXR/PQgFhA=) 2: 58CA0E62615111EFACF30C14C4F9AE02.roa (hash: n/H7m4JyEx7dcVifKMlTV7vtmvQ/Ig1JHl4d6IW0aVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Nov 21 05:43:22 2024 GMT Not After : Nov 28 05:43:22 2024 GMT Subject: CN=673ec87b-5e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:e2:39:f3:04:39:a8:e9:e2:a5:4a:17:e7: 89:f8:22:1c:9a:8b:df:8d:e8:9b:59:1d:28:c4:53: e5:a0:b7:71:99:64:b1:e1:8d:93:e6:53:58:2a:79: 4b:25:52:d4:88:59:66:65:e7:09:12:fd:73:4f:83: b1:e4:5e:4d:87:ce:82:52:f3:97:16:8c:c9:e1:fb: b5:aa:e6:ea:81:c3:23:ca:cd:0f:2e:04:f6:1a:f0: 07:50:05:a7:10:bb:5a:19:13:36:fa:db:64:27:ff: 8e:80:0d:27:09:bd:71:9f:3d:7f:d4:02:32:fe:23: 3a:04:6c:c4:3a:a9:3b:47:86:34:73:af:0f:df:5c: 20:52:f6:10:b7:bb:c6:1f:4d:de:c2:dc:f4:bd:6b: 2a:3a:86:59:24:7a:71:2d:c5:23:b0:8c:49:24:42: 2d:97:b6:34:9f:54:3b:0b:00:45:8d:fd:84:e5:be: 94:b3:dd:28:9b:e0:09:3f:af:9c:eb:0c:d6:6d:9e: 1d:7f:c3:43:b1:3e:80:53:34:b1:26:cd:11:63:f4: 3b:69:20:10:e1:e6:3f:77:bf:9e:d2:28:85:5a:97: b7:f4:56:d4:4b:9b:98:fa:41:7f:f0:bf:39:3e:1c: 65:96:25:5f:e0:9f:78:3c:e4:7d:0d:d0:b7:a6:5b: c1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:82:05:E5:F3:C2:28:BA:3E:E4:45:1C:7A:D1:01:4F:D3:3B:64 X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:ce:e2:66:50:20:c9:61:48:87:26:a5:19:c4:2e:90:b6:1e: 37:9e:82:3f:e4:61:9a:ba:e4:af:e1:eb:2a:31:74:87:44:5a: 83:f3:da:64:f2:fd:15:50:27:79:75:73:23:68:f9:c0:db:a3: c5:f3:9e:f0:c9:7b:3e:85:02:4f:e5:1f:91:a9:95:69:95:c4: 6d:e5:3f:42:e1:b1:d9:d3:dd:41:ce:d1:cb:81:f1:b7:4f:ea: f8:f6:fa:5d:38:38:74:0f:8e:9e:a8:fc:d5:cd:21:8f:87:39: 73:6b:ac:6c:71:32:f0:0f:6e:0f:db:4b:d1:9c:ac:87:5d:e4: 2a:c2:b3:0b:f8:46:76:ac:e8:b1:80:8b:99:71:d4:7a:fe:3b: ed:49:01:72:32:15:fb:3c:bb:64:99:ed:4a:30:74:59:ca:8e: e3:d0:20:9e:19:db:e8:2a:4f:b7:08:f6:62:71:a5:4f:f6:ff: ff:b8:b1:14:52:17:a1:37:13:b2:d3:69:7b:ad:75:39:11:a8: 13:0a:cb:ae:78:18:fc:63:78:2f:f4:7c:ae:6d:e8:7e:70:08: 8a:8e:e0:23:52:5a:f3:2e:1e:ca:56:8e:dd:da:87:51:04:b0: 7f:9b:fd:42:cc:2c:f6:de:83:4e:dd:7b:25:cd:70:60:8f:f3: cf:2a:a8:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkI5QTExMC8GA1UEBRMoRjlDNDQ0Q0ZDRjNCNkEzNzU0NzFFM0I1NDg3NEZDMkI0 OUIyQzcyNjAeFw0yNDExMjEwNTQzMjJaFw0yNDExMjgwNTQzMjJaMBgxFjAUBgNV BAMTDTY3M2VjODdiLTVlNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCm2+I58wQ5qOnipUoX54n4Ihyai9+N6JtZHSjEU+Wgt3GZZLHhjZPmU1gqeUsl UtSIWWZl5wkS/XNPg7HkXk2HzoJS85cWjMnh+7Wq5uqBwyPKzQ8uBPYa8AdQBacQ u1oZEzb622Qn/46ADScJvXGfPX/UAjL+IzoEbMQ6qTtHhjRzrw/fXCBS9hC3u8Yf Td7C3PS9ayo6hlkkenEtxSOwjEkkQi2XtjSfVDsLAEWN/YTlvpSz3Sib4Ak/r5zr DNZtnh1/w0OxPoBTNLEmzRFj9DtpIBDh5j93v57SKIVal7f0VtRLm5j6QX/wvzk+ HGWWJV/gn3g85H0N0LemW8GxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ2eCBeXz wii6PuRFHHrRAU/TO2QwHwYDVR0jBBgwFoAU+cREz887ajdUceO1SHT8K0myxyYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QjlBLzExNjAxMjhFNjE1 MDExRUZBRTdBOEM3M0M0RjlBRTAyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWNSRXo4ODdhamRVY2VPMVNIVDhLMG15eHlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 QjlBLzExNjAxMjhFNjE1MDExRUZBRTdBOEM3M0M0RjlBRTAyLy1jUkV6ODg3YWpk VWNlTzFTSFQ4SzBteXh5WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALbO4mZQIMlhSIcmpRnELpC2Hjeegj/kYZq65K/h6yoxdIdEWoPz2mTy /RVQJ3l1cyNo+cDbo8XznvDJez6FAk/lH5GplWmVxG3lP0LhsdnT3UHO0cuB8bdP 6vj2+l04OHQPjp6o/NXNIY+HOXNrrGxxMvAPbg/bS9GcrIdd5CrCswv4Rnas6LGA i5lx1Hr+O+1JAXIyFfs8u2SZ7UowdFnKjuPQIJ4Z2+gqT7cI9mJxpU/2//+4sRRS F6E3E7LTaXutdTkRqBMKy654GPxjeC/0fK5t6H5wCIqO4CNSWvMuHspWjt3ah1EE sH+b/ULMLPbeg07deyXNcGCP888qqIg= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:52 2024 by rpki-client on console-fra.rpki-client.org