$ rpki-client -vvf rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft File: StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft (raw, json) Hash identifier: Z5J/gI+cjGzrdINV82LoINgBiHHmfuf4uH6yl+SLCr0= Subject key identifier: F3:9E:A0:1E:82:FA:1F:76:0A:95:D0:BC:9C:79:84:09:10:51:9F:91 Authority key identifier: 4A:D6:6F:8D:FC:DE:A1:7F:25:67:CA:38:14:54:20:5F:38:06:8F:60 Certificate issuer: /CN=A91E756E/serialNumber=4AD66F8DFCDEA17F2567CA381454205F38068F60 Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/StZvjfzeoX8lZ8o4FFQgXzgGj2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft Manifest number: 0673 Signing time: Fri 22 Nov 2024 21:54:00 +0000 Manifest this update: Fri 22 Nov 2024 21:53:59 +0000 Manifest next update: Fri 29 Nov 2024 21:53:59 +0000 Files and hashes: 1: StZvjfzeoX8lZ8o4FFQgXzgGj2A.crl (hash: 45ymLZUwmna17Hp0/Ga35Uga69CINQP+U8/kz9RxO5U=) 2: F515761C554311EBAAB65382C4F9AE02.roa (hash: Lo7ST7msAw+VbXSq/mG+XAyKJromzHBAr6bVZJIuUi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.crl rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/StZvjfzeoX8lZ8o4FFQgXzgGj2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E756E/serialNumber=4AD66F8DFCDEA17F2567CA381454205F38068F60 Validity Not Before: Nov 22 21:53:59 2024 GMT Not After : Nov 29 21:53:59 2024 GMT Subject: CN=6740fd78-a7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:db:eb:38:e1:5d:73:9c:d0:a9:82:90:e5: 1c:93:2a:6f:d0:42:4e:16:45:f0:41:dc:3b:4c:03: aa:ee:0e:d7:90:1f:79:49:61:cc:1e:17:12:16:45: d8:f8:ce:ad:03:8d:0f:a0:c4:01:41:4c:82:eb:a3: a5:e3:67:ba:ab:8f:33:f7:8c:26:28:4f:bb:b0:ab: ea:10:11:46:96:0a:f3:50:fa:35:86:6c:86:3c:6f: bb:02:e9:ff:a1:20:b0:56:d3:e9:28:f1:3e:2a:c4: 30:97:44:76:96:50:0a:91:41:35:f0:97:ed:32:d9: 4c:3d:85:9c:c0:dc:e6:32:ba:41:98:28:3f:9d:7e: 4e:98:2d:47:66:8a:dc:87:1c:97:88:ad:74:6d:4d: 5a:87:87:42:5f:1c:f2:8a:d6:09:7c:dd:fd:fb:42: 10:27:fe:2f:cb:16:52:77:8f:f4:44:ed:c4:17:03: 03:bc:42:fb:5e:b3:c0:b2:f5:53:fc:60:b3:98:40: 2b:dd:da:77:b3:aa:d3:3d:66:72:0a:68:15:56:22: b8:67:94:dc:90:ea:a0:fa:27:9b:48:60:1e:1a:4d: 88:aa:31:a0:de:38:75:41:11:7b:20:fc:1e:b5:9b: fb:68:1c:3a:ec:c5:aa:cb:e2:94:9e:a3:f5:5b:dd: f6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9E:A0:1E:82:FA:1F:76:0A:95:D0:BC:9C:79:84:09:10:51:9F:91 X509v3 Authority Key Identifier: keyid:4A:D6:6F:8D:FC:DE:A1:7F:25:67:CA:38:14:54:20:5F:38:06:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/StZvjfzeoX8lZ8o4FFQgXzgGj2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E756E/AD86CAAA554111EB864CB87DC4F9AE02/StZvjfzeoX8lZ8o4FFQgXzgGj2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5e:e8:29:00:47:3d:dd:ab:6d:3e:fc:33:53:3a:fe:90:de: a9:20:13:d1:fd:2c:92:76:de:d8:e6:ba:f1:36:c0:0a:5b:63: ad:73:62:1c:ea:aa:de:a7:6d:7c:2e:e1:a0:46:e6:4e:b1:ed: 97:3d:69:4a:7c:c6:0e:0a:c0:eb:8e:25:d9:12:09:0a:68:5d: 16:85:da:1d:e0:39:ef:7f:88:92:00:5e:8f:7a:fa:7c:96:d5: 63:d4:f5:01:c1:c3:2c:dd:b8:7d:35:10:38:4f:02:13:20:a3: d1:52:12:92:d4:0f:32:23:5d:f3:1c:12:42:53:f6:4c:0f:75: d3:c1:59:76:b9:70:ee:c3:6b:84:31:a7:ab:e8:de:73:6b:52: 6f:3c:d2:39:e1:3d:43:dd:32:4a:31:8a:06:8a:14:9b:10:d6: 73:24:9f:b5:f4:dd:f7:e3:1d:b4:bf:8e:3a:06:1f:34:a4:5d: 0d:c4:2f:c2:0a:c0:69:ed:8b:58:5b:e3:cd:64:a5:90:78:bd: 8a:41:9b:ce:61:df:5b:cd:eb:02:08:e1:0c:39:82:d2:53:87: 17:8f:b2:d4:15:88:0b:72:7b:4e:2a:57:c7:c2:c6:34:41:3f: 26:ea:33:5e:f6:1d:d2:e6:5d:64:a5:0a:9d:79:62:be:bb:c6: 75:3c:62:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NkUxMTAvBgNVBAUTKDRBRDY2RjhERkNERUExN0YyNTY3Q0EzODE0NTQyMDVG MzgwNjhGNjAwHhcNMjQxMTIyMjE1MzU5WhcNMjQxMTI5MjE1MzU5WjAYMRYwFAYD VQQDEw02NzQwZmQ3OC1hN2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvubb6zjhXXOc0KmCkOUckypv0EJOFkXwQdw7TAOq7g7XkB95SWHMHhcSFkXY +M6tA40PoMQBQUyC66Ol42e6q48z94wmKE+7sKvqEBFGlgrzUPo1hmyGPG+7Aun/ oSCwVtPpKPE+KsQwl0R2llAKkUE18JftMtlMPYWcwNzmMrpBmCg/nX5OmC1HZorc hxyXiK10bU1ah4dCXxzyitYJfN39+0IQJ/4vyxZSd4/0RO3EFwMDvEL7XrPAsvVT /GCzmEAr3dp3s6rTPWZyCmgVViK4Z5TckOqg+iebSGAeGk2IqjGg3jh1QRF7IPwe tZv7aBw67MWqy+KUnqP1W932WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOeoB6C +h92CpXQvJx5hAkQUZ+RMB8GA1UdIwQYMBaAFErWb4383qF/JWfKOBRUIF84Bo9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2RS9BRDg2Q0FBQTU1 NDExMUVCODY0Q0I4N0RDNEY5QUUwMi9TdFp2amZ6ZW9YOGxaOG80RkZRZ1h6Z0dq MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N0WnZqZnplb1g4bFo4bzRGRlFnWHpnR2oyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzU2RS9BRDg2Q0FBQTU1NDExMUVCODY0Q0I4N0RDNEY5QUUwMi9TdFp2amZ6ZW9Y OGxaOG80RkZRZ1h6Z0dqMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7XugpAEc93attPvwzUzr+kN6pIBPR/SySdt7Y5rrxNsAKW2Otc2Ic 6qrep218LuGgRuZOse2XPWlKfMYOCsDrjiXZEgkKaF0Whdod4Dnvf4iSAF6Pevp8 ltVj1PUBwcMs3bh9NRA4TwITIKPRUhKS1A8yI13zHBJCU/ZMD3XTwVl2uXDuw2uE Maer6N5za1JvPNI54T1D3TJKMYoGihSbENZzJJ+19N334x20v446Bh80pF0NxC/C CsBp7YtYW+PNZKWQeL2KQZvOYd9bzesCCOEMOYLSU4cXj7LUFYgLcntOKlfHwsY0 QT8m6jNe9h3S5l1kpQqdeWK+u8Z1PGIc -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:36 2024 by rpki-client on console-fra.rpki-client.org