$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: H7mSfOXLEwk96tdENFleUBEUvPsRyE1JGlS8ETwNVWQ= Subject key identifier: FB:17:33:C5:69:58:CE:40:A5:1C:00:BC:8D:41:CF:48:70:4B:F7:5A Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 099F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 0971 Signing time: Sun 24 Nov 2024 19:46:21 +0000 Manifest this update: Sun 24 Nov 2024 19:46:21 +0000 Manifest next update: Sun 01 Dec 2024 19:46:21 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: G1QMY86GIPejmNKnnNdIQSdsFmO3mnhr9DYJgL1FAjo=) 2: C5576730FC8611EE8534E632C4F9AE02.roa (hash: q3alJvFt8+kISch4lxCuxAzu6zRm+B94dOe7NA4BTZk=) 3: 37EB7A8A02F811EFB057C123C4F9AE02.roa (hash: DGfH6yW61di/wPLWjQ46RxKQ70IcdSulWwnvy2l4/iw=) 4: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: fbYOGjHMohkB40Ip5nHSIZM+X/jub17JqWsOkKhOWSY=) 5: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: YZEuoke/CkJiGAVUdW9nROMmjBJVKYrECNHv0AzIy0U=) 6: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: 2gLVXHr34ksm7UG4jmg1c/bwz/Ta19pU2wRXas1eM5o=) 7: B16C9766F97711EEB642002CC4F9AE02.roa (hash: QK/3IPLlLHpJzMAh9LEu9wBTyMjDq5axIgBNT1XfyTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2463 (0x99f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Nov 24 19:46:21 2024 GMT Not After : Dec 1 19:46:21 2024 GMT Subject: CN=6743828d-6b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:84:b4:3b:9c:f2:b5:98:fd:44:f4:32:fd:30: e3:df:03:b3:6e:99:75:99:86:ca:e3:53:d7:c2:37: 2b:22:2a:ee:db:d2:bd:55:05:0b:b3:f6:b7:a1:77: 91:be:e4:25:88:63:e8:e1:73:73:1b:7a:75:d6:a2: 16:39:ad:a7:13:15:50:33:fd:69:06:2d:d5:ae:57: 4e:68:42:a5:ed:a6:b7:bd:5e:dd:0b:64:e1:f5:6b: 67:32:c5:3a:cc:7d:e6:2d:0e:b3:3a:62:fb:29:44: cd:5a:55:42:fc:37:b2:07:27:8a:88:cd:7f:95:32: a0:47:85:0b:01:ef:cd:db:a6:ef:37:f0:29:82:5e: 2e:28:53:9d:0b:8f:69:5e:ad:92:5f:6d:54:a7:ac: ad:1a:4e:9f:6d:5c:58:1d:3d:5e:63:5f:aa:77:b2: 5d:35:b3:a7:28:f8:2c:c6:cc:ae:5b:1a:1e:b3:70: 3d:c4:cf:db:44:ff:bc:ed:7b:97:5f:be:73:55:bf: 5d:01:cb:7a:05:87:09:fe:94:4d:3c:0f:5e:fd:6b: 3f:32:2e:20:76:95:a1:14:7a:35:7a:38:3c:cd:db: ea:1b:69:2f:18:1c:90:63:6a:d6:2a:dc:fd:64:03: b0:26:dd:f3:1e:2b:20:22:fb:b9:a5:c2:7f:3f:38: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:17:33:C5:69:58:CE:40:A5:1C:00:BC:8D:41:CF:48:70:4B:F7:5A X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:eb:76:dd:c7:87:7c:90:b2:22:dc:f3:c2:2e:b6:49:da:c7: 6a:52:3f:20:d8:b3:bd:73:95:b7:f0:dd:58:3b:d1:b7:d3:b5: ff:98:60:5a:f1:60:c0:d3:74:94:64:5e:06:02:bb:86:f5:e9: 7f:98:00:8c:31:81:6c:4d:19:a1:a6:49:de:1a:2b:e4:f8:88: 39:6f:7c:bf:fa:18:85:38:43:0e:4b:d3:2b:4c:8c:4e:3a:a5: 53:41:62:ad:bb:48:81:8c:ff:d8:74:0f:40:6a:64:5c:83:40: 01:4d:db:f6:69:43:74:a1:c3:c1:43:56:1c:e4:96:2d:22:c3: 7e:ea:f9:dd:d8:e4:aa:83:13:58:30:ad:85:b8:37:ea:ff:09: 18:7f:25:27:3c:cc:f1:66:4b:08:f7:41:2b:82:ab:6b:9a:46: 25:da:ed:80:89:1e:c7:34:6b:1c:31:53:39:28:62:84:01:0a: c6:39:3d:b8:a3:ea:d6:13:1a:dc:09:e5:77:3a:b1:2f:1a:90: 97:78:38:5a:75:c5:7b:78:6d:10:da:98:63:06:dc:e3:d7:45: 17:0e:41:03:d0:1d:6a:43:c6:29:e6:f7:d6:5a:c1:4f:31:bc: 02:2e:f7:7e:23:c2:7f:50:6a:5e:4a:af:c5:ee:07:a8:bf:ac: 65:50:26:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjQxMTI0MTk0NjIxWhcNMjQxMjAxMTk0NjIxWjAYMRYwFAYD VQQDEw02NzQzODI4ZC02YjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4S0O5zytZj9RPQy/TDj3wOzbpl1mYbK41PXwjcrIiru29K9VQULs/a3oXeR vuQliGPo4XNzG3p11qIWOa2nExVQM/1pBi3VrldOaEKl7aa3vV7dC2Th9WtnMsU6 zH3mLQ6zOmL7KUTNWlVC/DeyByeKiM1/lTKgR4ULAe/N26bvN/Apgl4uKFOdC49p Xq2SX21Up6ytGk6fbVxYHT1eY1+qd7JdNbOnKPgsxsyuWxoes3A9xM/bRP+87XuX X75zVb9dAct6BYcJ/pRNPA9e/Ws/Mi4gdpWhFHo1ejg8zdvqG2kvGByQY2rWKtz9 ZAOwJt3zHisgIvu5pcJ/PzjipQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsXM8Vp WM5ApRwAvI1Bz0hwS/daMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr63bdx4d8kLIi3PPCLrZJ2sdqUj8g2LO9c5W38N1YO9G307X/mGBa 8WDA03SUZF4GAruG9el/mACMMYFsTRmhpkneGivk+Ig5b3y/+hiFOEMOS9MrTIxO OqVTQWKtu0iBjP/YdA9AamRcg0ABTdv2aUN0ocPBQ1Yc5JYtIsN+6vnd2OSqgxNY MK2FuDfq/wkYfyUnPMzxZksI90ErgqtrmkYl2u2AiR7HNGscMVM5KGKEAQrGOT24 o+rWExrcCeV3OrEvGpCXeDhadcV7eG0Q2phjBtzj10UXDkED0B1qQ8Yp5vfWWsFP MbwCLvd+I8J/UGpeSq/F7geov6xlUCbG -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:18 2024 by rpki-client on console-fra.rpki-client.org