$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json) Hash identifier: 74KZFrnCV0MARFSkj1c3L/9lslC1WzWN/BrzGQT46kI= Subject key identifier: 90:94:1B:52:0C:16:D6:BC:08:DC:02:E4:8A:31:29:22:6F:B1:11:CA Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Certificate serial: 11B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft Manifest number: 11AA Signing time: Fri 22 Nov 2024 17:11:46 +0000 Manifest this update: Fri 22 Nov 2024 17:11:46 +0000 Manifest next update: Fri 29 Nov 2024 17:11:46 +0000 Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: B27Jes0rbaJS/F/660H/fKLKfySyMmb8KMt4cv4CTio=) 2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: nEHygU0iQ55kYxCvR5kzgzTy6GI2Ua1TfbgvO9Q4FhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4529 (0x11b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Validity Not Before: Nov 22 17:11:46 2024 GMT Not After : Nov 29 17:11:46 2024 GMT Subject: CN=6740bb52-e56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:e0:f7:01:60:cf:0c:2b:b0:ac:db:21:37: a6:61:f2:36:64:08:33:1d:32:d5:0d:80:2f:25:c7: bf:b6:5a:6d:92:27:20:39:0b:d2:5e:84:91:52:f0: 83:f7:31:60:8f:a9:07:4a:29:31:a2:46:65:8c:28: e2:68:f5:a4:f0:d4:db:b1:b8:c3:6e:de:a8:d1:60: be:8b:8d:4d:74:a6:61:9f:f5:1f:1b:05:dc:3e:1d: 51:94:e2:be:63:f7:c0:2d:57:75:63:1b:c1:01:65: 8d:e6:10:73:23:98:75:81:e1:87:7f:9f:d4:fc:99: f5:a7:89:81:dc:ca:42:37:13:97:37:ea:98:83:1b: 6d:a8:aa:f8:97:34:7f:64:7c:93:41:dd:c5:ef:9b: 31:ec:9f:33:6d:42:e8:99:96:47:8a:61:e8:9a:2f: 8b:3a:33:74:a2:2c:7f:d2:57:1f:fd:77:41:d1:2b: 6c:73:c1:a6:18:a4:ba:e7:46:6a:cf:65:ce:8b:66: 8f:22:3b:67:ba:f0:e1:88:86:3a:95:0b:c3:90:5e: 57:7d:1b:85:c9:3b:62:75:fd:6b:7c:20:7b:e2:a3: e0:02:9f:4b:ee:8f:42:d3:d8:be:b6:44:44:c7:f1: d9:06:67:0c:16:bc:ca:c2:e5:8e:68:9f:c6:83:4e: 71:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:94:1B:52:0C:16:D6:BC:08:DC:02:E4:8A:31:29:22:6F:B1:11:CA X509v3 Authority Key Identifier: keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:66:f4:51:fb:e0:93:e5:ef:d9:4b:77:2e:1b:92:a4:79:0f: be:f1:f8:01:95:11:4a:96:e1:9d:cc:6f:93:54:ea:7a:4d:14: 70:dc:24:4b:fe:d6:44:20:eb:67:1f:82:2c:be:86:81:2e:6e: 99:04:2d:3e:2c:55:89:3d:a3:d6:7f:17:92:5d:96:8a:6f:3d: a8:25:b7:45:2b:62:44:f2:d1:f5:53:6b:92:a2:8a:f3:ac:19: d0:4f:7b:50:e7:a8:25:8f:ba:d8:29:d6:55:8e:8c:88:9b:90: 01:3c:a1:8e:d6:6d:37:1a:88:d3:ab:e6:37:d6:c1:65:46:10: 5f:19:dd:8a:bd:7c:61:e3:34:bb:71:69:16:c7:aa:72:16:d7: 1a:c8:0d:77:16:f9:ef:1b:dc:84:03:3e:e3:46:6d:c5:38:99: b8:87:f1:89:2c:02:25:ac:8c:59:7a:61:df:6b:25:f7:8f:70: 7b:35:ea:d6:55:a5:bb:86:0f:d3:2c:4b:71:fe:d9:b7:d0:c5: 11:52:71:18:a1:4a:25:7e:d4:ff:88:f0:38:3c:61:91:35:9c: 2f:d7:ca:16:43:04:06:a2:82:4e:87:f2:f7:ef:0e:99:e5:21: 02:5a:48:44:37:26:da:99:9f:36:fc:1f:a0:0f:13:65:d0:9b: ef:1c:23:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0 RkYzNEY4MkUwHhcNMjQxMTIyMTcxMTQ2WhcNMjQxMTI5MTcxMTQ2WjAYMRYwFAYD VQQDEw02NzQwYmI1Mi1lNTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DLg9wFgzwwrsKzbITemYfI2ZAgzHTLVDYAvJce/tlptkicgOQvSXoSRUvCD 9zFgj6kHSikxokZljCjiaPWk8NTbsbjDbt6o0WC+i41NdKZhn/UfGwXcPh1RlOK+ Y/fALVd1YxvBAWWN5hBzI5h1geGHf5/U/Jn1p4mB3MpCNxOXN+qYgxttqKr4lzR/ ZHyTQd3F75sx7J8zbULomZZHimHomi+LOjN0oix/0lcf/XdB0Stsc8GmGKS650Zq z2XOi2aPIjtnuvDhiIY6lQvDkF5XfRuFyTtidf1rfCB74qPgAp9L7o9C09i+tkRE x/HZBmcMFrzKwuWOaJ/Gg05xKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCUG1IM Fta8CNwC5IoxKSJvsRHKMB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODRBOS82QTkwQTlDMEUxOTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pS a2RnS3p2TURWNlZQODAtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFZvRR++CT5e/ZS3cuG5KkeQ++8fgBlRFKluGdzG+TVOp6TRRw3CRL /tZEIOtnH4IsvoaBLm6ZBC0+LFWJPaPWfxeSXZaKbz2oJbdFK2JE8tH1U2uSoorz rBnQT3tQ56glj7rYKdZVjoyIm5ABPKGO1m03GojTq+Y31sFlRhBfGd2KvXxh4zS7 cWkWx6pyFtcayA13FvnvG9yEAz7jRm3FOJm4h/GJLAIlrIxZemHfayX3j3B7NerW VaW7hg/TLEtx/tm30MURUnEYoUolftT/iPA4PGGRNZwv18oWQwQGooJOh/L37w6Z 5SECWkhENybamZ82/B+gDxNl0JvvHCPn -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org