$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json) Hash identifier: LfzCASywRoPYLnCUO/cFlHOOMSnJVTSxIj/VWqklv5o= Subject key identifier: 5F:05:9D:82:79:DC:B1:82:74:BA:9D:B2:A4:F6:DC:96:EF:0C:C1:7F Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Certificate serial: 03E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft Manifest number: 03C5 Signing time: Thu 21 Nov 2024 00:16:44 +0000 Manifest this update: Thu 21 Nov 2024 00:16:43 +0000 Manifest next update: Thu 28 Nov 2024 00:16:43 +0000 Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: ThFliMSlTEQtWW/r24I7FwVXEAHpZLRFFh9D36HyUuA=) 2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: T1xeJuM61tXFrRrs4nBlTF2LptDqgwUMRZIt/7strSc=) 3: BC148566D22B11EE9443A443C4F9AE02.roa (hash: 8jQTCX4xTiPoXu0/ej/EZcoxkeQXfk8XFCW9Bjr7lm4=) 4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: Zhl+3aO9NEoActhbobOjQwGWHU93DOaHLYLu49Yt4rA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Validity Not Before: Nov 21 00:16:43 2024 GMT Not After : Nov 28 00:16:43 2024 GMT Subject: CN=673e7beb-9764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fa:55:d0:a1:3b:52:d6:e3:38:07:5d:47:1f: ce:93:f1:06:9f:8f:24:bc:3d:be:4c:75:30:ae:81: 13:77:cb:9c:d1:44:4f:52:e5:21:24:89:02:1e:8a: bf:d4:a7:cf:4e:48:bb:54:df:d9:3c:78:74:a7:e9: 12:84:31:a1:b4:8f:08:a3:20:df:b0:f9:b4:0c:18: 54:c3:2d:f2:ad:9a:c9:e2:25:3e:83:80:22:aa:da: 07:71:0d:4f:50:4f:ae:72:4c:2f:6e:4b:00:83:c1: 69:3f:33:70:cc:b2:7d:40:cd:c0:af:85:fe:f4:a4: 8f:a6:d4:6e:5f:ec:94:df:ba:e2:1d:11:7b:01:ec: 18:07:9b:69:c0:45:e5:88:08:2e:4c:14:4e:98:54: c5:e3:a8:5b:3e:8e:9d:85:54:18:64:0d:41:8c:46: 94:04:eb:af:a3:4f:6a:29:29:b2:73:4c:10:87:47: 00:43:9d:5e:fc:4e:15:e3:39:d4:8a:4b:ba:fb:df: c2:00:a0:e3:39:f3:cd:c6:12:db:7c:4d:e3:ef:bb: 92:c3:5f:19:d4:e0:b6:69:60:6e:f4:02:f6:97:00: 1f:32:ce:fd:86:38:db:2c:7b:7f:75:04:b2:a0:f7: 32:bd:cb:64:e1:dd:63:97:f8:f4:e1:b5:e6:54:2b: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:05:9D:82:79:DC:B1:82:74:BA:9D:B2:A4:F6:DC:96:EF:0C:C1:7F X509v3 Authority Key Identifier: keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b2:71:57:f7:23:fe:c9:af:58:2a:4c:58:29:99:ad:fd:fe: a1:19:f9:4f:c0:df:d8:94:7e:62:69:30:1f:4e:fb:bd:65:1d: 63:d5:95:3b:2c:08:ee:59:6c:35:f1:5b:7c:89:66:fe:cf:a2: ab:d0:6f:93:88:42:ba:cd:eb:14:ce:40:88:39:49:be:7f:f4: 4a:ca:3d:52:b2:17:a6:bb:5d:cf:c9:c0:af:90:76:dd:b0:b1: 42:1e:89:6d:4a:78:e9:7a:b6:79:96:72:89:fb:da:1f:14:34: ea:29:13:b9:55:7e:ad:95:23:9f:3e:0b:54:4f:c4:aa:04:f5: e4:1d:08:ed:f9:95:8a:f1:01:ef:4d:43:ae:f9:c2:14:c2:dc: 75:bc:00:43:c1:8b:e1:41:4e:d2:9a:f6:c3:62:34:d0:f5:49: d4:75:71:0e:55:4f:53:67:4d:ca:ca:3d:73:d5:2b:9f:fc:78: 7c:67:2e:4b:37:ac:5e:a9:68:e8:9f:c2:77:ed:8f:93:be:e0: 1f:a5:39:92:ad:03:0a:c4:41:63:8d:25:56:aa:97:8d:9e:4e: 48:f7:f3:29:e7:72:6f:c6:63:b1:50:70:7d:22:eb:c6:af:51: e1:51:a3:10:75:2a:f9:f2:6c:df:c2:ae:ed:7a:10:17:d0:d5: a0:e5:43:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy NkZERjdBMTMwHhcNMjQxMTIxMDAxNjQzWhcNMjQxMTI4MDAxNjQzWjAYMRYwFAYD VQQDEw02NzNlN2JlYi05NzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fpV0KE7UtbjOAddRx/Ok/EGn48kvD2+THUwroETd8uc0URPUuUhJIkCHoq/ 1KfPTki7VN/ZPHh0p+kShDGhtI8IoyDfsPm0DBhUwy3yrZrJ4iU+g4AiqtoHcQ1P UE+uckwvbksAg8FpPzNwzLJ9QM3Ar4X+9KSPptRuX+yU37riHRF7AewYB5tpwEXl iAguTBROmFTF46hbPo6dhVQYZA1BjEaUBOuvo09qKSmyc0wQh0cAQ51e/E4V4znU iku6+9/CAKDjOfPNxhLbfE3j77uSw18Z1OC2aWBu9AL2lwAfMs79hjjbLHt/dQSy oPcyvctk4d1jl/j04bXmVCuSYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8FnYJ5 3LGCdLqdsqT23JbvDMF/MB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUFGNS9FOTlGNTIzQTZFQzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0 YVRUbVB0YUlmVWNtX2ZlaE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxsnFX9yP+ya9YKkxYKZmt/f6hGflPwN/YlH5iaTAfTvu9ZR1j1ZU7 LAjuWWw18Vt8iWb+z6Kr0G+TiEK6zesUzkCIOUm+f/RKyj1Sshemu13PycCvkHbd sLFCHoltSnjperZ5lnKJ+9ofFDTqKRO5VX6tlSOfPgtUT8SqBPXkHQjt+ZWK8QHv TUOu+cIUwtx1vABDwYvhQU7SmvbDYjTQ9UnUdXEOVU9TZ03Kyj1z1Suf/Hh8Zy5L N6xeqWjon8J37Y+TvuAfpTmSrQMKxEFjjSVWqpeNnk5I9/Mp53JvxmOxUHB9IuvG r1HhUaMQdSr58mzfwq7tehAX0NWg5UMK -----END CERTIFICATE-----Generated at Thu Nov 21 01:32:00 2024 by rpki-client on console-fra.rpki-client.org