$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft File: 0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json) Hash identifier: 7SqJCR1UTHziw8iQoMrzOfLM1xxmRoXGEWlAyNcPNxY= Subject key identifier: 7D:1C:73:AF:54:37:31:A1:81:E5:05:D4:D2:AD:D0:FA:59:1A:DA:5F Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B Certificate issuer: /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Certificate serial: 05FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft Manifest number: 05F9 Signing time: Fri 22 Nov 2024 22:19:37 +0000 Manifest this update: Fri 22 Nov 2024 22:19:36 +0000 Manifest next update: Fri 29 Nov 2024 22:19:36 +0000 Files and hashes: 1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: whT9OR6K5Z66QyA5kidUuA94kFgVQsrkeGPzEHmwTr8=) 2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: av1fp+B0Rvyyl/M+tQ87N6LBAVDY2pJUK/6gF5bMDYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Validity Not Before: Nov 22 22:19:36 2024 GMT Not After : Nov 29 22:19:36 2024 GMT Subject: CN=67410378-d540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:77:a2:82:7b:02:2e:1d:d2:b1:7c:b6:fd: 58:75:aa:a9:9f:5d:92:b7:48:69:d1:e5:41:34:c7: 0a:3c:f3:b8:43:cb:48:ca:46:cc:19:04:ed:97:aa: ce:a5:7d:e4:d9:de:80:74:cb:e0:8d:ea:a6:18:49: 39:2a:94:0b:43:c4:aa:e5:b4:bb:8d:20:ba:5a:57: 1d:81:f3:03:41:d4:23:65:2e:fd:59:28:26:c2:3d: 04:a2:ce:0f:c1:33:3b:06:e7:c0:f5:bc:84:5f:02: cf:4c:17:59:ab:41:15:ce:b9:32:bd:ba:b6:42:c5: b4:22:13:af:a5:48:ff:6c:cc:7a:55:c5:01:35:b4: 46:dc:dd:39:ed:b6:fc:5d:5a:9a:a7:ba:10:22:f4: 9b:39:1f:e3:ac:0a:a0:77:da:c1:87:53:32:e9:6e: b9:48:8b:3e:50:e5:07:ce:5a:c4:b0:af:60:4f:5c: ea:85:6e:14:67:93:ce:05:ec:8a:69:f4:f5:44:93: 3b:cc:54:f7:b6:92:a2:37:1a:15:77:31:19:c1:16: 6c:2c:35:36:38:b2:a7:0e:22:41:45:d8:b7:61:70: d6:b4:d6:1d:50:5d:89:d8:fa:6d:83:61:5a:fd:49: 02:61:b5:cb:1e:20:24:69:ec:29:dd:76:78:8b:4e: da:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1C:73:AF:54:37:31:A1:81:E5:05:D4:D2:AD:D0:FA:59:1A:DA:5F X509v3 Authority Key Identifier: keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:0f:13:9a:62:dc:de:31:7f:f4:30:f2:1c:dc:1a:90:9f:96: 78:17:84:03:84:45:7c:b0:94:be:31:5b:c1:67:a8:49:6d:0f: 59:fb:ea:15:bd:a0:bc:ef:98:25:da:28:29:ce:0a:1b:68:ef: 08:61:bb:66:c1:d6:05:87:6f:48:7a:fb:ac:19:06:17:5c:86: 8d:c6:2a:68:a1:2b:8d:9d:77:f3:db:18:e1:c2:69:5f:fc:e9: ac:2a:5e:aa:63:b2:bd:26:33:19:a4:ae:8d:08:94:7c:cc:59: ef:21:ed:32:a0:96:40:1c:2a:86:6a:6a:73:4d:20:63:b4:38: 4c:00:af:33:99:29:ec:ef:96:a6:ff:e8:eb:24:3b:f2:f2:ef: f4:9b:29:ce:a9:cc:79:86:32:1c:84:c6:d8:ce:25:f2:6f:89: 95:93:1a:59:3e:2c:0c:60:94:36:78:01:45:b2:b3:2a:0e:0e: 6c:66:63:e8:c3:de:0b:a8:25:4e:5a:c6:61:77:8b:5f:d0:91: 38:8e:c1:4a:6b:e0:11:ff:eb:4e:5f:dd:dd:88:08:29:5b:2a: 43:44:bc:52:aa:2b:cc:3d:05:4b:87:61:40:5a:31:da:56:3b: 5b:ee:a5:d5:54:7c:c8:63:e8:72:a7:7b:a3:03:bb:68:a0:4e: 26:bc:d4:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGNzYxMTAvBgNVBAUTKEQwRDZDNDdBNjhDQjQxRDEwNkVCMDQyRDcyNjZCOUNC QkZDMUE3M0IwHhcNMjQxMTIyMjIxOTM2WhcNMjQxMTI5MjIxOTM2WjAYMRYwFAYD VQQDEw02NzQxMDM3OC1kNTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqN3ooJ7Ai4d0rF8tv1Ydaqpn12St0hp0eVBNMcKPPO4Q8tIykbMGQTtl6rO pX3k2d6AdMvgjeqmGEk5KpQLQ8Sq5bS7jSC6WlcdgfMDQdQjZS79WSgmwj0Eos4P wTM7BufA9byEXwLPTBdZq0EVzrkyvbq2QsW0IhOvpUj/bMx6VcUBNbRG3N057bb8 XVqap7oQIvSbOR/jrAqgd9rBh1My6W65SIs+UOUHzlrEsK9gT1zqhW4UZ5POBeyK afT1RJM7zFT3tpKiNxoVdzEZwRZsLDU2OLKnDiJBRdi3YXDWtNYdUF2J2Pptg2Fa /UkCYbXLHiAkaewp3XZ4i07adQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0cc69U NzGhgeUF1NKt0PpZGtpfMB8GA1UdIwQYMBaAFNDWxHpoy0HRBusELXJmucu/wac7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkY3Ni9BNkRFMDk3Qzg1 MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFkRUc2d1F0Y21hNXk3X0Jw enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOYkVlbWpMUWRFRzZ3UXRjbWE1eTdfQnB6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkY3Ni9BNkRFMDk3Qzg1MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFk RUc2d1F0Y21hNXk3X0JwenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRDxOaYtzeMX/0MPIc3BqQn5Z4F4QDhEV8sJS+MVvBZ6hJbQ9Z++oV vaC875gl2igpzgobaO8IYbtmwdYFh29IevusGQYXXIaNxipooSuNnXfz2xjhwmlf /OmsKl6qY7K9JjMZpK6NCJR8zFnvIe0yoJZAHCqGampzTSBjtDhMAK8zmSns75am /+jrJDvy8u/0mynOqcx5hjIchMbYziXyb4mVkxpZPiwMYJQ2eAFFsrMqDg5sZmPo w94LqCVOWsZhd4tf0JE4jsFKa+AR/+tOX93diAgpWypDRLxSqivMPQVLh2FAWjHa Vjtb7qXVVHzIY+hyp3ujA7tooE4mvNTf -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:36 2024 by rpki-client on console-fra.rpki-client.org