$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft File: RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json) Hash identifier: qjlSfdNhskfulCfzABDGPe/9+0ud99TowrwSgg6rS0Q= Subject key identifier: C4:7B:90:11:2C:EB:A7:7E:94:A9:B6:4B:BC:E6:B1:BC:B4:A0:C1:1B Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E Certificate issuer: /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft Manifest number: 24 Signing time: Thu 21 Nov 2024 05:51:38 +0000 Manifest this update: Thu 21 Nov 2024 05:51:37 +0000 Manifest next update: Thu 28 Nov 2024 05:51:37 +0000 Files and hashes: 1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: OlFOjempVMLFBd6o+7F9xxn85qVqgBIkz0sVn9REbfw=) 2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: T+wmuYYMTFF61NV8D+auleLzw90NK0dFwG6cz8qIwGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Validity Not Before: Nov 21 05:51:37 2024 GMT Not After : Nov 28 05:51:37 2024 GMT Subject: CN=673eca69-c24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:53:d3:8d:0d:f5:37:c5:d2:93:51:db:f6: 36:b6:a7:aa:96:69:8d:7b:65:83:11:fe:6e:bc:dd: 9f:74:a8:9e:e9:38:ab:0c:fe:6d:10:29:d4:d5:c6: 71:66:e5:24:11:14:08:46:b1:01:b1:04:02:c6:60: 6e:9c:11:16:77:8b:26:ae:42:f1:b8:b9:f6:45:d3: 6e:93:7d:4c:16:9e:fa:13:12:ca:e4:68:b3:db:02: 34:9f:d1:8d:8b:d3:a0:8f:10:9c:57:6b:8d:06:42: 99:e0:e0:26:a6:1d:19:c3:97:72:eb:a9:8c:f8:4e: 61:e0:87:25:14:59:af:f2:f1:df:f0:f2:0f:49:9a: 56:fe:66:be:49:ae:5e:62:fc:62:2f:48:a9:5e:08: 31:fc:b0:49:cb:25:82:82:31:df:b0:54:65:a9:aa: 35:14:a3:38:00:c6:78:aa:b2:2b:d3:1e:c3:7b:97: ef:a5:b4:ab:18:c8:20:74:7d:a7:da:40:14:3b:76: 63:27:ec:98:ee:a1:3f:46:a9:44:e8:97:12:6f:65: fc:6e:13:bf:ed:49:bf:c1:57:6b:91:75:eb:63:bf: bd:95:79:2f:60:cc:88:76:ed:de:d4:7e:81:ed:30: 86:80:97:a4:cc:73:3b:01:ad:a2:49:d5:30:97:0f: 76:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7B:90:11:2C:EB:A7:7E:94:A9:B6:4B:BC:E6:B1:BC:B4:A0:C1:1B X509v3 Authority Key Identifier: keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:9a:df:2b:88:7a:eb:0d:f7:f3:db:8c:7d:b1:49:10:1c:42: 77:b6:eb:ab:18:53:3d:33:33:49:0e:20:e0:8e:73:f7:cb:ff: ca:b3:03:8f:85:ce:4d:b8:c1:eb:4b:86:d8:04:d7:0c:4a:a3: 62:e2:30:c4:90:c3:53:93:e7:46:c5:2f:22:97:81:f3:92:ed: 68:17:0e:05:ed:4e:78:bf:36:c9:dd:2f:1b:69:0a:f0:cf:b7: e4:42:49:e2:4d:c1:cf:92:0a:4c:17:ff:01:c5:49:6d:39:d1: d3:aa:0a:4c:09:f5:ee:49:76:a2:2f:a6:6f:2d:8d:1c:94:81: 1d:a7:96:78:05:38:bb:de:3c:c7:fe:04:25:32:d8:70:ba:5e: 45:1c:d8:18:69:38:3e:1f:03:16:a5:91:4c:43:4d:6b:50:45: ae:6a:d1:a2:87:10:0d:17:13:64:a0:52:f7:08:61:4d:21:5c: c4:a9:91:f6:32:bd:f4:cd:d9:7a:51:3f:64:30:47:b6:97:43: ce:a4:c8:b1:f6:94:2d:0f:92:d2:f9:0b:4d:f6:ca:0d:5a:b9: a1:4a:28:f7:84:cc:c7:7d:38:6e:5e:66:27:11:b1:a5:a3:42: f7:e6:d2:88:7a:8c:24:65:3d:b5:43:22:2a:dd:87:4d:af:0d: d3:e4:2e:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RTkyRjExMC8GA1UEBRMoNDU3REI3NjZFMUIwRDZBNERDQzdGOUFFQ0QyODdENERD M0U3MEM5RTAeFw0yNDExMjEwNTUxMzdaFw0yNDExMjgwNTUxMzdaMBgxFjAUBgNV BAMTDTY3M2VjYTY5LWMyNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCk1PTjQ31N8XSk1Hb9ja2p6qWaY17ZYMR/m683Z90qJ7pOKsM/m0QKdTVxnFm 5SQRFAhGsQGxBALGYG6cERZ3iyauQvG4ufZF026TfUwWnvoTEsrkaLPbAjSf0Y2L 06CPEJxXa40GQpng4CamHRnDl3LrqYz4TmHghyUUWa/y8d/w8g9Jmlb+Zr5Jrl5i /GIvSKleCDH8sEnLJYKCMd+wVGWpqjUUozgAxniqsivTHsN7l++ltKsYyCB0fafa QBQ7dmMn7JjuoT9GqUTolxJvZfxuE7/tSb/BV2uRdetjv72VeS9gzIh27d7UfoHt MIaAl6TMczsBraJJ1TCXD3YNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxHuQESzr p36UqbZLvOaxvLSgwRswHwYDVR0jBBgwFoAURX23ZuGw1qTcx/muzSh9TcPnDJ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOTJGLzEyMDg1RDE4NzQw QjExRUY5RTlDMDMzNkM0RjlBRTAyL1JYMjNadUd3MXFUY3hfbXV6U2g5VGNQbkRK NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUlgyM1p1R3cxcVRjeF9tdXpTaDlUY1BuREo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF OTJGLzEyMDg1RDE4NzQwQjExRUY5RTlDMDMzNkM0RjlBRTAyL1JYMjNadUd3MXFU Y3hfbXV6U2g5VGNQbkRKNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHua3yuIeusN9/PbjH2xSRAcQne266sYUz0zM0kOIOCOc/fL/8qzA4+F zk24wetLhtgE1wxKo2LiMMSQw1OT50bFLyKXgfOS7WgXDgXtTni/NsndLxtpCvDP t+RCSeJNwc+SCkwX/wHFSW050dOqCkwJ9e5JdqIvpm8tjRyUgR2nlngFOLvePMf+ BCUy2HC6XkUc2BhpOD4fAxalkUxDTWtQRa5q0aKHEA0XE2SgUvcIYU0hXMSpkfYy vfTN2XpRP2QwR7aXQ86kyLH2lC0PktL5C032yg1auaFKKPeEzMd9OG5eZicRsaWj Qvfm0oh6jCRlPbVDIirdh02vDdPkLhg= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:52 2024 by rpki-client on console-fra.rpki-client.org