$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft File: CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json) Hash identifier: 2e7E31X3qBbrHJjcpu+iLJPKp5fE1jaSzDiAk0bHPW4= Subject key identifier: CA:F6:D7:37:49:46:80:39:87:F6:6D:FE:5A:D8:14:80:B3:44:FA:BF Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C Certificate issuer: /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft Manifest number: 5A Signing time: Sat 23 Nov 2024 05:06:14 +0000 Manifest this update: Sat 23 Nov 2024 05:06:13 +0000 Manifest next update: Sat 30 Nov 2024 05:06:13 +0000 Files and hashes: 1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: GCfwCogtK36RW4ZmdiGl1sC0amRyqPsBzEtVdk5s6As=) 2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: xNwwVLbU+ydl+nMnNKKzooZcZgz88s1ddBpMaFQs7IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Validity Not Before: Nov 23 05:06:13 2024 GMT Not After : Nov 30 05:06:13 2024 GMT Subject: CN=674162c6-8155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:88:8d:73:18:fb:cd:e5:1f:8f:18:8c:a7: 42:d0:3d:d5:ad:a8:30:18:ae:17:f0:d4:bd:27:a5: d8:21:6e:53:6f:ec:e7:b3:3d:47:1b:35:70:0c:76: 89:1a:38:9b:26:b6:59:5d:71:e4:85:bb:c8:c4:df: e0:37:c3:90:cd:53:30:7c:a8:89:75:e9:77:b6:74: 52:c8:c1:e5:56:d6:b1:e5:17:40:aa:7d:aa:61:5f: 6b:fe:54:64:57:91:81:28:7f:cb:4e:bf:9c:41:70: 15:ed:5c:2e:df:54:fc:28:75:9c:ad:83:24:5e:af: a8:cf:5f:db:bf:65:45:70:27:ae:38:c0:9f:bb:21: d4:0d:7a:f3:28:0b:61:da:0a:17:7f:11:e8:86:42: a3:40:c0:05:1e:9c:73:3d:82:6f:87:9a:8b:54:b7: 31:6c:49:a1:f3:70:34:8b:3c:28:3b:22:36:39:2c: 90:57:d3:25:0e:8f:d0:90:23:69:53:b2:40:b9:68: 0a:48:56:22:5d:c6:63:69:1d:94:08:d8:2f:ed:48: 67:5b:17:de:e0:ce:80:bb:ff:5e:69:84:a0:31:89: 70:be:d6:85:03:93:3f:1c:55:ad:5d:2c:df:25:75: cd:64:66:55:1f:c6:11:45:a1:6c:76:72:72:3a:66: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F6:D7:37:49:46:80:39:87:F6:6D:FE:5A:D8:14:80:B3:44:FA:BF X509v3 Authority Key Identifier: keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:42:0c:89:a6:58:73:06:3d:3a:5e:6a:1c:f1:3f:f5:5a:b8: 39:0c:d7:60:9e:0b:8f:ca:33:3d:6e:2e:62:77:9d:87:55:5a: f5:64:32:0a:08:46:f9:d9:d0:f9:8e:8f:6d:59:33:ad:0d:7c: a4:e5:75:8a:4a:2a:13:14:ed:f6:47:56:43:ab:54:8b:81:ca: ac:e7:f9:dd:9a:04:48:14:b0:28:87:c2:19:ec:4e:2f:bd:08: d3:3c:3b:63:bb:c0:ec:cb:77:19:a7:c6:e3:19:27:27:8a:79: 19:aa:34:a5:24:5b:c4:98:d4:0a:6f:91:e2:35:9c:6f:36:b8: 29:cf:20:9e:f1:51:75:fc:bc:2a:46:c3:b8:5f:c6:f3:df:d4: 07:e2:9a:4e:0a:da:7d:e1:b2:bd:13:6a:4d:98:64:b1:30:b6: 25:28:de:ba:21:7e:8b:f2:d0:48:58:7f:c2:9f:8a:fe:48:ab: de:a2:2f:6a:f3:42:c9:22:8b:04:2e:d2:0b:c0:8e:cc:dc:c5: ce:51:fe:28:dc:74:1d:5f:82:76:ac:27:db:32:54:1d:73:c6: 8f:d0:cd:e1:e6:a1:67:16:67:38:73:1c:87:9b:4f:91:cb:0e: 11:48:41:86:1d:5d:dd:b6:52:f8:1b:1d:5c:f2:67:1f:5d:22: 43:a8:a3:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RUE1RjExMC8GA1UEBRMoMDlDN0Q5RTdGMjYzREIwQjhCODIwMUU3RDI5M0NBREVD Qjk3Q0Y4QzAeFw0yNDExMjMwNTA2MTNaFw0yNDExMzAwNTA2MTNaMBgxFjAUBgNV BAMTDTY3NDE2MmM2LTgxNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1W4iNcxj7zeUfjxiMp0LQPdWtqDAYrhfw1L0npdghblNv7OezPUcbNXAMdoka OJsmtlldceSFu8jE3+A3w5DNUzB8qIl16Xe2dFLIweVW1rHlF0CqfaphX2v+VGRX kYEof8tOv5xBcBXtXC7fVPwodZytgyRer6jPX9u/ZUVwJ644wJ+7IdQNevMoC2Ha Chd/EeiGQqNAwAUenHM9gm+HmotUtzFsSaHzcDSLPCg7IjY5LJBX0yUOj9CQI2lT skC5aApIViJdxmNpHZQI2C/tSGdbF97gzoC7/15phKAxiXC+1oUDkz8cVa1dLN8l dc1kZlUfxhFFoWx2cnI6Zu5PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyvbXN0lG gDmH9m3+WtgUgLNE+r8wHwYDVR0jBBgwFoAUCcfZ5/Jj2wuLggHn0pPK3suXz4ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFQTVGLzRCNTkwNkI4MjNF QzExRUZBNDU1MTgyNkM0RjlBRTAyL0NjZlo1X0pqMnd1TGdnSG4wcFBLM3N1WHo0 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2NmWjVfSmoyd3VMZ2dIbjBwUEszc3VYejR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF QTVGLzRCNTkwNkI4MjNFQzExRUZBNDU1MTgyNkM0RjlBRTAyL0NjZlo1X0pqMnd1 TGdnSG4wcFBLM3N1WHo0dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACtCDImmWHMGPTpeahzxP/VauDkM12CeC4/KMz1uLmJ3nYdVWvVkMgoI RvnZ0PmOj21ZM60NfKTldYpKKhMU7fZHVkOrVIuByqzn+d2aBEgUsCiHwhnsTi+9 CNM8O2O7wOzLdxmnxuMZJyeKeRmqNKUkW8SY1ApvkeI1nG82uCnPIJ7xUXX8vCpG w7hfxvPf1Afimk4K2n3hsr0Tak2YZLEwtiUo3rohfovy0EhYf8Kfiv5Iq96iL2rz QskiiwQu0gvAjszcxc5R/ijcdB1fgnasJ9syVB1zxo/QzeHmoWcWZzhzHIebT5HL DhFIQYYdXd22UvgbHVzyZx9dIkOoo68= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org