$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft File: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft (raw, json) Hash identifier: tgFKSEuxmmu+ku0lI8wKc7mvcgvMTFhgUylEBSru78E= Subject key identifier: F6:40:5B:5A:90:75:5B:5B:3D:84:DD:BB:E1:39:61:58:F2:D1:41:AF Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 Certificate issuer: /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft Manifest number: 53 Signing time: Thu 21 Nov 2024 05:25:48 +0000 Manifest this update: Thu 21 Nov 2024 05:25:47 +0000 Manifest next update: Thu 28 Nov 2024 05:25:47 +0000 Files and hashes: 1: s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl (hash: PyyH8r7IidS41BvKcObvcF/g4OrTmblAi4MJYg2KDJQ=) 2: B4F165084F1F11EFA3B1F709C4F9AE02.roa (hash: Opc7LOJ46e70z/QSejyn173p++8Jd/mWqo5v6tc2Z4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Validity Not Before: Nov 21 05:25:47 2024 GMT Not After : Nov 28 05:25:47 2024 GMT Subject: CN=673ec45c-a85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f0:69:3c:de:f7:83:42:aa:2e:ec:50:e1:80: d9:67:ca:20:6d:fc:2a:1b:70:20:c1:ef:d4:0b:47: 52:88:c2:3d:b5:77:70:33:41:60:e4:3a:9b:a6:07: 82:3c:c4:06:5a:97:14:79:3b:72:ae:dc:c8:be:2c: 68:8e:8b:23:23:e4:b8:b1:34:6f:b9:ca:03:cf:99: ed:cd:f3:b5:db:35:3e:f9:9b:62:dc:95:aa:07:c7: 8a:82:f0:8c:05:d0:31:ba:cd:c9:5c:9b:19:9d:10: f1:0f:66:9d:3f:69:15:30:bc:20:e8:b9:a2:e1:ce: 9e:29:8a:5c:fc:b4:ab:b6:ec:a0:da:8c:31:62:11: 46:79:fc:68:9f:2f:41:14:10:8c:07:f5:5b:48:37: 72:6d:f5:98:a2:5f:1b:8b:50:b3:a8:c6:e7:23:63: 92:a6:bc:49:a5:40:8d:a0:72:88:2b:88:46:2f:29: 6f:38:11:e0:8e:90:11:56:e9:64:9f:90:d6:1d:8a: 0f:59:4e:f2:18:c1:34:c6:c0:83:c6:c6:a7:10:76: af:c7:90:cb:e1:dd:8b:af:da:ec:96:90:f4:63:07: 84:37:cf:86:95:61:95:8b:95:1d:e2:94:13:e7:72: ef:73:a2:0a:1e:fa:cc:49:b0:82:c3:03:b4:9d:6b: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:40:5B:5A:90:75:5B:5B:3D:84:DD:BB:E1:39:61:58:F2:D1:41:AF X509v3 Authority Key Identifier: keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e6:15:88:ea:5e:67:c9:d8:a1:0a:ea:66:c5:a7:46:6a:85: 90:58:b5:1b:73:f7:b1:b6:53:21:ea:52:f6:c8:e1:17:5d:2c: 1a:6f:0c:0d:34:af:d9:f3:fb:d0:b3:ba:7b:b3:2f:6b:ca:9c: ac:a9:d3:c7:5c:f7:d2:bd:67:05:53:23:6d:3d:f0:f1:6a:3f: 66:5b:d7:bc:51:a9:87:0a:0c:69:e6:a7:d2:7b:02:a5:8c:3f: 6b:5c:8d:2a:0b:61:e6:c0:55:37:b2:7c:97:28:46:6e:e4:05: a4:86:41:bd:45:53:4d:b1:5a:22:97:19:7e:d2:ba:cd:64:e1: d6:f8:16:fc:70:91:cc:38:26:86:f7:f8:42:bd:10:d8:34:5f: 40:df:51:e7:60:f0:dc:72:20:57:bb:ec:5c:1a:f1:77:94:ef: 4d:10:e9:02:e7:69:9d:0f:62:aa:e9:e9:ae:57:72:ae:ed:e1: dc:b5:d3:4b:5a:84:eb:d3:84:7d:37:18:db:2a:87:2b:85:29: 93:03:f1:21:dc:a0:90:2e:19:4e:61:5d:88:c6:35:7b:76:a0: 37:dc:06:c5:05:9d:79:98:50:cf:93:7a:9a:fc:ab:e5:ab:8f: 0e:26:f8:51:78:fb:bf:51:92:0d:ff:75:22:f4:b3:10:66:2a: a2:6e:dc:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjE3QTExMC8GA1UEBRMoQjNFRkE3RDZBRTE5OUQxNDU4MkRENEVDQjkxNjNBM0M5 RDg0MTc1OTAeFw0yNDExMjEwNTI1NDdaFw0yNDExMjgwNTI1NDdaMBgxFjAUBgNV BAMTDTY3M2VjNDVjLWE4NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU8Gk83veDQqou7FDhgNlnyiBt/CobcCDB79QLR1KIwj21d3AzQWDkOpumB4I8 xAZalxR5O3Ku3Mi+LGiOiyMj5LixNG+5ygPPme3N87XbNT75m2LclaoHx4qC8IwF 0DG6zclcmxmdEPEPZp0/aRUwvCDouaLhzp4pilz8tKu27KDajDFiEUZ5/GifL0EU EIwH9VtIN3Jt9ZiiXxuLULOoxucjY5KmvEmlQI2gcogriEYvKW84EeCOkBFW6WSf kNYdig9ZTvIYwTTGwIPGxqcQdq/HkMvh3Yuv2uyWkPRjB4Q3z4aVYZWLlR3ilBPn cu9zogoe+sxJsILDA7Sda4htAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9kBbWpB1 W1s9hN274TlhWPLRQa8wHwYDVR0jBBgwFoAUs++n1q4ZnRRYLdTsuRY6PJ2EF1kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGMTdBLzc0QkIyNEQyM0Y1 RDExRUY4QkY3ODYwRUM0RjlBRTAyL3MtLW4xcTRablJSWUxkVHN1Ulk2UEoyRUYx ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcy0tbjFxNFpuUlJZTGRUc3VSWTZQSjJFRjFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG MTdBLzc0QkIyNEQyM0Y1RDExRUY4QkY3ODYwRUM0RjlBRTAyL3MtLW4xcTRablJS WUxkVHN1Ulk2UEoyRUYxay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFbmFYjqXmfJ2KEK6mbFp0ZqhZBYtRtz97G2UyHqUvbI4RddLBpvDA00 r9nz+9CzunuzL2vKnKyp08dc99K9ZwVTI2098PFqP2Zb17xRqYcKDGnmp9J7AqWM P2tcjSoLYebAVTeyfJcoRm7kBaSGQb1FU02xWiKXGX7Sus1k4db4Fvxwkcw4Job3 +EK9ENg0X0DfUedg8NxyIFe77Fwa8XeU700Q6QLnaZ0PYqrp6a5Xcq7t4dy100ta hOvThH03GNsqhyuFKZMD8SHcoJAuGU5hXYjGNXt2oDfcBsUFnXmYUM+Tepr8q+Wr jw4m+FF4+79Rkg3/dSL0sxBmKqJu3O8= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:52 2024 by rpki-client on console-fra.rpki-client.org