$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json) Hash identifier: ik7mBcArBIC5kw5/3YVuO/V01S3LEpUGBdDVqVjZSrs= Subject key identifier: 76:7B:0C:95:7B:DE:48:CA:42:91:CE:3B:5F:2F:47:0B:9E:2C:9B:17 Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft Manifest number: 43 Signing time: Thu 21 Nov 2024 05:27:26 +0000 Manifest this update: Thu 21 Nov 2024 05:27:26 +0000 Manifest next update: Thu 28 Nov 2024 05:27:26 +0000 Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: 5EiwgzVBtFwX7uEnhZpXW8hlZg5jG8vYOIe2inP8V5s=) 2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: /DX7dbxTLTAh+dFwT5n2PZNSYyr7e+Nh1d2b2XOmU5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Validity Not Before: Nov 21 05:27:26 2024 GMT Not After : Nov 28 05:27:26 2024 GMT Subject: CN=673ec4be-1ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:f3:81:9f:ae:3e:23:f3:67:72:ec:7b:95: b4:0d:32:c3:e7:16:41:b0:a0:ed:1a:a6:7d:fc:07: 7b:24:c0:d4:33:d8:81:80:34:10:8a:af:d3:9e:29: 61:05:7a:b4:48:c6:f5:26:09:5c:d5:bf:fd:12:6d: b8:7f:54:c3:64:f9:35:b9:72:24:0c:56:c8:2e:54: b7:5e:08:0f:90:7c:6f:e7:d5:2f:7c:b5:ba:8a:18: 83:11:3f:40:79:8f:04:36:aa:2f:f9:94:dd:e8:ee: 4e:f8:2f:d0:5c:3d:c4:a1:57:d9:d5:9c:43:57:b6: 7f:91:f9:1b:42:ac:62:3a:b1:cf:6e:86:6d:cc:1e: 6b:05:6c:54:16:2d:12:8c:90:58:aa:be:33:07:1a: 1b:e0:f6:bb:f8:05:26:5d:e8:e5:66:8b:77:22:c9: ed:af:bc:7b:25:4f:92:02:43:cb:ea:f4:2f:c6:73: 27:b7:5e:a0:04:3e:87:be:44:f2:7b:71:1f:60:a4: 4e:03:37:18:64:d4:87:ad:de:b4:32:fe:5f:c8:5d: c0:e3:5d:31:c4:b5:02:0f:4e:79:cf:19:81:20:4b: d4:94:19:f5:57:dc:86:93:9e:a8:76:0f:9c:2e:8e: 88:35:e5:75:af:e6:3e:eb:5e:1f:c7:05:2c:59:b5: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7B:0C:95:7B:DE:48:CA:42:91:CE:3B:5F:2F:47:0B:9E:2C:9B:17 X509v3 Authority Key Identifier: keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:5e:c7:0c:15:43:c0:b0:f1:c2:d2:88:59:c9:05:3f:a9:73: 7a:e9:30:70:00:af:b7:33:32:db:36:ff:1b:2f:92:60:64:1b: a6:ba:e9:43:8d:02:56:89:54:db:68:3c:cf:7e:67:d4:c2:28: 6b:7a:4c:dd:51:6b:6d:23:32:fd:97:28:08:74:e1:91:17:f1: 42:5e:62:30:c6:bf:9d:c5:39:b3:f4:4c:4e:e8:1d:02:02:2d: b5:00:56:e1:9b:3f:b0:57:bf:fb:88:44:33:63:bf:5b:91:46: e5:8c:b9:f3:8f:89:4d:34:a0:ad:06:79:f3:ba:0b:e0:c5:5a: 9c:ec:0f:11:81:fd:df:73:71:33:87:78:39:bb:99:43:43:b4: d4:db:31:17:b2:a1:de:09:57:ec:0f:cf:b8:1e:c5:d5:f1:c2: 8f:22:70:e3:3a:81:0a:a1:d1:72:b2:e7:3a:16:f5:a7:72:47: fc:2a:6c:48:d6:23:1a:9c:08:3b:b0:1c:df:e7:d1:aa:29:61: 1a:3a:0f:9a:98:a9:2c:31:11:44:fa:79:0f:07:a8:ae:dc:4d: 05:e3:21:2f:07:72:86:59:5d:78:90:f6:ec:79:78:43:93:5a: 65:43:38:40:d9:ec:a5:49:d6:4d:43:92:ae:30:60:6c:b9:f1: a6:a3:4f:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkQyMDExMC8GA1UEBRMoQTc2QjcxMENEMjM2MEEyRTI2ODJGRDJCODA3MThBMTk4 ODM5NjYwNDAeFw0yNDExMjEwNTI3MjZaFw0yNDExMjgwNTI3MjZaMBgxFjAUBgNV BAMTDTY3M2VjNGJlLTFhYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpo/OBn64+I/Nncux7lbQNMsPnFkGwoO0apn38B3skwNQz2IGANBCKr9OeKWEF erRIxvUmCVzVv/0Sbbh/VMNk+TW5ciQMVsguVLdeCA+QfG/n1S98tbqKGIMRP0B5 jwQ2qi/5lN3o7k74L9BcPcShV9nVnENXtn+R+RtCrGI6sc9uhm3MHmsFbFQWLRKM kFiqvjMHGhvg9rv4BSZd6OVmi3ciye2vvHslT5ICQ8vq9C/Gcye3XqAEPoe+RPJ7 cR9gpE4DNxhk1Iet3rQy/l/IXcDjXTHEtQIPTnnPGYEgS9SUGfVX3IaTnqh2D5wu jog15XWv5j7rXh/HBSxZtZhvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdnsMlXve SMpCkc47Xy9HC54smxcwHwYDVR0jBBgwFoAUp2txDNI2Ci4mgv0rgHGKGYg5ZgQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGRDIwL0E4MjUzQjlDNDMz MDExRUY5RURCQ0Q2Q0M0RjlBRTAyL3AydHhETkkyQ2k0bWd2MHJnSEdLR1lnNVpn US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcDJ0eEROSTJDaTRtZ3YwcmdIR0tHWWc1WmdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG RDIwL0E4MjUzQjlDNDMzMDExRUY5RURCQ0Q2Q0M0RjlBRTAyL3AydHhETkkyQ2k0 bWd2MHJnSEdLR1lnNVpnUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAJexwwVQ8Cw8cLSiFnJBT+pc3rpMHAAr7czMts2/xsvkmBkG6a66UON AlaJVNtoPM9+Z9TCKGt6TN1Ra20jMv2XKAh04ZEX8UJeYjDGv53FObP0TE7oHQIC LbUAVuGbP7BXv/uIRDNjv1uRRuWMufOPiU00oK0GefO6C+DFWpzsDxGB/d9zcTOH eDm7mUNDtNTbMReyod4JV+wPz7gexdXxwo8icOM6gQqh0XKy5zoW9adyR/wqbEjW IxqcCDuwHN/n0aopYRo6D5qYqSwxEUT6eQ8HqK7cTQXjIS8HcoZZXXiQ9ux5eEOT WmVDOEDZ7KVJ1k1Dkq4wYGy58aajT+I= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:52 2024 by rpki-client on console-fra.rpki-client.org