$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json) Hash identifier: jteOTzlnMf2iY9ystXnFlOTsYIqysdbeRHztuQtNqQE= Subject key identifier: 82:75:6C:EE:08:09:7F:72:CB:7E:D9:7D:36:DC:F1:95:79:E1:07:63 Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft Manifest number: 0403 Signing time: Sat 23 Nov 2024 00:00:15 +0000 Manifest this update: Sat 23 Nov 2024 00:00:15 +0000 Manifest next update: Sat 30 Nov 2024 00:00:15 +0000 Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: 7GFZQWudsZprG4lQS3AnLX+5oLy3JpyPU0eFynu7dlo=) 2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: F010fbR+bi9xTUBl3AUBVvzkCJVPeJDxWa/Ivtr1ZK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Validity Not Before: Nov 23 00:00:15 2024 GMT Not After : Nov 30 00:00:15 2024 GMT Subject: CN=67411b0f-1651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6e:8f:24:a6:d3:b6:8d:33:da:48:36:4d:aa: 96:03:4d:53:d6:13:af:71:b3:87:e1:85:8f:07:3e: 84:c9:d8:58:c9:65:cc:4e:5a:cb:02:83:a3:c0:48: 1e:e9:31:fa:61:50:e2:6c:f6:bf:e4:b5:08:73:80: d8:a4:9a:0c:b8:17:f6:19:63:ce:83:ab:2c:5a:0d: fc:cc:7e:78:9e:48:da:fd:b7:dc:07:38:74:96:ad: 45:ad:41:f0:19:c2:b6:01:92:e0:d7:08:13:d9:2a: 0e:09:85:b6:06:29:49:a5:a8:0d:89:da:9a:e1:6a: b3:d3:8d:54:98:d7:b5:79:cb:41:56:bc:42:42:8d: 96:98:0f:20:d6:1e:ea:0a:05:80:72:39:d5:67:4c: 8c:56:b3:7c:1c:a1:68:fe:26:50:28:d8:74:34:7f: e7:e5:c8:cc:06:79:6b:c4:80:a1:3f:e6:67:e7:f4: 87:a9:09:94:53:de:f5:da:3e:5e:55:18:30:16:72: d1:6d:98:0d:8f:c5:70:70:e8:70:f1:ae:08:be:ce: 35:41:d2:78:ad:4f:23:5f:c6:4c:eb:a8:28:f9:d1: e2:ee:15:84:55:bd:0e:df:01:4f:4c:bf:17:86:f6: 24:9d:87:59:0e:23:83:f2:6b:b8:0e:ae:d0:0c:11: 84:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:75:6C:EE:08:09:7F:72:CB:7E:D9:7D:36:DC:F1:95:79:E1:07:63 X509v3 Authority Key Identifier: keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:8b:3c:8d:16:f2:0a:70:5a:1b:92:50:12:fa:5d:50:6d:36: ae:43:94:85:9a:d2:bb:17:80:14:21:29:4c:12:16:84:88:95: 65:6c:59:50:5c:c3:f8:72:56:b6:95:9c:2e:62:7b:5b:86:f9: 4d:78:fd:46:56:3d:77:62:e0:79:d3:74:8c:08:48:b8:f3:2b: 8e:23:1c:a0:6e:b2:d6:bc:18:fb:9e:6a:bf:8d:60:f4:54:0d: 4f:1b:ac:23:ad:12:a3:00:52:70:95:85:b2:8e:bd:3b:60:82: 06:17:2e:91:99:63:3d:62:a8:08:d4:1a:9a:24:08:73:62:49: 9b:ce:68:aa:42:b8:69:46:ca:be:79:9f:45:d2:e7:77:be:87: b8:ee:dc:a1:87:36:52:59:10:07:49:16:2c:d1:01:d7:d9:98: ac:17:93:9d:9c:a4:76:70:d7:6b:1c:b1:3e:1f:db:a9:70:b8: 38:1f:b9:c5:b1:52:a2:c4:1c:4a:e0:d5:d6:20:00:28:10:b6: e2:84:fb:80:55:67:d4:61:c4:1f:88:70:3c:d4:bf:ac:12:2f: 4d:fe:f3:91:da:75:e4:a0:f6:99:05:73:73:62:95:14:83:0c: 71:7d:49:54:b1:cf:29:36:4e:3f:c0:58:bc:91:91:18:f3:f6: 1b:c1:14:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJFOTA1RDlGODU0 NTEwNDVBNjUwHhcNMjQxMTIzMDAwMDE1WhcNMjQxMTMwMDAwMDE1WjAYMRYwFAYD VQQDEw02NzQxMWIwZi0xNjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvW6PJKbTto0z2kg2TaqWA01T1hOvcbOH4YWPBz6EydhYyWXMTlrLAoOjwEge 6TH6YVDibPa/5LUIc4DYpJoMuBf2GWPOg6ssWg38zH54nkja/bfcBzh0lq1FrUHw GcK2AZLg1wgT2SoOCYW2BilJpagNidqa4Wqz041UmNe1ectBVrxCQo2WmA8g1h7q CgWAcjnVZ0yMVrN8HKFo/iZQKNh0NH/n5cjMBnlrxIChP+Zn5/SHqQmUU9712j5e VRgwFnLRbZgNj8VwcOhw8a4Ivs41QdJ4rU8jX8ZM66go+dHi7hWEVb0O3wFPTL8X hvYknYdZDiOD8mu4Dq7QDBGEUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ1bO4I CX9yy37ZfTbc8ZV54QdjMB8GA1UdIwQYMBaAFPFNbD095ssQdPei6QXZ+FRRBFpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA4OS9FMUM0QTQxRTRD RTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4QjA5NkxwQmRuNFZGRUVX bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhVMXNQVDNteXhCMDk2THBCZG40VkZFRVdtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA4OS9FMUM0QTQxRTRDRTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4 QjA5NkxwQmRuNFZGRUVXbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFizyNFvIKcFobklAS+l1QbTauQ5SFmtK7F4AUISlMEhaEiJVlbFlQ XMP4cla2lZwuYntbhvlNeP1GVj13YuB503SMCEi48yuOIxygbrLWvBj7nmq/jWD0 VA1PG6wjrRKjAFJwlYWyjr07YIIGFy6RmWM9YqgI1BqaJAhzYkmbzmiqQrhpRsq+ eZ9F0ud3voe47tyhhzZSWRAHSRYs0QHX2ZisF5OdnKR2cNdrHLE+H9upcLg4H7nF sVKixBxK4NXWIAAoELbihPuAVWfUYcQfiHA81L+sEi9N/vOR2nXkoPaZBXNzYpUU gwxxfUlUsc8pNk4/wFi8kZEY8/YbwRRm -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org