$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft File: u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json) Hash identifier: VrV+QdeRQvKTUAl4d7C5A5fuGKf+AyveTHaM8x236DI= Subject key identifier: F3:00:43:FB:16:D8:72:8B:B2:5C:F8:57:08:D8:BF:56:EF:B4:EC:57 Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Certificate serial: 05FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft Manifest number: 05E9 Signing time: Wed 20 Nov 2024 22:07:23 +0000 Manifest this update: Wed 20 Nov 2024 22:07:22 +0000 Manifest next update: Wed 27 Nov 2024 22:07:22 +0000 Files and hashes: 1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: QGMz2h/8SfDSmPojFNiv8yl0+j9gbJnxxq0905ZjWIw=) 2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: 65SFk+4TwOufzXDwexjbwGpZy2G0cdUSxHJoxJeEfYo=) 3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: 8e35oHpEk66wVCSfXTfi1bC+TzaBQMIYc44CKHvS+04=) 4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: MgPPOqUabbysJ30azHsq0+KZaRUfNvm01tRHSvCQPaY=) 5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: gh/nb3m3ns3kKq7St1rxuJ1VhTdxd6xsjqs3qEYHHrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1530 (0x5fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Validity Not Before: Nov 20 22:07:22 2024 GMT Not After : Nov 27 22:07:22 2024 GMT Subject: CN=673e5d9a-c074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b9:93:30:1b:e1:e7:9d:f1:71:74:65:cd:46: 96:20:92:68:72:65:5b:98:bc:94:c0:9e:35:83:3c: f1:5d:96:c6:2e:ae:f6:2a:7a:b6:ca:5f:b0:0a:c2: 18:df:90:bb:38:b8:ea:f7:d9:d6:73:b3:d3:4e:5f: f1:81:5a:2a:3f:cd:7e:77:92:1f:fa:c2:ef:15:49: 99:0d:be:1c:9d:25:2f:e0:cd:00:ed:e2:22:c4:5b: c8:a9:2d:88:38:45:63:22:9a:a4:a5:67:55:d6:54: e1:24:16:1a:50:57:9c:67:82:f9:f2:60:cb:31:b2: d3:79:73:bf:3c:7b:ab:74:4d:a9:b2:41:b7:37:69: f7:22:93:d3:2b:09:3c:e1:58:5d:d7:95:e9:7e:e7: b9:96:eb:8b:b4:69:73:8f:e8:3d:82:1f:fd:60:20: 3e:cc:db:4f:ba:e2:ef:ee:8d:c0:3e:b8:43:fc:96: f1:b4:9b:27:48:6d:1c:84:ab:ce:68:af:8f:c7:35: 7a:7d:4f:9c:96:90:d1:a2:2e:86:92:97:ea:23:7e: 9f:b3:e7:00:bc:79:bb:12:a4:be:cb:50:b5:05:72: 59:45:65:ca:b3:c3:c7:b1:25:c2:9c:f9:57:85:7d: 23:5e:e9:1e:fb:58:a6:5b:55:b4:fd:c6:9c:6a:f9: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:00:43:FB:16:D8:72:8B:B2:5C:F8:57:08:D8:BF:56:EF:B4:EC:57 X509v3 Authority Key Identifier: keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:af:d1:57:91:8f:c1:36:d0:2e:83:42:be:fd:29:c6:ab:13: e9:09:4c:0f:d4:05:d1:31:df:0e:33:8a:9f:54:a9:30:c8:f3: aa:86:16:14:f4:16:1c:76:3b:4c:4e:28:05:f6:8a:d3:03:f9: fd:d1:6f:29:cc:4e:2e:c9:cc:68:f0:04:10:89:dd:cd:b7:c3: f4:a2:3c:3c:bf:66:1d:d7:f3:65:c0:84:3a:09:83:65:04:b3: fc:55:8f:4c:c9:d7:dd:d3:60:80:c2:c8:ee:dd:fd:92:ee:76: 71:0f:85:4a:9e:07:bd:7d:92:2b:73:a0:f5:2e:14:d1:9a:f7: f4:5e:d3:3a:da:71:c2:a7:6c:eb:5d:b2:fb:b8:a4:94:b2:80: 6b:51:d7:4e:5e:d9:bb:f0:b2:cc:9e:c6:6a:3b:72:5f:0b:4d: c5:2b:be:a6:3e:f2:67:ce:33:59:e3:e0:71:6f:10:f4:92:31: f6:4e:77:f4:8c:52:18:84:98:66:ef:db:2f:60:79:98:27:81: 2f:0f:c5:57:49:52:dc:e7:5f:0e:75:2b:53:58:57:c9:5e:1e: b9:9b:38:81:9d:e7:fe:f8:86:c3:b8:2b:a4:61:c1:30:90:7f: 98:cc:d9:8c:e7:a2:0f:e7:06:13:03:fc:2c:c2:02:cb:b1:d4: ea:96:bd:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD MkE0RTI5Q0UwHhcNMjQxMTIwMjIwNzIyWhcNMjQxMTI3MjIwNzIyWjAYMRYwFAYD VQQDEw02NzNlNWQ5YS1jMDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7mTMBvh553xcXRlzUaWIJJocmVbmLyUwJ41gzzxXZbGLq72Knq2yl+wCsIY 35C7OLjq99nWc7PTTl/xgVoqP81+d5If+sLvFUmZDb4cnSUv4M0A7eIixFvIqS2I OEVjIpqkpWdV1lThJBYaUFecZ4L58mDLMbLTeXO/PHurdE2pskG3N2n3IpPTKwk8 4Vhd15Xpfue5luuLtGlzj+g9gh/9YCA+zNtPuuLv7o3APrhD/JbxtJsnSG0chKvO aK+PxzV6fU+clpDRoi6GkpfqI36fs+cAvHm7EqS+y1C1BXJZRWXKs8PHsSXCnPlX hX0jXuke+1imW1W0/cacavnFCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMAQ/sW 2HKLslz4VwjYv1bvtOxXMB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw TURiUnh5M1V3S2ZDcE9LYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCer9FXkY/BNtAug0K+/SnGqxPpCUwP1AXRMd8OM4qfVKkwyPOqhhYU 9BYcdjtMTigF9orTA/n90W8pzE4uycxo8AQQid3Nt8P0ojw8v2Yd1/NlwIQ6CYNl BLP8VY9Mydfd02CAwsju3f2S7nZxD4VKnge9fZIrc6D1LhTRmvf0XtM62nHCp2zr XbL7uKSUsoBrUddOXtm78LLMnsZqO3JfC03FK76mPvJnzjNZ4+BxbxD0kjH2Tnf0 jFIYhJhm79svYHmYJ4EvD8VXSVLc518OdStTWFfJXh65mziBnef++IbDuCukYcEw kH+YzNmM56IP5wYTA/wswgLLsdTqlr19 -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:50 2024 by rpki-client on console-fra.rpki-client.org