$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft File: asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json) Hash identifier: 3u36jaLIwXw/wEEH9tnTpPqs7q9Wf3hAIY2Mi67IJoU= Subject key identifier: F5:4E:B2:70:42:0F:46:CB:41:87:F0:8C:38:CE:3E:9E:C0:70:9A:5C Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Certificate serial: 0FF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft Manifest number: 0FEA Signing time: Fri 22 Nov 2024 17:26:09 +0000 Manifest this update: Fri 22 Nov 2024 17:26:09 +0000 Manifest next update: Fri 29 Nov 2024 17:26:09 +0000 Files and hashes: 1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: OTydSAcGWX1TxS5AipwVpKVD86H0O5H8EIGdO9w1efg=) 2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: Xl08iUFukXE24X8fvGUzm4LLhTQ/xSXJRNuZF2QZScI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4081 (0xff1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Validity Not Before: Nov 22 17:26:09 2024 GMT Not After : Nov 29 17:26:09 2024 GMT Subject: CN=6740beb1-44ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2e:0d:8d:32:f5:06:a9:b8:0b:fb:0d:6c:22: 71:41:d5:f2:e0:76:8a:9a:64:af:a8:03:33:2f:f3: 8c:fc:a5:d4:5d:4f:2a:2f:8e:78:2b:4e:62:1d:82: 83:41:66:44:0f:0e:e9:b3:3c:de:69:1f:4a:a1:e6: f7:6b:63:1e:da:d3:41:b9:28:15:63:cc:bd:05:e3: e1:da:c1:10:93:54:a1:69:dd:f6:dc:ad:c7:4c:08: 07:42:f7:7a:8d:99:03:97:22:e4:1a:26:a1:58:7e: f2:d6:16:e3:02:2a:19:e5:f9:dc:25:a0:ba:bb:5d: 3f:4b:f7:4b:eb:ce:72:55:a2:ab:e1:c0:26:1d:a3: 34:50:3b:b7:a4:0a:96:fa:ba:21:7a:c9:09:ee:7a: 00:09:00:8f:b1:f2:0d:97:ff:42:8f:8e:eb:43:b9: b2:c8:ce:c9:b0:59:3f:61:5c:14:33:83:6f:5e:a3: a0:4c:19:a7:46:10:25:d9:ad:ad:72:86:36:54:ad: 27:89:a8:23:b8:f0:67:b3:4c:ae:97:a1:25:d3:0b: 48:2f:c1:dc:a1:5a:4e:a5:ad:b5:45:6f:e9:3a:2d: cd:24:27:c2:86:98:66:31:df:62:1e:5b:7a:50:6a: 3a:c6:da:52:22:46:7b:e3:55:f7:f1:b4:40:07:7d: 65:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4E:B2:70:42:0F:46:CB:41:87:F0:8C:38:CE:3E:9E:C0:70:9A:5C X509v3 Authority Key Identifier: keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:86:7b:1d:b3:0a:cf:1b:b4:dd:a7:20:e5:73:20:c9:5b:e1: 28:86:98:64:bd:9e:cf:7e:ba:e4:34:76:cc:18:a9:42:88:a1: c4:5a:1a:86:4a:93:a2:b8:d6:5d:4b:10:21:c9:5b:2d:2f:ad: 2a:25:24:77:6a:87:30:2d:d5:62:ce:e1:5f:34:0a:8b:00:52: 0b:a9:10:94:a4:93:9a:0e:db:20:13:4c:57:6d:7a:ce:76:2f: 16:59:b3:c7:be:c9:10:52:20:f3:28:0d:32:12:0d:67:00:c0: a4:77:ea:62:67:bd:5c:d5:fa:05:29:6c:61:f4:0b:9f:8e:72: 47:f8:34:26:b2:3c:2e:9d:97:36:85:c9:94:12:49:c9:1f:5b: 1c:45:70:94:e0:9f:e7:28:a1:6e:d8:86:b6:12:c8:3e:21:b8: 95:ce:e1:e8:4a:32:00:72:9d:c5:4c:35:8c:91:6d:3e:03:5b: 02:e3:18:d3:f7:79:0f:42:15:8a:c2:eb:f7:57:69:2a:5b:44: 65:fe:f9:c4:77:c3:d1:bd:50:c5:59:03:8d:ea:6b:bf:3f:38: ab:a0:a5:27:86:ef:7a:95:ad:66:2c:58:d5:ea:d5:e0:0d:88: 47:13:24:a2:a5:60:bd:79:75:08:61:cc:5c:d1:4e:a8:c7:60: 56:2f:1d:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMxQTcxMTAvBgNVBAUTKDZBQzc3OTc0REZFNDUwODA3MzVDREI5MDY2QTdFMjQ2 OTYwNDkyQjcwHhcNMjQxMTIyMTcyNjA5WhcNMjQxMTI5MTcyNjA5WjAYMRYwFAYD VQQDEw02NzQwYmViMS00NGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5C4NjTL1Bqm4C/sNbCJxQdXy4HaKmmSvqAMzL/OM/KXUXU8qL454K05iHYKD QWZEDw7pszzeaR9Koeb3a2Me2tNBuSgVY8y9BePh2sEQk1Shad323K3HTAgHQvd6 jZkDlyLkGiahWH7y1hbjAioZ5fncJaC6u10/S/dL685yVaKr4cAmHaM0UDu3pAqW +roheskJ7noACQCPsfINl/9Cj47rQ7myyM7JsFk/YVwUM4NvXqOgTBmnRhAl2a2t coY2VK0niagjuPBns0yul6El0wtIL8HcoVpOpa21RW/pOi3NJCfChphmMd9iHlt6 UGo6xtpSIkZ741X38bRAB31lAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVOsnBC D0bLQYfwjDjOPp7AcJpcMB8GA1UdIwQYMBaAFGrHeXTf5FCAc1zbkGan4kaWBJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzFBNy83QjBCNjc4NDM5 QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJQnpYTnVRWnFmaVJwWUVr cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzZDVkTl9rVUlCelhOdVFacWZpUnBZRWtyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzFBNy83QjBCNjc4NDM5QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJ QnpYTnVRWnFmaVJwWUVrcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKhnsdswrPG7TdpyDlcyDJW+EohphkvZ7PfrrkNHbMGKlCiKHEWhqG SpOiuNZdSxAhyVstL60qJSR3aocwLdVizuFfNAqLAFILqRCUpJOaDtsgE0xXbXrO di8WWbPHvskQUiDzKA0yEg1nAMCkd+piZ71c1foFKWxh9AufjnJH+DQmsjwunZc2 hcmUEknJH1scRXCU4J/nKKFu2Ia2Esg+IbiVzuHoSjIAcp3FTDWMkW0+A1sC4xjT 93kPQhWKwuv3V2kqW0Rl/vnEd8PRvVDFWQON6mu/PziroKUnhu96la1mLFjV6tXg DYhHEySipWC9eXUIYcxc0U6ox2BWLx2b -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org