$ rpki-client -vvf rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft File: aecBsfM0KSOA56u5AcNCYzLGqlo.mft (raw, json) Hash identifier: zqpd0NVTQqwDZ2rNMEyM8zvZye51KJYulBJjIlSoABY= Subject key identifier: 0A:9E:EE:E0:BF:C2:33:B4:1E:43:37:EC:FB:84:EB:DC:26:FE:10:B8 Authority key identifier: 69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A Certificate issuer: /CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Certificate serial: 1569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft Manifest number: 155C Signing time: Fri 22 Nov 2024 16:49:19 +0000 Manifest this update: Fri 22 Nov 2024 16:49:19 +0000 Manifest next update: Fri 29 Nov 2024 16:49:19 +0000 Files and hashes: 1: aecBsfM0KSOA56u5AcNCYzLGqlo.crl (hash: DDZ5JehcvbXA39Yqq1n9VSFNVGQLNczgcMA06+js89k=) 2: F6CE4EEC56F911E997D5B40AC4F9AE02.roa (hash: 4H4+YRS4PlEbIBAUOpRTR8xQkQgHSLqxXY4Nc9mbKmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5481 (0x1569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F44EA/serialNumber=69E701B1F334292380E7ABB901C3426332C6AA5A Validity Not Before: Nov 22 16:49:19 2024 GMT Not After : Nov 29 16:49:19 2024 GMT Subject: CN=6740b60f-65da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:62:25:e5:b4:20:df:79:17:14:19:fc:8a: 0a:76:80:e9:5d:d8:7d:40:bf:c8:cb:3c:e9:cc:5c: ad:f3:ae:5f:c0:ab:e6:a9:73:e4:82:b0:40:dd:c6: 66:b2:c4:c7:51:f7:6e:8e:7e:14:f2:60:55:b8:cf: 04:ba:dd:04:b7:e4:34:08:ea:82:03:8e:60:48:fe: b9:ef:a7:75:84:05:5a:44:cc:cb:57:9a:82:6a:91: 0c:38:8e:e0:f1:cf:d6:6f:99:f5:2c:5a:0b:c6:84: 9e:2b:de:4c:15:65:3a:da:bd:2e:bd:83:f4:8c:89: f2:32:30:b7:6d:46:8a:b1:c5:f5:38:7d:08:0c:26: 49:42:40:7f:aa:6a:2a:f7:87:a3:e9:14:68:a3:e8: 2b:78:03:2d:58:a4:51:7c:e1:92:cd:d5:98:f5:6a: 00:fb:32:3c:b7:9b:f1:57:41:bd:dd:80:99:f3:c2: bc:72:a8:d5:64:2c:ce:91:7d:b2:99:49:47:d2:84: b3:ae:5f:00:87:4e:77:85:71:ec:cf:20:77:a3:9f: f2:04:26:3d:e4:43:d7:3a:3e:e4:36:8c:17:44:52: eb:1b:e8:78:de:7a:9d:7a:53:3c:b4:b3:a1:85:8f: 76:7a:e2:05:30:09:e6:50:62:5a:1e:d9:b2:27:cd: a4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9E:EE:E0:BF:C2:33:B4:1E:43:37:EC:FB:84:EB:DC:26:FE:10:B8 X509v3 Authority Key Identifier: keyid:69:E7:01:B1:F3:34:29:23:80:E7:AB:B9:01:C3:42:63:32:C6:AA:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aecBsfM0KSOA56u5AcNCYzLGqlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F44EA/689033962B4111E884579387C4F9AE02/aecBsfM0KSOA56u5AcNCYzLGqlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3c:d3:1f:fc:1c:a1:a6:42:fc:a5:57:91:8f:23:25:dd:37: ec:77:f7:43:bd:cd:6a:d9:d1:c8:27:d3:4a:24:09:0c:26:5d: 60:be:de:a2:5d:2a:a8:c7:42:b8:f5:75:a4:f1:03:ee:5a:e9: d9:72:e0:79:cc:33:ab:f3:1f:e6:4b:24:83:d8:18:03:34:b4: 7c:7b:a7:98:ce:0f:f7:0d:4d:22:87:d5:28:0a:b3:bb:27:72: aa:e5:bd:5b:db:a2:1c:4f:e4:28:a3:2b:3b:56:45:d0:2f:c5: cf:19:15:40:ed:0c:ae:f8:1c:8a:cd:06:5d:07:1b:04:b0:f1: 50:5c:ca:71:61:9d:dc:ac:e0:aa:2d:cf:4b:5d:0b:b5:ea:bf: 4f:59:97:21:66:ee:1a:3e:c8:f2:de:4f:d6:7d:cb:dc:1b:18: 7a:bb:87:0e:7b:09:c7:53:0e:32:90:e7:37:28:d9:25:b8:53: d0:11:d7:e8:79:8d:03:3b:06:e9:76:a1:87:cc:08:7e:4e:b7: ed:7e:ab:b6:29:2d:6e:f7:f4:3e:ec:8c:f8:f4:73:ae:69:89: db:a5:eb:fd:75:c1:c0:26:31:69:ed:fc:58:29:83:61:6c:e5: ba:8b:ae:01:5e:42:01:a4:f7:48:2b:bd:f8:45:a7:b0:bb:6a: ce:e5:90:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ0RUExMTAvBgNVBAUTKDY5RTcwMUIxRjMzNDI5MjM4MEU3QUJCOTAxQzM0MjYz MzJDNkFBNUEwHhcNMjQxMTIyMTY0OTE5WhcNMjQxMTI5MTY0OTE5WjAYMRYwFAYD VQQDEw02NzQwYjYwZi02NWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/piJeW0IN95FxQZ/IoKdoDpXdh9QL/IyzzpzFyt865fwKvmqXPkgrBA3cZm ssTHUfdujn4U8mBVuM8Eut0Et+Q0COqCA45gSP6576d1hAVaRMzLV5qCapEMOI7g 8c/Wb5n1LFoLxoSeK95MFWU62r0uvYP0jInyMjC3bUaKscX1OH0IDCZJQkB/qmoq 94ej6RRoo+greAMtWKRRfOGSzdWY9WoA+zI8t5vxV0G93YCZ88K8cqjVZCzOkX2y mUlH0oSzrl8Ah053hXHszyB3o5/yBCY95EPXOj7kNowXRFLrG+h43nqdelM8tLOh hY92euIFMAnmUGJaHtmyJ82kmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqe7uC/ wjO0HkM37PuE69wm/hC4MB8GA1UdIwQYMBaAFGnnAbHzNCkjgOeruQHDQmMyxqpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDRFQS82ODkwMzM5NjJC NDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtTT0E1NnU1QWNOQ1l6TEdx bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlY0JzZk0wS1NPQTU2dTVBY05DWXpMR3Fsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDRFQS82ODkwMzM5NjJCNDExMUU4ODQ1NzkzODdDNEY5QUUwMi9hZWNCc2ZNMEtT T0E1NnU1QWNOQ1l6TEdxbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMPNMf/ByhpkL8pVeRjyMl3Tfsd/dDvc1q2dHIJ9NKJAkMJl1gvt6i XSqox0K49XWk8QPuWunZcuB5zDOr8x/mSySD2BgDNLR8e6eYzg/3DU0ih9UoCrO7 J3Kq5b1b26IcT+Qooys7VkXQL8XPGRVA7Qyu+ByKzQZdBxsEsPFQXMpxYZ3crOCq Lc9LXQu16r9PWZchZu4aPsjy3k/WfcvcGxh6u4cOewnHUw4ykOc3KNkluFPQEdfo eY0DOwbpdqGHzAh+Trftfqu2KS1u9/Q+7Iz49HOuaYnbpev9dcHAJjFp7fxYKYNh bOW6i64BXkIBpPdIK734Raewu2rO5ZBo -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org