$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft File: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft (raw, json) Hash identifier: 8uFk+jk4VkbEiYS7Q2BsRXgs10OWdHl76DsGMiFpFc4= Subject key identifier: 19:D2:21:B3:0F:E1:B6:5C:A3:E3:4F:04:C2:37:67:49:C0:A9:A3:88 Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft Manifest number: 46 Signing time: Sat 23 Nov 2024 05:18:58 +0000 Manifest this update: Sat 23 Nov 2024 05:18:57 +0000 Manifest next update: Sat 30 Nov 2024 05:18:57 +0000 Files and hashes: 1: 1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl (hash: cAWJ4HfIAqjERJ4I26ssYD/AfJnOdFwjmcShdQT8PyU=) 2: 084D41C6407111EFB0944C40C4F9AE02.roa (hash: B1MkRxAli+aCG9hY9Ne4d3HvCV9W5TyJ8qGlAB72Ayo=) 3: 08FDDCFC407111EFB0944C40C4F9AE02.roa (hash: 6Hq0/CdaWwMxF+XrSoXKbCITfc8y24LYxJ+JIDWCQls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Nov 23 05:18:57 2024 GMT Not After : Nov 30 05:18:57 2024 GMT Subject: CN=674165c1-9c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1d:ed:ec:d0:a3:e8:97:16:72:21:d8:c6:af: 57:fc:cc:b7:b3:a9:84:3b:a6:af:f2:0d:fc:e6:ad: 57:6f:34:0d:31:d6:1b:be:24:bd:67:fe:b5:b3:9b: a6:e9:71:29:cd:15:54:88:69:2e:2c:54:ef:7e:c8: 7a:26:c4:ed:e3:a3:c6:9c:fe:8c:05:8b:ff:c9:38: b0:75:82:5f:36:c6:99:8b:b2:73:1e:be:aa:2a:41: 5a:56:8e:c8:93:91:8f:49:99:b6:df:0c:ad:81:47: 4a:95:f3:a6:3d:f0:f2:cd:e2:2e:5c:5a:ce:37:be: 46:05:9d:c1:3a:7c:6b:3e:4a:c0:16:bb:1b:72:e5: ff:56:41:2e:29:35:52:1a:d2:00:f6:5e:a7:78:ce: 91:7b:ba:9c:bf:a4:cd:66:f7:8b:58:b4:c1:9a:d6: 33:0d:19:5b:a6:7e:9e:f4:43:3e:7d:d5:b9:2d:90: 84:34:34:f3:5e:db:e5:dd:be:bc:c8:57:9d:6b:ac: 18:69:62:60:90:b6:d6:b8:11:57:31:98:86:c8:9a: da:a9:7a:76:61:4f:91:b9:45:b1:ef:08:00:65:ed: de:8b:3a:b4:94:59:07:80:3a:b2:62:50:b3:88:a0: 1e:0d:aa:53:4f:cb:23:37:01:5a:a7:a7:7b:c8:96: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D2:21:B3:0F:E1:B6:5C:A3:E3:4F:04:C2:37:67:49:C0:A9:A3:88 X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:e0:5b:6e:4a:f4:0f:59:cb:eb:74:f3:e0:ea:dd:80:24:a8: 33:59:a0:49:75:f7:5e:cf:de:c4:aa:e8:08:f2:ff:69:2c:d5: c4:55:96:e8:b8:91:3f:dc:b9:70:cb:80:25:2f:fc:61:29:a2: 28:47:64:d4:ae:db:67:52:c8:ce:1f:f7:2b:f7:99:6d:b2:ab: 70:98:a0:cb:fb:4d:43:43:fc:55:a9:e5:f1:48:a4:d9:d3:db: b1:ea:b8:7a:cb:d5:76:12:ce:60:5a:93:27:bb:62:45:e0:2e: 67:d8:73:5e:3f:ba:98:89:23:d7:b5:0c:bc:6a:07:0e:65:47: b0:e0:03:69:85:46:99:7f:af:e7:4a:ea:49:b9:c5:ac:47:ce: 15:2c:7a:38:22:af:d1:44:06:40:5b:db:c5:32:df:1f:39:84: 61:b2:a2:13:f5:88:e9:66:28:07:f7:86:be:d5:32:d8:0e:f6: 41:2a:b8:c3:25:c9:02:28:f0:2e:33:85:17:e6:72:63:48:cb: 66:69:fe:38:9a:0d:7b:a6:ca:ff:7e:86:a7:40:1a:56:de:c8: 77:f7:f4:1d:68:45:47:05:a2:49:4e:1d:21:3f:1b:d9:cb:82: 7f:40:99:13:ad:3c:18:7f:c6:6b:5f:a8:c2:85:ea:2a:f4:71: e7:5e:82:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDk1QzExMC8GA1UEBRMoRDZDODBDNUQzOEFBM0YxMEQxRUIwRTEzOUI5RTQ5NEVC RjZDNjQyMTAeFw0yNDExMjMwNTE4NTdaFw0yNDExMzAwNTE4NTdaMBgxFjAUBgNV BAMTDTY3NDE2NWMxLTljNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGHe3s0KPolxZyIdjGr1f8zLezqYQ7pq/yDfzmrVdvNA0x1hu+JL1n/rWzm6bp cSnNFVSIaS4sVO9+yHomxO3jo8ac/owFi//JOLB1gl82xpmLsnMevqoqQVpWjsiT kY9JmbbfDK2BR0qV86Y98PLN4i5cWs43vkYFncE6fGs+SsAWuxty5f9WQS4pNVIa 0gD2Xqd4zpF7upy/pM1m94tYtMGa1jMNGVumfp70Qz591bktkIQ0NPNe2+XdvrzI V51rrBhpYmCQtta4EVcxmIbImtqpenZhT5G5RbHvCABl7d6LOrSUWQeAOrJiULOI oB4NqlNPyyM3AVqnp3vIlgFlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGdIhsw/h tlyj408EwjdnScCpo4gwHwYDVR0jBBgwFoAU1sgMXTiqPxDR6w4Tm55JTr9sZCEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0OTVDLzVCQzYzRUY0NDA2 NTExRUY4NTZDOUUyOUM0RjlBRTAyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pD RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMXNnTVhUaXFQeERSNnc0VG01NUpUcjlzWkNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 OTVDLzVCQzYzRUY0NDA2NTExRUY4NTZDOUUyOUM0RjlBRTAyLzFzZ01YVGlxUHhE UjZ3NFRtNTVKVHI5c1pDRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADbgW25K9A9Zy+t08+Dq3YAkqDNZoEl1917P3sSq6Ajy/2ks1cRVlui4 kT/cuXDLgCUv/GEpoihHZNSu22dSyM4f9yv3mW2yq3CYoMv7TUND/FWp5fFIpNnT 27HquHrL1XYSzmBakye7YkXgLmfYc14/upiJI9e1DLxqBw5lR7DgA2mFRpl/r+dK 6km5xaxHzhUsejgir9FEBkBb28Uy3x85hGGyohP1iOlmKAf3hr7VMtgO9kEquMMl yQIo8C4zhRfmcmNIy2Zp/jiaDXumyv9+hqdAGlbeyHf39B1oRUcFoklOHSE/G9nL gn9AmROtPBh/xmtfqMKF6ir0cedegrQ= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org