$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: oP9yayXNWVWDbYMhDntoDVDVhGCWMyPqhgvPPgNJYpE= Subject key identifier: 94:44:0E:37:C3:1B:C4:B1:E7:77:E8:93:DA:0F:41:CC:60:A5:2B:D7 Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: 57 Signing time: Thu 21 Nov 2024 05:14:44 +0000 Manifest this update: Thu 21 Nov 2024 05:14:43 +0000 Manifest next update: Thu 28 Nov 2024 05:14:43 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: UWvC6BkclBMis8wzLeZ3z4PziEh5Dq4XL5jPqasvonw=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: Iji2xdjNL9b32bfsJ+kVOrXH1mKlpeXd/SW3QeUD+pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Nov 21 05:14:43 2024 GMT Not After : Nov 28 05:14:43 2024 GMT Subject: CN=673ec1c3-1bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:70:d9:db:1f:6b:dd:08:53:45:0f:25:cd: 0d:a6:5a:e9:7f:58:04:ea:d1:80:47:3b:67:18:88: 9d:b7:95:be:5f:7f:cd:31:a4:c6:aa:34:58:5b:d1: 1e:e1:02:c7:c6:18:3f:fa:b4:fa:e2:43:11:bc:a1: 88:32:2a:da:53:8b:f8:78:2e:b1:24:42:8d:e4:89: d2:18:1d:fa:6a:b5:f3:14:cf:99:51:c6:97:a2:f5: 2c:1e:ea:19:8a:a1:e7:44:b9:1e:78:f4:30:32:8b: 5b:a0:3c:1f:af:6a:78:50:53:1f:30:26:74:db:5f: 91:9b:6b:62:be:04:f5:30:85:f0:36:df:0c:71:bd: 67:93:fa:51:9c:41:8d:53:f7:ae:db:1a:c1:33:ea: d6:a9:cb:3c:56:7d:e5:97:d9:f0:0e:81:5f:90:ea: f8:f7:f5:2f:95:08:7f:36:41:5a:95:39:c2:0c:15: 52:a8:18:ae:e1:4e:1a:77:42:f6:79:03:49:3e:49: 66:9b:10:d6:44:05:37:30:f9:66:01:46:44:47:36: 7c:64:12:ff:f0:42:3f:0b:8e:3b:31:2e:58:be:f9: 94:a0:62:c8:fd:40:4c:83:3a:f6:c6:09:9f:0b:ee: b1:58:02:88:e8:0b:0e:cf:ce:dc:aa:d5:4e:54:eb: 6b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:44:0E:37:C3:1B:C4:B1:E7:77:E8:93:DA:0F:41:CC:60:A5:2B:D7 X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:78:a3:1e:13:32:fa:a6:2d:dd:5e:00:36:81:79:d1:66:aa: f4:60:e7:5c:21:a1:d8:f5:9c:8f:3e:5b:20:ff:82:63:66:5d: 54:5b:bd:4c:f3:78:3a:ed:5d:dc:38:61:05:71:f6:86:ec:1e: 4d:cb:b9:2d:31:1f:64:f6:f8:96:1c:38:70:30:33:40:1e:ec: 6d:af:1a:91:da:6a:d7:b5:27:25:24:a5:f1:8b:18:e1:4a:09: fb:33:a9:a2:62:f1:ea:3f:04:86:27:c9:41:00:55:62:8e:52: 16:3c:36:01:ab:2f:43:ab:78:ae:78:52:2d:01:4f:ce:9c:0a: 16:33:74:8a:50:c4:27:ef:1d:e1:18:b3:a3:32:f8:ec:87:5d: 75:c2:94:af:bb:4c:91:67:d8:f8:03:39:f6:ea:4d:d2:67:1f: de:ce:ba:6b:ab:01:7b:9d:82:ea:f6:1f:7b:4c:c9:dd:db:4e: 6e:2e:9d:35:e2:71:19:0f:5e:ce:c2:a0:b3:60:89:f3:9d:2d: 5b:ae:f9:c5:c7:5e:ea:2c:d6:71:33:b9:d9:ef:f7:b6:f7:cc: e1:81:33:ec:85:29:3a:a5:9f:a9:b4:9e:96:31:f8:2f:ea:3c: ee:12:5b:82:f0:28:a0:8e:2f:c7:61:d1:a6:5c:a3:ac:c5:2a: 10:ce:0b:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODNEQzExMC8GA1UEBRMoMDlDMzZCQzY1REU3MkEwNDE0N0Y5RDcyMjBCREJBOEQ1 MjVEMTU2NDAeFw0yNDExMjEwNTE0NDNaFw0yNDExMjgwNTE0NDNaMBgxFjAUBgNV BAMTDTY3M2VjMWMzLTFiYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrInDZ2x9r3QhTRQ8lzQ2mWul/WATq0YBHO2cYiJ23lb5ff80xpMaqNFhb0R7h AsfGGD/6tPriQxG8oYgyKtpTi/h4LrEkQo3kidIYHfpqtfMUz5lRxpei9Swe6hmK oedEuR549DAyi1ugPB+vanhQUx8wJnTbX5Gba2K+BPUwhfA23wxxvWeT+lGcQY1T 967bGsEz6tapyzxWfeWX2fAOgV+Q6vj39S+VCH82QVqVOcIMFVKoGK7hThp3QvZ5 A0k+SWabENZEBTcw+WYBRkRHNnxkEv/wQj8LjjsxLli++ZSgYsj9QEyDOvbGCZ8L 7rFYAojoCw7Pztyq1U5U62srAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlEQON8Mb xLHnd+iT2g9BzGClK9cwHwYDVR0jBBgwFoAUCcNrxl3nKgQUf51yIL26jVJdFWQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4M0RDL0EzOTdBM0U0MjZF RDExRUZCNEM5QkEyOEM0RjlBRTAyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZX US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2NOcnhsM25LZ1FVZjUxeUlMMjZqVkpkRldRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 M0RDL0EzOTdBM0U0MjZFRDExRUZCNEM5QkEyOEM0RjlBRTAyL0NjTnJ4bDNuS2dR VWY1MXlJTDI2alZKZEZXUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALR4ox4TMvqmLd1eADaBedFmqvRg51whodj1nI8+WyD/gmNmXVRbvUzz eDrtXdw4YQVx9obsHk3LuS0xH2T2+JYcOHAwM0Ae7G2vGpHaate1JyUkpfGLGOFK CfszqaJi8eo/BIYnyUEAVWKOUhY8NgGrL0OreK54Ui0BT86cChYzdIpQxCfvHeEY s6My+OyHXXXClK+7TJFn2PgDOfbqTdJnH97OumurAXudgur2H3tMyd3bTm4unTXi cRkPXs7CoLNgifOdLVuu+cXHXuos1nEzudnv97b3zOGBM+yFKTqln6m0npYx+C/q PO4SW4LwKKCOL8dh0aZco6zFKhDOC6k= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:53 2024 by rpki-client on console-fra.rpki-client.org