$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft File: PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json) Hash identifier: 1NyJLS8g6Tx8dh6d4NOLBGNTRedYY81r9QBflTMnuaQ= Subject key identifier: D3:7D:92:C0:25:97:81:7C:30:55:CF:FD:45:A8:19:8F:0F:80:BF:C6 Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 Certificate issuer: /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft Manifest number: 47 Signing time: Thu 21 Nov 2024 05:25:14 +0000 Manifest this update: Thu 21 Nov 2024 05:25:13 +0000 Manifest next update: Thu 28 Nov 2024 05:25:13 +0000 Files and hashes: 1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: icnhqSLVyHwCqgbS+lR2MT6iSYSI0iowOyMUGF38iJ4=) 2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: qFjgS4TnxBDK37/ucuidHMAg92Qiv6vR40s9zvr+H5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Validity Not Before: Nov 21 05:25:13 2024 GMT Not After : Nov 28 05:25:13 2024 GMT Subject: CN=673ec439-fb8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:d4:67:4e:af:c5:ba:2b:36:22:1d:73:4a: 4b:52:87:f9:29:23:d5:16:43:cf:b9:a5:36:1b:9b: 3e:3b:35:79:50:9e:25:c8:29:f9:f7:89:99:aa:81: 53:46:10:f6:b5:1f:19:ae:f8:7a:f0:9d:ac:d5:e5: e5:26:12:31:ed:76:11:70:13:b8:3d:eb:75:d5:82: 91:d9:44:a5:b9:28:a2:8c:f0:6b:10:49:8d:df:12: 92:98:c7:f7:90:23:e4:df:22:42:da:18:76:30:6b: c5:85:63:8e:7b:fd:f0:9e:0c:39:40:07:12:ae:a7: 6a:f4:5d:c9:eb:36:09:a8:41:b1:cf:1e:20:79:ac: 0a:1e:9e:48:f3:4b:1a:00:79:c1:d8:f9:cd:f3:e7: 45:29:47:78:e7:35:07:e5:74:7d:50:05:7d:49:57: 3e:7d:6e:a9:f7:4a:2c:83:01:9b:d4:dd:33:52:b4: d9:8d:a4:df:6b:ab:ea:0e:2d:1c:b9:8b:f5:22:fa: 07:93:35:41:16:82:48:fc:7d:f6:23:2f:02:4d:c4: b7:74:b9:47:a4:77:d8:9b:50:11:06:d0:1c:0a:ce: 15:89:d1:a8:b9:aa:04:2f:08:43:01:9b:7f:9b:85: 45:ea:01:e5:0a:52:c1:67:58:2c:f7:45:2e:f0:26: ba:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7D:92:C0:25:97:81:7C:30:55:CF:FD:45:A8:19:8F:0F:80:BF:C6 X509v3 Authority Key Identifier: keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9c:c2:51:0a:c2:94:d0:64:fb:a0:a9:98:f9:22:5e:5f:44: 12:be:e3:e0:6a:29:fe:f1:4a:13:02:92:a2:69:00:7e:d4:e2: c5:c3:57:8f:b5:3a:79:35:d9:1f:e4:33:1d:62:a9:0c:11:f5: 06:58:c0:15:5f:92:5a:91:19:96:1f:85:35:0d:aa:91:80:e4: 50:b9:be:14:69:7b:07:40:f9:a6:dc:22:37:67:a8:ae:0d:05: 18:ab:b2:c6:30:c7:de:29:0b:87:c9:db:a5:bd:ea:a3:4a:a7: 52:36:fd:1e:74:a4:54:01:da:72:6a:ff:94:84:1d:90:a7:ff: 2c:90:b5:12:19:2f:b0:12:d7:de:e3:89:be:a9:08:86:73:25: 62:32:07:8a:5d:43:48:47:2d:c3:65:c5:58:b3:f3:a6:7a:82: 72:c9:4a:ce:93:14:50:44:c8:d0:68:c4:3a:3c:db:f1:2c:9c: a9:c3:c1:8a:f9:9f:d7:c3:9d:45:64:ba:c3:ad:ad:89:2e:f5: 54:8d:fe:9e:51:6e:17:6e:b5:37:cc:79:47:13:53:6b:d9:b1: c2:9f:54:5e:c6:1c:f7:37:3b:62:8e:32:af:c7:da:84:78:45: 54:ab:ef:98:2a:ae:0a:57:20:d6:ba:90:12:6e:12:78:12:f2: c5:39:46:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OUUwQTExMC8GA1UEBRMoM0Q1OTQ2MDAzRUVFNTQ4QUQ5NUQ3OTZDQjE4OEI3NTFD NTdDREFDODAeFw0yNDExMjEwNTI1MTNaFw0yNDExMjgwNTI1MTNaMBgxFjAUBgNV BAMTDTY3M2VjNDM5LWZiOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0+tRnTq/Fuis2Ih1zSktSh/kpI9UWQ8+5pTYbmz47NXlQniXIKfn3iZmqgVNG EPa1Hxmu+HrwnazV5eUmEjHtdhFwE7g963XVgpHZRKW5KKKM8GsQSY3fEpKYx/eQ I+TfIkLaGHYwa8WFY457/fCeDDlABxKup2r0XcnrNgmoQbHPHiB5rAoenkjzSxoA ecHY+c3z50UpR3jnNQfldH1QBX1JVz59bqn3SiyDAZvU3TNStNmNpN9rq+oOLRy5 i/Ui+geTNUEWgkj8ffYjLwJNxLd0uUekd9ibUBEG0BwKzhWJ0ai5qgQvCEMBm3+b hUXqAeUKUsFnWCz3RS7wJrprAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU032SwCWX gXwwVc/9RagZjw+Av8YwHwYDVR0jBBgwFoAUPVlGAD7uVIrZXXlssYi3UcV82sgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5RTBBLzBCRDk4NUU4M0U2 OTExRUZBMkNFNjc2QUM0RjlBRTAyL1BWbEdBRDd1VklyWlhYbHNzWWkzVWNWODJz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFZsR0FEN3VWSXJaWFhsc3NZaTNVY1Y4MnNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 RTBBLzBCRDk4NUU4M0U2OTExRUZBMkNFNjc2QUM0RjlBRTAyL1BWbEdBRDd1Vkly WlhYbHNzWWkzVWNWODJzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADqcwlEKwpTQZPugqZj5Il5fRBK+4+BqKf7xShMCkqJpAH7U4sXDV4+1 Onk12R/kMx1iqQwR9QZYwBVfklqRGZYfhTUNqpGA5FC5vhRpewdA+abcIjdnqK4N BRirssYwx94pC4fJ26W96qNKp1I2/R50pFQB2nJq/5SEHZCn/yyQtRIZL7AS197j ib6pCIZzJWIyB4pdQ0hHLcNlxViz86Z6gnLJSs6TFFBEyNBoxDo82/EsnKnDwYr5 n9fDnUVkusOtrYku9VSN/p5RbhdutTfMeUcTU2vZscKfVF7GHPc3O2KOMq/H2oR4 RVSr75gqrgpXINa6kBJuEngS8sU5RqM= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:53 2024 by rpki-client on console-fra.rpki-client.org