$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft File: -6D4tMTQWqlqqvV6OUQDcbyNBDc.mft (raw, json) Hash identifier: fQFMs4+nLX3j3IS9ix3raQ3K9nK2m6CjR929S9MN1E8= Subject key identifier: 26:1B:76:21:A5:BE:F1:7D:03:76:C9:7F:3A:1F:3B:8B:B2:6C:C8:63 Authority key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 Certificate issuer: /CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft Manifest number: 04D3 Signing time: Fri 22 Nov 2024 23:20:17 +0000 Manifest this update: Fri 22 Nov 2024 23:20:17 +0000 Manifest next update: Fri 29 Nov 2024 23:20:17 +0000 Files and hashes: 1: -6D4tMTQWqlqqvV6OUQDcbyNBDc.crl (hash: W4dlfR8NHLUyC/5eeBfvT3JC1dDNwt/8M/nCJf9e+oY=) 2: 9F2BA98AF90611EBB8E0C27FC4F9AE02.roa (hash: /7fGHA/VkZzbPKmsJOOx6n47amXspBWemua7509SvjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Validity Not Before: Nov 22 23:20:17 2024 GMT Not After : Nov 29 23:20:17 2024 GMT Subject: CN=674111b1-704d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:bc:39:a9:35:ac:8b:85:7f:e3:5d:44:01: 8d:1b:f1:61:68:f4:63:32:42:b1:c4:a9:f5:85:26: a7:3e:e5:e8:47:d5:97:33:93:ff:31:fb:51:09:35: ed:fe:a7:ec:6c:ed:37:9e:83:0c:bc:90:a5:b4:2e: 29:76:9f:a6:d0:5e:d2:bd:19:95:cb:86:cb:8b:ff: f9:af:ad:3a:3e:80:20:f9:0a:f8:65:de:12:b3:a8: 12:7a:74:46:61:2a:e1:52:eb:35:a3:44:5c:72:6d: 78:4b:d8:d1:2a:49:65:bd:b9:e1:93:cb:84:0b:ed: 07:a7:14:49:20:39:b5:cb:13:de:78:0b:f5:8b:d9: ef:dd:0d:2c:4b:02:cf:b5:27:07:ee:5a:1b:73:3c: 6f:07:59:67:0a:8a:6a:06:a3:30:c3:35:3b:0c:6e: a4:f4:86:3d:37:ca:43:b7:ac:47:57:9f:e2:ef:66: d2:ce:41:3f:2d:d4:c5:c8:a8:71:33:53:f3:06:2e: ff:a1:f3:c1:45:06:42:28:1e:17:f4:4c:d5:8d:13: 8e:07:50:7a:90:ff:bd:03:de:7e:32:d1:61:41:cf: 90:cf:60:38:bd:fb:78:6b:2a:d4:e7:a9:80:f9:f9: 3a:75:2f:98:d9:2a:03:65:b4:f1:8f:a2:19:ef:b3: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1B:76:21:A5:BE:F1:7D:03:76:C9:7F:3A:1F:3B:8B:B2:6C:C8:63 X509v3 Authority Key Identifier: keyid:FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:e2:86:74:56:e0:c7:30:da:f4:86:71:b8:15:04:d5:80:e3: b2:d2:d2:7f:8b:12:34:40:d0:f7:f5:1f:99:e9:0e:a8:c3:58: 13:11:a6:19:a9:e5:ee:e5:9b:44:f6:10:7a:fe:f9:0b:02:9a: 07:90:75:4b:40:3d:6e:6a:20:79:36:d6:b6:d8:dd:a0:bd:c7: 74:1d:73:0e:d7:b0:69:ca:24:91:16:8b:f9:71:10:e5:cd:9e: 4d:28:91:dd:4d:1c:75:25:e4:6b:b3:85:51:41:73:7e:89:ee: d8:af:9c:8e:99:09:fe:81:2c:8d:29:65:d5:da:5a:4d:6d:e9: 11:0d:8a:7a:46:0a:a3:62:65:78:ee:53:ce:a3:56:13:0b:7c: 8d:a6:9c:5d:7d:b9:fe:62:73:f8:16:d4:a6:29:c2:38:e9:ad: 30:71:92:27:17:62:43:8e:69:7c:bb:87:60:37:5e:bd:0c:bf: a9:74:77:e4:12:3e:ba:e8:c5:23:ea:1f:f1:51:d7:77:7c:a0: 5d:3c:ce:88:dc:2e:c3:ef:6a:74:79:f1:5c:58:0a:0f:3e:73: 5b:fc:50:52:cd:a3:25:de:de:8b:3c:bc:4f:88:1c:7e:1e:54: 24:5b:f4:e1:10:82:ce:a5:af:9d:c6:19:aa:93:3a:93:c7:de: 03:8c:f8:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFQ0ExMTAvBgNVBAUTKEZCQTBGOEI0QzREMDVBQTk2QUFBRjU3QTM5NDQwMzcx QkM4RDA0MzcwHhcNMjQxMTIyMjMyMDE3WhcNMjQxMTI5MjMyMDE3WjAYMRYwFAYD VQQDEw02NzQxMTFiMS03MDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQW8Oak1rIuFf+NdRAGNG/FhaPRjMkKxxKn1hSanPuXoR9WXM5P/MftRCTXt /qfsbO03noMMvJCltC4pdp+m0F7SvRmVy4bLi//5r606PoAg+Qr4Zd4Ss6gSenRG YSrhUus1o0Rccm14S9jRKkllvbnhk8uEC+0HpxRJIDm1yxPeeAv1i9nv3Q0sSwLP tScH7lobczxvB1lnCopqBqMwwzU7DG6k9IY9N8pDt6xHV5/i72bSzkE/LdTFyKhx M1PzBi7/ofPBRQZCKB4X9EzVjROOB1B6kP+9A95+MtFhQc+Qz2A4vft4ayrU56mA +fk6dS+Y2SoDZbTxj6IZ77OiLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYbdiGl vvF9A3bJfzofO4uybMhjMB8GA1UdIwQYMBaAFPug+LTE0Fqpaqr1ejlEA3G8jQQ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUVDQS9FMUVDRTBBMkY5 MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdxbHFxdlY2T1VRRGNieU5C RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02RDR0TVRRV3FscXF2VjZPVVFEY2J5TkJEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUVDQS9FMUVDRTBBMkY5MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdx bHFxdlY2T1VRRGNieU5CRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDS4oZ0VuDHMNr0hnG4FQTVgOOy0tJ/ixI0QND39R+Z6Q6ow1gTEaYZ qeXu5ZtE9hB6/vkLApoHkHVLQD1uaiB5Nta22N2gvcd0HXMO17BpyiSRFov5cRDl zZ5NKJHdTRx1JeRrs4VRQXN+ie7Yr5yOmQn+gSyNKWXV2lpNbekRDYp6RgqjYmV4 7lPOo1YTC3yNppxdfbn+YnP4FtSmKcI46a0wcZInF2JDjml8u4dgN169DL+pdHfk Ej666MUj6h/xUdd3fKBdPM6I3C7D72p0efFcWAoPPnNb/FBSzaMl3t6LPLxPiBx+ HlQkW/ThEILOpa+dxhmqkzqTx94DjPiI -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:39 2024 by rpki-client on console-fra.rpki-client.org