$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft File: c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft (raw, json) Hash identifier: yGe8QTAqiEdiDavOdC4CMZgZZvnlIp52BMQ4eXAlFZs= Subject key identifier: 5B:78:32:07:53:C4:72:03:36:B6:8B:24:B3:EF:F2:F7:1D:77:80:89 Authority key identifier: 73:C0:E0:18:90:FF:30:67:60:10:62:A1:2E:54:BD:54:37:90:91:B6 Certificate issuer: /CN=A91FAEE4/serialNumber=73C0E01890FF3067601062A12E54BD54379091B6 Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8DgGJD_MGdgEGKhLlS9VDeQkbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft Manifest number: 0450 Signing time: Fri 22 Nov 2024 23:45:34 +0000 Manifest this update: Fri 22 Nov 2024 23:45:33 +0000 Manifest next update: Fri 29 Nov 2024 23:45:33 +0000 Files and hashes: 1: c8DgGJD_MGdgEGKhLlS9VDeQkbY.crl (hash: MxXqW11M80icu4EVET4gnIMpE1IRT7YIR6Sc1jWrsIM=) 2: 601148222FE311EC9A82B173C4F9AE02.roa (hash: 7l7cIvv2PKgzcAVE2+wLoCJeRNQ2nD5JLbsIhjuYwUw=) 3: 163AF95074D011ECA22BB248C4F9AE02.roa (hash: hmFZEklS7232HSEBl5X/5WIBk5f8ooZ9kl7W3a5q2xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.crl rsync://rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8DgGJD_MGdgEGKhLlS9VDeQkbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAEE4/serialNumber=73C0E01890FF3067601062A12E54BD54379091B6 Validity Not Before: Nov 22 23:45:33 2024 GMT Not After : Nov 29 23:45:33 2024 GMT Subject: CN=6741179d-5f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:19:82:19:46:6b:6e:ea:4c:a5:e1:35:2f:1b: fa:a0:fb:1a:f2:b8:4a:54:b7:7b:0e:82:96:79:58: ca:9b:e8:6d:35:d0:02:fa:83:a6:08:da:df:c1:b0: eb:e7:b5:88:72:5e:7a:93:f4:d7:a2:c8:7e:b8:92: d2:cd:bc:88:0a:d9:87:9c:d9:3b:75:fe:c3:05:bc: 81:32:98:d0:c6:6e:bd:42:96:40:4b:dc:3b:aa:41: 46:0b:3b:7e:d6:7a:75:e2:57:52:b8:0d:c5:44:66: 42:e7:01:18:bb:bb:a1:2b:31:2a:93:f0:42:55:71: 9d:8b:0b:10:86:1d:69:10:b5:73:18:38:13:93:ea: f5:20:27:68:cc:70:f8:30:c8:3f:67:24:65:e4:3e: 9d:81:a2:28:c1:4c:53:5c:49:51:3e:9d:f3:27:f0: 06:a9:49:9b:8d:08:58:6b:cb:3f:d5:36:33:5f:b7: 7e:eb:bf:84:9d:93:0d:70:9c:67:4d:b6:1c:82:07: 37:39:56:f2:25:ac:27:5f:26:0b:6b:8c:83:d1:d1: 35:79:60:18:c1:39:ea:80:4d:89:7e:a3:60:7a:ec: 35:8e:ab:af:22:2d:f3:d8:c2:fd:c6:15:45:0d:23: 67:2b:49:9e:68:fc:90:24:00:90:c5:b2:43:bf:64: a5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:78:32:07:53:C4:72:03:36:B6:8B:24:B3:EF:F2:F7:1D:77:80:89 X509v3 Authority Key Identifier: keyid:73:C0:E0:18:90:FF:30:67:60:10:62:A1:2E:54:BD:54:37:90:91:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8DgGJD_MGdgEGKhLlS9VDeQkbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAEE4/9C26E6C82FDE11ECAD747F68C4F9AE02/c8DgGJD_MGdgEGKhLlS9VDeQkbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:32:31:15:44:38:28:a3:59:ee:8d:a4:6f:80:e4:9d:79:ed: d7:79:f7:e0:5d:eb:a3:ab:08:fa:92:43:8e:02:f0:3b:6d:f8: 8c:38:ed:8a:0a:c3:c6:f4:17:c3:11:c2:f2:83:c0:a5:93:2e: ce:bc:e1:a7:f2:e7:bc:7d:dc:6c:bf:b4:60:5b:21:9d:10:54: af:2e:0c:9f:9f:b8:f2:17:68:21:2c:80:e0:3b:e9:a6:97:6e: 0c:53:b5:f4:b1:45:0a:b1:ef:64:03:78:e3:f3:2a:8a:4a:79: 1c:60:e8:44:17:0f:65:03:9e:bf:ea:71:cc:59:b1:a0:85:37: 85:f5:d7:12:d9:8e:a1:0a:e0:6f:af:3a:fd:d7:3c:f5:8b:e7: 7c:e4:9e:34:be:79:39:99:7d:c9:04:0f:29:d7:87:57:b7:2f: 82:41:0e:6d:d1:51:ed:f2:ba:98:fb:fb:c5:ae:cb:f7:ee:ee: 67:cf:46:c5:1f:4d:3c:4e:43:05:76:5d:1f:97:4c:5a:42:52: 47:76:8b:a2:4c:65:ec:f8:f2:5d:42:59:8e:d4:9e:5c:08:7e: c1:39:ae:0d:d1:8a:ba:74:c0:7d:df:1d:37:58:85:49:53:14: 41:49:80:50:9a:7c:aa:26:e8:67:f9:fa:0e:15:76:02:00:f3: 5f:e8:e7:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRTQxMTAvBgNVBAUTKDczQzBFMDE4OTBGRjMwNjc2MDEwNjJBMTJFNTRCRDU0 Mzc5MDkxQjYwHhcNMjQxMTIyMjM0NTMzWhcNMjQxMTI5MjM0NTMzWjAYMRYwFAYD VQQDEw02NzQxMTc5ZC01ZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8BmCGUZrbupMpeE1Lxv6oPsa8rhKVLd7DoKWeVjKm+htNdAC+oOmCNrfwbDr 57WIcl56k/TXosh+uJLSzbyICtmHnNk7df7DBbyBMpjQxm69QpZAS9w7qkFGCzt+ 1np14ldSuA3FRGZC5wEYu7uhKzEqk/BCVXGdiwsQhh1pELVzGDgTk+r1ICdozHD4 MMg/ZyRl5D6dgaIowUxTXElRPp3zJ/AGqUmbjQhYa8s/1TYzX7d+67+EnZMNcJxn TbYcggc3OVbyJawnXyYLa4yD0dE1eWAYwTnqgE2JfqNgeuw1jquvIi3z2ML9xhVF DSNnK0meaPyQJACQxbJDv2SlXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt4MgdT xHIDNraLJLPv8vcdd4CJMB8GA1UdIwQYMBaAFHPA4BiQ/zBnYBBioS5UvVQ3kJG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVFNC85QzI2RTZDODJG REUxMUVDQUQ3NDdGNjhDNEY5QUUwMi9jOERnR0pEX01HZGdFR0toTGxTOVZEZVFr YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4RGdHSkRfTUdkZ0VHS2hMbFM5VkRlUWtiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUVFNC85QzI2RTZDODJGREUxMUVDQUQ3NDdGNjhDNEY5QUUwMi9jOERnR0pEX01H ZGdFR0toTGxTOVZEZVFrYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUMjEVRDgoo1nujaRvgOSdee3XeffgXeujqwj6kkOOAvA7bfiMOO2K CsPG9BfDEcLyg8Clky7OvOGn8ue8fdxsv7RgWyGdEFSvLgyfn7jyF2ghLIDgO+mm l24MU7X0sUUKse9kA3jj8yqKSnkcYOhEFw9lA56/6nHMWbGghTeF9dcS2Y6hCuBv rzr91zz1i+d85J40vnk5mX3JBA8p14dXty+CQQ5t0VHt8rqY+/vFrsv37u5nz0bF H008TkMFdl0fl0xaQlJHdouiTGXs+PJdQlmO1J5cCH7BOa4N0Yq6dMB93x03WIVJ UxRBSYBQmnyqJuhn+foOFXYCAPNf6OfZ -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:39 2024 by rpki-client on console-fra.rpki-client.org