$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft File: S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json) Hash identifier: hfTUaqPdaTxvbxxwkA08rLphfCZOEg4bf1NrkVnBtpE= Subject key identifier: 97:0E:40:43:D8:7A:46:13:05:23:BA:68:F4:59:9A:AE:E2:FC:16:C9 Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Certificate serial: 0592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft Manifest number: 0588 Signing time: Fri 22 Nov 2024 22:49:05 +0000 Manifest this update: Fri 22 Nov 2024 22:49:05 +0000 Manifest next update: Fri 29 Nov 2024 22:49:05 +0000 Files and hashes: 1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: Os+OTDKw6M06HSj7MNO7j0LT79/gZX+uGyg202QhtZI=) 2: 3DF7E0A63DEC11EFABE5FB26C4F9AE02.roa (hash: jnFaub3xWtRjyJgczb7eq7gdgVewMZYGE/P+YZRBTrQ=) 3: 410F8C0EDBC611EEA717194DC4F9AE02.roa (hash: NpRv4nSvL2qU30toBOmsMfdrtlIrA2s/hC52yn09WRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Validity Not Before: Nov 22 22:49:05 2024 GMT Not After : Nov 29 22:49:05 2024 GMT Subject: CN=67410a61-7501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:60:38:cf:c3:3f:6d:13:48:89:73:a6:ec:76: 4e:55:59:ed:28:12:b8:4c:e0:1c:71:41:58:ba:4b: c8:b5:41:5d:66:a5:6c:e1:b4:91:47:5a:85:48:7b: 63:82:da:c1:e8:5b:cb:a8:92:76:3b:b1:4f:dc:c9: 86:a1:41:d9:52:11:af:ec:c8:fc:03:29:fb:bb:82: e0:cc:50:cb:92:ad:47:c2:b1:0d:26:b1:43:ab:68: 34:ea:1d:9a:4f:c4:be:e8:ef:02:37:8d:30:db:37: 89:62:95:47:69:33:d7:b4:3b:31:e8:df:69:16:4a: b3:5a:5f:26:24:e4:99:12:f3:21:f6:59:c5:ed:65: 86:84:bb:b8:37:cb:12:eb:3d:99:63:8d:87:07:4a: 26:95:55:3d:42:fd:9d:f5:22:9d:cd:29:8b:27:9f: 93:d2:11:96:93:47:2f:1a:3d:51:53:70:9e:ac:03: 4e:cc:43:9d:4a:69:e5:6f:82:a9:c1:80:21:87:f6: 05:8f:ad:62:07:d4:56:92:e0:03:3a:53:16:df:0c: f2:71:19:46:99:b4:d1:a2:71:30:61:27:ca:dc:db: 70:52:53:6f:ff:3a:3d:78:42:66:73:c1:57:cc:65: fc:9b:8d:a1:61:1b:78:81:ec:e1:2a:ca:2e:be:c6: 3f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0E:40:43:D8:7A:46:13:05:23:BA:68:F4:59:9A:AE:E2:FC:16:C9 X509v3 Authority Key Identifier: keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:a2:e5:93:79:a5:cc:89:df:3f:83:18:c6:07:59:ce:b3:e3: b5:9d:5a:78:8c:8e:5e:78:4b:80:9b:2b:1b:8d:df:bc:33:13: 5d:3e:cd:16:6c:87:9b:33:4f:56:51:f3:c5:e4:85:fe:e6:38: f9:2e:80:58:6e:0e:d3:65:c3:e6:01:92:36:be:ce:de:a2:82: 2b:bc:29:c4:56:30:92:d4:07:a6:1b:22:11:35:ab:05:1f:da: d6:c0:f1:ad:05:27:e8:b7:32:e0:6d:70:b6:ba:b4:0b:d5:c3: 7d:6f:8c:74:a6:d5:84:bd:6b:34:00:72:75:42:cf:58:f4:c4: b3:81:04:5e:d7:b8:3c:df:5b:b8:37:ac:46:4a:df:72:94:38: 04:33:53:14:0e:58:e2:9a:f7:1d:73:6a:5f:1c:29:be:ff:50: 9e:9e:fe:71:45:35:57:32:c7:fd:4b:ae:a7:55:e7:be:e9:ac: 16:32:04:7e:a0:25:75:6e:88:5f:ff:c2:48:23:09:e4:1c:3d: bb:e1:ae:a3:61:c2:4b:72:05:90:a5:ab:bf:24:24:33:b1:d3: 4d:ce:0a:d0:99:32:f1:f0:94:fa:5e:38:e1:5c:14:4e:7b:9b: 18:a2:c1:01:60:9c:c2:bc:95:90:6c:e8:40:b7:fe:3b:b0:ca: 79:28:f0:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ5MEExMTAvBgNVBAUTKDRCOUE2Mzg4MUE4NTU2MDIxMDU0RTk0QkRDMzIyNzRF QzdCN0RERjIwHhcNMjQxMTIyMjI0OTA1WhcNMjQxMTI5MjI0OTA1WjAYMRYwFAYD VQQDEw02NzQxMGE2MS03NTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mA4z8M/bRNIiXOm7HZOVVntKBK4TOAccUFYukvItUFdZqVs4bSRR1qFSHtj gtrB6FvLqJJ2O7FP3MmGoUHZUhGv7Mj8Ayn7u4LgzFDLkq1HwrENJrFDq2g06h2a T8S+6O8CN40w2zeJYpVHaTPXtDsx6N9pFkqzWl8mJOSZEvMh9lnF7WWGhLu4N8sS 6z2ZY42HB0omlVU9Qv2d9SKdzSmLJ5+T0hGWk0cvGj1RU3CerANOzEOdSmnlb4Kp wYAhh/YFj61iB9RWkuADOlMW3wzycRlGmbTRonEwYSfK3NtwUlNv/zo9eEJmc8FX zGX8m42hYRt4gezhKsouvsY/qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcOQEPY ekYTBSO6aPRZmq7i/BbJMB8GA1UdIwQYMBaAFEuaY4gahVYCEFTpS9wyJ07Ht93y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDkwQS8xN0UyQ0Y1MEI1 QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZnSVFWT2xMM0RJblRzZTMz ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1cGppQnFGVmdJUVZPbEwzREluVHNlMzNmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDkwQS8xN0UyQ0Y1MEI1QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZn SVFWT2xMM0RJblRzZTMzZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5ouWTeaXMid8/gxjGB1nOs+O1nVp4jI5eeEuAmysbjd+8MxNdPs0W bIebM09WUfPF5IX+5jj5LoBYbg7TZcPmAZI2vs7eooIrvCnEVjCS1AemGyIRNasF H9rWwPGtBSfotzLgbXC2urQL1cN9b4x0ptWEvWs0AHJ1Qs9Y9MSzgQRe17g831u4 N6xGSt9ylDgEM1MUDljimvcdc2pfHCm+/1Cenv5xRTVXMsf9S66nVee+6awWMgR+ oCV1bohf/8JIIwnkHD274a6jYcJLcgWQpau/JCQzsdNNzgrQmTLx8JT6XjjhXBRO e5sYosEBYJzCvJWQbOhAt/47sMp5KPBS -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:38 2024 by rpki-client on console-fra.rpki-client.org