$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: 76QlAYefyS+J8KDuDmRh1u80xs71wvHq0OOOJ4B9OwA= Subject key identifier: FA:61:5A:94:CF:07:EE:54:19:B8:A9:C1:1F:C1:79:82:2D:B0:80:90 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: 06 Signing time: Sat 23 Nov 2024 06:08:52 +0000 Manifest this update: Sat 23 Nov 2024 06:08:52 +0000 Manifest next update: Sat 30 Nov 2024 06:08:52 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: DRbqxSAqAxRyhbOLuYsES1RY/x4Qvp3EhnW7WuD0vZI=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: C8BMzBjnObRwd1PN8+bj1Lr3uDFXe55TuSG2M+7J66A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: Nov 23 06:08:52 2024 GMT Not After : Nov 30 06:08:52 2024 GMT Subject: CN=67417174-ddd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:2e:a7:99:d3:ec:3b:53:d8:96:53:b9:ea: 5c:d8:e8:c5:ca:26:ab:62:6e:3d:9e:27:26:90:a0: 50:07:28:4b:cf:5b:5a:73:61:6a:70:fd:4c:37:e3: e3:36:d9:1b:7f:52:0a:64:64:8f:f0:91:29:d6:5a: 91:ef:8c:aa:03:98:f2:dd:ef:ce:9b:d4:87:c6:db: 00:3e:46:09:13:59:dd:13:10:e2:96:4a:c1:eb:56: cd:15:91:0a:c5:85:b7:0e:ea:ba:ff:03:86:66:d3: a4:c3:54:2a:ee:b7:0b:d3:72:d5:46:89:3e:a0:7c: 1c:4f:df:74:d2:58:e0:55:ab:b4:a8:ce:8c:d9:67: d0:dc:e9:12:8a:27:f7:9c:4d:ad:43:e5:57:64:2e: e9:7b:20:cd:7b:a2:90:f6:eb:7d:17:cd:c1:8c:a5: 6c:83:a1:bf:5b:70:14:1c:d9:5b:e9:e2:0c:f9:91: 07:5e:c6:1c:23:81:03:49:e8:70:8b:60:35:d1:4d: fd:14:56:93:79:75:11:0d:59:55:22:05:1d:fb:4b: 02:e0:bf:e0:89:29:d9:ce:a4:75:08:0a:cb:fe:13: eb:24:83:22:d7:c9:ed:ff:0b:09:99:5b:0b:a8:ed: a7:72:6d:3b:55:e9:ae:db:d4:42:f9:71:19:2e:6b: af:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:61:5A:94:CF:07:EE:54:19:B8:A9:C1:1F:C1:79:82:2D:B0:80:90 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9d:39:23:61:9c:96:7e:97:f9:dd:a3:1e:8e:e1:f3:00:84: 6e:2c:ed:3d:d0:b7:25:c9:e7:bb:69:41:a1:e7:f2:d1:7a:74: 81:44:65:a2:72:bf:3e:4e:b3:c8:f5:f6:38:67:a1:31:00:ea: 01:20:9b:93:d5:a4:6a:4d:46:38:15:07:ca:1a:a8:8a:22:05: 6d:10:ab:fd:28:c8:17:fa:da:de:cb:9a:69:ff:59:de:d2:4d: 34:29:a2:97:d7:e4:c7:27:15:bd:36:b6:a0:e7:12:d5:c6:74: 38:2d:97:08:75:2a:07:67:31:f1:4f:b7:81:e4:11:5c:99:a4: 82:1a:39:19:7a:43:a8:1d:f0:11:ba:a4:64:4e:45:2f:5d:cb: d7:24:ce:e0:62:8b:e5:72:0d:ec:c8:de:79:05:1e:8f:be:18: 90:66:da:d9:74:f2:77:98:6f:a8:ec:aa:4e:ff:a2:a3:3d:bd: a0:89:54:31:71:ee:da:d8:12:76:17:a8:0b:6c:25:76:2f:62: a4:76:75:bd:e4:49:2a:cd:8c:23:f9:91:7f:57:76:41:81:17: e7:9b:eb:01:3f:e3:f6:ad:90:3f:4b:6f:64:3c:27:14:05:b7: f9:49:24:94:b8:3e:53:b3:b7:b2:78:ba:a2:c2:86:f6:aa:6d: 23:9f:8f:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REVGRTExMC8GA1UEBRMoNEZFMUIzNUY5QUQ4MjgxQjY2RjQ3MDMxRjUwN0UwRUU3 RDU0MjExQTAeFw0yNDExMjMwNjA4NTJaFw0yNDExMzAwNjA4NTJaMBgxFjAUBgNV BAMTDTY3NDE3MTc0LWRkZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyBi6nmdPsO1PYllO56lzY6MXKJqtibj2eJyaQoFAHKEvPW1pzYWpw/Uw34+M2 2Rt/UgpkZI/wkSnWWpHvjKoDmPLd786b1IfG2wA+RgkTWd0TEOKWSsHrVs0VkQrF hbcO6rr/A4Zm06TDVCrutwvTctVGiT6gfBxP33TSWOBVq7SozozZZ9Dc6RKKJ/ec Ta1D5VdkLul7IM17opD2630XzcGMpWyDob9bcBQc2Vvp4gz5kQdexhwjgQNJ6HCL YDXRTf0UVpN5dRENWVUiBR37SwLgv+CJKdnOpHUICsv+E+skgyLXye3/CwmZWwuo 7adybTtV6a7b1EL5cRkua6+bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+mFalM8H 7lQZuKnBH8F5gi2wgJAwHwYDVR0jBBgwFoAUT+GzX5rYKBtm9HAx9Qfg7n1UIRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERUZFLzE5NEI3OTIwQTUx NjExRUY4OTBFQ0QzRUM0RjlBRTAyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVC1Helg1cllLQnRtOUhBeDlRZmc3bjFVSVJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE RUZFLzE5NEI3OTIwQTUxNjExRUY4OTBFQ0QzRUM0RjlBRTAyL1QtR3pYNXJZS0J0 bTlIQXg5UWZnN24xVUlSby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHqdOSNhnJZ+l/ndox6O4fMAhG4s7T3QtyXJ57tpQaHn8tF6dIFEZaJy vz5Os8j19jhnoTEA6gEgm5PVpGpNRjgVB8oaqIoiBW0Qq/0oyBf62t7Lmmn/Wd7S TTQpopfX5McnFb02tqDnEtXGdDgtlwh1KgdnMfFPt4HkEVyZpIIaORl6Q6gd8BG6 pGRORS9dy9ckzuBii+VyDezI3nkFHo++GJBm2tl08neYb6jsqk7/oqM9vaCJVDFx 7trYEnYXqAtsJXYvYqR2db3kSSrNjCP5kX9XdkGBF+eb6wE/4/atkD9Lb2Q8JxQF t/lJJJS4PlOzt7J4uqLChvaqbSOfj2o= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org