$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json) Hash identifier: rUnFT+e7EvF4AUkrhIPKdp49aBSuJOqhE4DQqZjvBTw= Subject key identifier: A4:CC:FE:AF:9E:FA:03:35:65:F6:A2:99:23:3E:B3:27:EF:81:94:7D Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Certificate serial: 032C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft Manifest number: 032A Signing time: Sat 23 Nov 2024 00:41:31 +0000 Manifest this update: Sat 23 Nov 2024 00:41:31 +0000 Manifest next update: Sat 30 Nov 2024 00:41:31 +0000 Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: ILH2N3sXLqIALykJRddYZ4a9numeg8fel1iSIZajzNk=) 2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 812 (0x32c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Validity Not Before: Nov 23 00:41:31 2024 GMT Not After : Nov 30 00:41:31 2024 GMT Subject: CN=674124bb-05e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c2:35:c6:a4:58:b3:9e:2e:1f:6d:09:fd:ae: 1a:f7:af:1f:a8:95:d9:bf:db:41:2f:23:1d:48:b3: 7d:cf:4e:f0:65:e5:4a:dc:09:7f:a4:69:b5:d8:73: 79:06:d4:b1:8e:94:e5:1a:70:3e:30:be:e6:97:af: 33:d0:ac:15:54:75:3c:63:02:e0:9f:cf:cf:c1:9a: 45:c9:0c:2b:4d:0f:dc:76:63:41:32:2f:5a:0f:de: 82:51:b5:82:2d:09:4f:51:ec:a0:45:0d:60:d8:e1: 0a:dd:16:a5:d5:fa:5b:f0:db:b9:ea:fe:66:ca:40: 8e:fb:db:59:72:76:e2:71:d0:56:77:11:f6:1d:3f: 2f:30:f3:59:72:46:b8:a6:5c:32:6f:ee:2a:d8:a5: 76:47:1f:59:14:9c:a8:f3:7b:2e:2b:05:ed:0a:2a: 4d:f8:c3:bc:b9:0e:a1:ac:33:e8:20:e1:fd:2e:1b: 34:86:51:7c:4e:00:ee:98:89:8e:ee:68:44:6c:52: d1:fb:e6:1d:7f:6e:d9:2b:4d:a6:e4:91:0f:e9:57: 17:98:86:80:8a:5f:ce:ec:0e:21:9c:89:5f:fc:ed: d2:63:30:27:b8:3c:f8:73:25:12:3d:6b:82:75:a0: 3e:aa:e2:af:8e:cb:91:c6:0b:97:c3:a8:60:11:eb: f6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CC:FE:AF:9E:FA:03:35:65:F6:A2:99:23:3E:B3:27:EF:81:94:7D X509v3 Authority Key Identifier: keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:57:78:50:a6:cb:ed:f4:cc:32:63:1b:3e:f4:8c:51:e7:10: 15:53:96:7c:57:03:04:1b:a7:ed:01:52:13:58:eb:d1:4e:fa: 18:11:f4:63:ba:fe:ca:42:66:69:15:35:40:a4:15:da:51:e2: eb:6e:8e:f0:38:b1:4e:e8:22:f0:59:7d:e3:2e:b0:7e:65:4b: cb:33:81:93:2a:d3:6b:6c:1a:ab:02:45:c5:d7:6a:ed:38:28: 97:58:df:43:8d:37:56:70:55:85:6e:96:95:0f:1d:cb:bf:7c: 6b:92:49:05:7e:06:65:64:b4:09:0c:3d:33:e0:11:79:45:3b: 83:aa:28:ee:de:74:fb:af:12:d8:55:0a:31:00:43:89:49:e2: 18:bd:92:6f:08:8b:0b:10:ea:84:52:07:b6:f7:be:44:8d:55: e1:73:f3:70:a1:8f:b0:dd:d6:99:90:48:59:f0:0e:7e:60:ee: bd:82:30:a8:32:61:f6:02:64:6f:3f:3e:00:22:cb:e1:2f:61: 42:96:6a:e8:2a:50:ed:2e:04:32:66:d7:b5:23:cf:9f:d9:5c: f7:fb:95:cf:e8:4f:51:7d:37:f5:b7:7b:fe:7b:9f:d4:cf:ff: ee:47:ef:19:86:1e:e3:29:1e:c2:60:3a:e4:7c:d9:4f:6a:1f: 0d:67:9c:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4 N0Y1QkZFMDQwHhcNMjQxMTIzMDA0MTMxWhcNMjQxMTMwMDA0MTMxWjAYMRYwFAYD VQQDEw02NzQxMjRiYi0wNWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8I1xqRYs54uH20J/a4a968fqJXZv9tBLyMdSLN9z07wZeVK3Al/pGm12HN5 BtSxjpTlGnA+ML7ml68z0KwVVHU8YwLgn8/PwZpFyQwrTQ/cdmNBMi9aD96CUbWC LQlPUeygRQ1g2OEK3Ral1fpb8Nu56v5mykCO+9tZcnbicdBWdxH2HT8vMPNZcka4 plwyb+4q2KV2Rx9ZFJyo83suKwXtCipN+MO8uQ6hrDPoIOH9Lhs0hlF8TgDumImO 7mhEbFLR++Ydf27ZK02m5JEP6VcXmIaAil/O7A4hnIlf/O3SYzAnuDz4cyUSPWuC daA+quKvjsuRxguXw6hgEev2UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTM/q+e +gM1ZfaimSM+syfvgZR9MB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfV3hQpsvt9MwyYxs+9IxR5xAVU5Z8VwMEG6ftAVITWOvRTvoYEfRj uv7KQmZpFTVApBXaUeLrbo7wOLFO6CLwWX3jLrB+ZUvLM4GTKtNrbBqrAkXF12rt OCiXWN9DjTdWcFWFbpaVDx3Lv3xrkkkFfgZlZLQJDD0z4BF5RTuDqiju3nT7rxLY VQoxAEOJSeIYvZJvCIsLEOqEUge2975EjVXhc/NwoY+w3daZkEhZ8A5+YO69gjCo MmH2AmRvPz4AIsvhL2FClmroKlDtLgQyZte1I8+f2Vz3+5XP6E9RfTf1t3v+e5/U z//uR+8Zhh7jKR7CYDrkfNlPah8NZ5x0 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:52 2024 by rpki-client on console-fra.rpki-client.org