$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json) Hash identifier: Y1ong9mNsiFGlwtXigoENo7hH0vZYnmbXsbd3sQSVbs= Subject key identifier: C9:49:B6:64:AD:72:E5:09:05:1F:DE:D2:74:8C:0F:B4:29:93:BF:55 Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Certificate serial: 03D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft Manifest number: 03C7 Signing time: Sat 23 Nov 2024 00:15:07 +0000 Manifest this update: Sat 23 Nov 2024 00:15:06 +0000 Manifest next update: Sat 30 Nov 2024 00:15:06 +0000 Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: hqR8VNmGM5DauHSRNqVQ8yvGsJis4cKBDraOAZcSMKU=) 2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: RLzlmcW/oxo3+VUjO1sUrRUA07nzGadIHmec6ld3tSY=) 3: 4D87ACF0C4C911EE9E405162C4F9AE02.roa (hash: GbO0pfdRRcEQHd1XoMpUxyX6yosrdAznLWaP+V/m//0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 976 (0x3d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Validity Not Before: Nov 23 00:15:06 2024 GMT Not After : Nov 30 00:15:06 2024 GMT Subject: CN=67411e8a-8af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:94:09:4b:d0:17:48:10:8e:45:4d:97:ad: ae:c2:c1:e3:3b:b3:24:95:fa:50:97:45:9b:13:d2: 95:0d:35:30:bb:4c:e8:3c:07:af:b2:aa:42:d1:60: f9:86:46:b3:49:ac:c5:a3:18:0f:52:8e:2e:68:39: fd:f5:33:29:1e:c1:cb:52:0e:7c:a3:04:e0:cd:4f: 92:8d:aa:fb:07:c6:00:7c:88:14:d2:da:54:71:98: 5b:52:55:39:22:ce:37:24:3a:5e:45:bc:b2:30:85: ec:0c:5d:91:4f:06:e3:30:a5:b3:af:b5:47:f6:84: 3a:8c:3f:0a:ea:fc:36:24:87:46:b6:99:ef:03:34: e8:79:f2:18:b1:fe:43:05:a9:cb:1f:1c:8b:3a:37: 98:2c:b7:45:c0:3e:eb:c8:5b:61:3a:18:8f:77:0c: 5f:60:ba:15:ea:89:84:41:6a:eb:cb:f4:e0:80:e2: a7:f1:8e:b2:87:db:e1:1b:2c:2c:f9:69:6e:9d:cc: 95:90:e3:2d:c5:47:d2:ab:72:f0:fa:87:4c:73:9f: 69:e3:1f:62:be:d8:7a:cf:49:17:9d:00:03:cd:41: 66:17:3f:31:cc:74:fa:20:e9:7a:12:76:19:5a:03: df:de:38:0a:29:3e:fe:af:a0:93:57:d8:9f:31:62: 40:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:49:B6:64:AD:72:E5:09:05:1F:DE:D2:74:8C:0F:B4:29:93:BF:55 X509v3 Authority Key Identifier: keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:9f:45:0b:51:01:2b:d7:e5:48:11:54:9d:99:7d:f6:2e:20: dd:84:6c:41:09:69:5e:8f:9b:f6:e7:87:da:df:aa:af:7a:08: f7:34:5a:e9:9b:78:11:16:76:b6:bd:ad:c3:ea:55:5d:df:54: bd:2c:b2:90:23:71:54:93:e4:a5:dd:52:93:76:f3:09:c7:5e: a2:80:91:52:48:27:e7:77:91:5c:a2:82:a9:20:65:9b:e1:a4: 93:31:49:67:f0:79:b6:6d:e2:6d:81:3c:42:f3:60:d1:24:02: cb:b2:09:2f:6b:b6:55:e1:7f:75:18:5f:1e:bb:52:71:3b:8c: 5a:cb:55:76:21:7d:e0:91:5d:95:94:19:12:7e:ed:d9:3f:fa: f7:10:5d:1e:7f:e7:cc:0d:69:6e:f5:4c:85:7c:51:1d:6b:bc: 9f:e1:44:96:2a:ed:8a:1f:d4:4f:05:52:d5:1e:d9:48:93:a6: d3:9b:49:e0:4c:d4:98:f5:17:f5:16:58:22:1a:3d:8b:72:65: 6d:04:4e:ca:0b:f2:a7:c2:b7:fe:85:81:04:73:58:23:c1:62: bc:18:cf:c1:81:72:bf:e2:fd:f6:02:00:f8:c2:87:39:c9:dd: e0:3a:5d:24:61:a8:7a:d6:02:41:78:79:e9:03:07:99:24:bf: d0:64:98:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0 QUE4RDZBQTEwHhcNMjQxMTIzMDAxNTA2WhcNMjQxMTMwMDAxNTA2WjAYMRYwFAYD VQQDEw02NzQxMWU4YS04YWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTOUCUvQF0gQjkVNl62uwsHjO7MklfpQl0WbE9KVDTUwu0zoPAevsqpC0WD5 hkazSazFoxgPUo4uaDn99TMpHsHLUg58owTgzU+Sjar7B8YAfIgU0tpUcZhbUlU5 Is43JDpeRbyyMIXsDF2RTwbjMKWzr7VH9oQ6jD8K6vw2JIdGtpnvAzToefIYsf5D BanLHxyLOjeYLLdFwD7ryFthOhiPdwxfYLoV6omEQWrry/TggOKn8Y6yh9vhGyws +WluncyVkOMtxUfSq3Lw+odMc59p4x9ivth6z0kXnQADzUFmFz8xzHT6IOl6EnYZ WgPf3jgKKT7+r6CTV9ifMWJA6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlJtmSt cuUJBR/e0nSMD7Qpk79VMB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2 NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4 WXlUWWVZSjk4eXBLcU5hcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsn0ULUQEr1+VIEVSdmX32LiDdhGxBCWlej5v254fa36qvegj3NFrp m3gRFna2va3D6lVd31S9LLKQI3FUk+Sl3VKTdvMJx16igJFSSCfnd5FcooKpIGWb 4aSTMUln8Hm2beJtgTxC82DRJALLsgkva7ZV4X91GF8eu1JxO4xay1V2IX3gkV2V lBkSfu3ZP/r3EF0ef+fMDWlu9UyFfFEda7yf4USWKu2KH9RPBVLVHtlIk6bTm0ng TNSY9Rf1FlgiGj2LcmVtBE7KC/Knwrf+hYEEc1gjwWK8GM/BgXK/4v32AgD4woc5 yd3gOl0kYah61gJBeHnpAweZJL/QZJjt -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:52 2024 by rpki-client on console-fra.rpki-client.org