$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft File: ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json) Hash identifier: 2oyISroHLgpXsUWqprpJ/LszK8aSnh0/B96IbHSFveg= Subject key identifier: D0:52:E3:74:34:64:DB:A8:85:FB:18:AC:37:70:9C:F6:2D:B2:4A:18 Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 Certificate issuer: /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft Manifest number: 0124 Signing time: Sat 23 Nov 2024 02:53:48 +0000 Manifest this update: Sat 23 Nov 2024 02:53:48 +0000 Manifest next update: Sat 30 Nov 2024 02:53:48 +0000 Files and hashes: 1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: veLL/kHRtnAPw8LDF1uxBvEVM60an1h+so5FbAj7VqI=) 2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: CEGzbb8mbwbCceZtpxGKn27etBkh86Y23v6fJ7nUYK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Validity Not Before: Nov 23 02:53:48 2024 GMT Not After : Nov 30 02:53:48 2024 GMT Subject: CN=674143bc-37f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f8:06:82:f5:c9:1e:c6:dc:6f:45:76:91:a5: 62:22:c7:91:95:24:c6:f1:dd:18:3d:4e:3a:8f:1d: fe:b2:92:48:42:03:6d:66:ff:d7:df:51:8b:a8:46: ea:65:b4:3f:68:8f:a2:94:67:6c:cb:89:1b:90:35: 38:30:c5:28:e7:c5:52:95:d8:5d:4b:90:51:0f:eb: d5:21:a9:b1:99:82:2f:3a:21:dd:7a:ff:40:af:15: 59:47:1d:ee:d9:a5:05:78:5d:8d:fd:3b:cc:ea:3e: 1a:49:0d:af:e7:d7:27:50:32:72:22:22:4f:a3:ea: f1:20:76:fd:1b:12:fe:0d:b0:76:35:1a:ba:42:3b: 21:c1:14:f3:58:cb:7d:ec:be:69:3c:2e:ca:8c:7c: a3:72:73:1d:32:26:a7:d5:d2:7d:83:b4:b2:1f:74: e8:0e:63:14:cb:ff:23:34:e2:ed:ad:ec:83:62:a2: b7:cb:51:1c:a8:c6:2c:db:79:bd:a7:a0:b1:49:3f: a0:86:73:bf:82:66:49:59:b9:1c:27:28:5d:03:37: 72:1e:e3:f5:20:87:84:27:47:e5:62:a4:08:15:f1: 7c:d0:aa:83:f7:9a:d1:5a:a3:74:77:2d:8a:26:7a: 0e:b6:40:9b:d4:c7:ec:9c:55:d7:cb:cb:f8:36:ea: 44:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:52:E3:74:34:64:DB:A8:85:FB:18:AC:37:70:9C:F6:2D:B2:4A:18 X509v3 Authority Key Identifier: keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7c:f7:0e:42:0e:51:d2:ce:7b:72:f6:ae:30:f8:e0:16:2c: e4:73:a6:ea:7f:1e:d2:2e:2b:c6:37:1f:11:0b:bf:6a:29:83: 49:e9:b3:de:09:ac:56:74:cb:35:9b:99:11:2d:1b:46:62:d0: d0:e9:c5:14:1c:c3:d6:c6:59:80:66:23:0a:ef:0f:2d:bd:f8: fb:7e:3c:8a:06:99:8b:76:e2:c5:fc:df:02:82:98:76:33:c4: e0:fc:54:d7:1a:5e:ed:89:6c:23:7c:c8:53:3f:90:9c:4f:bb: 4c:a4:e8:c0:2e:a0:59:ec:e7:c5:d6:fd:3b:f7:1a:24:5a:02: 35:c2:ab:7e:60:f9:3d:67:9a:ab:a5:da:6a:cf:22:3b:19:6d: c3:d1:d7:9e:03:bd:a1:73:17:2f:cb:b1:73:ba:07:02:35:75: b6:45:4f:3e:f1:ba:2a:b3:70:e2:06:02:27:11:b1:aa:43:ab: 70:bc:b1:45:4a:c0:44:c8:09:ed:82:a1:64:7a:bc:84:4b:09: 26:73:b0:2e:d4:9c:7c:2b:02:9c:c6:f2:1b:6b:b9:66:46:99: 1f:a3:eb:7c:9a:01:fa:77:f9:ad:7e:96:37:24:19:34:6c:1d: 05:22:cb:40:08:0b:22:fc:43:99:59:9a:12:86:44:20:5f:8e: a0:aa:28:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUwM0QxMTAvBgNVBAUTKDBBMTNDNkUyQkE1NDQ5OTk3Mzg1MjBGOUVCMzM1ODM2 QzQ2MEM4QzgwHhcNMjQxMTIzMDI1MzQ4WhcNMjQxMTMwMDI1MzQ4WjAYMRYwFAYD VQQDEw02NzQxNDNiYy0zN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/gGgvXJHsbcb0V2kaViIseRlSTG8d0YPU46jx3+spJIQgNtZv/X31GLqEbq ZbQ/aI+ilGdsy4kbkDU4MMUo58VSldhdS5BRD+vVIamxmYIvOiHdev9ArxVZRx3u 2aUFeF2N/TvM6j4aSQ2v59cnUDJyIiJPo+rxIHb9GxL+DbB2NRq6QjshwRTzWMt9 7L5pPC7KjHyjcnMdMian1dJ9g7SyH3ToDmMUy/8jNOLtreyDYqK3y1EcqMYs23m9 p6CxST+ghnO/gmZJWbkcJyhdAzdyHuP1IIeEJ0flYqQIFfF80KqD95rRWqN0dy2K JnoOtkCb1MfsnFXXy8v4NupEEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBS43Q0 ZNuohfsYrDdwnPYtskoYMB8GA1UdIwQYMBaAFAoTxuK6VEmZc4Ug+eszWDbEYMjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTAzRC9DRjAxQjJDQ0VC M0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNabHpoU0Q1NnpOWU5zUmd5 TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoUEc0cnBVU1psemhTRDU2ek5ZTnNSZ3lNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTAzRC9DRjAxQjJDQ0VCM0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNa bHpoU0Q1NnpOWU5zUmd5TWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+fPcOQg5R0s57cvauMPjgFizkc6bqfx7SLivGNx8RC79qKYNJ6bPe CaxWdMs1m5kRLRtGYtDQ6cUUHMPWxlmAZiMK7w8tvfj7fjyKBpmLduLF/N8Cgph2 M8Tg/FTXGl7tiWwjfMhTP5CcT7tMpOjALqBZ7OfF1v079xokWgI1wqt+YPk9Z5qr pdpqzyI7GW3D0deeA72hcxcvy7FzugcCNXW2RU8+8boqs3DiBgInEbGqQ6twvLFF SsBEyAntgqFkeryESwkmc7Au1Jx8KwKcxvIba7lmRpkfo+t8mgH6d/mtfpY3JBk0 bB0FIstACAsi/EOZWZoShkQgX46gqih1 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:43 2024 by rpki-client on console-fra.rpki-client.org