$ rpki-client -vvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft File: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft (raw, json) Hash identifier: rFttqS8T96dpwdWuEb4QdHrFWMYVI8a628FSltxOqgc= Subject key identifier: 39:01:96:CC:66:8B:CE:08:5E:88:93:8C:F9:6B:D3:02:BB:67:D2:E9 Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E Certificate issuer: /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Certificate serial: 18D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft Manifest number: 18C3 Signing time: Fri 22 Nov 2024 16:27:53 +0000 Manifest this update: Fri 22 Nov 2024 16:27:52 +0000 Manifest next update: Fri 29 Nov 2024 16:27:52 +0000 Files and hashes: 1: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl (hash: /vgm+FVxjUeWQlLxVcdvE8nIVrFyXSozFL/YZ+vFX/4=) 2: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (hash: P4Ek16t0ZEw/MnJDtAJSlLMC0jHATAWAbBg4OWQTq78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6354 (0x18d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E Validity Not Before: Nov 22 16:27:52 2024 GMT Not After : Nov 29 16:27:52 2024 GMT Subject: CN=6740b109-46a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6e:9e:14:bb:3f:f6:ea:43:75:ec:e6:6b:1d: 24:ec:f8:e4:76:33:a1:3f:ae:fa:ba:9a:77:8b:ca: 88:f2:2f:14:5f:58:16:1e:cc:54:81:69:d5:3e:56: 04:7f:2e:80:d3:29:a0:da:67:e1:48:38:ed:08:33: b7:73:ab:44:1d:42:2e:19:78:d7:6f:43:94:a4:19: 4a:66:54:db:83:d5:9c:9b:f7:2a:15:39:0c:17:d6: 74:0c:b5:f5:ed:10:20:50:87:5d:b9:e3:b1:c5:02: b2:10:90:52:61:e1:2b:31:e1:92:f6:c7:eb:5f:ac: db:3c:9e:7b:59:f7:a8:8a:7a:33:8a:fc:4b:84:08: fa:a2:43:79:7d:0c:39:07:d2:4f:c1:8a:63:c2:93: 02:41:c2:48:22:1c:b1:00:62:f5:c7:d5:c8:50:c9: d2:29:06:a1:84:94:dc:8b:4b:27:68:60:13:7a:61: b4:f3:15:74:e2:d7:bd:db:39:ef:e9:df:83:0a:14: 7e:c8:c7:b9:39:f8:75:d1:3f:03:5c:00:5d:98:a8: 08:5e:85:d0:fb:c9:1b:6c:13:c2:73:00:ac:3c:a3: ab:c0:83:f9:c1:25:f0:8b:80:eb:22:62:0b:89:eb: 28:82:9e:30:e7:18:0f:5a:ff:49:f9:64:4e:52:d9: 8a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:01:96:CC:66:8B:CE:08:5E:88:93:8C:F9:6B:D3:02:BB:67:D2:E9 X509v3 Authority Key Identifier: keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:86:88:2c:a7:cb:8d:36:57:f1:74:75:3a:80:ac:fd:8b:18: 51:a9:8c:c1:8f:e8:ad:12:4c:2c:d4:e3:f0:b1:5b:24:29:ec: ef:15:a9:15:64:31:d7:70:5b:3f:b2:c8:d0:fa:99:fe:5d:da: 05:0f:df:48:81:37:6b:88:29:94:d9:a4:33:36:85:41:db:27: be:c7:6a:f3:c2:63:f4:71:f1:6d:e5:e1:c6:ce:aa:e4:dd:49: 99:5b:40:e2:38:a8:31:b4:3f:0c:d8:e8:75:eb:79:49:a4:c8: b7:48:19:65:2b:e2:df:60:fc:48:e2:93:cf:fd:16:03:aa:16: 40:ce:86:0a:a0:6c:c9:73:13:a6:c3:0f:42:fe:52:11:8a:ed: 76:a9:ae:c1:af:d0:0b:84:48:3b:b2:56:c1:a8:96:50:35:7b: 10:0a:9e:7d:0a:0a:c4:3a:32:69:cb:fe:8f:3f:fa:7e:8c:47: 0d:82:1b:ac:f7:ae:f3:84:a8:02:65:5e:47:fb:47:a8:51:80: 9b:ea:0c:c6:38:42:fd:aa:26:94:f6:46:9e:b1:43:ca:40:d3: 58:54:f1:9a:b9:0c:30:b6:5b:74:07:32:88:35:23:02:98:c6: 29:59:14:e7:15:dd:c1:6b:71:58:a2:88:f6:3b:e6:e6:8d:19: 69:ad:f7:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3OTkxMTAvBgNVBAUTKEUwQ0FBRDE3QzA2OEQ4NjAyQkNDRUI0NjdCNDU1NTEw QkM1MjM5MEUwHhcNMjQxMTIyMTYyNzUyWhcNMjQxMTI5MTYyNzUyWjAYMRYwFAYD VQQDEw02NzQwYjEwOS00NmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsW6eFLs/9upDdezmax0k7PjkdjOhP676upp3i8qI8i8UX1gWHsxUgWnVPlYE fy6A0ymg2mfhSDjtCDO3c6tEHUIuGXjXb0OUpBlKZlTbg9Wcm/cqFTkMF9Z0DLX1 7RAgUIddueOxxQKyEJBSYeErMeGS9sfrX6zbPJ57WfeoinozivxLhAj6okN5fQw5 B9JPwYpjwpMCQcJIIhyxAGL1x9XIUMnSKQahhJTci0snaGATemG08xV04te92znv 6d+DChR+yMe5Ofh10T8DXABdmKgIXoXQ+8kbbBPCcwCsPKOrwIP5wSXwi4DrImIL iesogp4w5xgPWv9J+WROUtmKJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkBlsxm i84IXoiTjPlr0wK7Z9LpMB8GA1UdIwQYMBaAFODKrRfAaNhgK8zrRntFVRC8UjkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODc5OS8zMjg3QkZBMjdF QzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJHQXJ6T3RHZTBWVkVMeFNP UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRNcXRGOEJvMkdBcnpPdEdlMFZWRUx4U09RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODc5OS8zMjg3QkZBMjdFQzcxMUU3ODgzRTJFNThDNEY5QUUwMi80TXF0RjhCbzJH QXJ6T3RHZTBWVkVMeFNPUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBhogsp8uNNlfxdHU6gKz9ixhRqYzBj+itEkws1OPwsVskKezvFakV ZDHXcFs/ssjQ+pn+XdoFD99IgTdriCmU2aQzNoVB2ye+x2rzwmP0cfFt5eHGzqrk 3UmZW0DiOKgxtD8M2Oh163lJpMi3SBllK+LfYPxI4pPP/RYDqhZAzoYKoGzJcxOm ww9C/lIRiu12qa7Br9ALhEg7slbBqJZQNXsQCp59CgrEOjJpy/6PP/p+jEcNghus 967zhKgCZV5H+0eoUYCb6gzGOEL9qiaU9kaesUPKQNNYVPGauQwwtlt0BzKINSMC mMYpWRTnFd3Ba3FYooj2O+bmjRlprffj -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:37 2024 by rpki-client on console-fra.rpki-client.org