$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft File: K08yPFindrTnU4be6Dci4EViMsY.mft (raw, json) Hash identifier: llaCUsd6BQj14pFhfVcu/yO03sGPetih8mnjR3RF8gY= Subject key identifier: BB:F5:A2:03:BA:63:D0:6F:71:2A:51:3A:84:C0:43:4B:C4:F6:7A:2C Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 Certificate issuer: /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Certificate serial: 0D89 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft Manifest number: 0D7C Signing time: Sun 24 Nov 2024 15:33:53 +0000 Manifest this update: Sun 24 Nov 2024 15:33:52 +0000 Manifest next update: Sun 01 Dec 2024 15:33:52 +0000 Files and hashes: 1: K08yPFindrTnU4be6Dci4EViMsY.crl (hash: P9m2y1yECw8Tg5PjIymxxSRz2EwnDuO2vANyIeMBgIg=) 2: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (hash: QaiwA0ii3swzDmEn5ZYRLYQTMUg0WLwS1y2KJOPdMzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3465 (0xd89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6 Validity Not Before: Nov 24 15:33:52 2024 GMT Not After : Dec 1 15:33:52 2024 GMT Subject: CN=67434761-f0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7c:dd:82:e0:95:f8:43:23:66:38:52:c6:b5: 7e:21:14:b7:d1:00:8c:44:51:67:27:b7:11:ad:23: 39:0e:24:9f:23:8b:ea:fc:ac:d8:a0:76:f7:e9:7c: ef:b7:93:77:18:25:df:55:2d:69:a7:21:d8:00:8b: 4d:b7:dc:0f:80:94:d2:06:70:d9:1d:90:7f:30:74: 1e:b3:dc:44:7d:02:77:67:4f:e1:b7:cf:4e:6b:74: 3d:44:6e:40:4c:55:18:63:d9:0f:7f:d2:23:b5:0b: 45:c2:49:ff:93:90:bd:4a:f9:98:ab:07:4e:7c:32: 4f:36:7f:36:e9:35:c9:4e:dc:a4:5c:b1:08:9e:d2: f2:6b:c0:a0:30:fa:5b:f0:cb:ba:3b:82:a2:06:5a: e0:79:c9:dc:e9:c3:11:96:9a:ca:e8:55:56:62:42: 1c:59:bf:f2:99:04:c2:69:81:2a:18:1a:41:84:83: d3:4b:37:2e:8d:8c:9f:67:ca:a2:44:38:1a:de:45: 48:86:ac:6d:3b:3f:4c:e6:69:d2:25:65:fd:76:9f: 67:8c:e9:79:60:d8:6e:fd:97:72:37:14:7e:9b:18: ff:1f:14:0f:00:48:d5:a7:1e:f4:6e:85:36:00:e9: 9f:39:7a:c7:35:0e:ba:8b:64:d7:90:08:47:ae:e8: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F5:A2:03:BA:63:D0:6F:71:2A:51:3A:84:C0:43:4B:C4:F6:7A:2C X509v3 Authority Key Identifier: keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:27:4d:00:d3:61:6f:f3:64:62:32:94:e7:b4:aa:90:0a:4e: ed:8c:42:85:a9:17:d1:6e:33:4b:81:2e:82:15:0e:4b:0d:91: aa:85:01:de:3d:26:e4:49:1c:79:f5:1f:74:8d:69:58:3c:ff: 98:45:3b:ab:26:b1:dc:90:8c:36:75:20:6d:57:35:4e:e7:2a: 74:54:a4:29:d0:b5:90:6a:f2:bf:e1:39:a8:ff:05:e3:de:29: 15:14:18:a2:2a:f6:3f:22:54:e7:e8:1c:49:89:40:19:d2:c7: f6:95:da:87:f0:69:65:58:6e:78:00:54:0d:3a:c3:4a:40:c2: e7:62:95:c8:33:da:97:69:f1:76:4d:fe:f1:28:19:0f:30:ff: e2:41:ed:2b:1e:0b:82:d0:5d:40:bf:ce:42:a2:e3:f6:49:9a: 82:d1:30:a0:8c:6f:16:9e:52:98:cb:f3:ab:9c:94:48:11:d4: 81:82:b1:58:0f:2f:3e:5f:eb:cf:07:f8:53:a8:f3:c7:49:62: 46:0c:5a:0c:0a:f7:30:0f:48:db:5c:e4:f1:48:c2:37:a9:57: 18:f4:37:f7:b7:17:e4:f5:1f:14:ec:68:ec:ad:a6:cc:e1:09: 9c:7d:76:e3:93:59:96:09:1b:5c:ec:d9:d4:ba:e7:49:ff:d7: ca:48:3f:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDNjIxMTAvBgNVBAUTKDJCNEYzMjNDNThBNzc2QjRFNzUzODZERUU4MzcyMkUw NDU2MjMyQzYwHhcNMjQxMTI0MTUzMzUyWhcNMjQxMjAxMTUzMzUyWjAYMRYwFAYD VQQDEw02NzQzNDc2MS1mMGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHzdguCV+EMjZjhSxrV+IRS30QCMRFFnJ7cRrSM5DiSfI4vq/KzYoHb36Xzv t5N3GCXfVS1ppyHYAItNt9wPgJTSBnDZHZB/MHQes9xEfQJ3Z0/ht89Oa3Q9RG5A TFUYY9kPf9IjtQtFwkn/k5C9SvmYqwdOfDJPNn826TXJTtykXLEIntLya8CgMPpb 8Mu6O4KiBlrgecnc6cMRlprK6FVWYkIcWb/ymQTCaYEqGBpBhIPTSzcujYyfZ8qi RDga3kVIhqxtOz9M5mnSJWX9dp9njOl5YNhu/ZdyNxR+mxj/HxQPAEjVpx70boU2 AOmfOXrHNQ66i2TXkAhHruhN0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLv1ogO6 Y9BvcSpROoTAQ0vE9nosMB8GA1UdIwQYMBaAFCtPMjxYp3a051OG3ug3IuBFYjLG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkM2Mi9FRTk1RkQ0MkI3 NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRyVG5VNGJlNkRjaTRFVmlN c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0swOHlQRmluZHJUblU0YmU2RGNpNEVWaU1zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkM2Mi9FRTk1RkQ0MkI3NjYxMUU5ODZDMEU1MTRDNEY5QUUwMi9LMDh5UEZpbmRy VG5VNGJlNkRjaTRFVmlNc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5J00A02Fv82RiMpTntKqQCk7tjEKFqRfRbjNLgS6CFQ5LDZGqhQHe PSbkSRx59R90jWlYPP+YRTurJrHckIw2dSBtVzVO5yp0VKQp0LWQavK/4Tmo/wXj 3ikVFBiiKvY/IlTn6BxJiUAZ0sf2ldqH8GllWG54AFQNOsNKQMLnYpXIM9qXafF2 Tf7xKBkPMP/iQe0rHguC0F1Av85CouP2SZqC0TCgjG8WnlKYy/OrnJRIEdSBgrFY Dy8+X+vPB/hTqPPHSWJGDFoMCvcwD0jbXOTxSMI3qVcY9Df3txfk9R8U7GjsrabM 4QmcfXbjk1mWCRtc7NnUuudJ/9fKSD/m -----END CERTIFICATE-----Generated at Sun Nov 24 17:19:57 2024 by rpki-client on console-fra.rpki-client.org