$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft File: p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json) Hash identifier: xbuyroZ4/E6F+I/qGDpyebEf+/n+1bQ93Sq9c1aTyNQ= Subject key identifier: 9B:3D:DC:54:5C:B8:36:CB:07:0A:D9:6E:EC:FB:D8:46:D3:CB:FC:0F Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft Manifest number: 74 Signing time: Sat 23 Nov 2024 04:53:28 +0000 Manifest this update: Sat 23 Nov 2024 04:53:27 +0000 Manifest next update: Sat 30 Nov 2024 04:53:27 +0000 Files and hashes: 1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: 1FxcoUcaSME1F6zUa75fYMt61Ky8ZG956o+TpJsRPPc=) 2: 8BAD4414095B11EFA680B941C4F9AE02.roa (hash: rnA3FToG0PnJ+ONyXSzkQprTT8atCq2mRTBIP9Porw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Validity Not Before: Nov 23 04:53:27 2024 GMT Not After : Nov 30 04:53:27 2024 GMT Subject: CN=67415fc7-0ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:3f:9b:03:b3:df:6b:41:8e:f3:34:bd:ce: 27:1d:af:4d:07:f1:39:02:63:d5:c4:0f:6d:96:1f: 55:3e:73:a5:fc:87:3d:21:5c:24:f1:f1:15:5c:a3: 8c:4f:8d:f0:05:17:54:46:80:bf:77:e5:5d:45:6c: a1:6d:d9:07:7c:0f:cd:c9:08:c1:fc:61:0b:a5:db: c5:2f:52:11:75:a7:3f:ac:41:f2:1c:9c:57:57:9d: 74:db:92:19:b8:0b:38:6c:f1:36:95:7f:20:26:9e: a5:6d:c1:32:ef:ed:08:39:bf:8f:c2:d7:bb:fc:ed: 1e:68:2a:f8:60:33:a2:86:34:81:8a:2f:16:ca:9c: d8:0a:6e:c7:d8:52:c8:e2:87:ff:72:89:6c:0d:36: 88:40:db:0d:0c:ed:9d:27:48:3f:d8:f7:3f:b8:9f: 51:f7:7a:fa:a0:aa:8a:fa:b2:cc:eb:d1:32:24:cd: eb:b5:77:b4:ae:3f:1d:86:58:b5:d0:b3:ec:e5:d3: 69:eb:b1:7b:ba:6f:58:26:b7:1f:25:77:8b:db:10: 3b:d7:71:c2:e6:5d:70:49:92:c8:32:d2:37:bc:ce: 4b:a1:82:72:86:de:0a:cf:1a:9c:e4:dd:f0:f5:be: a5:68:9b:af:24:49:de:9a:21:4e:57:8b:bd:17:0c: 33:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3D:DC:54:5C:B8:36:CB:07:0A:D9:6E:EC:FB:D8:46:D3:CB:FC:0F X509v3 Authority Key Identifier: keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:f8:6b:b7:f3:03:8f:e4:60:d8:17:1b:f8:9b:b7:f7:99:a0: 7e:c0:3b:a2:37:9b:65:f6:11:0f:96:ae:84:5a:89:bf:27:65: 1e:49:e0:ef:2d:76:9d:d9:cc:1d:72:b7:eb:f0:60:77:fe:f2: 24:36:b8:75:96:45:e9:2f:14:a5:8d:ba:b0:76:c8:67:36:9d: 23:7a:9d:20:dd:07:06:23:7b:1d:86:71:b3:dc:ed:89:c5:4e: bc:fa:f0:c1:39:52:10:70:3c:19:d7:b7:30:0a:14:53:55:0c: 04:25:ce:07:5e:cc:d6:2b:13:aa:b4:33:9b:60:27:9f:39:d4: 8d:1c:d1:93:63:76:5d:15:c9:d5:c9:e6:9b:8e:c8:cc:7a:fc: f3:2a:48:cb:1d:95:7e:f8:c3:6a:2e:09:3e:c1:49:f1:01:29: 7b:19:a4:8b:6e:c7:4c:ed:3c:58:67:b4:ba:b0:ed:3d:1a:31: b9:c4:73:d5:69:44:14:4d:ed:66:4a:5b:0c:86:4e:5e:f2:25: 46:d4:20:d2:2d:8f:3f:b4:03:d1:e3:f2:16:6f:72:ee:d7:95: c2:43:fa:2a:01:6d:b1:97:fc:37:e3:b8:ab:d0:94:44:bc:5a: ad:33:81:4e:c0:9d:ca:8d:9e:cb:44:bb:d0:c1:db:5b:03:14: 43:d5:c7:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzIwRDExMC8GA1UEBRMoQTc0OTc4OENCNEY0MUZEODVFN0FDMjYzQzg3NUI3RUFG MkMwRTc4RDAeFw0yNDExMjMwNDUzMjdaFw0yNDExMzAwNDUzMjdaMBgxFjAUBgNV BAMTDTY3NDE1ZmM3LTBkZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS+D+bA7Pfa0GO8zS9zicdr00H8TkCY9XED22WH1U+c6X8hz0hXCTx8RVco4xP jfAFF1RGgL935V1FbKFt2Qd8D83JCMH8YQul28UvUhF1pz+sQfIcnFdXnXTbkhm4 Czhs8TaVfyAmnqVtwTLv7Qg5v4/C17v87R5oKvhgM6KGNIGKLxbKnNgKbsfYUsji h/9yiWwNNohA2w0M7Z0nSD/Y9z+4n1H3evqgqor6sszr0TIkzeu1d7SuPx2GWLXQ s+zl02nrsXu6b1gmtx8ld4vbEDvXccLmXXBJksgy0je8zkuhgnKG3grPGpzk3fD1 vqVom68kSd6aIU5Xi70XDDNZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmz3cVFy4 NssHCtlu7PvYRtPL/A8wHwYDVR0jBBgwFoAUp0l4jLT0H9heesJjyHW36vLA540w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDMjBELzg4NjhBMTFFMDNB MTExRUY4OTI2QzAyQUM0RjlBRTAyL3AwbDRqTFQwSDloZWVzSmp5SFczNnZMQTU0 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDBsNGpMVDBIOWhlZXNKanlIVzM2dkxBNTQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD MjBELzg4NjhBMTFFMDNBMTExRUY4OTI2QzAyQUM0RjlBRTAyL3AwbDRqTFQwSDlo ZWVzSmp5SFczNnZMQTU0MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKv4a7fzA4/kYNgXG/ibt/eZoH7AO6I3m2X2EQ+WroRaib8nZR5J4O8t dp3ZzB1yt+vwYHf+8iQ2uHWWRekvFKWNurB2yGc2nSN6nSDdBwYjex2GcbPc7YnF Trz68ME5UhBwPBnXtzAKFFNVDAQlzgdezNYrE6q0M5tgJ5851I0c0ZNjdl0VydXJ 5puOyMx6/PMqSMsdlX74w2ouCT7BSfEBKXsZpItux0ztPFhntLqw7T0aMbnEc9Vp RBRN7WZKWwyGTl7yJUbUINItjz+0A9Hj8hZvcu7XlcJD+ioBbbGX/DfjuKvQlES8 Wq0zgU7AncqNnstEu9DB21sDFEPVx1o= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org