$ rpki-client -vvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft File: pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft (raw, json) Hash identifier: WGnQNXnrGGax34kMFpgmTf4XofGxleVo/o3fZOU7dJ4= Subject key identifier: F2:01:BD:37:08:C9:CF:A4:4C:E9:F9:59:7A:7A:7F:C0:BD:8E:AD:55 Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC Certificate issuer: /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft Manifest number: 04D3 Signing time: Fri 22 Nov 2024 23:20:39 +0000 Manifest this update: Fri 22 Nov 2024 23:20:38 +0000 Manifest next update: Fri 29 Nov 2024 23:20:38 +0000 Files and hashes: 1: pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl (hash: 6VwZCUf+1f9iEOhp5+82MXLqiMP/XVPucAbt3q228Zo=) 2: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (hash: Xe7orzQUYbTeZbeATWUGaYq/rRlqzWXLpAilQy3hdVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC Validity Not Before: Nov 22 23:20:38 2024 GMT Not After : Nov 29 23:20:38 2024 GMT Subject: CN=674111c6-6077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:4f:0d:0b:15:22:db:69:8f:43:d4:27:30: 79:48:5d:42:84:ad:5b:57:76:c3:5f:4f:45:c1:39: d4:4f:e2:dd:af:7a:ee:4d:a2:47:5b:47:26:e5:26: 7e:29:0f:75:fb:f5:a6:ac:0e:1e:8e:5e:5f:1d:39: c1:30:f4:2a:bd:ba:71:92:c6:d1:86:c0:6a:43:e2: 9a:cc:25:60:b5:37:a7:db:15:0b:c8:d5:c8:3c:5b: 2b:ef:aa:bc:f6:66:82:12:6b:fa:50:6d:ae:b3:7f: 34:03:90:f5:29:37:ed:e3:ef:60:0d:bc:8a:04:40: 65:30:dd:61:27:cb:ef:4a:cb:49:52:78:57:81:1d: 21:11:3c:13:6c:e1:e5:70:ed:79:9a:89:7f:c2:35: b8:24:c0:51:8c:9f:1b:05:c4:86:78:ef:7c:13:9a: 4b:2e:3e:3e:b9:7f:d0:8b:d3:0e:36:fa:22:77:54: 98:01:9a:f3:05:b6:cd:30:2b:9c:3e:ca:4c:e2:84: 42:bf:98:01:c5:07:48:95:73:60:09:be:4d:db:78: 9c:74:7c:ee:f4:4f:94:9d:4f:40:5b:59:74:63:5a: de:02:ec:e4:c9:4f:73:5e:da:2e:2e:cc:8b:49:12: 80:15:0a:be:11:7c:be:a3:c9:06:27:48:79:59:5b: 8f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:01:BD:37:08:C9:CF:A4:4C:E9:F9:59:7A:7A:7F:C0:BD:8E:AD:55 X509v3 Authority Key Identifier: keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:72:ef:02:be:9a:4c:71:a6:ad:3d:d9:ac:f6:c1:a6:0b:37: c8:e4:27:47:8e:8f:b5:6b:cb:7b:ca:b7:61:d3:91:6f:b3:9f: 17:06:48:d3:6f:95:83:c8:eb:98:5a:40:1b:be:6b:ec:db:24: 1a:22:2a:0e:04:59:37:46:c7:38:45:53:61:ef:99:ae:2d:d6: ca:f8:21:92:4b:90:ac:67:b5:b8:b8:05:8a:11:0c:fb:63:8b: 0e:c0:ec:af:5c:cb:98:09:73:ed:5c:76:ee:f7:0d:a6:0a:1d: 59:62:67:32:72:66:8b:65:5e:4d:32:af:63:67:28:6d:fd:47: 0b:a5:7e:83:b2:3b:91:9e:c4:ab:fd:95:ba:1d:df:a4:05:b5: 19:0b:7a:bd:ec:95:e4:ca:55:7d:c7:4d:97:23:34:21:18:75: 8f:e4:3d:0f:bb:b7:71:00:33:24:55:77:67:78:57:f9:c2:fc: 28:89:35:b2:7c:17:77:97:07:40:b5:f5:b1:df:c7:6a:aa:91: 06:45:cd:0d:bb:d8:ee:34:50:1c:d8:64:0b:43:51:7c:9a:cb: 6a:43:4d:6c:a2:6b:e2:cf:ea:76:47:0b:80:34:96:96:bb:b8: 62:bc:8e:35:aa:c5:ab:45:72:37:f3:90:b0:12:5e:2a:98:99: 3d:5c:87:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURDRkIxMTAvBgNVBAUTKEE1MTc0MURDMTlDQjkzOTA0MDI2NzZBMDNBMUZEQUVC RTBFN0YyQkMwHhcNMjQxMTIyMjMyMDM4WhcNMjQxMTI5MjMyMDM4WjAYMRYwFAYD VQQDEw02NzQxMTFjNi02MDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztJPDQsVIttpj0PUJzB5SF1ChK1bV3bDX09FwTnUT+Ldr3ruTaJHW0cm5SZ+ KQ91+/WmrA4ejl5fHTnBMPQqvbpxksbRhsBqQ+KazCVgtTen2xULyNXIPFsr76q8 9maCEmv6UG2us380A5D1KTft4+9gDbyKBEBlMN1hJ8vvSstJUnhXgR0hETwTbOHl cO15mol/wjW4JMBRjJ8bBcSGeO98E5pLLj4+uX/Qi9MONvoid1SYAZrzBbbNMCuc PspM4oRCv5gBxQdIlXNgCb5N23icdHzu9E+UnU9AW1l0Y1reAuzkyU9zXtouLsyL SRKAFQq+EXy+o8kGJ0h5WVuPjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIBvTcI yc+kTOn5WXp6f8C9jq1VMB8GA1UdIwQYMBaAFKUXQdwZy5OQQCZ2oDof2uvg5/K8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRENGQi9BQUVBMERDMEY5 QkYxMUVCODAyNDVFNkFDNEY5QUUwMi9wUmRCM0JuTGs1QkFKbmFnT2hfYTYtRG44 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BSZEIzQm5MazVCQUpuYWdPaF9hNi1Ebjhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RENGQi9BQUVBMERDMEY5QkYxMUVCODAyNDVFNkFDNEY5QUUwMi9wUmRCM0JuTGs1 QkFKbmFnT2hfYTYtRG44cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCocu8CvppMcaatPdms9sGmCzfI5CdHjo+1a8t7yrdh05Fvs58XBkjT b5WDyOuYWkAbvmvs2yQaIioOBFk3Rsc4RVNh75muLdbK+CGSS5CsZ7W4uAWKEQz7 Y4sOwOyvXMuYCXPtXHbu9w2mCh1ZYmcycmaLZV5NMq9jZyht/UcLpX6DsjuRnsSr /ZW6Hd+kBbUZC3q97JXkylV9x02XIzQhGHWP5D0Pu7dxADMkVXdneFf5wvwoiTWy fBd3lwdAtfWx38dqqpEGRc0Nu9juNFAc2GQLQ1F8mstqQ01somviz+p2RwuANJaW u7hivI41qsWrRXI385CwEl4qmJk9XIfb -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:18 2024 by rpki-client on console-ams.rpki-client.org