$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json) Hash identifier: zpRJUOhi/9d/lw/iOEvQFnGpmjoE/HI40YcoAQRbOGQ= Subject key identifier: 31:72:D8:A5:46:9B:F8:9A:B2:88:6B:D5:3D:0B:70:86:F7:E5:96:16 Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Certificate serial: 04D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft Manifest number: 04CE Signing time: Fri 22 Nov 2024 23:21:21 +0000 Manifest this update: Fri 22 Nov 2024 23:21:21 +0000 Manifest next update: Fri 29 Nov 2024 23:21:21 +0000 Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: 0DL3YykBBCp2QUhkeOGlAzWav0sLea7PkABRUJG1SVA=) 2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: 9X0FABgF4N/aMCwLf/2Sir07UctuAOlwN446kkP4Osg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1234 (0x4d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Validity Not Before: Nov 22 23:21:21 2024 GMT Not After : Nov 29 23:21:21 2024 GMT Subject: CN=674111f1-fd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:60:9b:57:8f:75:4c:ce:9e:1b:67:70:18: 07:f0:61:ee:6f:0a:29:24:78:6b:73:67:89:09:55: 94:b5:c8:71:7a:e4:a1:ed:45:d5:43:4a:5f:30:c3: f1:12:97:1d:8d:29:f6:d0:af:24:0b:d9:c7:da:61: ed:ea:29:01:e8:17:ee:16:6f:ff:92:ac:58:d2:8e: 6f:2a:40:be:cf:76:05:da:89:35:30:05:bb:2e:ca: fa:13:97:df:df:e6:c0:08:67:fb:c9:b2:5b:a5:0b: b3:1f:b2:ac:3f:2f:f9:b0:39:94:b7:49:0a:01:f4: da:92:ee:1c:21:2f:13:53:ca:dd:63:6e:08:57:1c: ad:66:4f:d8:e0:11:0f:33:22:41:4d:2c:a9:f8:3d: e7:46:02:81:25:37:2e:31:10:09:36:1d:15:ab:17: 7e:ae:f3:90:c1:05:13:26:58:8c:5a:a8:32:77:dc: e0:ed:42:ae:6e:90:51:3a:08:40:19:48:73:d2:63: 01:61:f2:b9:91:79:b7:a5:a3:51:57:bf:7a:c1:8e: 91:bf:38:5e:8b:f7:ab:83:e2:f5:7b:e5:d5:49:0d: c7:63:cb:0b:8c:fb:36:22:49:12:f0:25:53:63:89: 60:2e:35:c5:dd:f6:01:c7:59:f7:a3:ae:8a:4b:ff: bf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:72:D8:A5:46:9B:F8:9A:B2:88:6B:D5:3D:0B:70:86:F7:E5:96:16 X509v3 Authority Key Identifier: keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:08:29:6d:17:d4:98:87:c3:a0:af:80:81:f9:f4:c8:42:cb: da:3b:d9:df:4c:57:79:b5:74:9c:df:04:ae:9d:09:57:4d:d3: 1d:78:5f:61:80:59:85:4e:bc:33:3e:12:53:b2:73:4f:63:a8: 22:9a:fb:0a:9a:ad:dc:b8:73:5a:52:54:e8:d5:bd:a4:8c:1e: ad:d6:19:73:4b:1b:6d:e3:ac:eb:e5:a5:4b:8a:47:97:46:69: 15:2a:d1:6d:22:10:63:e5:4c:7d:5c:bf:83:f9:e8:0d:30:ba: 3f:79:c2:22:bb:62:1e:11:58:e4:ba:1c:35:9b:86:b8:cb:ec: 03:66:13:36:b5:02:ba:fb:8e:e7:fd:a7:c3:9a:96:64:ab:a0: bd:0b:06:79:d2:71:98:48:7f:1a:71:1c:ae:30:e2:57:84:f7: f9:b0:20:cb:f9:c5:88:61:d1:97:a9:04:69:1a:63:06:08:4d: 3f:d5:6d:d4:03:4c:b0:c0:f6:01:66:c6:0a:9f:5a:80:34:8c: ba:94:67:f7:70:b6:17:fd:80:a6:b4:bc:58:be:d1:81:7e:f0: cd:4d:47:2f:6e:e0:18:f0:f8:46:4c:14:17:6f:b0:9a:7f:85: b1:e8:5f:33:27:84:b2:65:53:1c:8f:10:fe:ce:74:c2:e5:23: bb:25:13:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG NzAxN0RDQjgwHhcNMjQxMTIyMjMyMTIxWhcNMjQxMTI5MjMyMTIxWjAYMRYwFAYD VQQDEw02NzQxMTFmMS1mZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxb5gm1ePdUzOnhtncBgH8GHubwopJHhrc2eJCVWUtchxeuSh7UXVQ0pfMMPx EpcdjSn20K8kC9nH2mHt6ikB6BfuFm//kqxY0o5vKkC+z3YF2ok1MAW7Lsr6E5ff 3+bACGf7ybJbpQuzH7KsPy/5sDmUt0kKAfTaku4cIS8TU8rdY24IVxytZk/Y4BEP MyJBTSyp+D3nRgKBJTcuMRAJNh0Vqxd+rvOQwQUTJliMWqgyd9zg7UKubpBROghA GUhz0mMBYfK5kXm3paNRV796wY6Rvzhei/erg+L1e+XVSQ3HY8sLjPs2IkkS8CVT Y4lgLjXF3fYBx1n3o66KS/+/BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFy2KVG m/iasohr1T0LcIb35ZYWMB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJGQS9FODBEQUEyRUZBODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdq UVhOLUlaNFZybWozQVgzTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWCCltF9SYh8Ogr4CB+fTIQsvaO9nfTFd5tXSc3wSunQlXTdMdeF9h gFmFTrwzPhJTsnNPY6gimvsKmq3cuHNaUlTo1b2kjB6t1hlzSxtt46zr5aVLikeX RmkVKtFtIhBj5Ux9XL+D+egNMLo/ecIiu2IeEVjkuhw1m4a4y+wDZhM2tQK6+47n /afDmpZkq6C9CwZ50nGYSH8acRyuMOJXhPf5sCDL+cWIYdGXqQRpGmMGCE0/1W3U A0ywwPYBZsYKn1qANIy6lGf3cLYX/YCmtLxYvtGBfvDNTUcvbuAY8PhGTBQXb7Ca f4Wx6F8zJ4SyZVMcjxD+znTC5SO7JROa -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org