$ rpki-client -vvf rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft File: 1m4Cgid2-1UUPQyeVJAyhlal4I0.mft (raw, json) Hash identifier: 4xtbtPU1laJOqazYMrH7FDjCP5xCvBVQlqVDqtoLfzs= Subject key identifier: 4C:7D:57:D1:F8:27:F3:75:C1:9A:72:9B:9C:36:A6:B4:91:BB:12:84 Authority key identifier: D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D Certificate issuer: /CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D Certificate serial: 0BDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft Manifest number: 0BD6 Signing time: Fri 22 Nov 2024 18:31:05 +0000 Manifest this update: Fri 22 Nov 2024 18:31:04 +0000 Manifest next update: Fri 29 Nov 2024 18:31:04 +0000 Files and hashes: 1: 1m4Cgid2-1UUPQyeVJAyhlal4I0.crl (hash: Z7wvlDqtd8/uNfMKfBSRBsPKbXxi/R+/tvQ6RbTmfMI=) 2: 0EE3438A07FC11EABAD90A47C4F9AE02.roa (hash: o6uzXxi45nuYDCicVYaDwUO/XE7Lp0WVGghWkgO8ZII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3038 (0xbde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D Validity Not Before: Nov 22 18:31:04 2024 GMT Not After : Nov 29 18:31:04 2024 GMT Subject: CN=6740cde8-d38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:65:bc:f4:42:1c:64:eb:10:75:9d:c5:ba:38: 7a:92:a0:9e:d6:04:78:a9:67:6b:4c:a6:86:bd:eb: 77:57:d5:75:cf:08:5b:5f:f8:02:36:cd:fd:60:35: 4c:61:0b:ef:1b:fe:1d:63:f7:87:7d:4f:01:71:d9: 8c:5b:0d:7c:1b:38:80:8b:06:c1:42:f4:52:d7:3e: 2c:85:8c:f6:0a:2f:d0:21:50:1d:da:52:ed:46:35: 36:a4:96:9f:c9:c2:9a:c9:91:b7:0a:ba:66:da:e0: 73:dd:3f:80:e4:b7:f8:11:ee:bc:c0:7c:dc:5b:ae: 14:00:90:4c:54:2f:01:1c:86:a3:6e:f3:f3:52:4d: 44:c1:fb:19:47:30:5a:b9:b3:92:4a:c8:4f:87:42: b8:71:c1:11:e6:e2:b3:87:3b:bf:cd:f7:48:4c:44: ef:09:01:a0:94:1f:92:fa:8f:82:a0:a1:79:a2:00: bb:90:85:fa:18:10:a3:cf:78:76:a8:ca:ea:7c:03: b2:36:8a:52:57:c4:ed:3d:4b:f1:d4:7b:25:b7:e2: 07:cc:4c:ec:f7:f2:c7:b5:c5:27:79:ed:4c:27:43: 5c:8f:c9:ec:ba:8f:54:9f:ed:94:f6:5a:c1:5d:7a: 32:99:07:b4:d7:b7:b1:cb:db:c0:f5:46:4d:22:0c: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7D:57:D1:F8:27:F3:75:C1:9A:72:9B:9C:36:A6:B4:91:BB:12:84 X509v3 Authority Key Identifier: keyid:D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d3:97:2c:02:32:7b:76:f3:8a:2d:e2:9a:d5:b5:66:b8:a1: 7d:d0:73:75:da:ee:34:23:e4:da:5f:e6:53:76:b7:c1:de:03: 73:2e:15:33:f0:de:2b:0a:2f:d9:14:d8:f2:01:95:29:78:cc: 8c:dc:36:52:c7:e3:f6:38:cf:9c:54:60:44:4b:f3:8d:e7:00: 9f:6c:3b:1f:92:61:11:b2:58:5b:d3:51:65:07:e5:db:ee:0a: 44:50:d1:d6:bc:45:f5:89:4f:5c:6f:26:d2:54:67:ce:53:6a: d6:d7:f1:7c:4a:33:5c:df:a0:73:68:76:5f:1c:28:1a:69:c4: ae:96:44:d3:90:57:3b:7f:31:25:36:34:1f:bc:3c:f9:0e:1a: b1:ad:f1:c9:a8:6c:56:29:ea:4e:eb:88:fc:03:47:09:75:f7: 85:52:c4:32:dc:c7:ce:21:9f:5b:8b:df:ad:75:bd:cc:c4:11: 57:f8:30:dc:4a:bd:a5:43:59:d6:a3:40:56:70:7b:a3:1c:29: 04:fc:d3:41:47:87:f5:77:00:09:19:4e:fc:91:07:de:8f:7e: 0d:0b:db:71:d2:b1:e4:a3:da:bf:05:df:6b:2d:7a:33:45:a8: 00:ae:11:46:1d:06:c6:32:c8:68:df:4f:d6:30:5c:65:ed:46: 1d:10:f9:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxODAxMTAvBgNVBAUTKEQ2NkUwMjgyMjc3NkZCNTUxNDNEMEM5RTU0OTAzMjg2 NTZBNUUwOEQwHhcNMjQxMTIyMTgzMTA0WhcNMjQxMTI5MTgzMTA0WjAYMRYwFAYD VQQDEw02NzQwY2RlOC1kMzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42W89EIcZOsQdZ3Fujh6kqCe1gR4qWdrTKaGvet3V9V1zwhbX/gCNs39YDVM YQvvG/4dY/eHfU8BcdmMWw18GziAiwbBQvRS1z4shYz2Ci/QIVAd2lLtRjU2pJaf ycKayZG3Crpm2uBz3T+A5Lf4Ee68wHzcW64UAJBMVC8BHIajbvPzUk1EwfsZRzBa ubOSSshPh0K4ccER5uKzhzu/zfdITETvCQGglB+S+o+CoKF5ogC7kIX6GBCjz3h2 qMrqfAOyNopSV8TtPUvx1Hslt+IHzEzs9/LHtcUnee1MJ0Ncj8nsuo9Un+2U9lrB XXoymQe017exy9vA9UZNIgxXxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEx9V9H4 J/N1wZpym5w2prSRuxKEMB8GA1UdIwQYMBaAFNZuAoIndvtVFD0MnlSQMoZWpeCN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE4MC8zMDU2OURCMDA3 RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0xVVVQUXllVkpBeWhsYWw0 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtNENnaWQyLTFVVVBReWVWSkF5aGxhbDRJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE4MC8zMDU2OURCMDA3RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0x VVVQUXllVkpBeWhsYWw0STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA05csAjJ7dvOKLeKa1bVmuKF90HN12u40I+TaX+ZTdrfB3gNzLhUz 8N4rCi/ZFNjyAZUpeMyM3DZSx+P2OM+cVGBES/ON5wCfbDsfkmERslhb01FlB+Xb 7gpEUNHWvEX1iU9cbybSVGfOU2rW1/F8SjNc36BzaHZfHCgaacSulkTTkFc7fzEl NjQfvDz5DhqxrfHJqGxWKepO64j8A0cJdfeFUsQy3MfOIZ9bi9+tdb3MxBFX+DDc Sr2lQ1nWo0BWcHujHCkE/NNBR4f1dwAJGU78kQfej34NC9tx0rHko9q/Bd9rLXoz RagArhFGHQbGMsho30/WMFxl7UYdEPnc -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org