$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft File: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft (raw, json) Hash identifier: YxLUrtadVBtsquzgpHwlU0JgJKM/i4/8yhpCQV5c7Us= Subject key identifier: C5:2A:0D:C9:3E:71:3E:12:8A:A0:CB:F1:AD:EA:FC:E2:34:CA:6C:63 Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 Certificate issuer: /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Certificate serial: 060C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft Manifest number: 0605 Signing time: Fri 22 Nov 2024 22:14:12 +0000 Manifest this update: Fri 22 Nov 2024 22:14:12 +0000 Manifest next update: Fri 29 Nov 2024 22:14:12 +0000 Files and hashes: 1: SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl (hash: qm1qlHy/HoJzlU/tcwhGeGVYIStPEK1lZRUxX8jmauA=) 2: C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (hash: 9gWAlYui5HAMuRW7/VDGjU6Xnl/T3f6FvG1ktEoqp10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44 Validity Not Before: Nov 22 22:14:12 2024 GMT Not After : Nov 29 22:14:12 2024 GMT Subject: CN=67410234-e495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:0c:03:26:54:24:0d:3a:8b:97:2e:76:b8: 60:2b:4f:47:5f:9d:ce:4f:c2:20:fc:53:a1:1d:29: 34:b2:2a:52:28:cd:df:c5:b6:76:37:2c:c9:1d:0a: 96:6f:5a:7b:e1:c7:32:68:50:1b:33:e7:9a:6d:77: 93:00:62:9a:ea:36:90:61:21:9a:9e:3c:3f:f8:a7: c2:a2:62:d4:48:f9:85:6d:17:bb:ca:f0:d2:57:20: 17:bf:cf:aa:39:c8:18:b3:e0:d5:15:48:ea:70:de: 96:bc:62:3e:b1:c0:42:53:31:80:de:70:2e:64:1d: ab:4e:48:88:c5:d6:59:26:cc:04:e4:87:e9:c1:c2: b1:47:0c:2f:0e:94:10:66:bf:f0:f4:d7:e0:19:b5: 83:9e:50:82:d3:15:c4:78:cf:6d:ae:ca:2b:64:7d: 72:63:14:8c:5a:95:22:86:b2:48:a3:f9:e9:15:0c: d3:0e:12:2b:d7:0a:48:d6:4e:f6:9f:07:75:79:b0: 6f:ae:ba:2f:bc:af:ee:84:68:57:80:a6:39:89:a8: 93:33:17:34:3c:06:05:da:35:f3:1e:05:7b:b1:89: 36:fd:62:c9:a7:a1:87:1a:61:7e:e1:28:cd:c9:c4: e1:65:c5:ef:92:d7:91:a8:0a:3d:f0:77:9d:48:28: a7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2A:0D:C9:3E:71:3E:12:8A:A0:CB:F1:AD:EA:FC:E2:34:CA:6C:63 X509v3 Authority Key Identifier: keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f0:db:61:23:c1:fb:e6:c3:99:53:09:ca:92:83:8f:47:c5: 51:16:ff:35:77:f4:c6:bb:81:a3:7f:59:9b:e1:03:eb:f5:56: 88:96:c1:33:32:29:f3:85:ce:66:3c:2e:c0:1b:6c:cd:98:b8: ff:70:a0:5c:3c:48:7d:c4:fa:df:0e:55:85:eb:8b:fa:31:99: f1:a5:e0:c4:cc:57:63:b5:fc:a9:1c:17:91:1b:ae:07:78:34: d7:b5:41:51:39:14:75:ca:f6:40:2d:67:9e:85:6c:94:d0:96: 3e:29:3e:31:3a:3d:75:2b:a2:ad:66:99:a8:fe:fd:51:97:85: 15:3a:d2:9e:36:14:c0:00:bc:f9:8a:b8:50:c7:10:71:ca:07: 8c:66:99:52:a5:b5:f3:db:d4:b2:cd:41:dc:dc:ae:b2:93:9c: 8d:70:fd:61:93:fa:db:e4:45:92:64:29:e3:89:ad:89:04:b5: 64:4b:23:db:99:18:bc:2f:1f:ca:1b:a2:ba:37:c0:02:b8:d8: 74:f2:af:50:57:16:23:13:40:6a:3c:e0:4c:09:0d:ef:f3:8b: f9:42:90:9e:b6:51:c2:26:3f:40:7a:4a:77:f8:a6:ee:65:f0: ff:bf:f8:0f:8c:cd:c3:0f:a7:9d:91:1e:3c:64:fe:2f:b6:9c: cc:a0:5b:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw RTI4RDVBNDQwHhcNMjQxMTIyMjIxNDEyWhcNMjQxMTI5MjIxNDEyWjAYMRYwFAYD VQQDEw02NzQxMDIzNC1lNDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiUMAyZUJA06i5cudrhgK09HX53OT8Ig/FOhHSk0sipSKM3fxbZ2NyzJHQqW b1p74ccyaFAbM+eabXeTAGKa6jaQYSGanjw/+KfComLUSPmFbRe7yvDSVyAXv8+q OcgYs+DVFUjqcN6WvGI+scBCUzGA3nAuZB2rTkiIxdZZJswE5IfpwcKxRwwvDpQQ Zr/w9NfgGbWDnlCC0xXEeM9trsorZH1yYxSMWpUihrJIo/npFQzTDhIr1wpI1k72 nwd1ebBvrrovvK/uhGhXgKY5iaiTMxc0PAYF2jXzHgV7sYk2/WLJp6GHGmF+4SjN ycThZcXvkteRqAo98HedSCinwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUqDck+ cT4SiqDL8a3q/OI0ymxjMB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NENFNS82Njk5ODlDODdGNUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQ R3lySEpWSWVUWmdPS05Xa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc8NthI8H75sOZUwnKkoOPR8VRFv81d/TGu4Gjf1mb4QPr9VaIlsEz Minzhc5mPC7AG2zNmLj/cKBcPEh9xPrfDlWF64v6MZnxpeDEzFdjtfypHBeRG64H eDTXtUFRORR1yvZALWeehWyU0JY+KT4xOj11K6KtZpmo/v1Rl4UVOtKeNhTAALz5 irhQxxBxygeMZplSpbXz29SyzUHc3K6yk5yNcP1hk/rb5EWSZCnjia2JBLVkSyPb mRi8Lx/KG6K6N8ACuNh08q9QVxYjE0BqPOBMCQ3v84v5QpCetlHCJj9Aekp3+Kbu ZfD/v/gPjM3DD6edkR48ZP4vtpzMoFsn -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org