$ rpki-client -vvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft File: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft (raw, json) Hash identifier: 82LUMGw0CoRNlPo6P7dDsUzutbXWKA8Ktfo3KDR6mog= Subject key identifier: 39:5E:76:62:37:04:61:00:C3:F6:E7:0E:86:0C:B5:37:FA:DE:95:86 Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 Certificate issuer: /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Certificate serial: 3448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft Manifest number: 3438 Signing time: Fri 22 Nov 2024 15:07:35 +0000 Manifest this update: Fri 22 Nov 2024 15:07:35 +0000 Manifest next update: Fri 29 Nov 2024 15:07:35 +0000 Files and hashes: 1: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl (hash: E8Fs9kg279kIiKikt2T7isIA5BHnGowqJn83YWtTrJU=) 2: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (hash: i+oLVOiTvF13PBUoOa9UfIxFEQhcYfTJRD1Exsj8GIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13384 (0x3448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Validity Not Before: Nov 22 15:07:35 2024 GMT Not After : Nov 29 15:07:35 2024 GMT Subject: CN=67409e37-9b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:d4:e4:18:d4:31:6b:fc:08:fe:a1:ee:2c: 42:27:1c:89:c6:1f:3a:78:fd:a2:e1:72:8a:8a:25: 2d:53:9b:67:76:ee:44:c2:11:9b:ae:77:68:6d:ae: 91:56:bf:88:f7:7b:71:89:03:62:d1:aa:e6:4a:16: 37:3e:80:8b:18:61:65:97:46:1d:6e:02:3e:ff:3f: f6:c6:2d:64:b7:b5:1b:a0:e6:9b:6e:81:b8:cd:a2: b9:c6:c1:f6:22:14:51:ac:01:73:8e:94:11:f9:2d: f4:31:d3:44:c9:6a:d7:da:9e:8f:6d:81:86:d4:17: 97:cb:83:db:16:fe:20:e5:37:c3:a2:37:bf:c7:5a: 87:b9:89:37:63:49:3d:5a:10:73:ce:50:17:e8:c0: 8c:5b:40:6e:a0:53:c6:e4:c4:04:91:b2:41:e4:fc: 75:1f:6b:60:4b:30:79:25:5a:96:8f:b5:b6:46:56: e8:f8:30:a5:61:b4:9f:25:a4:11:12:8c:40:d9:8e: d3:15:19:a9:7a:96:bd:b4:8d:bf:7d:e1:a4:ab:89: 6f:a8:4a:cc:ed:ab:72:cd:43:d1:08:de:d0:0b:06: 0b:c2:dd:08:d4:cc:34:53:4f:80:e5:e5:85:45:63: 46:de:cd:b7:5e:5f:ab:d7:42:9f:58:13:7f:d4:9a: e8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5E:76:62:37:04:61:00:C3:F6:E7:0E:86:0C:B5:37:FA:DE:95:86 X509v3 Authority Key Identifier: keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:30:16:0d:ef:88:47:a0:af:85:d1:ac:37:10:ca:2f:f4:45: 8a:86:63:7b:a8:a3:66:c3:0f:6b:87:1e:54:9a:ee:3f:e7:77: 58:69:0a:9f:91:73:dc:dd:43:9f:21:99:47:83:e2:5c:82:87: c8:39:76:34:9f:8e:92:e4:29:07:eb:ea:4c:33:5c:64:22:86: b4:0e:3b:cd:18:b4:ee:0a:c3:f8:8f:3f:37:05:a6:57:8c:b9: d1:5d:be:8c:db:7d:cf:e7:e1:2a:31:7e:95:e2:66:8e:34:47: b7:49:13:f0:da:0d:73:fa:25:78:35:36:cb:01:08:f9:4a:e0: b2:a7:99:19:a1:0a:a1:fc:6c:fb:ac:8d:2e:a8:6e:2d:95:f1: ed:56:72:bf:1d:5f:54:84:11:6d:9b:fc:22:e6:d3:7f:79:f6: 1a:ca:05:2f:18:ff:98:3c:75:73:a7:53:da:91:18:0b:51:ae: 5d:a2:6a:6a:2d:51:55:cc:12:a2:ea:1b:d4:1d:52:9a:06:a1: 23:6e:95:60:72:f1:62:a6:7e:db:02:6d:c4:a2:25:97:cb:6e: ef:eb:5f:75:a6:d0:90:e3:88:0c:8b:35:43:00:4f:8e:10:ca: b7:a4:8b:95:a6:85:b7:f5:a6:7c:50:ea:ed:cc:d8:fa:8a:b9: 30:aa:68:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJBRUIxMTAvBgNVBAUTKDBGOTUyQTI3RUYzRUYyN0NFQTA4QzU3RDIwMkEzODA2 OUVDQjU4NDAwHhcNMjQxMTIyMTUwNzM1WhcNMjQxMTI5MTUwNzM1WjAYMRYwFAYD VQQDEw02NzQwOWUzNy05YjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufrU5BjUMWv8CP6h7ixCJxyJxh86eP2i4XKKiiUtU5tndu5EwhGbrndoba6R Vr+I93txiQNi0armShY3PoCLGGFll0YdbgI+/z/2xi1kt7UboOabboG4zaK5xsH2 IhRRrAFzjpQR+S30MdNEyWrX2p6PbYGG1BeXy4PbFv4g5TfDoje/x1qHuYk3Y0k9 WhBzzlAX6MCMW0BuoFPG5MQEkbJB5Px1H2tgSzB5JVqWj7W2Rlbo+DClYbSfJaQR EoxA2Y7TFRmpepa9tI2/feGkq4lvqErM7atyzUPRCN7QCwYLwt0I1Mw0U0+A5eWF RWNG3s23Xl+r10KfWBN/1JroWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDledmI3 BGEAw/bnDoYMtTf63pWGMB8GA1UdIwQYMBaAFA+VKifvPvJ86gjFfSAqOAaey1hA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkFFQi9FRjI5QkEyQTFE QTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThuenFDTVY5SUNvNEJwN0xX RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1VXFKLTgtOG56cUNNVjlJQ280QnA3TFdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkFFQi9FRjI5QkEyQTFEQTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThu enFDTVY5SUNvNEJwN0xXRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYMBYN74hHoK+F0aw3EMov9EWKhmN7qKNmww9rhx5Umu4/53dYaQqf kXPc3UOfIZlHg+JcgofIOXY0n46S5CkH6+pMM1xkIoa0DjvNGLTuCsP4jz83BaZX jLnRXb6M233P5+EqMX6V4maONEe3SRPw2g1z+iV4NTbLAQj5SuCyp5kZoQqh/Gz7 rI0uqG4tlfHtVnK/HV9UhBFtm/wi5tN/efYaygUvGP+YPHVzp1PakRgLUa5dompq LVFVzBKi6hvUHVKaBqEjbpVgcvFipn7bAm3EoiWXy27v6191ptCQ44gMizVDAE+O EMq3pIuVpoW39aZ8UOrtzNj6irkwqmgo -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:41 2024 by rpki-client on console-fra.rpki-client.org