$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft File: A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json) Hash identifier: cwzgwhntjiFM3+8xQ3TiJpPLvHgZ+lzaLtI01spo5g8= Subject key identifier: 52:62:F5:AA:34:2B:79:A0:A2:A7:34:79:7F:9A:C4:73:20:44:FE:39 Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Certificate serial: 03F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft Manifest number: 03F5 Signing time: Sat 23 Nov 2024 00:03:42 +0000 Manifest this update: Sat 23 Nov 2024 00:03:42 +0000 Manifest next update: Sat 30 Nov 2024 00:03:42 +0000 Files and hashes: 1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: rsk8N8pC8d3b3hfs5tMYZrmEeIAzhWjXZXEcSOyB1DE=) 2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: keS/qF291Tz7YIPilf3yxYGs5lMrsj9UecsgrxwbjY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E Validity Not Before: Nov 23 00:03:42 2024 GMT Not After : Nov 30 00:03:42 2024 GMT Subject: CN=67411bde-e4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:a0:10:88:85:78:a6:a2:cb:74:98:09:75: 40:63:35:63:37:dd:f8:e5:c2:16:ef:a9:51:f2:28: 6c:6d:40:1f:41:e8:b5:c5:d4:af:b7:13:61:65:98: 83:79:ec:8e:34:e6:e7:37:4d:18:7c:0a:ed:7d:50: 8b:8e:23:1e:b9:c5:29:96:7d:23:5c:53:b2:1d:08: 15:73:83:8c:cb:80:d0:02:82:4d:e4:63:87:74:40: 8d:d8:cf:97:77:8e:07:c0:b7:3b:34:84:f2:6a:44: 79:6c:79:45:6e:f1:54:e3:1f:e1:d7:95:ce:bb:86: 09:58:dc:2f:fc:38:54:41:1f:5d:9f:ed:ff:00:62: ed:b8:bf:91:d7:75:f8:5c:59:8b:1c:de:39:35:9f: 9a:d7:b2:9a:6a:c9:ab:9d:8e:3e:50:79:a2:ed:99: df:e3:8c:11:c5:37:e4:9b:a0:16:c5:3e:d9:00:b6: e6:54:5e:a9:fc:c8:a4:c0:06:a0:81:32:bc:ca:22: 93:f8:95:16:70:07:fd:15:e6:33:e7:44:69:94:d7: b8:80:99:8d:db:08:84:37:7f:ab:07:54:79:37:9a: 2f:ae:16:a5:21:b4:b0:f3:cd:28:8e:c8:a2:2a:a4: b7:01:9a:24:e6:9e:25:46:0e:b7:c7:2e:18:4a:af: f7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:62:F5:AA:34:2B:79:A0:A2:A7:34:79:7F:9A:C4:73:20:44:FE:39 X509v3 Authority Key Identifier: keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:8f:f6:8b:df:34:71:1d:bb:6b:54:65:ab:6b:a8:e2:7f:ca: 06:60:7a:33:d5:c8:fd:04:28:fd:a5:59:d4:cf:6b:b6:e8:43: 2f:0b:c5:16:21:61:e7:28:fd:c1:de:b4:a2:49:d9:84:83:ad: 74:bf:d1:68:f8:d1:17:0b:f0:86:1c:e1:d6:c6:d9:ab:1a:c2: 03:1a:0c:88:fb:2a:e8:c7:0d:0e:60:b7:4d:1d:4f:dd:aa:82: 15:d0:55:d5:d7:5a:94:14:0a:b8:7e:1e:15:8c:2c:e4:c5:88: 8b:60:e0:a3:3c:3b:52:21:1a:0c:c8:6b:f8:90:0b:08:09:f4: 21:b2:bc:53:fc:a9:56:d9:fa:e5:f4:d2:3c:87:88:28:5e:00: e5:6c:a9:b7:f8:6e:32:d6:b2:0a:d3:7d:5f:bd:e2:ad:ff:3a: f5:f2:6e:3d:e5:20:a9:f2:f1:10:2e:9e:81:b8:60:3b:fc:53: 03:cb:12:62:e4:9e:08:63:bd:32:3f:69:68:3e:45:9e:94:e2: 90:c7:f9:eb:7b:d9:a4:f6:b1:f9:2d:2e:1c:73:5d:7f:91:c2: d5:95:c0:26:53:29:0f:06:81:41:09:74:69:0c:b5:6f:79:61: 7c:10:8c:b6:f0:34:0a:28:05:ba:6b:b7:93:3d:9a:14:09:c5: cf:cf:ec:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBOTAxMTAvBgNVBAUTKDAzNjdCMTU0ODI2NTE3MjUyQTYzRUNCNEMzODY5MzVD QjdCRDM0MEUwHhcNMjQxMTIzMDAwMzQyWhcNMjQxMTMwMDAwMzQyWjAYMRYwFAYD VQQDEw02NzQxMWJkZS1lNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvWgEIiFeKaiy3SYCXVAYzVjN9345cIW76lR8ihsbUAfQei1xdSvtxNhZZiD eeyONObnN00YfArtfVCLjiMeucUpln0jXFOyHQgVc4OMy4DQAoJN5GOHdECN2M+X d44HwLc7NITyakR5bHlFbvFU4x/h15XOu4YJWNwv/DhUQR9dn+3/AGLtuL+R13X4 XFmLHN45NZ+a17KaasmrnY4+UHmi7Znf44wRxTfkm6AWxT7ZALbmVF6p/MikwAag gTK8yiKT+JUWcAf9FeYz50RplNe4gJmN2wiEN3+rB1R5N5ovrhalIbSw880ojsii KqS3AZok5p4lRg63xy4YSq/3awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJi9ao0 K3mgoqc0eX+axHMgRP45MB8GA1UdIwQYMBaAFANnsVSCZRclKmPstMOGk1y3vTQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E5MC8yNUUzQkJCNDUy RUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5VXFZLXkwdzRhVFhMZTlO QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyZXhWSUpsRnlVcVkteTB3NGFUWExlOU5BNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E5MC8yNUUzQkJCNDUyRUIxMUVDODk2OUU3NDRDNEY5QUUwMi9BMmV4VklKbEZ5 VXFZLXkwdzRhVFhMZTlOQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVj/aL3zRxHbtrVGWra6jif8oGYHoz1cj9BCj9pVnUz2u26EMvC8UW IWHnKP3B3rSiSdmEg610v9Fo+NEXC/CGHOHWxtmrGsIDGgyI+yroxw0OYLdNHU/d qoIV0FXV11qUFAq4fh4VjCzkxYiLYOCjPDtSIRoMyGv4kAsICfQhsrxT/KlW2frl 9NI8h4goXgDlbKm3+G4y1rIK031fveKt/zr18m495SCp8vEQLp6BuGA7/FMDyxJi 5J4IY70yP2loPkWelOKQx/nre9mk9rH5LS4cc11/kcLVlcAmUykPBoFBCXRpDLVv eWF8EIy28DQKKAW6a7eTPZoUCcXPz+zC -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org