$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft File: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json) Hash identifier: QGyK0wKuJW10zPtiAzuiUYx65CpWszxjxCExZToOuXw= Subject key identifier: E9:26:3F:0E:0F:18:70:AA:52:6D:8E:E0:13:1F:F7:52:0A:7A:24:9B Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft Manifest number: 10 Signing time: Sat 23 Nov 2024 06:01:47 +0000 Manifest this update: Sat 23 Nov 2024 06:01:47 +0000 Manifest next update: Sat 30 Nov 2024 06:01:47 +0000 Files and hashes: 1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: L+051Wia/6SQdkX83tF5Nc3l4wzNzbYaJjvI8RrYsU8=) 2: 1055A6E09A7811EFB88E9513C4F9AE02.roa (hash: MaLJWmQNKwO+Rdegpn9xAny3tQO8ncuHN59MrOwCRDc=) 3: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: 2VRR976S85E6Z0QAWlMBLEL6PHFzhUVVUro0XhkvHgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC Validity Not Before: Nov 23 06:01:47 2024 GMT Not After : Nov 30 06:01:47 2024 GMT Subject: CN=67416fcb-1966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:37:61:73:02:ca:34:8e:19:77:b5:b7:85: 9d:15:66:a1:0d:83:7c:be:a8:43:aa:65:d9:01:64: b9:f1:26:05:2d:db:b6:71:8c:0b:9e:54:ca:d8:da: 4a:5a:3a:e1:7b:e0:6a:13:1a:e0:a8:6d:d2:ad:f4: c5:63:8d:00:4a:fd:5d:9f:a8:c6:87:57:df:35:0a: 5a:7e:dc:ef:c1:aa:e8:00:10:a8:b9:75:e3:52:0c: b0:36:51:9e:a4:12:a2:bc:a5:23:d5:83:0f:6b:d2: aa:74:c1:9a:92:d1:62:d3:9c:c9:d5:1c:5c:4c:49: 92:dd:4c:23:3a:2f:11:b6:11:88:c6:f8:25:6b:9e: 77:9d:b9:ee:9d:1b:c9:03:c3:60:d3:ca:3f:77:a1: aa:1b:6b:3e:0f:41:42:04:be:6d:ae:f2:15:22:8a: 96:43:49:1e:53:00:2c:e8:50:d3:f4:f0:90:4b:a0: 83:0e:eb:ba:35:2c:20:d9:be:9b:94:29:2e:0a:28: f3:cb:4a:05:9f:80:30:94:59:d9:57:af:a3:f1:34: 33:8d:1e:57:05:15:a5:8b:a8:df:9c:80:2a:5f:92: 1e:64:fd:ca:71:31:f5:d8:9f:2b:33:6d:d3:ef:c2: 45:87:91:e3:e9:d7:bf:f9:c8:e2:f7:2c:fc:cb:6f: ff:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:26:3F:0E:0F:18:70:AA:52:6D:8E:E0:13:1F:F7:52:0A:7A:24:9B X509v3 Authority Key Identifier: keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a9:29:dc:a8:27:ce:29:8d:f9:a3:80:a2:b7:6c:7b:0c:75: 03:30:9e:86:04:d9:a6:a6:d9:a8:2d:4f:45:3a:16:5f:0c:a2: c1:ba:ba:ac:67:01:c8:44:e9:93:6e:f1:08:9c:62:53:ef:fa: ce:ab:21:4e:7d:d1:dc:2b:ef:8a:35:43:47:8e:b4:f2:08:83: 11:85:96:51:b1:07:44:94:3f:44:db:0a:8b:1b:94:a7:f3:75: 46:16:6e:07:aa:b8:a9:a9:e4:29:e9:7b:b7:34:37:ef:e1:34: 65:6e:a6:64:09:f3:97:d1:a4:e0:e6:b1:08:6a:28:bf:53:c5: f7:eb:ea:e2:c9:3c:b4:97:86:e0:62:10:b0:ee:6e:9f:9a:e6: 91:97:bd:b6:c3:74:a2:24:15:6e:a5:60:f3:4a:2f:2a:d8:1f: 32:9d:74:83:c5:9d:79:e0:90:cc:5f:18:57:13:d3:f4:a8:51: fb:56:44:f1:91:ae:d1:22:40:12:6c:95:3b:03:d1:65:54:66: 24:83:7d:01:ad:bf:8a:fe:1c:ce:38:3f:53:76:14:12:37:d2: 0c:7c:3f:9f:c1:38:7e:3b:9c:aa:55:a4:d2:cc:20:fe:49:2a: 82:19:38:65:9c:25:3a:b1:43:aa:2f:5f:2c:7b:09:23:3f:d4: f8:e4:c5:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REQ4NzExMC8GA1UEBRMoRjM3RjIzNEYzQTg3RDE4RkNDNjcxM0U0NTEwNjc4Q0Ew NTYxQzJGQzAeFw0yNDExMjMwNjAxNDdaFw0yNDExMzAwNjAxNDdaMBgxFjAUBgNV BAMTDTY3NDE2ZmNiLTE5NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5cDdhcwLKNI4Zd7W3hZ0VZqENg3y+qEOqZdkBZLnxJgUt27ZxjAueVMrY2kpa OuF74GoTGuCobdKt9MVjjQBK/V2fqMaHV981Clp+3O/BqugAEKi5deNSDLA2UZ6k EqK8pSPVgw9r0qp0wZqS0WLTnMnVHFxMSZLdTCM6LxG2EYjG+CVrnnedue6dG8kD w2DTyj93oaobaz4PQUIEvm2u8hUiipZDSR5TACzoUNP08JBLoIMO67o1LCDZvpuU KS4KKPPLSgWfgDCUWdlXr6PxNDONHlcFFaWLqN+cgCpfkh5k/cpxMfXYnyszbdPv wkWHkePp17/5yOL3LPzLb/+VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6SY/Dg8Y cKpSbY7gEx/3Ugp6JJswHwYDVR0jBBgwFoAU838jTzqH0Y/MZxPkUQZ4ygVhwvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERDg3L0VDNTZCNzIwOTdF ODExRUY4RTMyOTAzQUM0RjlBRTAyLzgzOGpUenFIMFlfTVp4UGtVUVo0eWdWaHd2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODM4alR6cUgwWV9NWnhQa1VRWjR5Z1Zod3Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE RDg3L0VDNTZCNzIwOTdFODExRUY4RTMyOTAzQUM0RjlBRTAyLzgzOGpUenFIMFlf TVp4UGtVUVo0eWdWaHd2dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABSpKdyoJ84pjfmjgKK3bHsMdQMwnoYE2aam2agtT0U6Fl8MosG6uqxn AchE6ZNu8QicYlPv+s6rIU590dwr74o1Q0eOtPIIgxGFllGxB0SUP0TbCosblKfz dUYWbgequKmp5Cnpe7c0N+/hNGVupmQJ85fRpODmsQhqKL9Txffr6uLJPLSXhuBi ELDubp+a5pGXvbbDdKIkFW6lYPNKLyrYHzKddIPFnXngkMxfGFcT0/SoUftWRPGR rtEiQBJslTsD0WVUZiSDfQGtv4r+HM44P1N2FBI30gx8P5/BOH47nKpVpNLMIP5J KoIZOGWcJTqxQ6ovXyx7CSM/1PjkxeY= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org