$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json) Hash identifier: gGAmxLiEpFc0HffuRlbePmud2nPqBfx220udqHoasSA= Subject key identifier: 4F:F3:C4:1D:7B:27:A3:D6:8F:EE:8C:95:77:74:E2:D6:02:8C:9C:7C Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft Manifest number: FC Signing time: Sat 23 Nov 2024 03:17:48 +0000 Manifest this update: Sat 23 Nov 2024 03:17:47 +0000 Manifest next update: Sat 30 Nov 2024 03:17:47 +0000 Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: CrKjI6NEtbTYEMlZBv4Dlw3cdQWT+yUKzhXs0hZTtIs=) 2: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: yzdUtvoOpzor1zChNyVQLX9zMFFRymcsnAxEoBSEx/I=) 3: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: elBvqhAcW8Rp8ZvDkT2Cm7/DYxXxieb+iqtVjsWGJcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98 Validity Not Before: Nov 23 03:17:47 2024 GMT Not After : Nov 30 03:17:47 2024 GMT Subject: CN=6741495b-37ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0b:2e:7c:a8:75:1f:41:ca:7a:e4:77:3c:02: ff:23:33:8a:bb:9e:4e:14:9c:a0:6d:1a:5c:a2:ec: 17:5d:08:b6:8f:51:17:a4:66:20:ff:f9:8b:15:ac: d5:3c:65:67:5a:2f:93:7c:8e:db:0d:01:ca:66:f4: b7:c8:7e:32:65:ff:05:0d:61:1b:06:d8:fe:98:20: 98:0a:cc:09:35:2f:15:5a:7b:c9:bb:a8:14:a5:27: 26:9c:a3:7b:35:06:52:28:e9:31:6d:2a:18:09:70: 35:34:75:80:22:bf:65:1a:8d:1d:29:da:bb:1b:31: 8a:7a:73:6b:c1:34:9c:16:c7:23:5a:44:6a:f9:d5: 76:6d:3c:dd:e6:07:bb:08:f8:0b:60:e0:26:30:fd: d5:4e:93:76:b9:4e:75:80:30:d6:02:5c:25:57:d0: 87:56:a9:13:3c:7a:d0:81:ce:f9:ec:4f:76:0c:ec: ea:9e:48:19:c0:da:24:e9:58:1e:6b:44:68:87:a3: 13:a2:8d:eb:44:d1:6c:a1:00:d9:44:94:a4:ca:b3: df:65:54:19:af:60:72:2b:0b:d3:80:85:1b:15:e6: 01:5c:fc:be:e8:cd:75:86:69:c4:c6:e5:fd:ca:3e: 8a:ca:65:14:2f:f3:3e:48:5d:e3:54:ed:9a:19:45: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F3:C4:1D:7B:27:A3:D6:8F:EE:8C:95:77:74:E2:D6:02:8C:9C:7C X509v3 Authority Key Identifier: keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:bb:b7:4a:98:05:67:f4:05:b6:94:8b:f4:00:bc:93:d7:37: 09:73:f4:46:10:c5:d9:ba:7c:7a:6e:9d:bc:52:08:0f:57:5b: f1:e4:76:20:e3:b8:a9:ce:ff:1c:91:47:c1:ca:88:33:db:ed: 6c:99:56:0f:6b:11:38:79:91:25:13:52:4f:9b:b4:7c:c5:3d: b0:73:cc:16:cc:73:5a:c8:4f:4e:15:09:0f:fd:7c:41:c4:70: 9f:00:3e:93:50:d3:84:77:db:a8:a8:aa:57:c3:a9:72:7e:e9: 6c:74:a1:ba:a1:9f:45:42:0b:07:05:18:10:d7:49:d3:f9:0d: ad:cc:0f:3a:c6:03:dc:fd:fc:f8:d3:aa:9a:17:f6:e6:d6:bb: de:c5:8d:f8:3d:70:a7:0b:5d:24:63:72:c7:3e:79:f4:e5:e4: 56:ca:96:89:d7:82:4d:a7:24:48:4b:42:f0:16:d5:20:c3:c9: 45:19:5a:c2:79:73:b2:b0:b3:41:c8:b2:d3:49:e0:83:7d:4b: 59:63:0a:da:53:57:9f:b2:2b:98:ba:96:45:ef:03:da:c0:e6: 2b:97:8e:14:9e:0d:f9:5d:e1:c0:5b:33:08:75:ff:8b:f8:8d: cd:ac:d9:37:f4:92:79:05:06:53:01:83:c3:19:dc:87:5f:07: 4c:a3:04:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlCNjExMTAvBgNVBAUTKEUzRTEwMEY4MDQwMTNBMDVGOTIyRUUxMUNCNEUwQUJF QTZDMjJCOTgwHhcNMjQxMTIzMDMxNzQ3WhcNMjQxMTMwMDMxNzQ3WjAYMRYwFAYD VQQDEw02NzQxNDk1Yi0zN2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowsufKh1H0HKeuR3PAL/IzOKu55OFJygbRpcouwXXQi2j1EXpGYg//mLFazV PGVnWi+TfI7bDQHKZvS3yH4yZf8FDWEbBtj+mCCYCswJNS8VWnvJu6gUpScmnKN7 NQZSKOkxbSoYCXA1NHWAIr9lGo0dKdq7GzGKenNrwTScFscjWkRq+dV2bTzd5ge7 CPgLYOAmMP3VTpN2uU51gDDWAlwlV9CHVqkTPHrQgc757E92DOzqnkgZwNok6Vge a0Roh6MToo3rRNFsoQDZRJSkyrPfZVQZr2ByKwvTgIUbFeYBXPy+6M11hmnExuX9 yj6KymUUL/M+SF3jVO2aGUVBRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/zxB17 J6PWj+6MlXd04tYCjJx8MB8GA1UdIwQYMBaAFOPhAPgEAToF+SLuEctOCr6mwiuY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUI2MS83NjE2RDRGQzJB Q0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9nWDVJdTRSeTA0S3ZxYkNL NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtRUEtQVFCT2dYNUl1NFJ5MDRLdnFiQ0s1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUI2MS83NjE2RDRGQzJBQ0QxMUVFQjcyMjJDM0NDNEY5QUUwMi80LUVBLUFRQk9n WDVJdTRSeTA0S3ZxYkNLNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABu7dKmAVn9AW2lIv0ALyT1zcJc/RGEMXZunx6bp28UggPV1vx5HYg 47ipzv8ckUfByogz2+1smVYPaxE4eZElE1JPm7R8xT2wc8wWzHNayE9OFQkP/XxB xHCfAD6TUNOEd9uoqKpXw6lyfulsdKG6oZ9FQgsHBRgQ10nT+Q2tzA86xgPc/fz4 06qaF/bm1rvexY34PXCnC10kY3LHPnn05eRWypaJ14JNpyRIS0LwFtUgw8lFGVrC eXOysLNByLLTSeCDfUtZYwraU1efsiuYupZF7wPawOYrl44Ung35XeHAWzMIdf+L +I3NrNk39JJ5BQZTAYPDGdyHXwdMowRN -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org