$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft File: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json) Hash identifier: kvHkY7Vx18xWD8jXXL2mM7npS/AuPNU/2w3BWsqsaZ0= Subject key identifier: 7A:70:19:8C:46:D1:9B:59:0E:9B:F3:4E:F0:F4:45:DD:A6:D3:AA:24 Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 Certificate issuer: /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Certificate serial: 0613 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft Manifest number: 060F Signing time: Fri 22 Nov 2024 22:11:15 +0000 Manifest this update: Fri 22 Nov 2024 22:11:14 +0000 Manifest next update: Fri 29 Nov 2024 22:11:14 +0000 Files and hashes: 1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: Z7bK1oBfEgF0V9YehKVM2LX96NvUbWj0tv3WcnshVVQ=) 2: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: E82g5upMBqwg+8IfZAsvOIRONR3ksBK1tvBTNfLGRrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1555 (0x613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Validity Not Before: Nov 22 22:11:14 2024 GMT Not After : Nov 29 22:11:14 2024 GMT Subject: CN=67410183-755a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:ca:e4:96:5e:16:88:c6:e7:88:d0:41:f5: 40:04:61:3f:6c:b2:5a:a7:85:db:bb:3d:07:6f:e2: 29:8d:1c:13:c8:bb:5c:86:8c:90:ce:5c:30:cf:ab: 07:0e:41:d5:59:3c:8d:e8:2e:3e:58:34:e3:53:c3: 2c:5f:9f:d9:b3:00:2b:01:cf:a8:91:f8:ca:87:07: 22:d2:06:e3:28:84:91:58:24:88:37:a3:83:c7:fb: 99:54:49:3a:c6:4a:52:f1:eb:e9:92:04:9a:27:6d: 4f:8f:fd:5a:d9:b7:ce:bf:51:41:8c:48:35:26:85: 80:5b:30:23:fd:0a:17:c3:a2:7c:96:38:ee:0d:6e: ec:8a:4a:2f:19:7a:36:d0:a5:0a:b8:ab:02:65:cb: 11:e7:e0:ce:89:72:20:90:e5:c7:4f:9d:0c:d8:97: 3e:84:9c:12:67:3b:a5:3c:2d:dd:0d:50:e7:ec:ce: 10:10:0c:e3:85:24:d9:5e:ed:dc:35:0f:55:11:bf: f2:e5:57:89:25:e6:c1:77:2a:fe:0a:19:7d:50:84: 0b:cb:d4:61:0c:71:2e:ff:78:de:c6:ea:c0:b5:0e: 2f:cd:a3:b7:03:7b:20:c4:95:4e:9c:00:01:59:e8: 2f:5b:34:2e:8a:ad:a2:30:00:19:54:75:b9:0b:fb: e0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:70:19:8C:46:D1:9B:59:0E:9B:F3:4E:F0:F4:45:DD:A6:D3:AA:24 X509v3 Authority Key Identifier: keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:04:75:7c:35:cc:ef:22:38:eb:05:64:37:4b:89:49:f7:5f: 72:55:d3:78:bf:ff:53:b9:1c:dd:b7:14:26:55:b2:8a:89:be: bf:8e:78:b7:ca:b7:74:b5:9b:6f:d6:81:45:0a:ce:be:b2:cb: 6d:dd:84:93:c6:d5:c8:93:62:d8:7a:04:29:72:e0:d1:b1:45: f7:f2:df:0d:5c:9a:ef:33:53:76:06:d4:9a:70:5d:7b:4f:2d: a0:2b:6a:99:a0:53:2b:82:11:59:81:c2:06:ad:7a:5d:63:43: 9b:d9:ff:99:82:fd:1f:05:92:ad:87:a3:b2:dd:9c:aa:3a:c7: 45:90:1a:07:14:74:2f:66:f6:ea:f3:2e:5f:27:5a:c5:6f:06: 71:f2:0d:84:9f:6b:16:61:fc:49:51:cb:d1:e7:47:94:5c:6b: b9:32:ef:17:c8:86:df:e3:5b:cf:3e:2e:57:88:dc:58:3b:77: 60:49:cd:f1:be:eb:95:a6:17:e7:f8:7d:cd:51:75:7d:5a:71: 5e:9b:d2:02:3b:d2:2a:f9:ac:d0:0b:57:ca:b7:8c:42:7a:87: 1c:8b:3e:8e:4d:e3:d1:8c:26:18:d5:81:04:d2:ef:4c:b8:75: 3e:26:fe:fe:a6:92:56:8b:c4:c5:f8:ba:86:59:d4:5a:d2:ae: ae:b0:fe:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwNUMxMTAvBgNVBAUTKEM2OTM5OUIxMzJFMUFFNkIyRUEzMTE2RTE0QjEwMDFD MDgxOUREQTkwHhcNMjQxMTIyMjIxMTE0WhcNMjQxMTI5MjIxMTE0WjAYMRYwFAYD VQQDEw02NzQxMDE4My03NTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MzK5JZeFojG54jQQfVABGE/bLJap4Xbuz0Hb+IpjRwTyLtchoyQzlwwz6sH DkHVWTyN6C4+WDTjU8MsX5/ZswArAc+okfjKhwci0gbjKISRWCSIN6ODx/uZVEk6 xkpS8evpkgSaJ21Pj/1a2bfOv1FBjEg1JoWAWzAj/QoXw6J8ljjuDW7sikovGXo2 0KUKuKsCZcsR5+DOiXIgkOXHT50M2Jc+hJwSZzulPC3dDVDn7M4QEAzjhSTZXu3c NQ9VEb/y5VeJJebBdyr+Chl9UIQLy9RhDHEu/3jexurAtQ4vzaO3A3sgxJVOnAAB WegvWzQuiq2iMAAZVHW5C/vg9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpwGYxG 0ZtZDpvzTvD0Rd2m06okMB8GA1UdIwQYMBaAFMaTmbEy4a5rLqMRbhSxABwIGd2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDA1Qy9ERUNFMEYwQTdC RDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJtc3VveEZ1RkxFQUhBZ1oz YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwT1pzVExocm1zdW94RnVGTEVBSEFnWjNhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDA1Qy9ERUNFMEYwQTdCRDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJt c3VveEZ1RkxFQUhBZ1ozYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtBHV8NczvIjjrBWQ3S4lJ919yVdN4v/9TuRzdtxQmVbKKib6/jni3 yrd0tZtv1oFFCs6+sstt3YSTxtXIk2LYegQpcuDRsUX38t8NXJrvM1N2BtSacF17 Ty2gK2qZoFMrghFZgcIGrXpdY0Ob2f+Zgv0fBZKth6Oy3ZyqOsdFkBoHFHQvZvbq 8y5fJ1rFbwZx8g2En2sWYfxJUcvR50eUXGu5Mu8XyIbf41vPPi5XiNxYO3dgSc3x vuuVphfn+H3NUXV9WnFem9ICO9Iq+azQC1fKt4xCeocciz6OTePRjCYY1YEE0u9M uHU+Jv7+ppJWi8TF+LqGWdRa0q6usP5J -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:25 2024 by rpki-client on console-fra.rpki-client.org