$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: 997UYkF68zaK9iBXWw2uLOPF4YKnT6hDSuuXGZM4u0Q= Subject key identifier: 51:0D:E8:0B:0B:E0:98:FC:CF:67:B7:8B:D8:1D:92:48:A5:75:E4:51 Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 03E2 Signing time: Sat 23 Nov 2024 00:09:13 +0000 Manifest this update: Sat 23 Nov 2024 00:09:12 +0000 Manifest next update: Sat 30 Nov 2024 00:09:12 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: P/yFY03YIEV3VTyIdOuW4z6kI8uon4Xyorso/+39E4U=) 2: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (hash: 3XNH0YsZUZtQ4GlynpMnfxr32DxWEsHkc6y4XPEDHpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: Nov 23 00:09:12 2024 GMT Not After : Nov 30 00:09:12 2024 GMT Subject: CN=67411d29-1e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:96:0f:74:4e:65:67:dd:8a:b0:bc:a5:ff:bc: f8:9a:96:7c:44:2a:c0:e3:07:53:c1:28:82:b3:31: c0:9a:e5:32:6d:66:55:27:96:e1:03:91:85:35:3b: 46:d2:54:91:0f:0b:fc:a6:87:a5:f2:96:1a:3d:a4: 71:de:83:ce:50:a8:b9:dc:d2:46:83:1d:08:f4:96: 6c:b2:b0:6a:fc:3c:c8:84:b4:29:10:3e:e9:2d:92: 4a:5a:b2:02:d8:69:96:70:04:9e:00:53:a1:36:c2: 09:b4:1c:0b:0c:6c:45:09:bb:77:71:c5:40:61:18: 7b:2b:a5:f7:dd:76:93:8a:7e:d2:53:b1:cc:7b:d1: 80:1a:b9:81:3c:37:4e:4b:51:49:b4:0b:28:99:1f: 4d:3a:12:87:1b:91:a7:f6:62:4d:a0:db:4a:4b:68: e9:13:15:87:ac:e9:84:d4:23:9e:0a:36:1e:32:35: f2:35:91:fc:28:92:b8:6b:8e:fa:11:a7:63:71:f6: 19:75:80:f0:db:1b:33:1f:91:4b:82:d8:ba:68:9e: a5:c9:51:0f:0f:72:ab:1d:84:bf:88:f5:44:7d:2d: ae:6b:54:36:8a:3b:be:62:5c:5d:63:06:76:bb:c6: 0d:43:91:65:74:a2:6c:e5:82:f1:f8:44:d2:7f:6c: b2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0D:E8:0B:0B:E0:98:FC:CF:67:B7:8B:D8:1D:92:48:A5:75:E4:51 X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:07:e0:69:12:3f:e1:02:55:4a:03:b6:72:18:75:31:0e:d3: ff:13:28:ad:fd:02:04:04:b8:c5:23:c8:ec:48:28:7c:2f:da: b5:22:87:fb:da:b0:23:94:fc:eb:56:29:bb:da:43:19:bf:48: 0c:95:ae:82:15:8c:30:11:64:e3:08:aa:e5:84:a1:5e:b8:28: 85:60:89:34:c6:c6:c4:70:f1:a8:02:54:5a:83:75:0f:e3:3b: e5:e6:00:dc:30:15:59:ca:f5:76:f9:d4:a8:99:2d:cd:bb:31: 00:ca:63:67:9f:28:dc:90:55:1f:1b:48:dd:a6:e0:22:3a:7c: 74:c5:c9:7d:c5:f2:fc:cb:a7:c1:d8:a0:c2:f9:c5:e2:a3:fa: f1:57:ff:b3:2d:84:27:06:85:a4:34:a5:6b:b5:a6:d1:5c:77: 5f:0c:70:5f:e7:76:f9:be:55:34:a1:64:65:d0:d3:1d:d8:f1: a7:68:a8:16:26:b6:32:50:f2:e4:60:c2:5e:e7:9b:5d:ae:e8: d1:91:c8:0a:09:2d:51:27:29:c0:9f:70:f6:a8:97:77:47:c7: c8:4c:ec:e6:42:21:40:64:bb:bd:ce:c7:c0:09:b3:0e:13:b6: aa:ea:c1:fa:ab:2e:fc:47:20:47:4f:60:ec:dd:d1:4d:b3:43: d6:25:11:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjQxMTIzMDAwOTEyWhcNMjQxMTMwMDAwOTEyWjAYMRYwFAYD VQQDEw02NzQxMWQyOS0xZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJYPdE5lZ92KsLyl/7z4mpZ8RCrA4wdTwSiCszHAmuUybWZVJ5bhA5GFNTtG 0lSRDwv8poel8pYaPaRx3oPOUKi53NJGgx0I9JZssrBq/DzIhLQpED7pLZJKWrIC 2GmWcASeAFOhNsIJtBwLDGxFCbt3ccVAYRh7K6X33XaTin7SU7HMe9GAGrmBPDdO S1FJtAsomR9NOhKHG5Gn9mJNoNtKS2jpExWHrOmE1COeCjYeMjXyNZH8KJK4a476 EadjcfYZdYDw2xszH5FLgti6aJ6lyVEPD3KrHYS/iPVEfS2ua1Q2iju+YlxdYwZ2 u8YNQ5FldKJs5YLx+ETSf2yyIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEN6AsL 4Jj8z2e3i9gdkkildeRRMB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOB+BpEj/hAlVKA7ZyGHUxDtP/Eyit/QIEBLjFI8jsSCh8L9q1Iof7 2rAjlPzrVim72kMZv0gMla6CFYwwEWTjCKrlhKFeuCiFYIk0xsbEcPGoAlRag3UP 4zvl5gDcMBVZyvV2+dSomS3NuzEAymNnnyjckFUfG0jdpuAiOnx0xcl9xfL8y6fB 2KDC+cXio/rxV/+zLYQnBoWkNKVrtabRXHdfDHBf53b5vlU0oWRl0NMd2PGnaKgW JrYyUPLkYMJe55tdrujRkcgKCS1RJynAn3D2qJd3R8fITOzmQiFAZLu9zsfACbMO E7aq6sH6qy78RyBHT2Ds3dFNs0PWJRF9 -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org