$ rpki-client -vvf rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft File: arqG0wSq9k60oJeym6VXeGDMhW8.mft (raw, json) Hash identifier: beJtElkhevrTN7eaIa5wv7OZ5uFCH+2vsZ0H7xgE1jc= Subject key identifier: 34:78:AA:D6:9E:93:5D:CF:81:58:2C:0D:AF:DC:D5:AE:08:2C:4C:DC Authority key identifier: 6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F Certificate issuer: /CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft Manifest number: 96 Signing time: Sat 23 Nov 2024 04:32:12 +0000 Manifest this update: Sat 23 Nov 2024 04:32:11 +0000 Manifest next update: Sat 30 Nov 2024 04:32:11 +0000 Files and hashes: 1: arqG0wSq9k60oJeym6VXeGDMhW8.crl (hash: 52q03ovrQdvlCzjDCiTwOKnrnIMk43mVNdqknBUpXbg=) 2: FFB6E08AF6A111EEBC0EF62FC4F9AE02.roa (hash: +1q/DCNFePTtlbMuRD5iV784JkZFCUJE5p4dFu9JRz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915290D/serialNumber=6ABA86D304AAF64EB4A097B29BA5577860CC856F Validity Not Before: Nov 23 04:32:11 2024 GMT Not After : Nov 30 04:32:11 2024 GMT Subject: CN=67415acb-ee95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:16:c5:71:2c:42:33:45:ee:76:96:d2:58: 78:15:c7:16:57:4a:a2:53:1f:f0:5b:52:34:72:ac: a2:5b:40:f2:a1:02:f0:1f:f5:06:b7:cb:f7:16:ef: ba:13:b0:59:fb:8b:72:77:af:b7:fc:e7:57:ed:c1: 3e:94:ea:69:6a:d0:e8:51:04:f9:a6:2a:b7:c7:7e: e0:fe:48:fd:f7:c2:aa:4f:6f:34:38:e5:7b:61:28: 66:b8:d0:6a:a5:4f:0c:2a:09:ee:5f:85:d3:b6:54: ba:8a:dc:2a:c9:f8:d6:56:38:64:ad:dd:8d:e0:93: 2b:c1:9f:d9:11:bd:ee:60:6e:1a:e6:c2:44:4c:8c: b0:b6:25:2d:05:25:35:a6:75:0a:11:f4:4c:6e:74: 7a:da:e7:58:d8:1b:40:9f:06:98:38:e8:d9:5d:a5: 95:1e:30:64:5d:b3:1c:05:10:d2:e5:c7:a0:c1:7d: e7:95:82:25:f9:7e:41:b8:53:2d:22:c2:1a:4b:84: 24:67:92:72:53:be:db:29:72:01:9b:30:58:b4:3f: ed:22:16:d4:a2:34:a8:be:4c:c8:b2:7a:ce:59:69: e3:22:16:da:bd:6f:8c:95:14:4a:06:35:3f:f1:b8: ea:2e:43:24:a1:35:cd:e3:da:84:90:4b:5b:ae:6e: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:78:AA:D6:9E:93:5D:CF:81:58:2C:0D:AF:DC:D5:AE:08:2C:4C:DC X509v3 Authority Key Identifier: keyid:6A:BA:86:D3:04:AA:F6:4E:B4:A0:97:B2:9B:A5:57:78:60:CC:85:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arqG0wSq9k60oJeym6VXeGDMhW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915290D/A6849AC8D02911EE9E6CBA40C4F9AE02/arqG0wSq9k60oJeym6VXeGDMhW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:a4:af:dc:b1:22:b3:f7:1f:38:6e:c7:e7:8b:b9:f5:bf:e3: 13:43:34:07:6d:7d:9b:bb:f0:40:e4:74:a2:02:66:b5:70:8d: 39:e6:ce:1e:05:a5:3d:f7:aa:55:9a:3f:a8:c9:70:d1:64:7a: d3:36:d5:4e:f6:71:32:1b:42:2a:8b:43:70:c2:a3:fd:99:22: ac:31:d8:93:c0:2b:69:66:9e:d9:5a:3f:39:4e:e9:6d:d5:f0: 92:5a:bc:a7:21:25:f9:75:e2:21:f9:7f:b7:0f:a2:4c:8d:6c: 51:a0:1f:b1:4c:67:7a:a6:b9:41:80:5d:9d:14:c9:3d:24:d8: e7:f3:67:d3:46:16:ed:b9:f0:0c:81:f4:dc:65:43:35:c9:98: 80:30:d9:4c:51:11:14:e3:bb:8b:e6:7f:ad:f7:ad:cf:8e:f7: 4e:e2:fc:df:89:4a:cf:c7:7c:61:50:4d:7a:8e:da:48:d8:ba: bc:1a:eb:9d:b5:98:e1:79:d7:a0:0e:d5:54:3e:e5:5b:20:50: 91:a3:fa:33:70:17:d5:a5:72:aa:a3:0a:d2:f0:0d:92:78:c2: c1:5e:36:ab:5a:77:0b:ec:f6:62:79:2b:a5:ac:fc:60:02:cf: ee:30:c5:2e:e9:5e:5f:ef:19:7b:d5:5b:9d:b1:81:6e:dd:9d: 05:92:de:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI5MEQxMTAvBgNVBAUTKDZBQkE4NkQzMDRBQUY2NEVCNEEwOTdCMjlCQTU1Nzc4 NjBDQzg1NkYwHhcNMjQxMTIzMDQzMjExWhcNMjQxMTMwMDQzMjExWjAYMRYwFAYD VQQDEw02NzQxNWFjYi1lZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunQWxXEsQjNF7naW0lh4FccWV0qiUx/wW1I0cqyiW0DyoQLwH/UGt8v3Fu+6 E7BZ+4tyd6+3/OdX7cE+lOppatDoUQT5piq3x37g/kj998KqT280OOV7YShmuNBq pU8MKgnuX4XTtlS6itwqyfjWVjhkrd2N4JMrwZ/ZEb3uYG4a5sJETIywtiUtBSU1 pnUKEfRMbnR62udY2BtAnwaYOOjZXaWVHjBkXbMcBRDS5cegwX3nlYIl+X5BuFMt IsIaS4QkZ5JyU77bKXIBmzBYtD/tIhbUojSovkzIsnrOWWnjIhbavW+MlRRKBjU/ 8bjqLkMkoTXN49qEkEtbrm5TVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR4qtae k13PgVgsDa/c1a4ILEzcMB8GA1UdIwQYMBaAFGq6htMEqvZOtKCXspulV3hgzIVv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjkwRC9BNjg0OUFDOEQw MjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlrNjBvSmV5bTZWWGVHRE1o VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FycUcwd1NxOWs2MG9KZXltNlZYZUdETWhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjkwRC9BNjg0OUFDOEQwMjkxMUVFOUU2Q0JBNDBDNEY5QUUwMi9hcnFHMHdTcTlr NjBvSmV5bTZWWGVHRE1oVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEpK/csSKz9x84bsfni7n1v+MTQzQHbX2bu/BA5HSiAma1cI055s4e BaU996pVmj+oyXDRZHrTNtVO9nEyG0Iqi0NwwqP9mSKsMdiTwCtpZp7ZWj85Tult 1fCSWrynISX5deIh+X+3D6JMjWxRoB+xTGd6prlBgF2dFMk9JNjn82fTRhbtufAM gfTcZUM1yZiAMNlMUREU47uL5n+t963PjvdO4vzfiUrPx3xhUE16jtpI2Lq8Guud tZjhedegDtVUPuVbIFCRo/ozcBfVpXKqowrS8A2SeMLBXjarWncL7PZieSulrPxg As/uMMUu6V5f7xl71VudsYFu3Z0Fkt7R -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org