$ rpki-client -vvf rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft File: szbWhuGt3y1ceNLQ4BKNDyh-B44.mft (raw, json) Hash identifier: FBDnlQI+AccI7jMewsDsm9I7q98OmR7KqMB55oB/T08= Subject key identifier: AC:A9:B6:4B:82:40:CE:B5:C3:B9:AB:1C:31:7D:E5:2B:7E:4F:AA:04 Authority key identifier: B3:36:D6:86:E1:AD:DF:2D:5C:78:D2:D0:E0:12:8D:0F:28:7E:07:8E Certificate issuer: /CN=A91545AC/serialNumber=B336D686E1ADDF2D5C78D2D0E0128D0F287E078E Certificate serial: 0726 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft Manifest number: 0720 Signing time: Fri 22 Nov 2024 21:18:46 +0000 Manifest this update: Fri 22 Nov 2024 21:18:46 +0000 Manifest next update: Fri 29 Nov 2024 21:18:46 +0000 Files and hashes: 1: szbWhuGt3y1ceNLQ4BKNDyh-B44.crl (hash: w26mgsi6y0lWN1zgssC2qxveNWn3vu7jg4SNR3VY9tA=) 2: B546148C121911EB82F65F7AC4F9AE02.roa (hash: npqUSdTT/bZn+Th2U0d/0UFlsbxJmywnV4ijhOc4nNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.crl rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1830 (0x726) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91545AC/serialNumber=B336D686E1ADDF2D5C78D2D0E0128D0F287E078E Validity Not Before: Nov 22 21:18:46 2024 GMT Not After : Nov 29 21:18:46 2024 GMT Subject: CN=6740f536-cb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:08:32:4d:54:de:a1:fc:3a:64:8e:b9:08: a1:ae:a5:64:02:fa:21:e9:84:88:c2:c0:3b:50:e1: ba:13:1f:17:1a:ef:b1:b8:1c:20:ba:e4:2b:a7:6d: df:09:7d:5a:74:28:5c:77:d5:64:b0:ed:53:c9:70: 9b:a3:6f:19:9e:bd:43:9d:fe:fb:3e:69:99:06:c3: bd:a9:60:7a:f7:65:98:66:3b:21:33:78:4a:24:f7: 10:5c:84:92:cd:14:1f:15:9e:14:40:f4:37:53:5e: 3f:d4:b6:40:2d:fc:51:d0:be:3f:e4:f1:05:a5:5c: b4:32:bc:b2:b3:27:b9:c8:ca:da:d8:26:7d:76:e9: 27:44:36:7c:b0:9e:f5:6d:70:cf:04:c7:4c:e4:13: a4:61:4c:d3:30:78:ba:3c:9c:65:0c:be:f1:ef:c8: 9a:b5:3c:9c:d0:98:c7:cb:87:e8:bb:b8:a8:7a:1a: 06:f1:73:32:38:6a:94:30:3e:fb:2e:13:ff:b2:74: 31:5d:cd:87:5a:cd:e5:51:ff:a9:12:1b:01:3f:7d: d0:d3:b8:7c:01:c5:3d:5a:d1:85:d9:f9:14:78:d4: 54:61:5f:8c:46:4e:8d:4e:99:55:96:e7:1a:4b:4d: 4a:c1:d6:c7:60:75:29:c6:91:10:2c:90:37:c7:dd: d6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A9:B6:4B:82:40:CE:B5:C3:B9:AB:1C:31:7D:E5:2B:7E:4F:AA:04 X509v3 Authority Key Identifier: keyid:B3:36:D6:86:E1:AD:DF:2D:5C:78:D2:D0:E0:12:8D:0F:28:7E:07:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9b:a4:d0:58:ca:b4:d1:ad:9d:0e:e2:23:84:a2:03:0b:9b: 34:25:2f:42:83:2b:e3:04:00:7f:4f:49:00:d3:39:19:fd:df: de:b7:57:53:be:94:b3:d6:ec:b2:72:00:cb:91:4e:2a:ae:34: 00:4d:54:2b:93:24:7e:47:d6:dd:41:f2:b3:d3:ce:4a:5b:a4: 3f:30:c8:dd:ff:a0:ca:c7:f0:96:51:06:02:f5:7f:6b:c9:9f: bb:91:0c:54:3c:ec:a7:6c:63:f7:a8:11:18:bc:e8:c1:10:d9: c6:e0:22:83:3e:15:ca:56:86:b7:aa:bf:11:e7:07:2f:ff:10: c6:a8:59:a9:75:9b:33:55:52:99:97:23:b0:f4:96:85:98:74: c5:94:f8:32:17:78:77:96:a9:d0:89:f4:a8:41:06:7b:d6:55: 4c:78:7a:9b:e1:3a:02:e6:d5:9e:f1:f2:4e:89:12:63:f6:2e: 02:25:6f:6a:f4:ea:81:77:1a:33:64:18:2c:15:33:ca:e0:30: 7f:f7:b4:c2:69:95:a7:1c:46:dd:4d:ad:fc:89:ef:c4:a9:de: cb:35:93:f9:b0:1b:b7:16:72:e0:3b:cd:80:64:7e:45:a5:a7: f0:3c:3d:fb:c7:2e:94:6f:4f:d3:30:46:ba:55:c6:1a:1e:7b: 62:b6:e0:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1QUMxMTAvBgNVBAUTKEIzMzZENjg2RTFBRERGMkQ1Qzc4RDJEMEUwMTI4RDBG Mjg3RTA3OEUwHhcNMjQxMTIyMjExODQ2WhcNMjQxMTI5MjExODQ2WjAYMRYwFAYD VQQDEw02NzQwZjUzNi1jYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYwIMk1U3qH8OmSOuQihrqVkAvoh6YSIwsA7UOG6Ex8XGu+xuBwguuQrp23f CX1adChcd9VksO1TyXCbo28Znr1Dnf77PmmZBsO9qWB692WYZjshM3hKJPcQXISS zRQfFZ4UQPQ3U14/1LZALfxR0L4/5PEFpVy0Mryysye5yMra2CZ9duknRDZ8sJ71 bXDPBMdM5BOkYUzTMHi6PJxlDL7x78iatTyc0JjHy4fou7ioehoG8XMyOGqUMD77 LhP/snQxXc2HWs3lUf+pEhsBP33Q07h8AcU9WtGF2fkUeNRUYV+MRk6NTplVluca S01KwdbHYHUpxpEQLJA3x93WVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyptkuC QM61w7mrHDF95St+T6oEMB8GA1UdIwQYMBaAFLM21obhrd8tXHjS0OASjQ8ofgeO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDVBQy84QTU2OEE4MjEy MTgxMUVCQjE4NTJDNzlDNEY5QUUwMi9zemJXaHVHdDN5MWNlTkxRNEJLTkR5aC1C NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N6YldodUd0M3kxY2VOTFE0QktORHloLUI0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDVBQy84QTU2OEE4MjEyMTgxMUVCQjE4NTJDNzlDNEY5QUUwMi9zemJXaHVHdDN5 MWNlTkxRNEJLTkR5aC1CNDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNm6TQWMq00a2dDuIjhKIDC5s0JS9CgyvjBAB/T0kA0zkZ/d/et1dT vpSz1uyycgDLkU4qrjQATVQrkyR+R9bdQfKz085KW6Q/MMjd/6DKx/CWUQYC9X9r yZ+7kQxUPOynbGP3qBEYvOjBENnG4CKDPhXKVoa3qr8R5wcv/xDGqFmpdZszVVKZ lyOw9JaFmHTFlPgyF3h3lqnQifSoQQZ71lVMeHqb4ToC5tWe8fJOiRJj9i4CJW9q 9OqBdxozZBgsFTPK4DB/97TCaZWnHEbdTa38ie/Eqd7LNZP5sBu3FnLgO82AZH5F pafwPD37xy6Ub0/TMEa6VcYaHntituB7 -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org