$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft File: rMARlDOHfwx0KFe46lIPjaTtCVo.mft (raw, json) Hash identifier: 7EMrXZHhZh1SLYG09NpeHNeLzv72vZ8aWo3Onir+Png= Subject key identifier: 00:AF:9F:08:8B:5C:19:CC:86:E2:28:7E:C9:7E:C1:B8:60:6C:EE:0A Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A Certificate issuer: /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A Certificate serial: 05F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft Manifest number: 05EC Signing time: Fri 22 Nov 2024 22:24:43 +0000 Manifest this update: Fri 22 Nov 2024 22:24:43 +0000 Manifest next update: Fri 29 Nov 2024 22:24:43 +0000 Files and hashes: 1: rMARlDOHfwx0KFe46lIPjaTtCVo.crl (hash: xAIDT1L0toqdpT1wcKsrxiu5xs5kBYqSSsGpV6hwQfw=) 2: 1E1A1DB28C6A11EB91832D52C4F9AE02.roa (hash: 1444bb5xjFLOm1pP6Amz/K/2h6LYyRRZNFd2Apyax+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1523 (0x5f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A Validity Not Before: Nov 22 22:24:43 2024 GMT Not After : Nov 29 22:24:43 2024 GMT Subject: CN=674104ab-9941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fa:9d:42:38:52:55:aa:99:b5:ac:44:79:ed: f4:4c:39:14:fc:fe:29:40:5f:af:56:43:8a:09:69: 78:0e:c6:3d:e0:01:ae:97:f5:bf:43:af:ed:ac:8c: 42:a4:03:78:0d:4a:91:5b:f3:27:dd:5b:aa:f2:2c: 9e:aa:10:d0:da:76:0c:f4:47:61:c3:6e:a0:11:c2: 6f:2b:e6:7e:a4:13:bc:2f:6c:40:e1:b8:40:0d:88: 57:e6:25:b5:74:99:99:f4:1a:f9:90:10:a1:83:1c: 5f:ad:f6:cd:b6:e4:dc:43:3b:ce:29:4b:9f:92:bd: c5:41:c6:cd:e1:6b:f7:6c:40:04:66:63:27:52:75: 58:44:3b:fa:ac:d9:ac:ba:62:c3:09:53:c0:2e:e1: 18:23:b3:40:8d:69:5b:74:42:eb:37:6e:be:52:76: dc:2c:37:d2:d3:93:8f:8e:49:31:ed:22:48:cd:af: 0f:52:4a:9a:f8:75:2a:bc:fe:27:7c:68:72:e2:f7: 78:a6:6a:26:5f:16:22:99:e3:b1:40:20:45:78:61: d7:53:02:a7:da:1f:51:d3:57:31:a0:cf:bd:60:e6: 96:25:08:0c:ae:19:14:24:e7:d6:e6:95:2c:14:a7: 20:5a:19:e1:4d:c6:db:37:23:12:b5:dd:85:f0:62: cd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AF:9F:08:8B:5C:19:CC:86:E2:28:7E:C9:7E:C1:B8:60:6C:EE:0A X509v3 Authority Key Identifier: keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c1:75:82:ae:fd:ee:29:63:e2:a5:ec:d9:b7:8e:11:3c:e5: 7a:27:6d:ae:7c:60:75:0a:77:e4:ea:54:3d:72:c2:3a:76:cd: be:36:13:6b:e5:23:0d:88:ef:16:aa:21:71:26:8f:2e:6b:8c: 27:8e:00:00:09:7a:ca:b6:08:5c:1a:04:e0:21:c8:91:06:05: 18:34:bd:f5:c5:ae:64:5f:19:f6:4f:c5:83:a7:c7:bb:b1:02: e1:af:b1:0e:46:3a:10:83:a9:b3:1c:d6:4a:17:85:36:25:94: cf:a3:ce:5d:a3:30:84:6f:ed:54:f9:23:e3:36:42:7b:d2:d6: a0:24:1f:01:a9:4e:05:07:4e:6f:16:11:73:09:e2:0b:46:24: 1e:af:72:f3:31:dc:bd:9e:e6:6b:a2:98:ac:d0:d4:f0:24:c9: f5:95:46:26:5e:41:74:95:b3:b9:5d:70:c3:be:aa:6c:21:83: 15:dc:f4:1d:cb:1c:bc:c9:62:10:a7:01:72:39:ad:0e:77:85: ce:5a:9d:30:06:2f:57:97:dd:6f:1e:d9:3f:63:ec:13:e9:dd: 17:1b:2c:43:0b:3f:87:ef:12:8b:5d:cf:be:84:47:b9:84:82: 07:72:92:35:b6:3f:86:c6:3c:7c:c2:03:84:7f:e5:f6:d5:cb: df:42:46:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE1RTcxMTAvBgNVBAUTKEFDQzAxMTk0MzM4NzdGMEM3NDI4NTdCOEVBNTIwRjhE QTRFRDA5NUEwHhcNMjQxMTIyMjIyNDQzWhcNMjQxMTI5MjIyNDQzWjAYMRYwFAYD VQQDEw02NzQxMDRhYi05OTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/qdQjhSVaqZtaxEee30TDkU/P4pQF+vVkOKCWl4DsY94AGul/W/Q6/trIxC pAN4DUqRW/Mn3Vuq8iyeqhDQ2nYM9Edhw26gEcJvK+Z+pBO8L2xA4bhADYhX5iW1 dJmZ9Br5kBChgxxfrfbNtuTcQzvOKUufkr3FQcbN4Wv3bEAEZmMnUnVYRDv6rNms umLDCVPALuEYI7NAjWlbdELrN26+UnbcLDfS05OPjkkx7SJIza8PUkqa+HUqvP4n fGhy4vd4pmomXxYimeOxQCBFeGHXUwKn2h9R01cxoM+9YOaWJQgMrhkUJOfW5pUs FKcgWhnhTcbbNyMStd2F8GLNJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACvnwiL XBnMhuIofsl+wbhgbO4KMB8GA1UdIwQYMBaAFKzAEZQzh38MdChXuOpSD42k7Qla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTVFNy9FOTU5REM3NjhD NjgxMUVCODcwNDJENTFDNEY5QUUwMi9yTUFSbERPSGZ3eDBLRmU0NmxJUGphVHRD Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNQVJsRE9IZnd4MEtGZTQ2bElQamFUdENWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTVFNy9FOTU5REM3NjhDNjgxMUVCODcwNDJENTFDNEY5QUUwMi9yTUFSbERPSGZ3 eDBLRmU0NmxJUGphVHRDVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPwXWCrv3uKWPipezZt44RPOV6J22ufGB1Cnfk6lQ9csI6ds2+NhNr 5SMNiO8WqiFxJo8ua4wnjgAACXrKtghcGgTgIciRBgUYNL31xa5kXxn2T8WDp8e7 sQLhr7EORjoQg6mzHNZKF4U2JZTPo85dozCEb+1U+SPjNkJ70tagJB8BqU4FB05v FhFzCeILRiQer3LzMdy9nuZropis0NTwJMn1lUYmXkF0lbO5XXDDvqpsIYMV3PQd yxy8yWIQpwFyOa0Od4XOWp0wBi9Xl91vHtk/Y+wT6d0XGyxDCz+H7xKLXc++hEe5 hIIHcpI1tj+Gxjx8wgOEf+X21cvfQkaj -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:40 2024 by rpki-client on console-ams.rpki-client.org