$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json) Hash identifier: 05Zn5BCyZkyjTSxGmNJY/a54S3lPtfZA8aG1FvCcBn8= Subject key identifier: A7:1A:08:9D:68:6B:89:64:07:D8:1A:3C:26:B9:41:E0:94:56:6C:10 Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft Manifest number: 0140 Signing time: Sat 23 Nov 2024 02:41:32 +0000 Manifest this update: Sat 23 Nov 2024 02:41:32 +0000 Manifest next update: Sat 30 Nov 2024 02:41:32 +0000 Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: eToh1Pt4Ucv+/rzdKh4LHDbTZ5IeZzQ6Htdw/V0QYjM=) 2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: mECk45lJRrGYCsUl0s33tZDlg+g3kdID1LTdBe9R6+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Validity Not Before: Nov 23 02:41:32 2024 GMT Not After : Nov 30 02:41:32 2024 GMT Subject: CN=674140dc-d8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bb:27:9a:e5:26:37:1e:c9:40:54:29:d7:02: 48:69:6d:a7:7d:b9:20:53:ac:b9:ee:46:43:41:cd: c7:9b:5c:b2:86:8c:f2:f3:ad:31:6a:bb:20:c8:c9: 26:0c:45:16:6e:63:a6:41:cd:d5:cc:01:1a:bd:04: 5e:5b:80:0a:02:e4:b1:5e:92:e5:0b:c6:09:61:2d: 65:ea:3f:36:22:b7:ab:a2:1f:05:ee:f8:4e:9e:60: 9d:13:b1:00:28:82:0a:a9:8f:dc:ab:04:4d:3c:12: f1:9a:14:05:d1:80:f3:5e:e4:15:05:1e:6d:86:85: 5d:19:7e:86:9f:c0:e0:5b:a6:3a:1d:97:77:d0:b2: 0c:7c:46:6d:79:37:0b:af:44:3b:37:22:86:3c:de: 59:95:32:b2:a9:bf:29:a6:3a:f7:ce:85:dd:69:f4: b2:7e:fb:98:ca:f9:b6:da:3f:eb:d1:a6:48:cc:5b: bf:af:84:c7:b9:67:a7:a5:08:cf:66:ee:19:e7:de: f8:05:56:28:88:ae:5b:94:15:35:3c:d1:12:5d:4d: cb:63:75:98:d8:79:b4:9d:10:df:59:02:02:89:a9: 08:6d:f9:81:19:db:c8:33:dc:05:73:3f:ee:83:ca: 92:6c:5f:e1:cc:96:2b:2c:94:07:77:7a:0c:87:14: 1a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1A:08:9D:68:6B:89:64:07:D8:1A:3C:26:B9:41:E0:94:56:6C:10 X509v3 Authority Key Identifier: keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a6:db:42:c3:5a:17:32:17:5c:19:67:b0:ee:42:9a:4f:d8: c9:52:9b:0d:0d:69:f2:cc:1d:86:d5:6b:0b:7b:a9:51:23:65: ba:c1:a7:5c:a5:75:e9:e9:b1:d4:64:f7:5d:4b:0c:d9:f5:59: e0:c1:66:d8:11:be:07:74:f8:be:27:b1:b8:e3:6f:83:d0:64: 9a:a2:71:dc:e1:2b:9e:73:3f:38:6c:be:4d:3f:35:a8:62:9d: 03:35:8c:45:9f:2b:c6:90:76:68:99:44:69:54:6d:7e:73:6c: d6:9e:5f:cc:77:ac:3f:2e:a9:76:6a:af:f3:92:91:e9:9d:42: 2f:6c:22:20:11:11:24:53:9f:94:24:8c:99:93:9d:27:e6:12: 12:0f:11:0a:96:ac:ab:d8:ca:90:02:e8:85:85:fb:4c:3c:4d: e8:58:1b:4c:5f:b8:97:33:6f:ca:3a:65:32:8d:04:06:56:49: 15:72:42:48:04:51:28:5a:8f:01:e8:99:7f:17:34:4d:18:ec: 15:c3:7a:85:cc:6d:8d:16:c7:0d:a7:c1:75:00:80:18:0f:0c: 43:7c:1c:bb:11:dd:53:9f:d2:10:50:4f:63:fe:21:40:df:e2: 0a:4e:e1:ba:db:1d:a3:a4:40:ee:7b:40:00:fa:9b:76:0d:66: 00:e3:74:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0 OEJCOUUxMjMwHhcNMjQxMTIzMDI0MTMyWhcNMjQxMTMwMDI0MTMyWjAYMRYwFAYD VQQDEw02NzQxNDBkYy1kOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7bsnmuUmNx7JQFQp1wJIaW2nfbkgU6y57kZDQc3Hm1yyhozy860xarsgyMkm DEUWbmOmQc3VzAEavQReW4AKAuSxXpLlC8YJYS1l6j82Ireroh8F7vhOnmCdE7EA KIIKqY/cqwRNPBLxmhQF0YDzXuQVBR5thoVdGX6Gn8DgW6Y6HZd30LIMfEZteTcL r0Q7NyKGPN5ZlTKyqb8ppjr3zoXdafSyfvuYyvm22j/r0aZIzFu/r4THuWenpQjP Zu4Z5974BVYoiK5blBU1PNESXU3LY3WY2Hm0nRDfWQICiakIbfmBGdvIM9wFcz/u g8qSbF/hzJYrLJQHd3oMhxQayQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcaCJ1o a4lkB9gaPCa5QeCUVmwQMB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4 MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBapttCw1oXMhdcGWew7kKaT9jJUpsNDWnyzB2G1WsLe6lRI2W6wadc pXXp6bHUZPddSwzZ9VngwWbYEb4HdPi+J7G442+D0GSaonHc4Suecz84bL5NPzWo Yp0DNYxFnyvGkHZomURpVG1+c2zWnl/Md6w/Lql2aq/zkpHpnUIvbCIgEREkU5+U JIyZk50n5hISDxEKlqyr2MqQAuiFhftMPE3oWBtMX7iXM2/KOmUyjQQGVkkVckJI BFEoWo8B6Jl/FzRNGOwVw3qFzG2NFscNp8F1AIAYDwxDfBy7Ed1Tn9IQUE9j/iFA 3+IKTuG62x2jpEDue0AA+pt2DWYA43Tu -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org