$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json) Hash identifier: Oe3TIuFb9Rtxa59tEVlu7hdoXlCJBIau4Q+0BGl2swU= Subject key identifier: 92:09:AF:CB:6F:CD:F4:9F:32:FE:DB:EB:09:90:3B:17:18:2B:63:0B Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft Manifest number: 024A Signing time: Sat 23 Nov 2024 01:19:56 +0000 Manifest this update: Sat 23 Nov 2024 01:19:56 +0000 Manifest next update: Sat 30 Nov 2024 01:19:56 +0000 Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: eIwu0V+DKxgh0k+EfMYO7fj5JPFCy5chi1aBLkJ4A2g=) 2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: I0Mc6NCaKERxjLfv71auPL3ymTInkZe4oBL6OqbtYzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC Validity Not Before: Nov 23 01:19:56 2024 GMT Not After : Nov 30 01:19:56 2024 GMT Subject: CN=67412dbc-c391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b9:82:c4:4a:6d:77:33:6f:9e:0c:d3:56:fd: ed:a0:d5:21:ed:ab:7a:95:88:4b:9a:af:2c:c8:d9: aa:ab:3c:41:f3:f8:48:11:d6:74:e2:da:21:ec:f9: 3a:96:de:d0:76:cb:cc:b9:7c:47:49:53:8d:a5:ae: 50:22:31:f3:f1:34:31:ea:3f:83:ac:79:49:f5:81: 8a:f8:29:93:42:3f:92:a0:c1:6b:3d:a4:26:71:ba: cd:48:0f:ab:fb:22:ee:97:5c:e4:e7:f4:bd:89:7a: ba:3f:35:ea:ee:82:1e:e1:66:84:26:bd:47:2e:2e: a8:96:f0:5f:98:25:98:37:86:fb:04:f3:91:eb:ca: 06:2d:60:04:c7:ae:3a:4b:dd:17:12:bd:92:f3:bf: fc:53:8c:0f:6e:76:fb:2a:d9:c6:d3:bc:40:a5:57: 96:cc:75:04:13:20:b4:65:12:52:b1:21:c7:20:79: ee:c2:1c:02:e0:88:bd:fd:dc:98:82:44:80:99:d6: 8a:9c:6b:c2:cc:be:2d:8b:4e:1f:b1:73:2b:a9:8a: 83:ba:48:1c:76:55:4b:6e:ae:f2:a9:ed:f0:9a:1e: 77:8d:e1:30:98:ee:fc:ef:36:a0:fa:c1:1a:cd:cf: d7:4b:62:3d:fd:ff:24:29:2d:a0:09:a7:0c:a0:cd: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:09:AF:CB:6F:CD:F4:9F:32:FE:DB:EB:09:90:3B:17:18:2B:63:0B X509v3 Authority Key Identifier: keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:18:44:4d:e0:65:45:cd:ad:52:18:e9:3e:2b:7c:bb:74:10: 60:f1:c6:55:94:e5:a0:29:ee:fb:7a:ed:c2:d4:47:e2:d3:2d: 28:50:83:07:37:26:67:c1:af:e3:17:89:09:5e:f2:3c:c1:97: 17:88:f1:3e:b8:f3:c5:64:0f:39:36:d3:e6:78:b9:ba:6c:8a: 9b:2d:cf:78:5f:d9:37:a9:c1:e5:24:4f:d6:cb:03:33:06:9b: 7e:08:41:b2:fe:d5:f2:5e:21:f2:25:97:2c:6e:12:a5:86:9d: f2:75:be:41:b0:13:dc:97:b7:91:f1:e5:91:82:eb:b4:70:ac: 13:25:8b:29:29:27:de:6c:6b:06:71:7c:f9:04:5a:30:9f:b5: 1c:86:02:f7:8e:12:22:18:4f:c0:d3:02:97:f6:2e:fc:4b:13: 6b:64:e8:7f:df:10:5c:e6:e5:28:5a:1c:42:2f:8b:98:64:dc: 2d:43:83:27:8f:d5:7f:d6:87:24:7b:ff:20:f8:01:90:b9:86: 72:04:8b:1a:56:b8:87:01:d4:97:a6:5b:ac:6c:97:c7:7f:87: 58:5c:83:92:73:eb:71:e3:af:66:aa:2f:33:17:b5:83:d0:bc: 35:16:67:68:49:1e:29:a9:4c:50:bc:ed:58:eb:6d:66:52:38: 31:46:cb:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4 NTJDRjA1QkMwHhcNMjQxMTIzMDExOTU2WhcNMjQxMTMwMDExOTU2WjAYMRYwFAYD VQQDEw02NzQxMmRiYy1jMzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27mCxEptdzNvngzTVv3toNUh7at6lYhLmq8syNmqqzxB8/hIEdZ04toh7Pk6 lt7QdsvMuXxHSVONpa5QIjHz8TQx6j+DrHlJ9YGK+CmTQj+SoMFrPaQmcbrNSA+r +yLul1zk5/S9iXq6PzXq7oIe4WaEJr1HLi6olvBfmCWYN4b7BPOR68oGLWAEx646 S90XEr2S87/8U4wPbnb7KtnG07xApVeWzHUEEyC0ZRJSsSHHIHnuwhwC4Ii9/dyY gkSAmdaKnGvCzL4ti04fsXMrqYqDukgcdlVLbq7yqe3wmh53jeEwmO787zag+sEa zc/XS2I9/f8kKS2gCacMoM2OBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIJr8tv zfSfMv7b6wmQOxcYK2MLMB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ SDlXeGU4M3dYWi1GTFBCYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwGERN4GVFza1SGOk+K3y7dBBg8cZVlOWgKe77eu3C1Efi0y0oUIMH NyZnwa/jF4kJXvI8wZcXiPE+uPPFZA85NtPmeLm6bIqbLc94X9k3qcHlJE/WywMz Bpt+CEGy/tXyXiHyJZcsbhKlhp3ydb5BsBPcl7eR8eWRguu0cKwTJYspKSfebGsG cXz5BFown7UchgL3jhIiGE/A0wKX9i78SxNrZOh/3xBc5uUoWhxCL4uYZNwtQ4Mn j9V/1ocke/8g+AGQuYZyBIsaVriHAdSXplusbJfHf4dYXIOSc+tx469mqi8zF7WD 0Lw1FmdoSR4pqUxQvO1Y621mUjgxRsvT -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:39 2024 by rpki-client on console-fra.rpki-client.org