$ rpki-client -vvf rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft File: lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft (raw, json) Hash identifier: Xj8nBS/Zy9m6eyH5vVX3AX/QgzK6DXboZgcEajuXOKo= Subject key identifier: C1:83:BA:5E:BB:90:A0:14:59:66:4C:DF:FD:71:0D:AF:0F:64:04:13 Authority key identifier: 94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 Certificate issuer: /CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838 Certificate serial: 3434 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft Manifest number: 3430 Signing time: Sun 24 Nov 2024 14:35:48 +0000 Manifest this update: Sun 24 Nov 2024 14:35:47 +0000 Manifest next update: Sun 01 Dec 2024 14:35:47 +0000 Files and hashes: 1: lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl (hash: T2p15GOIbHFCTu2RAueg5EekXdMjAcatyUPHFIXPKKg=) 2: 35FC192C272C11ED9E64C718C4F9AE02.roa (hash: 9wMD+BTTp63JJ2ve8IGpNkKxbEpqVM4ugh2P4b3ccDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13364 (0x3434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D7F2/serialNumber=942D541DFE7982F6E01E6BCC976DC0CB8414E838 Validity Not Before: Nov 24 14:35:47 2024 GMT Not After : Dec 1 14:35:47 2024 GMT Subject: CN=674339c3-0e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:5a:ec:ea:c9:6d:65:1d:2d:9e:10:e6:29:91: c7:3d:09:9d:ec:66:f9:80:b8:3d:f8:2a:66:15:d5: d7:06:2c:50:cf:e2:34:f4:d1:bd:0d:c6:70:99:d4: ac:5f:68:40:ed:50:14:5e:8e:bf:dc:90:2b:b3:b3: 4f:6f:33:9c:f0:d4:85:6f:cd:fa:8e:95:36:de:ad: eb:50:32:cf:aa:37:98:6b:74:a3:1c:de:d3:4b:4f: 07:78:5f:fe:39:86:94:8b:d0:bd:61:71:26:2f:c2: a4:78:55:65:2e:fb:c7:5b:d7:f4:20:e9:2e:28:b6: 5a:e5:b4:9d:50:4b:ec:9b:6a:e1:ba:63:3f:43:8d: 79:b5:df:4d:d1:31:68:d1:80:17:11:91:59:30:b6: 88:f5:70:27:7b:7b:c0:12:8a:19:f1:bb:f3:89:57: cb:94:ac:69:4c:99:0f:3e:f9:0b:37:d5:71:3f:54: 8b:30:4e:28:fd:ff:77:57:84:8f:1e:3d:10:3d:c8: 23:91:e7:49:f5:58:9f:1f:5d:09:a1:ba:77:33:dc: b2:72:80:bb:6f:29:00:38:90:45:16:96:e6:64:5c: 6e:c0:5f:81:77:6f:ce:2c:95:06:24:b9:40:14:17: dc:e2:83:3f:09:8f:a6:f5:00:b9:45:31:68:87:3c: 7f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:83:BA:5E:BB:90:A0:14:59:66:4C:DF:FD:71:0D:AF:0F:64:04:13 X509v3 Authority Key Identifier: keyid:94:2D:54:1D:FE:79:82:F6:E0:1E:6B:CC:97:6D:C0:CB:84:14:E8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D7F2/F028903C1D8C11E2B19D5FEA08B02CD2/lC1UHf55gvbgHmvMl23Ay4QU6Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9a:e7:60:38:7b:11:70:70:99:a9:93:09:2a:4a:91:88:d2: 6a:a1:05:69:7e:01:b5:07:a8:b6:39:ec:35:2e:d3:c6:fc:17: c6:2f:0e:0a:8b:e4:a1:3c:24:1a:08:08:a2:0a:14:fa:b5:a4: de:97:5c:06:8f:3f:67:27:e1:e4:75:d1:22:b5:c6:0b:8e:43: e7:d0:2e:43:5a:f9:96:f0:e3:5a:f8:1c:0c:6f:71:61:32:1e: 74:a2:0e:5a:38:e0:5e:dd:26:2b:43:fe:6f:29:ce:e0:55:c3: f8:24:c9:42:0c:af:b3:76:3a:dc:d4:c9:a6:58:70:d2:18:27: db:a5:f2:48:d2:cf:70:d6:d3:63:6e:a6:fd:cc:2a:62:b8:07: 18:9f:7e:ab:ea:ec:6c:15:0b:d6:d7:04:34:18:ce:7f:b1:14: 19:10:e4:05:0d:ab:3f:81:56:2f:78:4f:5e:9a:40:80:84:aa: 3f:a7:04:57:53:3d:07:46:85:c7:51:a5:f9:fe:fd:6c:27:02: 33:31:f2:05:4a:a0:d6:14:1f:28:9d:06:2b:2c:64:2e:20:55: 07:65:05:03:8b:cb:c6:de:8c:fa:ba:5b:29:fc:f8:70:c4:9b: 5e:35:5c:21:62:c5:2b:21:be:37:07:07:e3:e5:4c:d0:52:b9: ba:5f:ce:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q3RjIxMTAvBgNVBAUTKDk0MkQ1NDFERkU3OTgyRjZFMDFFNkJDQzk3NkRDMENC ODQxNEU4MzgwHhcNMjQxMTI0MTQzNTQ3WhcNMjQxMjAxMTQzNTQ3WjAYMRYwFAYD VQQDEw02NzQzMzljMy0wZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Vrs6sltZR0tnhDmKZHHPQmd7Gb5gLg9+CpmFdXXBixQz+I09NG9DcZwmdSs X2hA7VAUXo6/3JArs7NPbzOc8NSFb836jpU23q3rUDLPqjeYa3SjHN7TS08HeF/+ OYaUi9C9YXEmL8KkeFVlLvvHW9f0IOkuKLZa5bSdUEvsm2rhumM/Q415td9N0TFo 0YAXEZFZMLaI9XAne3vAEooZ8bvziVfLlKxpTJkPPvkLN9VxP1SLME4o/f93V4SP Hj0QPcgjkedJ9VifH10Jobp3M9yycoC7bykAOJBFFpbmZFxuwF+Bd2/OLJUGJLlA FBfc4oM/CY+m9QC5RTFohzx/vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGDul67 kKAUWWZM3/1xDa8PZAQTMB8GA1UdIwQYMBaAFJQtVB3+eYL24B5rzJdtwMuEFOg4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDdGMi9GMDI4OTAzQzFE OEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1NWd2YmdIbXZNbDIzQXk0UVU2 RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDMVVIZjU1Z3ZiZ0htdk1sMjNBeTRRVTZEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDdGMi9GMDI4OTAzQzFEOEMxMUUyQjE5RDVGRUEwOEIwMkNEMi9sQzFVSGY1NWd2 YmdIbXZNbDIzQXk0UVU2RGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7mudgOHsRcHCZqZMJKkqRiNJqoQVpfgG1B6i2Oew1LtPG/BfGLw4K i+ShPCQaCAiiChT6taTel1wGjz9nJ+HkddEitcYLjkPn0C5DWvmW8ONa+BwMb3Fh Mh50og5aOOBe3SYrQ/5vKc7gVcP4JMlCDK+zdjrc1MmmWHDSGCfbpfJI0s9w1tNj bqb9zCpiuAcYn36r6uxsFQvW1wQ0GM5/sRQZEOQFDas/gVYveE9emkCAhKo/pwRX Uz0HRoXHUaX5/v1sJwIzMfIFSqDWFB8onQYrLGQuIFUHZQUDi8vG3oz6ulsp/Phw xJteNVwhYsUrIb43Bwfj5UzQUrm6X86D -----END CERTIFICATE-----Generated at Sun Nov 24 15:31:18 2024 by rpki-client on console-ams.rpki-client.org