$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json) Hash identifier: 0+KodgnWIlhxl4TWwr3LMqdxHXsus8GUdcukR3XDpLw= Subject key identifier: 8C:AB:14:5A:CD:15:B7:FC:79:53:6D:A9:A6:B1:9F:D2:24:33:6B:B4 Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft Manifest number: 012E Signing time: Sat 23 Nov 2024 02:49:43 +0000 Manifest this update: Sat 23 Nov 2024 02:49:43 +0000 Manifest next update: Sat 30 Nov 2024 02:49:43 +0000 Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: 1VIQZEVTJW72M8psP9wouk4qpUyL5aOGnxNUJqLZzoA=) 2: 4D6D5554DB8011ED91D54A2BC4F9AE02.roa (hash: /9Uf2838bCZKpE133UWLyKcpXUA7N6aybd5lPLH4kiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Validity Not Before: Nov 23 02:49:43 2024 GMT Not After : Nov 30 02:49:43 2024 GMT Subject: CN=674142c7-a6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2c:2a:53:f1:9a:33:db:2d:28:98:c6:5d:14: ec:8d:63:dc:78:75:f8:be:c3:1a:4e:d9:67:b3:dd: 7e:53:be:3f:78:14:84:b7:02:22:92:61:60:18:50: fb:06:63:88:48:a5:cb:be:a2:94:22:cb:be:14:e3: 09:b0:fe:84:f5:5a:f0:62:49:a2:f9:a5:fe:05:b4: c6:fe:56:ac:f6:16:cf:19:1e:42:ea:56:34:1d:e7: ff:0e:37:b1:a4:b1:d6:60:99:f6:8b:d2:1f:23:46: bd:48:29:91:24:7e:6a:ae:99:a3:c5:dc:3d:45:98: 3c:c8:67:30:85:3b:19:8f:6b:ca:c3:00:b6:96:6e: 3c:6c:fc:2e:d9:ae:65:a5:12:31:ef:3f:db:11:d6: d8:db:2f:13:3d:de:50:13:6f:53:1f:c6:26:ed:af: a6:c9:a9:1f:ae:e1:d0:23:92:3b:d2:4f:3c:88:4d: ba:d8:b6:d2:41:6b:86:bd:2b:6a:f9:b9:e1:34:04: 8f:38:a0:36:41:3d:49:5a:3f:04:f9:45:dc:f7:24: 0b:e2:0b:d9:3e:9d:70:ef:1e:96:f4:ef:6e:08:43: db:c3:fa:4e:a3:4e:2e:69:cf:29:88:b7:16:b7:9a: ff:aa:7b:d9:03:8e:4b:c6:23:28:af:98:2f:3d:6f: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AB:14:5A:CD:15:B7:FC:79:53:6D:A9:A6:B1:9F:D2:24:33:6B:B4 X509v3 Authority Key Identifier: keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8c:80:fa:39:e3:43:4d:d7:2f:08:69:a8:f3:be:c8:0c:9a: 60:32:aa:5a:17:fc:7f:34:58:67:43:4a:ac:56:a0:05:0b:79: a9:85:bc:70:7b:d8:90:1c:d4:6a:7c:9b:0d:4a:48:49:7d:bc: b6:6b:49:6f:f0:b8:66:70:3b:9c:50:b3:9a:11:4d:88:ea:d8: eb:ed:e6:60:a9:7d:50:f4:19:9c:e6:0f:4b:b8:e5:e0:ae:fa: dc:d7:09:57:4f:96:7c:72:7c:be:7a:8f:4e:97:d4:ed:de:77: da:bd:92:e6:19:3a:d3:ed:52:33:63:35:b2:f6:32:99:8b:1e: 12:70:56:12:e0:89:25:27:6d:89:a2:ed:c7:e3:ec:3c:be:72: 74:7c:af:c4:11:c2:cf:25:41:61:16:c3:05:31:25:c5:83:9a: b9:2b:cf:43:3c:49:5e:b8:77:27:8a:09:3b:1e:f1:9b:65:ee: 2b:df:40:38:b2:fc:ea:ef:ef:33:e3:f9:49:0a:74:23:fe:c8: da:88:59:10:7b:3c:ec:06:72:b2:cf:25:39:13:2c:b5:7c:d4: d3:d9:de:c1:44:ab:fd:21:78:27:46:a3:4d:60:c3:bc:76:77: 57:cf:65:86:fa:8d:4f:08:03:d4:83:55:0b:69:0b:11:93:1f: 0a:b1:36:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw REQ0OTMwQTQwHhcNMjQxMTIzMDI0OTQzWhcNMjQxMTMwMDI0OTQzWjAYMRYwFAYD VQQDEw02NzQxNDJjNy1hNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SwqU/GaM9stKJjGXRTsjWPceHX4vsMaTtlns91+U74/eBSEtwIikmFgGFD7 BmOISKXLvqKUIsu+FOMJsP6E9VrwYkmi+aX+BbTG/las9hbPGR5C6lY0Hef/Djex pLHWYJn2i9IfI0a9SCmRJH5qrpmjxdw9RZg8yGcwhTsZj2vKwwC2lm48bPwu2a5l pRIx7z/bEdbY2y8TPd5QE29TH8Ym7a+myakfruHQI5I70k88iE262LbSQWuGvStq +bnhNASPOKA2QT1JWj8E+UXc9yQL4gvZPp1w7x6W9O9uCEPbw/pOo04uac8piLcW t5r/qnvZA45LxiMor5gvPW8cgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyrFFrN Fbf8eVNtqaaxn9IkM2u0MB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY MUYzaDdjNWg0V0FOMUpNS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7jID6OeNDTdcvCGmo877IDJpgMqpaF/x/NFhnQ0qsVqAFC3mphbxw e9iQHNRqfJsNSkhJfby2a0lv8LhmcDucULOaEU2I6tjr7eZgqX1Q9Bmc5g9LuOXg rvrc1wlXT5Z8cny+eo9Ol9Tt3nfavZLmGTrT7VIzYzWy9jKZix4ScFYS4IklJ22J ou3H4+w8vnJ0fK/EEcLPJUFhFsMFMSXFg5q5K89DPEleuHcnigk7HvGbZe4r30A4 svzq7+8z4/lJCnQj/sjaiFkQezzsBnKyzyU5Eyy1fNTT2d7BRKv9IXgnRqNNYMO8 dndXz2WG+o1PCAPUg1ULaQsRkx8KsTbD -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org