$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: 8flEkgh78jW7ad9epkHBYfnOa3RaCMyyowpWBeB67EE= Subject key identifier: 2E:16:0F:10:80:A9:A3:B4:75:E8:48:61:DA:82:4F:71:6D:D3:E6:D6 Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0DA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0D97 Signing time: Fri 22 Nov 2024 17:52:30 +0000 Manifest this update: Fri 22 Nov 2024 17:52:29 +0000 Manifest next update: Fri 29 Nov 2024 17:52:29 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: RoXj4HMSJ9JkddmIkj9ke9mWJpg1DgiKqwQSMCOhz9g=) 2: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: lZ3QbqPdh5gBg1rW+eMhPiAXrCRo4e2jYq5svVV45wI=) 3: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: jOwsth6DgagpPjpvgD+70DaYD4kKIMkvYMnC7TJ216E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3491 (0xda3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: Nov 22 17:52:29 2024 GMT Not After : Nov 29 17:52:29 2024 GMT Subject: CN=6740c4dd-cd39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a2:3a:22:f6:c6:81:63:5f:e7:13:22:ca:17: 50:e4:f5:8f:b0:da:2e:28:f1:97:26:84:c3:67:9f: 44:b0:b6:e3:76:4b:76:3c:05:95:e3:d2:13:15:5f: 30:5a:43:3c:ee:17:a7:4b:a5:b3:24:ff:00:ea:55: 3d:2b:ff:d9:ec:f8:4c:0c:c8:e8:09:08:70:c5:68: 8e:45:a1:41:1f:9e:75:5b:33:31:f7:79:e5:a2:30: 98:73:4a:69:6a:c4:28:e3:59:f6:7e:70:20:97:31: 43:29:6f:80:05:a4:88:54:36:d0:22:62:bc:ba:ac: 59:23:fd:eb:b1:18:15:7d:d0:a1:c9:00:14:ed:b8: 88:d1:94:7e:fa:59:32:de:6c:a9:c3:04:6a:ba:7b: 0f:65:3f:ab:2d:2e:4e:4f:d4:b7:06:e3:76:e4:f3: 8e:15:b0:ca:18:67:38:0f:53:85:97:de:58:bf:94: 02:12:28:91:48:c5:ab:16:c7:92:62:f7:4c:ce:21: bd:88:85:66:2f:4a:09:1a:1f:3b:94:67:d5:1b:8a: a0:75:68:09:aa:c7:1a:c4:9e:c9:1d:46:51:98:de: 95:a4:7f:a8:86:48:60:56:b9:95:c7:92:12:b0:ac: ad:99:0d:94:5d:29:70:ee:b3:15:9d:35:1d:57:b5: 7b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:16:0F:10:80:A9:A3:B4:75:E8:48:61:DA:82:4F:71:6D:D3:E6:D6 X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1c:40:40:98:81:3f:28:b1:69:2c:d6:ff:0e:47:2a:2a:88: a8:79:7f:73:b0:a0:fe:40:ab:d5:3f:4e:35:d8:b3:4d:3e:da: 23:89:6d:b3:22:98:a5:c4:80:af:a4:a9:87:4c:25:50:af:b5: 15:b3:d9:fd:2d:ed:6d:34:7b:eb:f1:47:e7:0a:ce:86:8d:23: 0e:d0:10:19:55:48:a3:71:3c:43:6c:1b:1c:4b:a2:3d:96:6c: 34:ca:62:b2:a8:84:56:c4:97:1b:e1:ed:ab:b4:0f:54:76:c3: 37:c8:0a:29:1f:5b:72:4c:85:7b:90:a2:30:10:11:4c:88:95: 32:b8:3e:7b:ea:f4:bd:8f:60:d1:dc:e5:b7:e8:e5:ba:a6:20: 01:3e:2d:23:15:e0:2a:87:ee:f4:72:32:34:53:7d:9b:99:60: b5:6a:fc:6a:02:74:a7:a4:93:ef:f2:18:06:cb:5d:bf:0d:e5: ae:be:a4:c1:0e:8b:47:a3:df:0f:7a:f4:a7:1e:4a:ab:85:20: 4e:6d:fd:c9:3e:b8:08:21:58:52:0a:0f:09:4f:90:1c:dc:36: b7:45:c1:fa:61:55:9f:31:db:8d:5a:ad:43:92:5e:a8:5b:91: 52:f7:d6:79:e8:7a:43:8c:40:4b:de:6c:c5:82:9d:0e:36:e1: e5:aa:a8:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjQxMTIyMTc1MjI5WhcNMjQxMTI5MTc1MjI5WjAYMRYwFAYD VQQDEw02NzQwYzRkZC1jZDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqI6IvbGgWNf5xMiyhdQ5PWPsNouKPGXJoTDZ59EsLbjdkt2PAWV49ITFV8w WkM87henS6WzJP8A6lU9K//Z7PhMDMjoCQhwxWiORaFBH551WzMx93nlojCYc0pp asQo41n2fnAglzFDKW+ABaSIVDbQImK8uqxZI/3rsRgVfdChyQAU7biI0ZR++lky 3mypwwRqunsPZT+rLS5OT9S3BuN25POOFbDKGGc4D1OFl95Yv5QCEiiRSMWrFseS YvdMziG9iIVmL0oJGh87lGfVG4qgdWgJqscaxJ7JHUZRmN6VpH+ohkhgVrmVx5IS sKytmQ2UXSlw7rMVnTUdV7V7HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4WDxCA qaO0dehIYdqCT3Ft0+bWMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcHEBAmIE/KLFpLNb/DkcqKoioeX9zsKD+QKvVP0412LNNPtojiW2z IpilxICvpKmHTCVQr7UVs9n9Le1tNHvr8UfnCs6GjSMO0BAZVUijcTxDbBscS6I9 lmw0ymKyqIRWxJcb4e2rtA9UdsM3yAopH1tyTIV7kKIwEBFMiJUyuD576vS9j2DR 3OW36OW6piABPi0jFeAqh+70cjI0U32bmWC1avxqAnSnpJPv8hgGy12/DeWuvqTB DotHo98PevSnHkqrhSBObf3JPrgIIVhSCg8JT5Ac3Da3RcH6YVWfMduNWq1Dkl6o W5FS99Z56HpDjEBL3mzFgp0ONuHlqqgs -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org