$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft File: sLGl1VkrzlyB63JtRkDKlVEEzpM.mft (raw, json) Hash identifier: kv+RSY+yJ/7xHzV7ENZT7pm7NImaryonDQMYlvUJ78k= Subject key identifier: 05:0E:8E:08:64:A6:D4:8C:B5:0C:F2:CB:1A:5A:D4:4A:EC:9F:02:20 Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93 Certificate issuer: /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93 Certificate serial: 0AB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft Manifest number: 0AA4 Signing time: Fri 22 Nov 2024 19:19:09 +0000 Manifest this update: Fri 22 Nov 2024 19:19:09 +0000 Manifest next update: Fri 29 Nov 2024 19:19:09 +0000 Files and hashes: 1: sLGl1VkrzlyB63JtRkDKlVEEzpM.crl (hash: VSRwr/A7ir1xt8fkuVvlHVlgpOsEFU7hkQxNnRbHMPQ=) 2: E91D4C42E19011EC8E1ECA75C4F9AE02.roa (hash: rXbrZfof91yb/Hm6bgo20zlM+XGL7dx/BaljKZMiBHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2736 (0xab0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93 Validity Not Before: Nov 22 19:19:09 2024 GMT Not After : Nov 29 19:19:09 2024 GMT Subject: CN=6740d92d-9412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:0e:24:10:a1:7c:13:96:84:dd:b0:b8:db: d1:7c:d1:06:45:d5:6f:30:ad:4c:e6:21:82:a2:59: 67:dc:f1:9e:ad:8e:ce:7d:57:2c:fb:67:f6:20:13: 4d:4b:55:b3:8e:1a:09:15:76:de:78:51:e6:23:f3: 84:aa:44:29:12:8a:b8:07:be:92:6b:04:f4:79:4c: c8:af:f1:f6:9d:b3:d9:19:eb:e6:ee:51:9d:a4:4e: 79:22:64:a9:3a:da:1b:f7:7c:41:b5:8e:57:18:eb: 1d:1a:41:c7:af:61:63:0b:a9:7e:38:c8:ee:19:be: 9d:a3:5e:8d:9f:9a:d7:42:a4:fe:94:8f:68:e4:46: 11:d0:a2:20:4f:6a:64:e2:e4:34:ae:9a:f8:6a:bc: bb:c1:3e:78:1c:23:b2:85:31:83:c8:3e:93:c6:4e: 5d:cd:af:17:db:0a:fd:71:fd:ec:59:21:c8:05:db: 00:de:43:c3:fe:32:81:2a:e8:87:a8:fc:8b:67:fd: 70:4c:93:94:dc:d6:33:87:bb:ae:fe:93:6e:5c:9f: 1c:7a:26:6d:e0:82:0f:1d:5e:00:c6:85:2b:36:75: 9c:f4:ce:2a:6f:69:12:1a:ca:02:98:cd:ae:8d:e0: 49:5c:9c:84:c2:62:16:60:26:8e:c4:0e:a2:e6:9e: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0E:8E:08:64:A6:D4:8C:B5:0C:F2:CB:1A:5A:D4:4A:EC:9F:02:20 X509v3 Authority Key Identifier: keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a5:e9:5f:16:e6:2f:20:de:39:8f:2e:66:ae:0a:82:18:be: 7c:ad:fc:dd:a9:8a:7d:fb:30:10:f0:52:36:71:76:84:a8:be: d5:c0:16:2c:13:29:15:15:07:43:e2:12:59:be:f8:da:e4:d0: 38:7a:7d:3c:86:21:93:1a:24:83:72:da:ab:c4:b2:b9:58:b6: 92:d5:25:1a:00:a0:46:9f:b1:5e:c9:5d:fc:df:45:a4:60:06: e9:50:37:a9:51:03:2f:5e:eb:17:9b:64:d0:de:e6:5a:53:31: 7a:c2:e2:59:b7:53:77:3f:9c:69:a4:f1:dc:1e:0e:66:62:89: 53:7c:5d:50:2a:ba:d7:4f:14:e8:fd:5d:13:7f:ed:d7:f7:87: 83:19:d4:5c:8e:52:8c:87:f5:fe:4d:c8:fd:a6:bb:97:66:9e: 77:13:fe:ee:67:b1:c1:c4:4b:3f:09:bc:72:44:43:61:3f:83: 9e:0f:84:db:ca:24:8d:13:13:33:af:0f:7f:ae:8b:90:82:e5: 30:7f:3c:87:ba:6b:ac:cc:09:82:76:7d:90:f5:8e:0e:8b:0b: e4:c1:91:4a:9d:ab:43:23:13:bb:a3:ef:6f:23:6e:73:47:cc: 99:fc:82:a3:be:f7:73:f9:ff:b0:f8:0a:71:8e:ba:eb:20:d5: d2:12:40:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEyNTkxMTAvBgNVBAUTKEIwQjFBNUQ1NTkyQkNFNUM4MUVCNzI2RDQ2NDBDQTk1 NTEwNENFOTMwHhcNMjQxMTIyMTkxOTA5WhcNMjQxMTI5MTkxOTA5WjAYMRYwFAYD VQQDEw02NzQwZDkyZC05NDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07AOJBChfBOWhN2wuNvRfNEGRdVvMK1M5iGColln3PGerY7OfVcs+2f2IBNN S1WzjhoJFXbeeFHmI/OEqkQpEoq4B76SawT0eUzIr/H2nbPZGevm7lGdpE55ImSp Otob93xBtY5XGOsdGkHHr2FjC6l+OMjuGb6do16Nn5rXQqT+lI9o5EYR0KIgT2pk 4uQ0rpr4ary7wT54HCOyhTGDyD6Txk5dza8X2wr9cf3sWSHIBdsA3kPD/jKBKuiH qPyLZ/1wTJOU3NYzh7uu/pNuXJ8ceiZt4IIPHV4AxoUrNnWc9M4qb2kSGsoCmM2u jeBJXJyEwmIWYCaOxA6i5p7OswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAUOjghk ptSMtQzyyxpa1ErsnwIgMB8GA1UdIwQYMBaAFLCxpdVZK85cgetybUZAypVRBM6T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTI1OS9ENEYyNzU4MjQ1 OTYxMUVBQjBEQkU0MkFDNEY5QUUwMi9zTEdsMVZrcnpseUI2M0p0UmtES2xWRUV6 cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMR2wxVmtyemx5QjYzSnRSa0RLbFZFRXpwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTI1OS9ENEYyNzU4MjQ1OTYxMUVBQjBEQkU0MkFDNEY5QUUwMi9zTEdsMVZrcnps eUI2M0p0UmtES2xWRUV6cE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmpelfFuYvIN45jy5mrgqCGL58rfzdqYp9+zAQ8FI2cXaEqL7VwBYs EykVFQdD4hJZvvja5NA4en08hiGTGiSDctqrxLK5WLaS1SUaAKBGn7FeyV3830Wk YAbpUDepUQMvXusXm2TQ3uZaUzF6wuJZt1N3P5xppPHcHg5mYolTfF1QKrrXTxTo /V0Tf+3X94eDGdRcjlKMh/X+Tcj9pruXZp53E/7uZ7HBxEs/CbxyRENhP4OeD4Tb yiSNExMzrw9/rouQguUwfzyHumuszAmCdn2Q9Y4OiwvkwZFKnatDIxO7o+9vI25z R8yZ/IKjvvdz+f+w+ApxjrrrINXSEkA2 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org