$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json) Hash identifier: ilQfC0FG54b3KMVc8ciwa9aveUvnKFBBqld1CKa5oqo= Subject key identifier: 33:00:DD:29:15:4E:6C:6B:5E:D5:F8:9B:24:3D:ED:B9:8C:CA:D0:2F Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft Manifest number: 0B37 Signing time: Fri 22 Nov 2024 18:57:51 +0000 Manifest this update: Fri 22 Nov 2024 18:57:50 +0000 Manifest next update: Fri 29 Nov 2024 18:57:50 +0000 Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: YQg5ueogalpooOgw21pidvRSSCsVvP7UfN30Kejoitc=) 2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: QngpTkCC8JSyoEjRCbNY7hFfX4Je7JGO3cicNA6+xBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Validity Not Before: Nov 22 18:57:50 2024 GMT Not After : Nov 29 18:57:50 2024 GMT Subject: CN=6740d42f-d7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0c:82:8a:fc:db:58:9d:fc:84:8c:db:a0:3f: 86:67:aa:0e:3e:45:51:46:04:00:2e:6c:52:23:7f: 55:c6:63:e7:91:65:1c:15:2c:bd:9f:e0:ed:64:11: 4e:aa:49:9a:51:64:7b:4f:99:a0:7d:e5:27:95:0a: 17:fd:00:ce:b0:fb:5b:69:5c:37:5a:f5:9b:de:eb: d1:1c:6f:7a:81:9e:34:50:a7:37:4e:da:9a:65:1c: 9f:c2:4d:e0:67:7a:11:41:08:3d:9e:cd:79:66:22: b6:72:c0:a4:2f:c5:27:c9:18:9b:04:9d:56:47:5d: 70:19:ac:4e:32:36:03:75:01:5c:cf:94:60:1a:ea: ff:dd:ac:06:a3:9d:9d:49:25:98:62:cf:27:d5:ba: b9:f4:9f:83:9b:99:79:07:78:d6:4d:4a:b9:bc:f1: b9:ee:0a:63:2b:95:e6:ea:c6:21:38:db:d7:b3:0a: 4e:54:0b:af:b8:c5:01:b0:2c:4d:c3:1d:9a:d3:e4: 22:17:95:27:ef:e9:86:d3:45:9f:4e:c7:56:f4:e2: b6:a8:f3:1a:bb:b5:9f:b1:69:ac:fd:08:7f:e9:4c: c4:54:0d:73:20:c3:b0:d2:85:0d:e4:54:ab:a4:2a: e6:61:cb:84:01:1f:a9:6e:ca:42:30:59:d4:40:2c: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:DD:29:15:4E:6C:6B:5E:D5:F8:9B:24:3D:ED:B9:8C:CA:D0:2F X509v3 Authority Key Identifier: keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:94:15:92:c1:a1:4c:b2:9f:00:91:ff:1a:ca:f3:50:39:69: c3:36:af:3e:9b:5e:8e:64:1c:2b:ef:d4:72:b3:c2:43:a4:70: 87:2d:8c:e3:29:b5:b4:bb:cb:b8:34:81:c0:96:24:9f:2f:03: f1:cb:32:8b:b6:4f:3d:b4:e9:94:71:cf:a4:60:6e:f6:52:fe: 4c:86:18:a1:aa:29:54:84:77:4d:21:24:af:62:3e:25:70:bd: 51:66:46:4b:4e:de:71:ac:6e:fc:ab:e7:b5:af:8d:16:d8:b0: 33:42:57:85:9e:d3:70:b7:a9:40:c9:81:ec:7f:25:68:48:38: 28:d7:b2:dd:1b:1b:2c:73:13:64:a5:48:ae:b6:3d:b4:e3:f8: 41:a3:dd:50:19:bb:40:9f:6b:a8:4f:43:10:14:f9:d4:6b:6c: d3:36:83:12:d4:1b:d5:4e:5a:f7:86:b4:34:40:a3:dc:b7:04: db:b9:d2:8a:2e:74:eb:da:55:7e:1e:be:53:e9:3e:70:7e:01: 60:85:d6:10:db:ef:c4:6a:62:c9:fa:58:ce:26:26:22:b8:c0: 82:fe:97:8c:fa:29:0d:8b:75:62:6d:db:c8:46:69:e7:93:bc: ef:c9:5f:8f:be:a0:a6:91:f3:cd:b7:b9:09:45:e6:30:0b:40: 06:a5:ec:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw OUM0QjlGNEIwHhcNMjQxMTIyMTg1NzUwWhcNMjQxMTI5MTg1NzUwWjAYMRYwFAYD VQQDEw02NzQwZDQyZi1kN2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7QyCivzbWJ38hIzboD+GZ6oOPkVRRgQALmxSI39VxmPnkWUcFSy9n+DtZBFO qkmaUWR7T5mgfeUnlQoX/QDOsPtbaVw3WvWb3uvRHG96gZ40UKc3TtqaZRyfwk3g Z3oRQQg9ns15ZiK2csCkL8UnyRibBJ1WR11wGaxOMjYDdQFcz5RgGur/3awGo52d SSWYYs8n1bq59J+Dm5l5B3jWTUq5vPG57gpjK5Xm6sYhONvXswpOVAuvuMUBsCxN wx2a0+QiF5Un7+mG00WfTsdW9OK2qPMau7WfsWms/Qh/6UzEVA1zIMOw0oUN5FSr pCrmYcuEAR+pbspCMFnUQCznVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMA3SkV TmxrXtX4myQ97bmMytAvMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2 MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTM1Qy81MkZDNkI5ODI2MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJj bkdPMi04Vk15elVKeExuMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBflBWSwaFMsp8Akf8ayvNQOWnDNq8+m16OZBwr79Rys8JDpHCHLYzj KbW0u8u4NIHAliSfLwPxyzKLtk89tOmUcc+kYG72Uv5MhhihqilUhHdNISSvYj4l cL1RZkZLTt5xrG78q+e1r40W2LAzQleFntNwt6lAyYHsfyVoSDgo17LdGxsscxNk pUiutj204/hBo91QGbtAn2uoT0MQFPnUa2zTNoMS1BvVTlr3hrQ0QKPctwTbudKK LnTr2lV+Hr5T6T5wfgFghdYQ2+/EamLJ+ljOJiYiuMCC/peM+ikNi3VibdvIRmnn k7zvyV+PvqCmkfPNt7kJReYwC0AGpezm -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org