$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft File: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft (raw, json) Hash identifier: WUc+3J4xaVGEk1aoc/rve8256eMwokngjfBPsXVfAck= Subject key identifier: A0:F0:4C:37:F5:1B:9B:91:8A:35:CA:63:DB:07:25:5F:FF:63:E0:39 Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 Certificate issuer: /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft Manifest number: 67 Signing time: Sat 23 Nov 2024 04:57:12 +0000 Manifest this update: Sat 23 Nov 2024 04:57:12 +0000 Manifest next update: Sat 30 Nov 2024 04:57:12 +0000 Files and hashes: 1: JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl (hash: ZQjSpXZ8IroiKx1E/quRXGfyGu1WGr8bkHwUv6otUHA=) 2: 37241BF4757911EFB0F87073C4F9AE02.roa (hash: MQ2LjF9njI2UrTrv78xw08blIqm2Tevfn5BFGasmulM=) 3: 55778AA0757911EFBDEE9A73C4F9AE02.roa (hash: RuPGpHJF37t1a1wgX72vGpeS5gjrSqXgRcO8v6uX0is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44 Validity Not Before: Nov 23 04:57:12 2024 GMT Not After : Nov 30 04:57:12 2024 GMT Subject: CN=674160a8-c0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bf:ea:e8:74:9d:db:90:ad:a7:45:f7:71:47: b7:57:dc:a7:7b:b6:1a:46:33:01:ca:3d:ee:06:57: aa:70:a8:2c:c6:7c:82:4c:f5:59:60:20:4b:1a:66: 9c:cb:fb:cd:02:47:e4:d1:e6:33:9a:55:46:24:00: 41:06:d8:39:10:d1:f6:85:64:e4:91:04:28:5c:53: e8:94:73:1e:00:69:ed:76:dc:4f:b4:47:6f:dc:be: 49:d1:91:b9:90:c6:2b:e8:fb:ca:47:26:60:00:7b: 75:68:0c:a5:a5:b0:fa:f1:d4:8e:56:ad:33:bb:27: b6:04:e8:f2:e6:aa:93:3b:d4:b8:2f:36:60:98:49: 44:ce:6f:44:b8:1f:83:4e:33:54:d7:4d:bc:cc:3c: 92:34:ff:fb:ed:53:e8:1d:47:77:1e:fa:9c:b7:51: 93:e5:dc:df:5d:47:8c:5c:c8:64:ca:0f:bb:5f:53: 96:30:a7:99:20:88:50:c5:e4:c1:bb:cf:68:9e:2a: 36:e7:d5:1d:ae:64:09:8d:24:42:bd:1f:f6:eb:c1: 1e:00:1a:86:d0:36:68:cc:da:29:95:ea:71:df:bc: 6b:e5:8b:79:96:dd:21:07:90:6f:cc:4f:6e:fe:26: fa:17:76:d6:e7:51:58:ef:4a:6b:ee:97:c4:58:f8: b8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F0:4C:37:F5:1B:9B:91:8A:35:CA:63:DB:07:25:5F:FF:63:E0:39 X509v3 Authority Key Identifier: keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:b8:72:8d:ea:85:01:6d:f2:b2:e5:86:d3:b2:44:bf:88:e0: 23:5c:fa:aa:a9:09:6a:9e:43:97:ad:d0:8a:dc:87:21:a5:f8: 24:af:0d:77:66:f4:54:8d:bc:43:d7:02:cd:aa:37:d1:37:4f: 71:91:fb:5e:db:9e:d3:8e:3d:85:64:82:79:45:d0:53:43:4d: d6:9e:d4:36:ea:b2:89:92:9d:82:bc:49:d3:97:46:8f:22:61: 91:57:22:65:cd:35:37:ff:37:97:95:73:58:7e:2c:52:10:bb: e8:f1:cc:f0:ca:25:28:d7:2b:55:ff:6e:8f:3e:34:e0:8e:9c: a8:f1:e0:ac:e2:a1:6e:67:6c:ac:ba:4a:60:61:9b:4a:e5:d4: 76:c7:66:e4:54:da:10:8f:a5:fb:2f:63:69:34:eb:26:f2:92: 90:47:84:f7:fd:86:5d:bd:07:3e:6d:8a:00:19:6a:43:2c:3c: d7:a3:d8:1c:be:42:1e:54:cb:0f:a2:40:d3:8b:1b:57:94:ab: 14:3a:97:b4:bf:07:bb:f0:9c:09:30:60:01:26:c4:d0:35:a6: 39:74:dc:24:2a:74:ed:51:a0:5e:e5:d4:fd:aa:25:3b:18:26: 6f:f2:07:f7:30:c2:21:2a:a5:00:e9:63:ed:93:37:e3:d0:f8: fe:67:18:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTBBQjExMC8GA1UEBRMoMjY1NzAzRDg1OTMzRjQ1RDlCMDREQUI3NzIzNzU4NEZD OTJEOUQ0NDAeFw0yNDExMjMwNDU3MTJaFw0yNDExMzAwNDU3MTJaMBgxFjAUBgNV BAMTDTY3NDE2MGE4LWMwZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXv+rodJ3bkK2nRfdxR7dX3Kd7thpGMwHKPe4GV6pwqCzGfIJM9VlgIEsaZpzL +80CR+TR5jOaVUYkAEEG2DkQ0faFZOSRBChcU+iUcx4Aae123E+0R2/cvknRkbmQ xivo+8pHJmAAe3VoDKWlsPrx1I5WrTO7J7YE6PLmqpM71LgvNmCYSUTOb0S4H4NO M1TXTbzMPJI0//vtU+gdR3ce+py3UZPl3N9dR4xcyGTKD7tfU5Ywp5kgiFDF5MG7 z2ieKjbn1R2uZAmNJEK9H/brwR4AGobQNmjM2imV6nHfvGvli3mW3SEHkG/MT27+ JvoXdtbnUVjvSmvul8RY+LgzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoPBMN/Ub m5GKNcpj2wclX/9j4DkwHwYDVR0jBBgwFoAUJlcD2Fkz9F2bBNq3cjdYT8ktnUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBMEFCLzc0NDUyNkY2MEZB MTExRUZBNjc4ODg4NkM0RjlBRTAyL0psY0QyRmt6OUYyYkJOcTNjamRZVDhrdG5V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSmxjRDJGa3o5RjJiQk5xM2NqZFlUOGt0blVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB MEFCLzc0NDUyNkY2MEZBMTExRUZBNjc4ODg4NkM0RjlBRTAyL0psY0QyRmt6OUYy YkJOcTNjamRZVDhrdG5VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMK4co3qhQFt8rLlhtOyRL+I4CNc+qqpCWqeQ5et0IrchyGl+CSvDXdm 9FSNvEPXAs2qN9E3T3GR+17bntOOPYVkgnlF0FNDTdae1DbqsomSnYK8SdOXRo8i YZFXImXNNTf/N5eVc1h+LFIQu+jxzPDKJSjXK1X/bo8+NOCOnKjx4KzioW5nbKy6 SmBhm0rl1HbHZuRU2hCPpfsvY2k06ybykpBHhPf9hl29Bz5tigAZakMsPNej2By+ Qh5Uyw+iQNOLG1eUqxQ6l7S/B7vwnAkwYAEmxNA1pjl03CQqdO1RoF7l1P2qJTsY Jm/yB/cwwiEqpQDpY+2TN+PQ+P5nGK4= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org