$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft File: tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json) Hash identifier: aSDW7GBzO5xzObbj2GzXX06WDvnX48zcC4i4oiR73mw= Subject key identifier: 1D:95:73:E9:AA:E1:6D:7D:FF:9F:42:BF:A6:BB:AB:CF:AD:1D:17:9F Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft Manifest number: 011F Signing time: Thu 21 Nov 2024 03:09:01 +0000 Manifest this update: Thu 21 Nov 2024 03:09:01 +0000 Manifest next update: Thu 28 Nov 2024 03:09:01 +0000 Files and hashes: 1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: jBObVw3LreFkbMxaqd12GOU/WiQCb/XZhD292l/Gm8k=) 2: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: wrNQzAuRQVjZjCzpBxMXn6kt4KShOSGQnoTCPEIgheQ=) 3: 7203E112568C11EEA2DD9914C4F9AE02.roa (hash: gF8SP0nG0LD9gIiEjyyKah/KS5kKQp222tN7wLJ4Gdw=) 4: 3DA6569E383A11EF8998A252C4F9AE02.roa (hash: PvqaT2m26VjtkGuTElfQIOHqKDs1V4TPHM7KOHfBUSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Nov 21 03:09:01 2024 GMT Not After : Nov 28 03:09:01 2024 GMT Subject: CN=673ea44d-8408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:d8:7c:a0:5e:02:82:30:01:23:4d:da:fd: 05:90:7a:61:d1:17:a6:25:cb:79:b5:25:e1:04:52: d0:6e:da:4a:e6:94:fa:5e:d2:58:8c:08:e0:44:21: 03:36:98:de:0c:77:b2:f7:d2:4b:06:79:49:58:e6: 64:00:34:44:d3:bc:8d:43:26:af:97:88:bd:ee:c2: c6:00:2f:78:51:35:36:a9:fd:7d:2b:12:fc:7a:ec: ce:0e:ff:04:b1:ed:00:e5:f9:0f:d1:5b:e8:21:66: bd:4d:db:d9:63:1f:12:b1:3f:97:8b:0b:dd:91:2f: da:31:21:8c:66:05:24:59:f7:d6:e4:9a:1b:22:80: 3e:5a:b9:e8:df:f8:05:f8:76:59:08:30:be:11:05: 70:3e:10:ff:6a:38:7b:fd:d2:67:67:41:4f:d6:70: c4:17:2c:78:98:b4:07:fb:33:b9:f3:02:98:e3:0b: 81:aa:73:bd:ab:6b:d7:f9:f4:02:b9:96:41:61:be: 96:25:d6:83:39:4c:4d:e2:92:39:e5:48:2c:62:6f: 74:81:c6:04:2f:da:36:d8:59:91:20:48:18:6e:45: ad:aa:c1:93:47:cb:dc:25:54:5f:47:0d:6f:06:71: 0c:6d:84:14:bd:f1:56:b1:09:11:11:31:ab:02:ba: 39:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:95:73:E9:AA:E1:6D:7D:FF:9F:42:BF:A6:BB:AB:CF:AD:1D:17:9F X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:56:47:db:e4:19:57:74:eb:06:a6:d8:4d:27:96:b9:c8:c0: 78:ac:73:65:e7:89:52:de:b4:2d:f7:a2:14:c4:f8:ce:15:f6: 23:1a:6e:91:bc:69:93:03:7f:ed:36:26:e0:c4:e9:ff:79:c9: 33:fb:22:6e:64:82:e2:0a:8b:a7:42:d1:34:fe:7e:66:22:0d: eb:ca:00:f1:e9:90:91:db:7c:bf:04:ce:98:2f:c8:c2:d9:a7: b3:56:83:1a:94:d4:5d:5f:e9:f8:18:0b:a4:7e:a0:8e:29:1a: 31:ed:c0:bf:38:4b:e1:ad:d2:45:63:58:79:6c:9d:05:da:f4: a0:ec:d2:f4:42:1a:9c:06:4a:28:99:82:56:8b:0f:ed:8a:b6: d2:0a:93:63:9c:36:ba:cd:e6:e5:e3:1d:57:43:3e:b2:76:40: 11:07:30:de:8b:21:7f:5d:af:82:9c:27:d2:70:f7:4b:87:49: 01:42:eb:78:da:17:c5:34:b5:91:04:1f:5a:c0:a2:ad:79:68: 52:ca:dc:3b:a7:6a:21:6e:35:a0:ea:70:c3:3a:b4:f1:76:22: 1e:61:27:b2:9a:ed:63:9b:b1:86:d1:15:57:02:cd:44:ed:75: be:75:18:a8:dc:db:e3:40:85:2b:c0:d2:d0:1a:9c:68:21:d0: 67:c2:ed:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjQxMTIxMDMwOTAxWhcNMjQxMTI4MDMwOTAxWjAYMRYwFAYD VQQDEw02NzNlYTQ0ZC04NDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSTYfKBeAoIwASNN2v0FkHph0RemJct5tSXhBFLQbtpK5pT6XtJYjAjgRCED NpjeDHey99JLBnlJWOZkADRE07yNQyavl4i97sLGAC94UTU2qf19KxL8euzODv8E se0A5fkP0VvoIWa9TdvZYx8SsT+XiwvdkS/aMSGMZgUkWffW5JobIoA+Wrno3/gF +HZZCDC+EQVwPhD/ajh7/dJnZ0FP1nDEFyx4mLQH+zO58wKY4wuBqnO9q2vX+fQC uZZBYb6WJdaDOUxN4pI55UgsYm90gcYEL9o22FmRIEgYbkWtqsGTR8vcJVRfRw1v BnEMbYQUvfFWsQkRETGrAro5pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2Vc+mq 4W19/59Cv6a7q8+tHRefMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0 Z3pVNFFnTGItN09WWmNsTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrVkfb5BlXdOsGpthNJ5a5yMB4rHNl54lS3rQt96IUxPjOFfYjGm6R vGmTA3/tNibgxOn/eckz+yJuZILiCounQtE0/n5mIg3rygDx6ZCR23y/BM6YL8jC 2aezVoMalNRdX+n4GAukfqCOKRox7cC/OEvhrdJFY1h5bJ0F2vSg7NL0QhqcBkoo mYJWiw/tirbSCpNjnDa6zebl4x1XQz6ydkARBzDeiyF/Xa+CnCfScPdLh0kBQut4 2hfFNLWRBB9awKKteWhSytw7p2ohbjWg6nDDOrTxdiIeYSeymu1jm7GG0RVXAs1E 7XW+dRio3NvjQIUrwNLQGpxoIdBnwu0f -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:53 2024 by rpki-client on console-fra.rpki-client.org