$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft File: 4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json) Hash identifier: UqzTon/quUD49BrmXFJEDAI2hTkCYhFafqC21U91Qkk= Subject key identifier: 52:09:38:CF:4D:6A:FA:9C:90:F7:1E:19:4B:9D:6C:89:DD:3A:C4:72 Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft Manifest number: 014F Signing time: Sat 23 Nov 2024 02:31:16 +0000 Manifest this update: Sat 23 Nov 2024 02:31:15 +0000 Manifest next update: Sat 30 Nov 2024 02:31:15 +0000 Files and hashes: 1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: ofrqi1vt/DmzZauIWNmLyq0L6UJZ0AU4muEB8xEj4qw=) 2: B1335F1AC56A11ED9C305A33C4F9AE02.roa (hash: 89tg93/qvyRfNlsV5jj75ONUo2PDbucb+SsFfLo6D58=) 3: F2A9D4BAC36211ED9D79ED6FC4F9AE02.roa (hash: XWjLFsGDfe+yx8HJSv7/TrbqDPkINeE4w88NW6FVyf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB Validity Not Before: Nov 23 02:31:15 2024 GMT Not After : Nov 30 02:31:15 2024 GMT Subject: CN=67413e74-501e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:e3:09:d1:b5:c8:46:a9:1b:ab:38:2f:00: 60:a9:ff:e4:ad:d3:85:e0:5f:d6:4d:1d:e3:43:4b: 45:00:7b:ae:f3:39:0e:46:46:f9:2a:c4:d3:11:93: 3b:26:c3:57:8f:ff:a1:88:b6:45:0a:92:12:1b:6b: 89:ed:9a:e6:84:31:ed:f8:aa:80:fb:ee:a5:14:36: 2a:9b:0e:dd:13:80:72:e2:32:32:42:d0:d8:44:d2: da:4a:41:30:c2:a2:4e:86:00:3e:a6:62:60:70:f2: 5e:1b:98:c9:62:48:7f:eb:39:ca:cf:40:38:33:ac: bc:03:0a:73:10:ad:b3:ae:e0:24:ee:0d:c6:33:c4: be:5e:60:89:21:13:89:0b:b9:be:61:56:85:7d:2b: 4e:bc:dd:35:f5:78:69:46:89:e8:28:95:9b:7b:2b: c4:f9:a9:6e:29:91:d9:7d:07:50:32:9d:df:c6:14: c3:04:c8:8f:d7:ba:ee:cb:a9:be:58:16:dc:0c:ab: 2a:8a:e4:3b:17:65:dc:d3:73:f9:11:61:e0:41:d9: f3:7d:89:fb:b9:db:9e:19:7f:11:2c:7d:0f:0e:eb: 83:30:d6:44:b9:2c:07:78:89:ba:72:1b:ee:45:69: 5c:9d:9a:79:fc:da:b6:1f:08:e8:f4:a8:e9:c1:16: a3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:09:38:CF:4D:6A:FA:9C:90:F7:1E:19:4B:9D:6C:89:DD:3A:C4:72 X509v3 Authority Key Identifier: keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:fa:c5:c5:eb:f6:ab:88:d5:8c:1d:d9:0b:89:71:dd:1e:dd: e8:d4:2f:7f:6d:5a:85:ff:a2:c8:c3:ed:39:9e:e0:47:fc:9f: a0:9e:57:7d:0e:8e:24:46:68:cf:e9:b1:76:a2:6d:ef:ef:73: 46:82:22:4f:47:20:a1:94:64:02:90:b6:f0:d8:87:e7:04:40: 18:0d:db:61:5b:b3:79:69:6c:e5:a3:c5:e0:ca:83:86:48:13: d7:36:b3:fc:c9:82:7d:71:bd:9e:89:54:da:25:8a:f4:77:98: 02:12:7d:06:d8:4c:8d:4f:24:0c:18:5d:0f:35:27:1e:22:cf: f1:16:c0:b3:8e:c7:45:8a:75:e3:02:79:30:ae:99:cf:d3:fb: ea:6f:b5:74:fe:85:cd:4c:fb:bb:f7:45:3e:99:d4:98:62:d1: fd:a7:9a:a1:a9:88:bb:c3:41:39:05:a6:c2:a3:98:74:70:97: cd:98:33:34:32:4d:43:ae:30:42:4a:d8:62:ac:7a:c4:14:b9: b0:96:92:07:5b:f2:3c:10:19:c5:1c:11:32:db:6c:56:d4:7e: bb:b2:bd:bd:44:6a:36:e4:b8:42:50:cd:2a:ca:ef:37:84:a0: 94:55:89:e0:8a:b2:64:92:1d:cb:91:b3:bb:b7:7b:f7:9a:9e: 64:53:8f:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUIzMTAxMTAvBgNVBAUTKEUzMTY2Nzk2MDQ4MENGMDdFM0MyMkQ3OTBERTRFMjAx RUY3MDQwREIwHhcNMjQxMTIzMDIzMTE1WhcNMjQxMTMwMDIzMTE1WjAYMRYwFAYD VQQDEw02NzQxM2U3NC01MDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFLjCdG1yEapG6s4LwBgqf/krdOF4F/WTR3jQ0tFAHuu8zkORkb5KsTTEZM7 JsNXj/+hiLZFCpISG2uJ7ZrmhDHt+KqA++6lFDYqmw7dE4By4jIyQtDYRNLaSkEw wqJOhgA+pmJgcPJeG5jJYkh/6znKz0A4M6y8AwpzEK2zruAk7g3GM8S+XmCJIROJ C7m+YVaFfStOvN019XhpRonoKJWbeyvE+aluKZHZfQdQMp3fxhTDBMiP17ruy6m+ WBbcDKsqiuQ7F2Xc03P5EWHgQdnzfYn7udueGX8RLH0PDuuDMNZEuSwHeIm6chvu RWlcnZp5/Nq2Hwjo9KjpwRajIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIJOM9N avqckPceGUudbIndOsRyMB8GA1UdIwQYMBaAFOMWZ5YEgM8H48IteQ3k4gHvcEDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjMxMC8zRUJEMTdDMkFE MTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3Zmp3aTE1RGVUaUFlOXdR TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi80eFpubGdTQXp3 Zmp3aTE1RGVUaUFlOXdRTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC+sXF6/ariNWMHdkLiXHdHt3o1C9/bVqF/6LIw+05nuBH/J+gnld9 Do4kRmjP6bF2om3v73NGgiJPRyChlGQCkLbw2IfnBEAYDdthW7N5aWzlo8XgyoOG SBPXNrP8yYJ9cb2eiVTaJYr0d5gCEn0G2EyNTyQMGF0PNSceIs/xFsCzjsdFinXj AnkwrpnP0/vqb7V0/oXNTPu790U+mdSYYtH9p5qhqYi7w0E5BabCo5h0cJfNmDM0 Mk1DrjBCSthirHrEFLmwlpIHW/I8EBnFHBEy22xW1H67sr29RGo25LhCUM0qyu83 hKCUVYngirJkkh3LkbO7t3v3mp5kU4/4 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:44 2024 by rpki-client on console-fra.rpki-client.org