$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft File: rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json) Hash identifier: ZC+tlT5uh/y8y9jfcXUFvwL9j97MkNjgdne2JOS7pYE= Subject key identifier: 00:36:58:95:92:47:09:58:54:B8:7F:F5:D7:56:DB:B5:E5:33:46:80 Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 Certificate issuer: /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft Manifest number: 65 Signing time: Sat 23 Nov 2024 04:58:00 +0000 Manifest this update: Sat 23 Nov 2024 04:57:59 +0000 Manifest next update: Sat 30 Nov 2024 04:57:59 +0000 Files and hashes: 1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: E1aT0MyxBz2pQ854vYpfp1PIDAtf0D5Q9OyPLJ3VG7o=) 2: 849C352211F811EF820BF24FC4F9AE02.roa (hash: wwGZpT48wP330+bWP5HvFyf3d6u+Sna23wh8+O18ssw=) 3: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: kAoCwtSL8DYNhEnCxiYeyq+03pY+E8NsD8+lYLcvbO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Validity Not Before: Nov 23 04:57:59 2024 GMT Not After : Nov 30 04:57:59 2024 GMT Subject: CN=674160d8-b096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:1e:07:fa:74:7b:59:00:52:d0:99:e1:06: 06:73:2a:19:95:ed:34:8f:62:cd:bb:24:04:9c:cc: 58:cc:4d:d0:7e:9c:74:76:be:a4:e5:7d:a0:21:8a: 84:42:7f:fa:a2:7d:c2:45:64:4a:5b:04:1b:61:6f: 05:27:a2:43:25:87:21:f4:a3:b1:3b:89:9f:c0:b3: 1f:ea:3f:78:93:8f:92:a2:96:f4:7a:2b:f2:57:8a: 88:ab:d7:bf:4b:d0:c4:7b:60:7d:a6:ac:d0:31:36: 8a:d3:6c:fc:df:2f:45:00:e5:3c:be:41:e5:50:ce: f0:8a:5c:69:aa:56:c0:b9:93:9f:ed:5a:75:3f:fb: 8e:f3:df:90:ba:1b:cd:80:6f:ff:1b:5c:6a:48:38: c9:70:89:99:44:8b:b5:ab:ff:82:d3:09:62:6d:6f: f9:30:af:2d:51:88:f8:24:94:0f:48:7c:2d:fb:48: 8c:bc:9b:03:2e:97:14:5d:82:2c:1d:30:4d:58:c1: d9:55:10:85:d8:02:d2:6b:cb:fe:e8:23:61:63:17: 28:01:b2:19:71:84:e9:64:7d:c0:fb:4f:65:04:08: e9:b0:e8:4a:b1:44:42:aa:28:d4:de:31:05:25:29: 46:8f:9c:33:bb:bd:a8:44:a4:0b:ef:e3:9b:fd:ec: 62:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:36:58:95:92:47:09:58:54:B8:7F:F5:D7:56:DB:B5:E5:33:46:80 X509v3 Authority Key Identifier: keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:03:4c:bb:bd:f1:ae:bb:68:88:50:38:3b:d0:60:ed:5a:44: 12:0e:35:a4:7d:6b:ca:2b:f7:23:df:e0:64:e1:3f:3e:9b:26: 40:93:16:35:40:a8:9d:c4:b9:ac:c7:e9:9c:4b:31:e6:5d:f5: d8:75:26:ab:9b:85:fe:3d:d3:29:13:e0:7c:24:0e:f0:83:59: 96:ee:97:ab:ba:f5:ae:52:f6:dd:3f:b5:a6:bd:cf:70:2d:a2: 02:f1:06:67:77:fb:b9:5f:20:69:1f:2a:0c:a2:1d:8a:a6:9a: 8e:4c:26:ad:92:fb:fc:40:3d:97:7f:1d:83:f7:a5:35:a3:da: fc:9e:7d:2f:03:d3:66:d6:25:69:ad:3a:e3:35:91:63:ee:95: 6a:85:93:57:f6:08:78:0f:d2:82:f6:21:ea:4c:bd:b5:fd:66: 3f:21:7a:24:3c:09:a7:09:2d:15:b5:18:cb:b7:70:f0:db:a8: ad:67:3c:b5:85:fe:30:9f:1f:52:a1:a7:7c:29:a5:93:c3:9d: fc:87:90:9a:7d:18:ba:c8:a5:ae:34:c3:95:4e:d1:07:cf:ac: 14:7a:6e:1a:79:53:e2:b9:cb:c0:21:34:6e:f1:f8:3a:e1:63: da:b0:9d:db:8f:a9:fd:8b:48:56:51:cd:38:2b:9a:4a:0e:ba: e2:5f:f7:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjZGQjExMC8GA1UEBRMoQUQyMzRFM0YxRUJCQURBRDAxOUZFMDlBRkZGNzBFODA3 NUFGREUxNzAeFw0yNDExMjMwNDU3NTlaFw0yNDExMzAwNDU3NTlaMBgxFjAUBgNV BAMTDTY3NDE2MGQ4LWIwOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDALB4H+nR7WQBS0JnhBgZzKhmV7TSPYs27JASczFjMTdB+nHR2vqTlfaAhioRC f/qifcJFZEpbBBthbwUnokMlhyH0o7E7iZ/Asx/qP3iTj5KilvR6K/JXioir179L 0MR7YH2mrNAxNorTbPzfL0UA5Ty+QeVQzvCKXGmqVsC5k5/tWnU/+47z35C6G82A b/8bXGpIOMlwiZlEi7Wr/4LTCWJtb/kwry1RiPgklA9IfC37SIy8mwMulxRdgiwd ME1YwdlVEIXYAtJry/7oI2FjFygBshlxhOlkfcD7T2UECOmw6EqxREKqKNTeMQUl KUaPnDO7vahEpAvv45v97GJhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUADZYlZJH CVhUuH/111bbteUzRoAwHwYDVR0jBBgwFoAUrSNOPx67ra0Bn+Ca//cOgHWv3hcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNkZCL0Q5Q0M5RURFMTFG NzExRUY5M0JEOTQ0RUM0RjlBRTAyL3JTTk9QeDY3cmEwQm4tQ2FfX2NPZ0hXdjNo Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclNOT1B4NjdyYTBCbi1DYV9fY09nSFd2M2hjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NkZCL0Q5Q0M5RURFMTFGNzExRUY5M0JEOTQ0RUM0RjlBRTAyL3JTTk9QeDY3cmEw Qm4tQ2FfX2NPZ0hXdjNoYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJoDTLu98a67aIhQODvQYO1aRBIONaR9a8or9yPf4GThPz6bJkCTFjVA qJ3EuazH6ZxLMeZd9dh1Jqubhf490ykT4HwkDvCDWZbul6u69a5S9t0/taa9z3At ogLxBmd3+7lfIGkfKgyiHYqmmo5MJq2S+/xAPZd/HYP3pTWj2vyefS8D02bWJWmt OuM1kWPulWqFk1f2CHgP0oL2IepMvbX9Zj8heiQ8CacJLRW1GMu3cPDbqK1nPLWF /jCfH1Khp3wppZPDnfyHkJp9GLrIpa40w5VO0QfPrBR6bhp5U+K5y8AhNG7x+Drh Y9qwnduPqf2LSFZRzTgrmkoOuuJf9+s= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org