$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft File: rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json) Hash identifier: wtiyOYsGzPITwwizkgHfbqtQJ1O0LvyiuiVYUXZQjtk= Subject key identifier: 66:84:38:B5:D8:AA:BC:EC:96:7E:AC:4F:61:88:E5:B2:39:6A:EA:AD Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 Certificate issuer: /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft Manifest number: 5B Signing time: Sun 03 Nov 2024 05:01:12 +0000 Manifest this update: Sun 03 Nov 2024 05:01:12 +0000 Manifest next update: Sun 10 Nov 2024 05:01:12 +0000 Files and hashes: 1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: T/71W3t0Kt9Ff2GScgy4SBTTOmHpop/9efjDxMixp9I=) 2: 849C352211F811EF820BF24FC4F9AE02.roa (hash: wwGZpT48wP330+bWP5HvFyf3d6u+Sna23wh8+O18ssw=) 3: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: kAoCwtSL8DYNhEnCxiYeyq+03pY+E8NsD8+lYLcvbO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17 Validity Not Before: Nov 3 05:01:12 2024 GMT Not After : Nov 10 05:01:12 2024 GMT Subject: CN=67270398-dfcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:9c:bf:ea:29:db:56:33:88:e6:02:75:46: 9c:17:e5:73:71:a3:ae:f4:47:45:0e:d5:33:38:49: b4:87:8d:8d:97:90:5b:c6:84:d2:ae:94:54:be:9f: bd:19:ff:cf:8f:05:cb:ec:00:c8:bc:22:2c:47:9e: 53:82:25:d3:d2:aa:57:33:14:a7:df:0d:47:c3:06: ea:03:60:22:9e:6f:80:8d:ac:33:59:0b:98:32:1b: 09:b7:62:3e:38:c6:73:cf:37:5c:d4:79:f8:93:d7: d9:da:ec:05:fa:3d:b1:35:41:86:c4:37:a5:27:93: 72:27:32:44:bd:63:c3:f3:bb:49:2a:f5:0a:9c:fe: 6e:74:28:c1:e0:c8:11:89:28:ed:37:79:fd:f6:2c: 46:6d:ee:34:c5:81:88:9f:c5:1e:3c:c3:cd:ed:6b: 52:26:80:5e:4a:78:c3:0e:2a:77:23:11:94:e8:f5: 85:ec:4d:58:92:5e:11:67:31:27:bf:e4:1d:41:3b: 32:48:17:a2:b7:a5:02:2c:2a:24:e4:95:ea:55:51: c7:5d:37:b7:ec:3b:2a:b1:a8:1e:7e:e0:b1:5b:54: ea:7c:db:bf:05:50:44:46:87:b4:34:04:dc:ae:7c: ac:0b:25:b0:5b:b3:46:42:78:ab:38:5a:7d:68:6f: 8d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:84:38:B5:D8:AA:BC:EC:96:7E:AC:4F:61:88:E5:B2:39:6A:EA:AD X509v3 Authority Key Identifier: keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1a:fd:bf:41:1e:f0:07:e6:67:c4:f6:d1:c5:7e:12:ec:13: c1:50:5d:be:83:bf:65:c1:67:28:57:48:26:59:5c:7c:ed:38: 5c:3e:b3:a3:ae:d1:b4:c8:a9:70:fb:82:48:e1:5d:b5:c7:d4: ee:38:23:e7:87:e3:96:31:05:6b:82:eb:6b:9a:22:03:4c:e7: 4d:be:36:42:d7:f8:32:cd:cf:9a:22:eb:b5:10:17:a1:3e:15: ab:bb:b9:df:cf:1d:5f:36:d9:22:95:cc:e5:aa:2e:c6:2d:be: f6:48:f8:3e:7d:fd:1d:50:e1:09:64:28:56:f9:1c:70:32:f4: ac:98:a0:39:5e:31:7a:07:71:aa:75:b3:c1:e2:f1:a4:aa:51: e5:3d:61:e3:b3:20:88:70:41:aa:c9:35:c6:67:07:30:30:7c: e8:a8:03:6a:98:4a:38:73:29:be:ee:87:13:07:b9:11:88:b9: e2:df:82:a6:9d:e1:40:6c:5c:72:f6:8d:dc:c3:fc:fd:0a:96: 06:bd:c4:f9:47:46:b5:c9:4a:68:eb:ad:7b:ad:b3:10:5b:d8: 7e:85:d1:6c:3e:e2:56:c7:02:9d:c9:53:28:de:45:be:b9:76: 75:76:e2:b5:15:6d:1e:8b:5f:ab:e7:1d:10:f2:d3:2f:d3:f6: 91:ad:b9:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjZGQjExMC8GA1UEBRMoQUQyMzRFM0YxRUJCQURBRDAxOUZFMDlBRkZGNzBFODA3 NUFGREUxNzAeFw0yNDExMDMwNTAxMTJaFw0yNDExMTAwNTAxMTJaMBgxFjAUBgNV BAMTDTY3MjcwMzk4LWRmY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC85py/6inbVjOI5gJ1RpwX5XNxo670R0UO1TM4SbSHjY2XkFvGhNKulFS+n70Z /8+PBcvsAMi8IixHnlOCJdPSqlczFKffDUfDBuoDYCKeb4CNrDNZC5gyGwm3Yj44 xnPPN1zUefiT19na7AX6PbE1QYbEN6Unk3InMkS9Y8Pzu0kq9Qqc/m50KMHgyBGJ KO03ef32LEZt7jTFgYifxR48w83ta1ImgF5KeMMOKncjEZTo9YXsTViSXhFnMSe/ 5B1BOzJIF6K3pQIsKiTklepVUcddN7fsOyqxqB5+4LFbVOp8278FUERGh7Q0BNyu fKwLJbBbs0ZCeKs4Wn1ob41bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZoQ4tdiq vOyWfqxPYYjlsjlq6q0wHwYDVR0jBBgwFoAUrSNOPx67ra0Bn+Ca//cOgHWv3hcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNkZCL0Q5Q0M5RURFMTFG NzExRUY5M0JEOTQ0RUM0RjlBRTAyL3JTTk9QeDY3cmEwQm4tQ2FfX2NPZ0hXdjNo Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclNOT1B4NjdyYTBCbi1DYV9fY09nSFd2M2hjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NkZCL0Q5Q0M5RURFMTFGNzExRUY5M0JEOTQ0RUM0RjlBRTAyL3JTTk9QeDY3cmEw Qm4tQ2FfX2NPZ0hXdjNoYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIAa/b9BHvAH5mfE9tHFfhLsE8FQXb6Dv2XBZyhXSCZZXHztOFw+s6Ou 0bTIqXD7gkjhXbXH1O44I+eH45YxBWuC62uaIgNM502+NkLX+DLNz5oi67UQF6E+ Fau7ud/PHV822SKVzOWqLsYtvvZI+D59/R1Q4QlkKFb5HHAy9KyYoDleMXoHcap1 s8Hi8aSqUeU9YeOzIIhwQarJNcZnBzAwfOioA2qYSjhzKb7uhxMHuRGIueLfgqad 4UBsXHL2jdzD/P0Klga9xPlHRrXJSmjrrXutsxBb2H6F0Ww+4lbHAp3JUyjeRb65 dnV24rUVbR6LX6vnHRDy0y/T9pGtuUg= -----END CERTIFICATE-----Generated at Sun Nov 3 06:07:31 2024 by rpki-client on console-fra.rpki-client.org