$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json) Hash identifier: NrsC5YxNTMKOIz82vp29JsCss0wcPoyFuUYdqRD+zcw= Subject key identifier: AB:0D:96:6D:60:AB:2E:54:6C:7E:86:A5:A8:5E:89:C2:94:55:7D:29 Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft Manifest number: 0173 Signing time: Sat 23 Nov 2024 02:12:39 +0000 Manifest this update: Sat 23 Nov 2024 02:12:39 +0000 Manifest next update: Sat 30 Nov 2024 02:12:39 +0000 Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: TJ6WHF30nBowliECFG5Hrxh7V37EJm/EklFhB7CGTwU=) 2: B97A5C70771511EEBBCCCD1AC4F9AE02.roa (hash: +UvHfDsYPcQO2Qih7ly7+y8g8H1CLfx7+QoA+C6BaM8=) 3: 089F5864771611EE908B571BC4F9AE02.roa (hash: 71QFUv7lunMYDACn4tEWBXzGx+rZa1ca+kR0yu5ipRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Validity Not Before: Nov 23 02:12:39 2024 GMT Not After : Nov 30 02:12:39 2024 GMT Subject: CN=67413a17-019e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:58:3c:be:90:e2:7e:54:c6:ae:67:3d:38:86: a1:a9:ca:c4:18:b7:0b:1b:aa:79:da:ae:74:8f:8e: 9f:5d:b5:8b:67:5e:b3:00:43:34:d8:2c:c2:79:b0: a5:c1:17:3e:bc:81:98:6c:15:61:28:87:e5:f1:df: 9e:41:2b:90:ff:f6:7b:c4:5a:e8:0f:62:8a:ef:b4: 74:fe:8d:d8:7a:02:77:de:bf:15:96:ea:1d:8d:89: bc:e4:f2:39:51:56:30:e9:88:0e:ca:5c:92:aa:32: 1f:55:06:2b:c0:29:cd:3c:a7:74:a7:f3:d9:b4:ed: 00:94:41:75:fc:ed:bd:77:55:29:68:53:b1:06:a4: 08:c3:76:f7:ca:dc:5d:5b:b6:c6:5c:5f:d2:04:64: f0:d7:23:60:5e:7a:78:0a:9e:f7:33:a2:5b:93:37: 64:4c:39:c5:3f:71:ca:0c:64:a0:f8:99:7a:12:f1: d2:1e:6b:2d:b1:15:ff:b3:43:04:e7:36:80:a9:99: 59:ec:fb:a9:b4:2e:75:b5:6f:49:ae:a2:d2:3d:c4: cc:88:2a:51:88:f6:20:6d:df:66:d4:bd:e7:70:94: d5:72:e1:32:7a:b0:ab:8c:f6:e2:74:89:86:5d:f6: 0b:7f:99:70:71:4e:0f:b8:07:20:b2:22:59:cf:a8: a5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0D:96:6D:60:AB:2E:54:6C:7E:86:A5:A8:5E:89:C2:94:55:7D:29 X509v3 Authority Key Identifier: keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6c:a1:27:b8:38:87:3f:b7:cb:4b:04:5e:98:85:3f:0e:f8: a9:09:b1:7d:a8:1f:08:c5:85:ea:ef:f8:1d:9c:15:ac:26:a3: 00:56:47:ad:44:0a:c4:05:b2:e5:6f:70:f0:97:b5:52:79:34: da:7a:b4:f5:1b:3b:bf:4a:cb:55:4b:fa:23:79:52:66:39:a6: 95:95:96:95:79:02:50:fe:48:f0:eb:8e:0b:46:d2:3a:ce:bc: d3:68:c9:39:7b:b1:61:6e:c2:86:97:20:1d:26:22:30:9a:9b: 4d:7f:f7:0a:4c:58:cf:42:b6:ff:fd:49:94:0a:dd:8a:d2:61: 96:e7:3e:ec:df:64:e9:79:ce:35:db:24:a1:5f:03:55:da:e5: f8:68:4c:65:7c:71:f8:0e:84:ae:d9:a7:08:56:36:2b:e8:62: 5c:a1:6c:ec:34:37:96:b5:ba:63:ef:b6:55:f2:91:c2:ea:1e: e8:d7:08:a1:70:35:91:aa:0c:eb:c4:8f:b6:fc:8a:86:38:0d: 9d:af:e6:27:aa:f4:b7:36:18:d7:a6:48:34:f0:b8:f9:76:1a: e2:40:ea:9f:d4:9c:d5:02:04:2a:c9:a8:1f:89:73:6c:a6:82: a1:99:f3:b0:78:a4:8a:09:df:74:7e:60:1a:7e:f8:3f:c3:c5: 51:9e:db:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3 RjMzOTNFN0YwHhcNMjQxMTIzMDIxMjM5WhcNMjQxMTMwMDIxMjM5WjAYMRYwFAYD VQQDEw02NzQxM2ExNy0wMTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlg8vpDiflTGrmc9OIahqcrEGLcLG6p52q50j46fXbWLZ16zAEM02CzCebCl wRc+vIGYbBVhKIfl8d+eQSuQ//Z7xFroD2KK77R0/o3YegJ33r8VluodjYm85PI5 UVYw6YgOylySqjIfVQYrwCnNPKd0p/PZtO0AlEF1/O29d1UpaFOxBqQIw3b3ytxd W7bGXF/SBGTw1yNgXnp4Cp73M6JbkzdkTDnFP3HKDGSg+Jl6EvHSHmstsRX/s0ME 5zaAqZlZ7PuptC51tW9JrqLSPcTMiCpRiPYgbd9m1L3ncJTVcuEyerCrjPbidImG XfYLf5lwcU4PuAcgsiJZz6il7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsNlm1g qy5UbH6GpaheicKUVX0pMB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2 MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRERi9BMjEyNzY4Qzc2MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxM aWp5WWVvRWVINEJfTTVQbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNbKEnuDiHP7fLSwRemIU/DvipCbF9qB8IxYXq7/gdnBWsJqMAVket RArEBbLlb3Dwl7VSeTTaerT1Gzu/SstVS/ojeVJmOaaVlZaVeQJQ/kjw644LRtI6 zrzTaMk5e7FhbsKGlyAdJiIwmptNf/cKTFjPQrb//UmUCt2K0mGW5z7s32Tpec41 2yShXwNV2uX4aExlfHH4DoSu2acIVjYr6GJcoWzsNDeWtbpj77ZV8pHC6h7o1wih cDWRqgzrxI+2/IqGOA2dr+YnqvS3NhjXpkg08Lj5dhriQOqf1JzVAgQqyagfiXNs poKhmfOweKSKCd90fmAafvg/w8VRntvT -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:44 2024 by rpki-client on console-fra.rpki-client.org