$ rpki-client -vvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft File: N5vU53MvGo0cOyItt3c8HBVBn0I.mft (raw, json) Hash identifier: bzTSyZ3uXkwo1SMSAzevnFltySCK93Yka1j6Q1tZIO8= Subject key identifier: 17:FE:A8:7D:8E:6B:35:50:2B:E7:08:D5:4F:2C:4D:0B:2E:28:EE:C1 Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Certificate serial: 0211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft Manifest number: 020E Signing time: Sat 23 Nov 2024 01:33:27 +0000 Manifest this update: Sat 23 Nov 2024 01:33:27 +0000 Manifest next update: Sat 30 Nov 2024 01:33:27 +0000 Files and hashes: 1: N5vU53MvGo0cOyItt3c8HBVBn0I.crl (hash: qqIxy3jB1qzT1c6BCh/LmjbvyeBKC9Ah0Zg+hMQ577Y=) 2: BE0481A4EFA111ED87AD1F0BC4F9AE02.roa (hash: NQf56Uj9m/23kHcMdcevpS6JxvdYxcKJxC0qqxSbed4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 529 (0x211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42 Validity Not Before: Nov 23 01:33:27 2024 GMT Not After : Nov 30 01:33:27 2024 GMT Subject: CN=674130e7-8f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:43:e8:91:67:fe:0a:78:45:d1:b4:00:99: 1a:04:df:53:64:56:64:ac:c8:c0:2f:70:36:fa:41: 22:d0:fc:32:ed:82:5c:44:a0:eb:91:39:7f:c1:17: 71:db:7e:ad:f1:0b:86:02:13:c0:a1:97:11:e7:78: c0:3b:dc:ca:d9:8d:48:3e:23:02:a9:a1:cd:3a:a1: 02:8d:da:80:1a:c9:c2:9a:a5:24:4c:2c:27:65:21: 3b:49:e8:53:68:b2:2c:b9:72:52:0f:7f:e9:6a:6d: c0:4e:de:3d:99:72:e4:ce:59:04:9c:bb:cd:3e:58: 09:b0:83:8d:81:12:ca:1f:d3:7b:d1:d4:4c:dc:19: 2f:5b:b6:54:cf:c4:7a:bb:29:2f:d4:50:b3:29:ae: 76:b4:e0:e0:82:e7:82:46:84:69:bc:54:c2:d7:df: 39:dd:97:8d:14:5c:5d:5f:a0:61:5e:9e:f5:e0:30: 97:3f:99:5a:ab:24:df:8b:9f:50:9e:93:3f:82:cc: 0e:6c:fa:f8:ee:b8:a7:7f:cf:84:d0:44:75:40:07: 88:a6:ac:95:34:4b:03:ca:d8:a2:36:e9:8f:6f:c0: b3:e6:69:50:79:88:3c:b6:86:4c:9b:47:a1:e1:66: cd:66:5b:2d:4a:d2:6e:c1:8c:b9:dc:00:0a:5d:f3: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FE:A8:7D:8E:6B:35:50:2B:E7:08:D5:4F:2C:4D:0B:2E:28:EE:C1 X509v3 Authority Key Identifier: keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a2:d7:d4:09:cf:d6:e1:bf:73:da:a8:a0:82:0b:0f:0b:4e: f5:b8:61:df:d2:1d:32:c1:c4:c9:15:31:be:a3:0d:8b:c9:32: 91:9b:87:22:ef:70:09:d9:5d:e3:5c:62:55:a7:84:d7:72:c6: d2:45:bb:76:bb:18:b3:0d:e7:57:dc:c5:e6:b1:86:4b:ad:d8: 78:a4:40:d8:ab:44:04:f6:a2:93:bc:6e:f3:87:33:67:82:2d: a2:87:44:88:1d:b5:b3:5d:77:af:a2:c5:f6:59:37:fa:f9:03: d3:1f:91:dc:86:29:1c:c5:7f:08:3a:64:b5:e1:01:d8:60:b4: 9a:c2:4e:c9:bc:44:62:9c:f8:9c:6c:d5:67:92:2c:fd:d7:5e: e7:60:f8:d2:89:64:ed:5b:be:f4:e7:74:e7:eb:36:4e:92:b1: 46:dd:26:63:79:da:a5:97:a0:af:47:d3:d1:e4:10:0d:25:1e: a8:0e:c1:6e:be:e0:e9:36:fe:0e:be:89:1d:d8:44:c7:f5:d3: 83:70:c7:da:69:df:eb:3e:8f:df:14:4a:27:fb:78:33:29:a7: d5:e8:49:0a:ac:0a:ad:39:17:45:89:33:e0:e2:59:61:ce:10: f6:99:02:e7:b9:22:09:a2:95:02:89:5a:fb:35:77:d2:7a:b3: d1:d7:e4:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyN0YxMTAvBgNVBAUTKDM3OUJENEU3NzMyRjFBOEQxQzNCMjIyREI3NzczQzFD MTU0MTlGNDIwHhcNMjQxMTIzMDEzMzI3WhcNMjQxMTMwMDEzMzI3WjAYMRYwFAYD VQQDEw02NzQxMzBlNy04ZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0v1D6JFn/gp4RdG0AJkaBN9TZFZkrMjAL3A2+kEi0Pwy7YJcRKDrkTl/wRdx 236t8QuGAhPAoZcR53jAO9zK2Y1IPiMCqaHNOqECjdqAGsnCmqUkTCwnZSE7SehT aLIsuXJSD3/pam3ATt49mXLkzlkEnLvNPlgJsIONgRLKH9N70dRM3BkvW7ZUz8R6 uykv1FCzKa52tODggueCRoRpvFTC19853ZeNFFxdX6BhXp714DCXP5laqyTfi59Q npM/gswObPr47rinf8+E0ER1QAeIpqyVNEsDytiiNumPb8Cz5mlQeYg8toZMm0eh 4WbNZlstStJuwYy53AAKXfO2dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBf+qH2O azVQK+cI1U8sTQsuKO7BMB8GA1UdIwQYMBaAFDeb1OdzLxqNHDsiLbd3PBwVQZ9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTI3Ri9CQ0ZEQUZDQzEw REQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdvMGNPeUl0dDNjOEhCVkJu MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dlU1M012R28wY095SXR0M2M4SEJWQm4wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTI3Ri9CQ0ZEQUZDQzEwREQxMUVEODBBQTI0ODVDNEY5QUUwMi9ONXZVNTNNdkdv MGNPeUl0dDNjOEhCVkJuMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdotfUCc/W4b9z2qigggsPC071uGHf0h0ywcTJFTG+ow2LyTKRm4ci 73AJ2V3jXGJVp4TXcsbSRbt2uxizDedX3MXmsYZLrdh4pEDYq0QE9qKTvG7zhzNn gi2ih0SIHbWzXXevosX2WTf6+QPTH5HchikcxX8IOmS14QHYYLSawk7JvERinPic bNVnkiz9117nYPjSiWTtW77053Tn6zZOkrFG3SZjedqll6CvR9PR5BANJR6oDsFu vuDpNv4Ovokd2ETH9dODcMfaad/rPo/fFEon+3gzKafV6EkKrAqtORdFiTPg4llh zhD2mQLnuSIJopUCiVr7NXfSerPR1+TI -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:31 2024 by rpki-client on console-fra.rpki-client.org