$ rpki-client -vvf rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft File: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft (raw, json) Hash identifier: +8Xosg+Pq6pNuRBeafzIX+5j2o5VyRKoyKFf93n+JYI= Subject key identifier: 48:22:70:D8:43:B6:59:6E:CE:AB:A6:70:19:CC:37:6F:FB:80:FA:23 Authority key identifier: 07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 Certificate issuer: /CN=A9129162/serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft Manifest number: 12 Signing time: Wed 25 Dec 2024 06:08:00 +0000 Manifest this update: Wed 25 Dec 2024 06:07:59 +0000 Manifest next update: Wed 01 Jan 2025 06:07:59 +0000 Files and hashes: 1: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl (hash: zeTYHBbwah6FfOaQv5THVS1Kds/P3AFFkU2e9/8qe5k=) 2: A5CE322CAD4311EF8552641BC4F9AE02.roa (hash: 2U2A/CVyKvEhGq6FQB7gMrTfn5zx/rInGrYth2PHG0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129162/serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Validity Not Before: Dec 25 06:07:59 2024 GMT Not After : Jan 1 06:07:59 2025 GMT Subject: CN=676ba140-9fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6b:fa:ae:bc:cf:1e:f0:a2:cf:e0:24:5a:6a: ad:a2:81:f8:51:b9:0b:4d:f0:eb:5a:e3:8a:6d:22: 0a:e2:e7:73:86:f9:15:c6:eb:7b:b5:e0:63:d1:99: 94:d2:c2:a5:e2:2e:82:6e:74:57:13:87:56:31:c0: 52:6b:1c:4c:95:89:d5:3b:12:67:0c:4e:86:0c:34: f0:74:3e:4b:41:ec:99:84:89:ff:e3:cc:59:92:67: 4a:8a:9e:0f:fa:23:4b:e3:bd:89:f5:ec:6c:56:c4: 2c:82:3e:72:34:eb:0c:20:bb:d4:3f:0d:97:95:06: 31:67:68:3e:23:39:3c:83:fa:52:e4:f9:18:34:61: d5:d5:c7:9c:73:0a:32:dc:65:db:98:2a:34:e4:e6: 9d:38:4c:50:d4:0c:c4:92:58:18:a9:54:78:de:81: 7e:6c:78:50:bf:b5:51:51:2f:9e:39:fa:4d:9d:e9: cc:54:96:3a:10:4e:2a:4a:7f:65:64:d5:a9:3d:27: 20:cc:fa:9b:9c:42:d7:74:80:d1:af:5c:d8:07:f5: b4:a5:ff:d9:b1:d7:01:a8:5a:e5:fd:ac:07:02:30: 8e:19:80:4a:6a:51:27:70:4a:42:d0:71:75:38:d8: 2b:66:20:e7:b2:11:39:56:a2:d1:84:4c:26:d0:8b: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:22:70:D8:43:B6:59:6E:CE:AB:A6:70:19:CC:37:6F:FB:80:FA:23 X509v3 Authority Key Identifier: keyid:07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:5b:ba:ea:7d:0a:e8:55:af:e1:99:cb:3f:a5:f8:5a:a7:44: 61:aa:60:d5:a7:8c:49:5e:ba:9a:5b:16:ea:bd:93:7f:6b:cc: b7:07:22:b9:b9:50:e4:91:fc:32:44:42:ce:ed:d1:a4:13:de: 51:db:dc:c6:d4:fe:60:31:1c:d7:ec:a2:ab:12:c4:b5:af:4c: c0:b2:9f:f8:d5:6e:00:e2:08:93:c4:9e:c8:56:fe:c4:9d:96: 13:43:eb:4d:3d:b9:bf:52:bc:b8:a2:bb:7d:b1:60:4c:4a:17: 8f:cf:9e:1c:fa:75:f4:0f:15:43:ee:a3:3f:c7:4f:0c:98:26: 22:50:fb:5e:2e:29:16:d5:a5:30:09:df:23:2c:91:d9:e1:04: 11:8e:1a:33:31:08:41:61:d3:fc:b8:6a:af:6a:cd:ab:bb:aa: 5a:13:74:b3:76:60:4c:65:18:95:b0:89:9a:a6:0b:54:78:1f: 09:d8:95:29:b1:0a:80:6d:af:a0:1b:46:15:e2:b1:15:a6:72: 8c:a6:79:93:6a:7f:d2:d1:13:79:22:b2:1b:32:81:9a:18:aa: 85:f1:6a:72:16:26:a4:c0:fd:12:54:35:1e:2d:b8:11:a2:e7: 85:cd:c2:21:33:51:14:06:3e:e9:a5:eb:c6:54:73:8c:12:82: 53:d2:bc:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTE2MjExMC8GA1UEBRMoMDdBNjgxQzkxQzNFMDUxMkQzNjg5RTk5QkNFNUJDNjY0 MDkxNjczNDAeFw0yNDEyMjUwNjA3NTlaFw0yNTAxMDEwNjA3NTlaMBgxFjAUBgNV BAMTDTY3NmJhMTQwLTlmZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDia/quvM8e8KLP4CRaaq2igfhRuQtN8Ota44ptIgri53OG+RXG63u14GPRmZTS wqXiLoJudFcTh1YxwFJrHEyVidU7EmcMToYMNPB0PktB7JmEif/jzFmSZ0qKng/6 I0vjvYn17GxWxCyCPnI06wwgu9Q/DZeVBjFnaD4jOTyD+lLk+Rg0YdXVx5xzCjLc ZduYKjTk5p04TFDUDMSSWBipVHjegX5seFC/tVFRL545+k2d6cxUljoQTipKf2Vk 1ak9JyDM+pucQtd0gNGvXNgH9bSl/9mx1wGoWuX9rAcCMI4ZgEpqUSdwSkLQcXU4 2CtmIOeyETlWotGETCbQi2N9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSCJw2EO2 WW7Oq6ZwGcw3b/uA+iMwHwYDVR0jBBgwFoAUB6aByRw+BRLTaJ6ZvOW8ZkCRZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MTYyLzVBMzgwRDZBQUQ0 MzExRUZBQTg2QzMxQUM0RjlBRTAyL0I2YUJ5UnctQlJMVGFKNlp2T1c4WmtDUlp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQjZhQnlSdy1CUkxUYUo2WnZPVzhaa0NSWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 MTYyLzVBMzgwRDZBQUQ0MzExRUZBQTg2QzMxQUM0RjlBRTAyL0I2YUJ5UnctQlJM VGFKNlp2T1c4WmtDUlp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJbuup9CuhVr+GZyz+l+FqnRGGqYNWnjEleuppbFuq9k39rzLcHIrm5 UOSR/DJEQs7t0aQT3lHb3MbU/mAxHNfsoqsSxLWvTMCyn/jVbgDiCJPEnshW/sSd lhND6009ub9SvLiiu32xYExKF4/Pnhz6dfQPFUPuoz/HTwyYJiJQ+14uKRbVpTAJ 3yMskdnhBBGOGjMxCEFh0/y4aq9qzau7qloTdLN2YExlGJWwiZqmC1R4HwnYlSmx CoBtr6AbRhXisRWmcoymeZNqf9LRE3kishsygZoYqoXxanIWJqTA/RJUNR4tuBGi 54XNwiEzURQGPuml68ZUc4wSglPSvOo= -----END CERTIFICATE-----Generated at Wed Dec 25 08:01:07 2024 by rpki-client on console-fra.rpki-client.org