$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft File: LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft (raw, json) Hash identifier: klm8d0JkPYKoqH3IUdK37uaJrbR8/TnAJO43rqhgoWQ= Subject key identifier: 54:71:B1:DD:49:7A:2F:11:96:28:4C:EC:31:EB:1F:41:0B:51:2C:86 Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft Manifest number: B6 Signing time: Sat 23 Nov 2024 04:05:25 +0000 Manifest this update: Sat 23 Nov 2024 04:05:25 +0000 Manifest next update: Sat 30 Nov 2024 04:05:25 +0000 Files and hashes: 1: LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl (hash: haRaZ4WASxtyd2ZVxZDYxTJzk1Gz20Aj2l/U6WGm3wE=) 2: A5F4A536933D11EEA6B4A653C4F9AE02.roa (hash: DbgMB8s7KygdLMJgPknQvmcZtX/iz+EumL1JuajpP5E=) 3: A591C4A2933D11EEA6B4A653C4F9AE02.roa (hash: DNt+jX12ZywZTPrb2OAFnRmVRcIc0aG5ykEUvUSZAqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Nov 23 04:05:25 2024 GMT Not After : Nov 30 04:05:25 2024 GMT Subject: CN=67415485-1992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:e3:a2:fc:9b:0b:c9:17:ee:06:50:8c:9c: 37:df:7d:4c:83:36:fb:30:0c:8e:e7:7f:80:ff:9b: 2b:3b:c7:4c:fd:ab:0d:0f:5e:26:f6:91:4b:f7:0c: c7:a2:20:53:46:93:6f:f5:33:97:65:65:56:f8:1a: 62:34:68:60:2e:1a:80:1d:d3:a4:f3:2c:80:cb:61: 27:68:76:10:52:37:c7:ad:14:fc:36:bf:7b:a2:9f: 49:16:24:15:07:f6:15:34:fb:d8:11:d8:0e:44:42: 26:14:27:5b:9a:b6:4a:34:7a:de:0d:b7:ff:e8:30: 82:e3:be:76:c7:d6:4f:92:b3:2c:f0:84:77:0b:ec: b1:3d:34:44:17:2c:79:31:f0:7e:ca:4c:55:e3:54: 40:27:ef:68:a1:99:74:9f:7c:00:26:20:e1:40:4a: ab:ff:ce:55:cb:af:56:49:7a:92:71:f9:83:07:0b: e1:5c:f3:dc:70:9c:47:7a:5c:ac:08:5d:6a:76:fc: 21:59:92:63:fe:4c:90:56:b7:ee:aa:fb:d1:ac:7a: 66:94:96:51:d1:ef:ca:6f:c1:37:5f:93:6f:9b:81: 85:7f:18:77:13:30:e4:fa:93:c7:6c:02:db:67:54: f2:db:e2:99:3f:11:4e:00:68:74:59:cf:49:6d:d3: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:71:B1:DD:49:7A:2F:11:96:28:4C:EC:31:EB:1F:41:0B:51:2C:86 X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b1:a3:fc:2e:7e:fa:18:fa:ca:13:30:da:f1:ec:78:be:97: 1e:91:00:9a:52:aa:6f:72:79:54:54:85:57:b0:e7:ed:23:cb: e0:df:e6:9e:dc:ef:c2:6a:25:4a:38:a7:ab:c4:33:70:53:20: 69:e7:63:16:a3:39:64:36:81:a9:e6:e0:22:2f:61:0c:3f:c3: 43:ba:ed:05:0c:20:b9:5d:f7:c7:bf:b6:a0:8e:09:68:a1:fd: 2c:2f:34:4e:b5:b5:fa:08:6d:95:56:3f:16:96:01:25:13:b3: 19:11:2a:86:9d:9f:6c:76:82:ea:4d:d5:1a:34:a3:31:57:dc: 15:0a:f9:22:58:f8:28:b1:8e:77:b7:ff:6a:f6:ab:e3:4e:c1: 3e:1e:fe:8a:fa:97:b7:9e:54:1c:77:5f:92:ec:77:82:f4:cf: a4:52:ed:4f:f5:35:08:f4:f2:00:e4:6a:16:4c:e7:09:3d:c0: ea:d0:0a:c8:95:d9:e8:5b:42:ec:72:53:98:9c:57:e7:43:4c: 77:76:d4:9a:d1:11:dd:e9:00:65:5e:2d:07:f7:e3:53:5f:ba: 4c:33:74:b2:26:4b:53:68:63:bf:89:e0:11:e2:ab:01:5a:96: d7:73:e9:bf:d6:fc:ca:c1:26:e2:a6:20:eb:e7:c5:ff:71:74: 95:f2:ad:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjQxMTIzMDQwNTI1WhcNMjQxMTMwMDQwNTI1WjAYMRYwFAYD VQQDEw02NzQxNTQ4NS0xOTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYTjovybC8kX7gZQjJw3331Mgzb7MAyO53+A/5srO8dM/asND14m9pFL9wzH oiBTRpNv9TOXZWVW+BpiNGhgLhqAHdOk8yyAy2EnaHYQUjfHrRT8Nr97op9JFiQV B/YVNPvYEdgOREImFCdbmrZKNHreDbf/6DCC4752x9ZPkrMs8IR3C+yxPTREFyx5 MfB+ykxV41RAJ+9ooZl0n3wAJiDhQEqr/85Vy69WSXqScfmDBwvhXPPccJxHelys CF1qdvwhWZJj/kyQVrfuqvvRrHpmlJZR0e/Kb8E3X5Nvm4GFfxh3EzDk+pPHbALb Z1Ty2+KZPxFOAGh0Wc9JbdMpAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRxsd1J ei8RlihM7DHrH0ELUSyGMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyOS80QjNDRUVCNDkzM0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZ ai1oWURuRFIzbEQwdzlvbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGsaP8Ln76GPrKEzDa8ex4vpcekQCaUqpvcnlUVIVXsOftI8vg3+ae 3O/CaiVKOKerxDNwUyBp52MWozlkNoGp5uAiL2EMP8NDuu0FDCC5XffHv7agjglo of0sLzROtbX6CG2VVj8WlgElE7MZESqGnZ9sdoLqTdUaNKMxV9wVCvkiWPgosY53 t/9q9qvjTsE+Hv6K+pe3nlQcd1+S7HeC9M+kUu1P9TUI9PIA5GoWTOcJPcDq0ArI ldnoW0LsclOYnFfnQ0x3dtSa0RHd6QBlXi0H9+NTX7pMM3SyJktTaGO/ieAR4qsB WpbXc+m/1vzKwSbipiDr58X/cXSV8q2T -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org