$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft File: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json) Hash identifier: +4B8Ck4uunXBAsTuSgWtvmOGQXARdgiCynW9uC7yhpc= Subject key identifier: 05:83:A6:0B:4D:4A:9A:CD:22:97:C7:B7:C4:CA:AF:15:E5:E0:B5:70 Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 Certificate issuer: /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft Manifest number: 10 Signing time: Wed 25 Dec 2024 06:08:18 +0000 Manifest this update: Wed 25 Dec 2024 06:08:17 +0000 Manifest next update: Wed 01 Jan 2025 06:08:17 +0000 Files and hashes: 1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: qyzmOa2IuinN0NLIXF5GsDvrHtY+F6tItKo5Y5RmD/M=) 2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 2DuyIR+wk4mvn+XwoOsHwRQcxItN+5KREj3DX0f4tYs=) 3: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: GhFLUJsibCVFeaw+HURiwfIuyrQYgDP+XOZxzfH6Sw0=) 4: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: 1/AZpd9pLcHU8N9tmsYLkTIAugSfqWDpWEBhQfVHYVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Validity Not Before: Dec 25 06:08:17 2024 GMT Not After : Jan 1 06:08:17 2025 GMT Subject: CN=676ba151-35cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:c4:18:28:34:ca:64:e7:86:56:76:6c:28: fe:3f:5a:9c:16:c7:b6:ea:90:40:bb:b2:b0:28:93: 07:c6:e1:ac:ac:90:c6:c3:18:28:2b:db:0c:af:71: 15:af:5d:53:68:23:6e:90:63:ed:f6:b8:b8:89:1a: e3:80:a0:ee:12:78:05:8b:95:61:8b:80:60:a1:2f: 86:06:7f:c4:8e:fa:99:fb:7d:28:e8:1a:b2:72:b9: d5:b6:4b:8e:28:1f:69:6a:75:b7:fd:56:2b:62:b7: 28:6a:4d:c3:19:62:dd:b8:e0:2a:d0:49:d0:50:e0: a3:85:ba:0c:a8:90:cd:bd:9f:ca:11:ce:df:f3:4d: 54:ae:c5:c1:08:0c:8f:ac:9b:0a:a8:60:7d:df:04: e0:ed:51:04:0c:1b:1d:c2:99:53:10:ad:33:41:c8: 81:1a:0d:61:4d:77:86:50:b6:a2:5c:e8:93:33:48: 0e:e5:0b:6c:17:14:f9:ad:8d:8e:1b:c3:36:68:ad: 47:b4:37:5b:ee:54:47:1d:6a:fd:6c:f4:ac:c8:51: 91:6a:fd:70:d1:62:0b:e2:b5:21:0f:bb:8a:5e:a8: b7:12:e4:ae:44:c8:76:aa:70:08:89:19:1c:7a:4e: f0:39:30:7a:ff:dc:f5:ea:72:3b:e6:c8:b8:ca:99: 18:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:83:A6:0B:4D:4A:9A:CD:22:97:C7:B7:C4:CA:AF:15:E5:E0:B5:70 X509v3 Authority Key Identifier: keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:b8:1a:91:9b:e9:ce:55:62:81:25:c3:b4:2d:d8:39:0f:be: 8d:43:9c:6a:f2:bb:19:7f:82:53:92:ee:d7:5a:15:e0:ab:05: 1e:7d:6e:37:ac:78:74:29:50:2d:a2:3d:6f:53:38:4d:2f:5c: b8:65:50:c1:af:8f:c0:8b:2e:9c:73:9e:a5:97:2d:12:6c:4c: dd:a1:ab:8a:0e:c5:e8:5a:fe:81:bb:c3:fc:1c:a4:f6:56:a5: 1c:bc:18:a7:68:a8:b6:40:9c:57:4f:a5:f4:30:3b:55:5e:19: b5:6a:47:61:f3:6f:7a:30:60:43:c3:88:9d:db:ef:25:83:92: c1:23:65:26:27:a4:4e:65:0e:85:e7:58:fa:5a:e8:43:f8:c9: 17:91:b7:07:3f:4d:b7:5c:5c:1e:dd:26:d3:84:47:81:c7:e6: e7:d8:53:f7:32:81:85:81:83:17:88:fd:c2:3c:9a:4a:fc:32: dd:74:93:22:1c:3a:54:4c:fe:d0:9d:57:a8:ac:86:d6:2d:25: 47:4b:da:49:f6:e0:93:e1:60:dc:4b:1a:cd:f8:88:25:44:68: f0:5e:dc:d2:bf:47:02:8c:06:ce:a1:3e:ef:f6:72:0b:03:01: d6:ae:95:eb:38:73:15:80:be:ee:2c:f5:fc:73:25:e0:df:81: 99:9c:d1:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjEyQTExMC8GA1UEBRMoRUNGRjMyNDQwQzRFRTFEMjc5NDNDREI3MkE3RDQ5MTA2 MzQwMkRGMTAeFw0yNDEyMjUwNjA4MTdaFw0yNTAxMDEwNjA4MTdaMBgxFjAUBgNV BAMTDTY3NmJhMTUxLTM1Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCfMQYKDTKZOeGVnZsKP4/WpwWx7bqkEC7srAokwfG4ayskMbDGCgr2wyvcRWv XVNoI26QY+32uLiJGuOAoO4SeAWLlWGLgGChL4YGf8SO+pn7fSjoGrJyudW2S44o H2lqdbf9VitityhqTcMZYt244CrQSdBQ4KOFugyokM29n8oRzt/zTVSuxcEIDI+s mwqoYH3fBODtUQQMGx3CmVMQrTNByIEaDWFNd4ZQtqJc6JMzSA7lC2wXFPmtjY4b wzZorUe0N1vuVEcdav1s9KzIUZFq/XDRYgvitSEPu4peqLcS5K5EyHaqcAiJGRx6 TvA5MHr/3PXqcjvmyLjKmRivAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBYOmC01K ms0il8e3xMqvFeXgtXAwHwYDVR0jBBgwFoAU7P8yRAxO4dJ5Q823Kn1JEGNALfEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCMTJBL0I5RDRDRjQyQUUz RDExRUY5NkI3NkM2QUM0RjlBRTAyLzdQOHlSQXhPNGRKNVE4MjNLbjFKRUdOQUxm RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1A4eVJBeE80ZEo1UTgyM0tuMUpFR05BTGZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC MTJBL0I5RDRDRjQyQUUzRDExRUY5NkI3NkM2QUM0RjlBRTAyLzdQOHlSQXhPNGRK NVE4MjNLbjFKRUdOQUxmRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK+4GpGb6c5VYoElw7Qt2DkPvo1DnGryuxl/glOS7tdaFeCrBR59bjes eHQpUC2iPW9TOE0vXLhlUMGvj8CLLpxznqWXLRJsTN2hq4oOxeha/oG7w/wcpPZW pRy8GKdoqLZAnFdPpfQwO1VeGbVqR2Hzb3owYEPDiJ3b7yWDksEjZSYnpE5lDoXn WPpa6EP4yReRtwc/TbdcXB7dJtOER4HH5ufYU/cygYWBgxeI/cI8mkr8Mt10kyIc OlRM/tCdV6ishtYtJUdL2kn24JPhYNxLGs34iCVEaPBe3NK/RwKMBs6hPu/2cgsD Adaules4cxWAvu4s9fxzJeDfgZmc0Zg= -----END CERTIFICATE-----Generated at Wed Dec 25 08:01:08 2024 by rpki-client on console-fra.rpki-client.org