$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft File: L0SuugpVRAZYiXBbwu8c2uEVgyU.mft (raw, json) Hash identifier: zh9QAmqcX1ToqC5ZVl+CAozhqIz6RpCkGyWJ61soQ8s= Subject key identifier: 3D:E7:A5:72:F6:D8:64:D1:80:D1:0B:3C:B8:64:A5:7A:55:6D:5B:B7 Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Certificate serial: 345D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft Manifest number: 3447 Signing time: Fri 22 Nov 2024 14:47:34 +0000 Manifest this update: Fri 22 Nov 2024 14:47:34 +0000 Manifest next update: Fri 29 Nov 2024 14:47:34 +0000 Files and hashes: 1: L0SuugpVRAZYiXBbwu8c2uEVgyU.crl (hash: VCCm8lyplbdR9ZTamdXiS+92+dJByghm6L/EJWVDdxQ=) 2: 90A91764A0C711EF99B35119C4F9AE02.roa (hash: IFfgeNWOmW48wT5wG379TZhXBQiEXiYFADpsIgQ6k3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13405 (0x345d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Validity Not Before: Nov 22 14:47:34 2024 GMT Not After : Nov 29 14:47:34 2024 GMT Subject: CN=67409986-7d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ca:68:57:09:df:6c:58:33:c9:c3:51:48:23: 9a:ab:18:dd:d3:ae:a7:3a:4a:bd:ff:3d:ee:2a:bd: b6:b8:2d:7e:1c:17:08:a0:bb:d6:6d:db:59:93:14: 56:91:ba:b5:fc:32:9e:17:da:a3:46:58:98:72:c0: ad:a1:7e:6a:69:67:38:96:00:11:5b:bb:77:74:df: c7:2b:df:34:ba:e0:5f:d3:85:78:58:72:1c:5a:57: 33:a5:88:9c:23:94:6d:9f:ca:2a:9b:62:e6:93:8a: 54:16:52:0b:00:62:5a:0b:3e:81:91:c8:c8:f1:e3: c1:5e:f4:72:46:00:c8:66:db:5d:57:24:8c:2d:75: eb:00:48:18:c4:42:b4:d0:f9:bf:3b:4d:bc:32:7a: d8:26:ef:c0:53:69:70:f5:02:50:ad:8b:31:c1:75: 7f:d5:dd:e5:30:87:22:21:1b:c5:ba:ac:38:75:45: bc:2e:c7:b4:7f:a6:90:e3:27:b6:ff:97:45:d5:51: cc:2b:36:25:04:b3:46:37:0d:bb:b3:13:22:4a:6b: 10:bc:13:23:a8:e1:16:7a:ea:01:72:4c:c8:ae:f8: 4a:6f:11:82:3c:85:f5:51:5e:eb:4e:b9:f0:10:68: fb:40:4b:5f:31:62:1b:50:1d:41:98:29:b6:f5:09: c2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E7:A5:72:F6:D8:64:D1:80:D1:0B:3C:B8:64:A5:7A:55:6D:5B:B7 X509v3 Authority Key Identifier: keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:cf:68:29:fd:6d:bd:86:47:53:47:6e:25:2a:d6:8e:15:ed: 69:51:5b:bb:54:ca:30:7d:0b:76:e0:e9:b3:b7:df:6b:4b:59: 70:e7:3a:ca:0a:6b:b9:a5:71:bf:06:82:46:11:5f:f0:a7:a7: de:d8:62:85:92:ae:3d:c3:dd:b6:a6:fa:d5:2c:9b:cd:ff:6c: 5f:15:d9:79:1d:cc:6f:e7:37:5c:05:89:82:34:96:8f:d1:68: 77:5d:a8:0c:a5:70:92:8e:cf:a4:97:fd:0c:6a:ce:a4:eb:a1: 98:87:d7:fe:5b:50:c8:f2:79:1c:84:30:33:2a:6a:6d:4c:b7: 60:fd:46:b1:dc:80:47:63:26:f4:fa:4a:8f:7e:ce:00:f3:e0: dc:7d:c8:cc:a1:5b:9d:92:ef:c0:4e:a5:be:f2:86:51:d8:68: 1b:73:03:85:34:f3:07:3d:1f:1b:83:8e:53:39:76:24:ef:a3: 79:c6:fb:c3:3e:be:f1:d8:31:17:0e:95:3a:af:95:85:7d:93: 45:9d:27:26:b5:ad:8e:9b:91:f2:e8:63:43:8d:3d:a3:ff:a7: 35:3d:7c:bc:93:db:92:e5:ec:8c:86:29:a7:05:37:1a:a4:b4: 0d:26:40:c0:5a:ae:af:71:16:12:93:dc:5b:d4:99:72:4d:b9: 9c:17:a7:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDJGNDRBRUJBMEE1NTQ0MDY1ODg5NzA1QkMyRUYxQ0RB RTExNTgzMjUwHhcNMjQxMTIyMTQ0NzM0WhcNMjQxMTI5MTQ0NzM0WjAYMRYwFAYD VQQDEw02NzQwOTk4Ni03ZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38poVwnfbFgzycNRSCOaqxjd066nOkq9/z3uKr22uC1+HBcIoLvWbdtZkxRW kbq1/DKeF9qjRliYcsCtoX5qaWc4lgARW7t3dN/HK980uuBf04V4WHIcWlczpYic I5Rtn8oqm2Lmk4pUFlILAGJaCz6BkcjI8ePBXvRyRgDIZttdVySMLXXrAEgYxEK0 0Pm/O028MnrYJu/AU2lw9QJQrYsxwXV/1d3lMIciIRvFuqw4dUW8Lse0f6aQ4ye2 /5dF1VHMKzYlBLNGNw27sxMiSmsQvBMjqOEWeuoBckzIrvhKbxGCPIX1UV7rTrnw EGj7QEtfMWIbUB1BmCm29QnCPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3npXL2 2GTRgNELPLhkpXpVbVu3MB8GA1UdIwQYMBaAFC9ErroKVUQGWIlwW8LvHNrhFYMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9BMzZBNjI2RTFE OTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJBWllpWEJid3U4YzJ1RVZn eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wwU3V1Z3BWUkFaWWlYQmJ3dThjMnVFVmd5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9BMzZBNjI2RTFEOTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJB WllpWEJid3U4YzJ1RVZneVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6z2gp/W29hkdTR24lKtaOFe1pUVu7VMowfQt24Omzt99rS1lw5zrK Cmu5pXG/BoJGEV/wp6fe2GKFkq49w922pvrVLJvN/2xfFdl5Hcxv5zdcBYmCNJaP 0Wh3XagMpXCSjs+kl/0Mas6k66GYh9f+W1DI8nkchDAzKmptTLdg/Uax3IBHYyb0 +kqPfs4A8+DcfcjMoVudku/ATqW+8oZR2GgbcwOFNPMHPR8bg45TOXYk76N5xvvD Pr7x2DEXDpU6r5WFfZNFnScmta2Om5Hy6GNDjT2j/6c1PXy8k9uS5eyMhimnBTca pLQNJkDAWq6vcRYSk9xb1JlyTbmcF6co -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:40 2024 by rpki-client on console-fra.rpki-client.org