$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json) Hash identifier: /WEVWErdQxICjUZST6rCh+sbqSqXYc9/EUWh9J3PqLE= Subject key identifier: 60:51:25:1B:F7:1A:C8:AC:7E:1A:49:29:E2:97:91:DD:E8:B2:0A:2F Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft Manifest number: 5C Signing time: Fri 22 Nov 2024 07:29:44 +0000 Manifest this update: Fri 22 Nov 2024 07:29:44 +0000 Manifest next update: Fri 29 Nov 2024 07:29:44 +0000 Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: ighYe1YtOd8R+fAYn4VmIeG2Hlh/AypERD0rmGK9Vdk=) 2: A5DE28B4216E11EF88CCA84FC4F9AE02.roa (hash: OQL88MWhQc2Dvhfy9YGwOC+QpPW5N2m/Zj+EPuvVJW4=) 3: A6550254216E11EF88CCA84FC4F9AE02.roa (hash: LAr1U3LhbNR3RVGI0jNpJ/qua9zZQzo60TFgCnpQwww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Validity Not Before: Nov 22 07:29:44 2024 GMT Not After : Nov 29 07:29:44 2024 GMT Subject: CN=674032e8-dd0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2a:33:a1:ba:53:55:82:4d:78:bd:8c:d2:94: da:68:13:e7:e2:a1:a9:11:33:1f:b8:f6:2f:ed:26: 52:0b:39:17:b5:99:fb:e1:b9:1c:03:c0:71:5a:e8: a0:06:af:07:60:69:75:db:db:0e:5e:ba:0e:d2:e8: f6:ed:8b:69:22:62:39:ea:24:ca:8d:a3:a9:07:b3: 47:12:e1:ca:60:de:a2:39:2a:10:da:48:cd:85:37: 62:59:93:46:4a:57:6f:0f:98:cd:f1:8e:9f:d5:08: dd:b7:51:3b:65:97:c0:48:a1:91:05:91:7d:9a:a2: 27:63:3b:cb:29:61:6f:c8:91:2f:88:0a:71:b0:0f: 9e:a6:fa:1d:c6:c4:e4:36:8d:e4:16:1d:96:39:83: ed:18:be:27:b5:a5:35:48:0a:b9:c2:ee:f0:d8:4f: c7:89:06:4c:bc:2f:ad:e4:3c:05:c4:43:0f:e4:8d: 57:79:1a:18:ca:f4:c6:5f:70:c0:2f:a4:d6:08:fa: 1a:a9:63:bc:4c:1d:47:34:51:4a:b1:c7:67:da:e6: 59:76:00:50:21:5c:31:04:6d:47:fb:07:e3:fb:d6: 6a:fc:75:93:bb:f8:80:1b:e4:13:c4:e8:5e:ed:90: d7:cf:34:46:46:e7:00:33:7e:88:02:d4:6f:34:98: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:51:25:1B:F7:1A:C8:AC:7E:1A:49:29:E2:97:91:DD:E8:B2:0A:2F X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:05:de:53:cf:4a:7d:dd:fe:a2:9f:8d:e8:be:e9:09:00:03: f5:8f:cb:4d:46:93:9c:5e:e3:d7:25:81:4e:ea:23:49:ba:8f: 14:50:bd:6a:b3:51:00:f6:38:e5:32:95:a6:28:5d:ae:77:f8: b2:d4:09:03:dc:7c:3d:b8:54:28:62:4c:57:96:9a:54:25:be: 74:01:e7:1f:80:b0:2a:c3:2d:68:5f:83:74:79:1f:4c:e9:23: 47:b4:5b:6d:2e:3b:78:6a:2c:7e:66:e8:32:f5:28:c9:91:29: 03:8d:88:a3:c2:6b:f5:e1:ba:d0:b2:33:c4:50:05:51:74:b6: 4f:70:fa:5d:d6:79:02:27:fd:26:ab:fa:66:4e:32:aa:b0:ed: bd:ad:9f:f8:7a:87:c0:33:e8:25:38:93:19:e5:c8:c4:16:fb: 62:ee:2d:71:f5:9a:3c:d1:bd:f3:f0:54:ba:54:47:f5:a8:1a: 90:29:8c:94:c0:58:d7:fa:5b:bf:ff:f1:b7:47:63:82:59:15: b2:90:2f:cb:6e:2c:30:b7:c9:58:eb:f5:ae:9c:93:58:dd:92: fb:12:06:2d:6f:82:a4:ea:c1:ee:47:61:76:95:dc:4c:26:97: 13:2e:13:95:12:a2:2c:14:27:56:ad:dc:f1:4a:b5:a4:39:8d: f7:34:9c:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Q0VEMzExMC8GA1UEBRMoQTc0MUVCNDEwRDRCOEU0NkZGNDhBQjcwQTFEQTAwNkEz RENGNDFBMzAeFw0yNDExMjIwNzI5NDRaFw0yNDExMjkwNzI5NDRaMBgxFjAUBgNV BAMTDTY3NDAzMmU4LWRkMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6KjOhulNVgk14vYzSlNpoE+fioakRMx+49i/tJlILORe1mfvhuRwDwHFa6KAG rwdgaXXb2w5eug7S6Pbti2kiYjnqJMqNo6kHs0cS4cpg3qI5KhDaSM2FN2JZk0ZK V28PmM3xjp/VCN23UTtll8BIoZEFkX2aoidjO8spYW/IkS+ICnGwD56m+h3GxOQ2 jeQWHZY5g+0Yvie1pTVICrnC7vDYT8eJBky8L63kPAXEQw/kjVd5GhjK9MZfcMAv pNYI+hqpY7xMHUc0UUqxx2fa5ll2AFAhXDEEbUf7B+P71mr8dZO7+IAb5BPE6F7t kNfPNEZG5wAzfogC1G80mIgxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYFElG/ca yKx+Gkkp4peR3eiyCi8wHwYDVR0jBBgwFoAUp0HrQQ1Ljkb/SKtwodoAaj3PQaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDRUQzLzNDMTYxRkE2MjE2 QzExRUY4MEIxNTMyQkM0RjlBRTAyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFh TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDBIclFRMUxqa2JfU0t0d29kb0FhajNQUWFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJD RUQzLzNDMTYxRkE2MjE2QzExRUY4MEIxNTMyQkM0RjlBRTAyL3AwSHJRUTFMamti X1NLdHdvZG9BYWozUFFhTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIAF3lPPSn3d/qKfjei+6QkAA/WPy01Gk5xe49clgU7qI0m6jxRQvWqz UQD2OOUylaYoXa53+LLUCQPcfD24VChiTFeWmlQlvnQB5x+AsCrDLWhfg3R5H0zp I0e0W20uO3hqLH5m6DL1KMmRKQONiKPCa/XhutCyM8RQBVF0tk9w+l3WeQIn/Sar +mZOMqqw7b2tn/h6h8Az6CU4kxnlyMQW+2LuLXH1mjzRvfPwVLpUR/WoGpApjJTA WNf6W7//8bdHY4JZFbKQL8tuLDC3yVjr9a6ck1jdkvsSBi1vgqTqwe5HYXaV3Ewm lxMuE5USoiwUJ1at3PFKtaQ5jfc0nE8= -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:41 2024 by rpki-client on console-fra.rpki-client.org