$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: k+ml0Ko4uCUA5VZ53yvdA+YEgEDTKgHNimCGZDfKihw= Subject key identifier: E8:A1:4E:CB:7A:60:1C:5A:CB:4B:7A:30:F3:F4:A0:CB:E1:C7:25:E9 Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 0775 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 0759 Signing time: Sun 24 Nov 2024 20:51:38 +0000 Manifest this update: Sun 24 Nov 2024 20:51:38 +0000 Manifest next update: Sun 01 Dec 2024 20:51:38 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: tFX+/Z87cAvydSfYObpmJTGbtzhYRS1TD1TSAGeIMCc=) 2: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: Tk3zd3kJs7FVwUnCzK94Ya9JQUucKwZVZD3xS0qi9h0=) 3: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: QPOScDhLbSem7EfyQv+IglAvdNBeL1gmTR/fHqHYi/U=) 4: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: yXWA4LSCd0uYWLhyjey4cRiXnTeij5tyOPeHFK/GEnI=) 5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: jC47VXQ7X10kF2hNnEFJirs3Fm0J2Ob/emgxhii1hxs=) 6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: Jb8I0/Lc4UMJqWNSduuz7/92FhDDdVwS995fKcTS0D4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1909 (0x775) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Nov 24 20:51:38 2024 GMT Not After : Dec 1 20:51:38 2024 GMT Subject: CN=674391da-f393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d1:7a:93:e3:aa:50:49:0f:bc:3c:ba:a6:85: 99:4b:42:b3:e4:d6:95:c9:52:1e:30:f1:53:55:90: 59:e0:70:72:ff:d8:55:07:89:fd:f8:7d:b8:48:ec: 15:e7:09:3d:50:6c:96:98:ef:70:7d:1e:34:4b:2f: 41:8a:a9:7a:69:cf:4d:c6:4b:56:38:a1:70:fd:4c: cc:09:0b:a3:9e:97:2c:99:36:eb:0a:20:9a:39:90: 44:58:0f:63:2f:2c:80:01:83:e4:92:b9:a7:3e:44: e4:0c:da:05:37:71:41:bb:01:db:bf:b3:57:ab:e5: 1e:89:3b:1a:37:d2:fa:0f:ba:8f:9c:df:ad:e9:31: 45:83:91:95:eb:8d:9f:e9:37:60:72:2c:d6:21:28: a4:c3:57:31:a6:3b:31:71:12:09:df:22:d5:e6:17: d0:6d:2a:5c:50:96:a5:5b:b0:fa:2b:4f:01:5c:2c: ed:de:2e:53:eb:6c:58:fb:0e:64:61:10:cd:39:02: a5:47:ba:32:bd:74:46:77:1e:e3:75:2e:b6:ec:16: a5:c8:9e:60:df:e4:2f:c1:bc:2c:a0:21:81:0a:bd: 91:63:49:8a:3c:a9:76:ed:be:29:0b:f6:cc:b9:90: 89:9f:f3:36:bd:45:6c:72:fa:52:2e:e4:2c:84:88: 41:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A1:4E:CB:7A:60:1C:5A:CB:4B:7A:30:F3:F4:A0:CB:E1:C7:25:E9 X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:0d:2a:85:2e:42:66:5c:0d:f3:ce:30:b3:1d:d0:63:8c:82: c5:7f:d3:3c:c5:f2:9f:18:d1:d2:db:74:66:bb:31:4b:c0:a8: 87:e2:7c:3c:25:8d:6d:ab:a9:90:c7:46:be:0f:23:c3:62:b1: 13:a8:e6:ab:52:a1:28:d5:cd:88:a9:10:ff:42:7c:6b:55:ca: 8d:ed:0b:cd:79:85:6a:69:6b:f6:0e:73:bd:aa:90:a8:95:d2: 44:4e:6d:1e:ce:b9:40:16:27:03:9d:a5:24:eb:e0:c6:8d:39: 0d:be:d5:58:f5:e9:2a:9f:47:d8:4e:b8:de:1b:a5:6b:30:b1: 7d:7e:26:d9:bf:16:11:8c:25:12:77:6e:72:01:8c:a9:88:f7: 24:9f:a3:c4:ce:f1:73:56:8f:b2:90:c6:cf:91:67:89:3b:41: bb:df:c2:bd:a6:ba:ea:4b:be:52:1b:62:03:11:1c:72:be:29: ee:37:76:08:83:f3:de:58:ae:30:ad:db:a9:d9:7c:79:01:89: 45:35:52:1c:a5:27:20:13:c8:2a:ff:7d:23:28:4b:ee:49:3a: b8:b0:31:e3:30:a3:8f:fc:c7:ff:64:01:87:77:a6:cb:a4:92: 41:5e:32:84:4c:f0:b9:b5:5a:41:77:68:34:1e:ca:8d:f9:e8: 6e:be:02:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjQxMTI0MjA1MTM4WhcNMjQxMjAxMjA1MTM4WjAYMRYwFAYD VQQDEw02NzQzOTFkYS1mMzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NF6k+OqUEkPvDy6poWZS0Kz5NaVyVIeMPFTVZBZ4HBy/9hVB4n9+H24SOwV 5wk9UGyWmO9wfR40Sy9Biql6ac9NxktWOKFw/UzMCQujnpcsmTbrCiCaOZBEWA9j LyyAAYPkkrmnPkTkDNoFN3FBuwHbv7NXq+UeiTsaN9L6D7qPnN+t6TFFg5GV642f 6TdgcizWISikw1cxpjsxcRIJ3yLV5hfQbSpcUJalW7D6K08BXCzt3i5T62xY+w5k YRDNOQKlR7oyvXRGdx7jdS627BalyJ5g3+QvwbwsoCGBCr2RY0mKPKl27b4pC/bM uZCJn/M2vUVscvpSLuQshIhBKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOihTst6 YBxay0t6MPP0oMvhxyXpMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpDSqFLkJmXA3zzjCzHdBjjILFf9M8xfKfGNHS23RmuzFLwKiH4nw8 JY1tq6mQx0a+DyPDYrETqOarUqEo1c2IqRD/QnxrVcqN7QvNeYVqaWv2DnO9qpCo ldJETm0ezrlAFicDnaUk6+DGjTkNvtVY9ekqn0fYTrjeG6VrMLF9fibZvxYRjCUS d25yAYypiPckn6PEzvFzVo+ykMbPkWeJO0G738K9prrqS75SG2IDERxyvinuN3YI g/PeWK4wrdup2Xx5AYlFNVIcpScgE8gq/30jKEvuSTq4sDHjMKOP/Mf/ZAGHd6bL pJJBXjKETPC5tVpBd2g0HsqN+ehuvgJs -----END CERTIFICATE-----Generated at Sun Nov 24 22:11:57 2024 by rpki-client on console-fra.rpki-client.org