$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft File: 45n1PPpSq9Wox8HTkpWcOV854n4.mft (raw, json) Hash identifier: oCrpl2HXkELOzwXx8R775XQKtIHuTAGRwcZjsYyhzEY= Subject key identifier: 59:17:07:8C:47:84:C5:C6:E2:D1:7C:AB:20:61:79:40:9C:0E:E8:5E Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E Certificate issuer: /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Certificate serial: 0E91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft Manifest number: 0E7A Signing time: Fri 22 Nov 2024 17:42:07 +0000 Manifest this update: Fri 22 Nov 2024 17:42:07 +0000 Manifest next update: Fri 29 Nov 2024 17:42:07 +0000 Files and hashes: 1: 45n1PPpSq9Wox8HTkpWcOV854n4.crl (hash: XyJ1hiNk3HZAuczadtkmSAmKFBqagK2ojc1u0bfeWaM=) 2: FDEB52CE90A611EEAC16B10EC4F9AE02.roa (hash: qu3E1QCXXfXKU2u3PRgKPK9ZMw3s8zAryWTSiP2py4I=) 3: 57A86D66553F11EBA47EB279C4F9AE02.roa (hash: UggtOlZzrcnShpN0QR0vq/6Hg1IriXVT6ghElWpZZlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3729 (0xe91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Validity Not Before: Nov 22 17:42:07 2024 GMT Not After : Nov 29 17:42:07 2024 GMT Subject: CN=6740c26f-49cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:5b:f6:d0:d5:8d:01:b1:26:4e:4b:73:df: e7:2a:a8:2b:61:4b:aa:b2:65:00:ce:25:40:ef:6b: cc:0e:8e:1f:69:70:69:e3:fb:ec:f2:26:1a:87:9b: 91:5d:a5:72:d7:07:a6:8c:48:03:e4:c6:b6:fd:09: b8:d3:76:4d:a0:61:a6:d4:cf:32:ab:aa:5f:fc:4e: 88:4f:a8:2b:98:de:9a:e6:f6:18:0b:65:cb:4b:8e: 9d:89:47:52:26:b4:7d:59:45:a8:29:c2:d9:99:3a: 5b:78:de:44:a2:0c:f5:c0:aa:1c:30:b6:b6:ab:7d: f4:bc:45:1f:e4:89:e4:7f:7e:11:57:fa:ba:88:de: 66:1a:c5:a2:b8:67:16:22:95:2e:81:bb:82:13:be: 9d:59:c8:89:f2:b3:19:a1:4d:fa:20:77:7e:72:1f: ad:65:cb:00:8f:53:58:e0:18:67:cd:ff:5f:20:65: 94:17:b0:c5:55:f6:69:13:2a:8c:f6:57:e7:d7:93: 8b:6f:17:da:c8:ef:60:d3:23:53:e4:35:ca:f4:84: fe:4e:98:ae:84:8c:2f:32:80:bf:36:01:eb:ca:b1: 1a:4c:29:53:75:cb:49:cf:16:d1:da:3d:b2:d2:85: 16:c6:3d:f2:87:7f:43:6f:14:ae:c0:64:58:75:eb: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:17:07:8C:47:84:C5:C6:E2:D1:7C:AB:20:61:79:40:9C:0E:E8:5E X509v3 Authority Key Identifier: keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:0a:96:78:33:b0:2d:12:e3:30:2f:96:70:cc:bd:02:62:c2: c9:2c:45:90:6f:a8:23:5e:44:70:41:69:35:c9:0b:77:8a:d6: 6b:6c:1f:74:99:4c:70:63:ef:90:03:05:8f:b3:e8:29:35:e0: 81:d4:83:ed:33:34:9f:6c:b3:a5:70:79:e7:9e:00:ed:0b:66: 31:d2:e1:c6:47:76:29:5f:0a:46:8b:2f:62:04:05:57:42:01: 71:a1:ac:ad:ed:28:c6:32:1d:a5:9f:bb:71:83:7e:47:57:b8: ca:33:3f:86:4d:28:08:e9:54:66:7f:db:79:47:77:c0:1a:8c: 68:cc:58:69:2e:3a:27:c9:82:cf:01:43:d3:b7:7f:b7:fc:46: 90:38:b1:d2:ae:72:c8:00:3c:7d:be:c5:a3:92:70:59:09:25: 94:4d:8a:28:b6:48:c9:42:db:ee:d6:59:62:50:c2:09:a7:01: dd:02:42:45:21:68:27:31:0d:4e:38:27:53:08:d9:ff:d4:54: a7:d9:77:dc:98:c1:05:6e:4d:eb:2b:25:75:78:7a:05:33:d2: 63:a9:31:5f:36:11:7a:b6:52:f5:d8:a8:a4:e2:1c:b7:43:7b: 55:09:84:80:a8:06:bb:3f:1a:39:8e:00:5e:2e:af:bc:0a:cf: d1:c7:d1:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwQjYxMTAvBgNVBAUTKEUzOTlGNTNDRkE1MkFCRDVBOEM3QzFEMzkyOTU5QzM5 NUYzOUUyN0UwHhcNMjQxMTIyMTc0MjA3WhcNMjQxMTI5MTc0MjA3WjAYMRYwFAYD VQQDEw02NzQwYzI2Zi00OWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtpb9tDVjQGxJk5Lc9/nKqgrYUuqsmUAziVA72vMDo4faXBp4/vs8iYah5uR XaVy1wemjEgD5Ma2/Qm403ZNoGGm1M8yq6pf/E6IT6grmN6a5vYYC2XLS46diUdS JrR9WUWoKcLZmTpbeN5Eogz1wKocMLa2q330vEUf5Inkf34RV/q6iN5mGsWiuGcW IpUugbuCE76dWciJ8rMZoU36IHd+ch+tZcsAj1NY4Bhnzf9fIGWUF7DFVfZpEyqM 9lfn15OLbxfayO9g0yNT5DXK9IT+TpiuhIwvMoC/NgHryrEaTClTdctJzxbR2j2y 0oUWxj3yh39DbxSuwGRYdeuxuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkXB4xH hMXG4tF8qyBheUCcDuheMB8GA1UdIwQYMBaAFOOZ9Tz6UqvVqMfB05KVnDlfOeJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDBCNi9ENEYxQzUyNjgz NUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5V294OEhUa3BXY09WODU0 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1bjFQUHBTcTlXb3g4SFRrcFdjT1Y4NTRuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDBCNi9ENEYxQzUyNjgzNUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBwU3E5 V294OEhUa3BXY09WODU0bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwCpZ4M7AtEuMwL5ZwzL0CYsLJLEWQb6gjXkRwQWk1yQt3itZrbB90 mUxwY++QAwWPs+gpNeCB1IPtMzSfbLOlcHnnngDtC2Yx0uHGR3YpXwpGiy9iBAVX QgFxoayt7SjGMh2ln7txg35HV7jKMz+GTSgI6VRmf9t5R3fAGoxozFhpLjonyYLP AUPTt3+3/EaQOLHSrnLIADx9vsWjknBZCSWUTYootkjJQtvu1lliUMIJpwHdAkJF IWgnMQ1OOCdTCNn/1FSn2XfcmMEFbk3rKyV1eHoFM9JjqTFfNhF6tlL12Kik4hy3 Q3tVCYSAqAa7Pxo5jgBeLq+8Cs/Rx9Fk -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org