$ rpki-client -vvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft File: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft (raw, json) Hash identifier: au3HwT0X6hom6c1jBLN0v0giHw6fLwYzKkHgCl5z4zU= Subject key identifier: D2:4D:28:19:75:27:2D:F5:DA:05:EC:48:2D:FD:38:7A:09:19:A1:84 Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Certificate serial: 0C0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft Manifest number: 0C00 Signing time: Fri 22 Nov 2024 18:21:19 +0000 Manifest this update: Fri 22 Nov 2024 18:21:19 +0000 Manifest next update: Fri 29 Nov 2024 18:21:19 +0000 Files and hashes: 1: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl (hash: 9ugPiZuc9gxah3T6vOFJ4PCvQU9kvCjRSQFhbVE6MF8=) 2: 25234272DF4311EDA83C7074C4F9AE02.roa (hash: AVNjkoFWbdoZ3mYkyFU+MZFdfxVSMXxBvpkDPbahK84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3082 (0xc0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Validity Not Before: Nov 22 18:21:19 2024 GMT Not After : Nov 29 18:21:19 2024 GMT Subject: CN=6740cb9f-cb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fe:cd:41:e5:0e:f0:6e:5b:47:c2:60:22:08: df:66:a2:34:a9:6b:93:b1:c3:da:d6:22:14:09:8f: 41:05:d8:15:df:fd:30:3f:f1:0a:88:2f:d6:21:73: b2:34:19:9e:91:9f:09:1c:b2:1f:74:9d:c5:a8:07: 00:da:83:7b:a0:66:4d:3c:f2:33:95:78:53:1f:71: 56:9f:a0:7a:b4:0b:1f:2c:a3:02:13:33:e9:8c:81: 56:95:78:42:e1:24:3f:f9:d5:a9:a8:28:d4:4a:b7: 57:73:14:f3:cc:8f:3a:94:a8:b2:75:10:e3:b3:9c: 25:1d:c0:9a:61:4f:3f:93:d4:f5:d1:0d:06:75:08: 2a:4b:f6:f2:72:81:fb:53:50:0b:32:2d:fe:96:92: 92:fd:97:59:75:3a:af:13:2b:17:f7:00:ad:ab:7a: 41:fb:fd:89:f8:57:8b:06:2e:41:64:b7:30:5a:e2: 0a:44:6d:a7:c4:d6:f6:70:2c:eb:30:a9:6d:8d:84: d7:c6:b8:de:52:83:77:fc:e9:16:47:59:72:df:9b: cc:92:1f:07:a9:8a:5b:fe:bb:0b:84:0f:29:4e:4c: 9e:02:af:2d:d2:42:b8:fc:28:a2:67:2d:b0:df:75: e9:97:a9:a8:22:b4:01:f3:d2:d3:c5:51:6b:85:b1: bd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4D:28:19:75:27:2D:F5:DA:05:EC:48:2D:FD:38:7A:09:19:A1:84 X509v3 Authority Key Identifier: keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:11:4f:75:bd:70:31:ce:79:91:3f:57:64:b3:2b:2c:5d:a7: bb:fb:ea:a6:e8:ca:8f:8a:bf:0e:e0:ab:ee:75:3f:f0:80:3e: fc:e0:23:70:48:ca:c5:cc:0a:89:2d:8f:d1:87:da:c3:0b:e5: 04:ba:71:a3:ff:8f:e3:16:7d:36:7a:ef:33:ed:31:4d:93:e1: 58:a0:27:a2:ae:03:e5:4c:a2:21:be:92:d1:e1:87:63:a8:1d: 20:d3:6d:20:e7:7d:58:c5:ae:b3:fc:e3:ec:28:19:ce:2e:26: 19:90:fe:48:65:eb:4b:1f:f2:25:61:3b:8d:f1:35:94:3b:8e: 31:10:51:91:db:f1:7b:91:de:f3:9f:0e:8e:cd:5f:02:0b:f3: 57:7e:45:1f:6c:41:94:88:c6:27:54:bd:66:66:90:6d:23:11: e2:2f:e6:fa:a9:3f:c1:eb:72:f0:79:f0:2f:5c:ff:52:40:6c: 30:a6:a5:cf:ed:18:89:4f:f0:2b:e4:29:3d:b0:14:1b:70:8f: a4:46:1d:b0:46:a7:8a:f4:5e:81:60:5a:78:46:f3:a1:3f:cb: 0d:f5:72:db:5b:7f:91:9e:07:69:2e:d5:cc:60:5a:6e:61:34: 67:42:d2:f0:08:4e:db:2b:d3:42:a9:a5:8d:ce:52:38:8f:b7: 3d:89:c5:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyQ0UxMTAvBgNVBAUTKEFFMTYwNDU4NzJERERBQzNEQ0YxMkYwNzk1Q0FENzBF NEMwOUQ5NkMwHhcNMjQxMTIyMTgyMTE5WhcNMjQxMTI5MTgyMTE5WjAYMRYwFAYD VQQDEw02NzQwY2I5Zi1jYjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/7NQeUO8G5bR8JgIgjfZqI0qWuTscPa1iIUCY9BBdgV3/0wP/EKiC/WIXOy NBmekZ8JHLIfdJ3FqAcA2oN7oGZNPPIzlXhTH3FWn6B6tAsfLKMCEzPpjIFWlXhC 4SQ/+dWpqCjUSrdXcxTzzI86lKiydRDjs5wlHcCaYU8/k9T10Q0GdQgqS/bycoH7 U1ALMi3+lpKS/ZdZdTqvEysX9wCtq3pB+/2J+FeLBi5BZLcwWuIKRG2nxNb2cCzr MKltjYTXxrjeUoN3/OkWR1ly35vMkh8HqYpb/rsLhA8pTkyeAq8t0kK4/CiiZy2w 33Xpl6moIrQB89LTxVFrhbG9swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJNKBl1 Jy312gXsSC39OHoJGaGEMB8GA1UdIwQYMBaAFK4WBFhy3drD3PEvB5XK1w5MCdls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDJDRS8yQjBFNzI0MDAx MzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJzUGM4UzhIbGNyWERrd0oy V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoWUVXSExkMnNQYzhTOEhsY3JYRGt3SjJXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDJDRS8yQjBFNzI0MDAxMzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJz UGM4UzhIbGNyWERrd0oyV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1EU91vXAxznmRP1dksyssXae7++qm6MqPir8O4KvudT/wgD784CNw SMrFzAqJLY/Rh9rDC+UEunGj/4/jFn02eu8z7TFNk+FYoCeirgPlTKIhvpLR4Ydj qB0g020g531Yxa6z/OPsKBnOLiYZkP5IZetLH/IlYTuN8TWUO44xEFGR2/F7kd7z nw6OzV8CC/NXfkUfbEGUiMYnVL1mZpBtIxHiL+b6qT/B63LwefAvXP9SQGwwpqXP 7RiJT/Ar5Ck9sBQbcI+kRh2wRqeK9F6BYFp4RvOhP8sN9XLbW3+RngdpLtXMYFpu YTRnQtLwCE7bK9NCqaWNzlI4j7c9icXb -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org