$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: pGfqQ1APhlUrhacjGYoePDlzAkkQpymLjEZFrPFJtGk= Subject key identifier: 08:73:C1:E3:B8:FF:B9:D3:5A:03:D1:E2:EF:02:3C:64:BC:F2:B1:4D Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 02F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 02EF Signing time: Sat 23 Nov 2024 00:52:06 +0000 Manifest this update: Sat 23 Nov 2024 00:52:06 +0000 Manifest next update: Sat 30 Nov 2024 00:52:06 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: kTOWuFej3njVvModLAetmakp/VdJU4P8ObVZ/ZeVAI0=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: 5uQdC/Aj/BekU6t4F2SSyV0cuXGmv9OJwhqQoF3gV3Y=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: fZINIbheYfqPSlmD4xMT4zKcUz3FSELZ4ZHi11Z85ho=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: 62sXJWlT3h3nHyOfMwNf6c+ar5aY+tJqwoFwwPI3cac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Nov 23 00:52:06 2024 GMT Not After : Nov 30 00:52:06 2024 GMT Subject: CN=67412736-1fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0e:cd:f6:50:1c:eb:b3:88:fa:6e:56:e8:5b: bd:f6:0f:77:1f:1d:e5:09:0f:9b:27:ec:e1:46:b8: 7b:3e:e3:1d:51:ea:e3:f3:50:d0:c7:2b:e6:8c:08: 1a:15:1c:95:f3:1b:08:8a:16:cc:bb:0a:e3:96:9b: 81:bb:9d:84:cd:15:6b:48:a5:ed:d3:a9:43:93:73: 22:f0:10:f1:79:2f:0d:04:c7:2d:a9:d1:45:fb:7e: 53:20:60:61:6d:0e:4d:3f:63:b9:d8:9c:7c:c0:a8: e2:56:fa:f5:76:82:b7:cd:e1:86:31:ac:33:7d:a0: bd:30:89:15:00:ae:57:b5:ec:c9:4c:3b:7d:1d:b8: 57:c9:43:6c:0f:c3:ba:40:e9:96:8b:85:2c:ea:fb: d5:04:45:87:c0:9b:db:90:88:46:86:be:15:fe:b7: d7:4f:2a:c8:61:86:79:34:e6:4e:a6:9a:a3:15:46: a5:2e:77:10:92:ea:21:3c:e3:60:30:8f:fe:73:3d: cb:bf:22:21:3d:ca:47:f7:92:e2:55:f3:fd:bf:c6: cb:03:9a:ec:f8:84:ae:03:bf:fe:31:ad:93:ae:23: e5:a5:7b:fa:80:39:9f:f9:e5:61:88:7b:1b:e8:2d: a7:8f:53:2f:66:bc:97:5c:73:6e:3f:83:1f:90:29: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:73:C1:E3:B8:FF:B9:D3:5A:03:D1:E2:EF:02:3C:64:BC:F2:B1:4D X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:be:5f:19:41:e9:c7:e1:5e:e3:54:c6:d7:79:78:d3:b4:28: 25:f6:85:59:cc:3b:b5:22:b3:0e:c8:34:c3:e6:da:13:77:66: f1:3c:95:eb:fc:be:0a:8b:88:4f:4c:fb:b8:c9:db:e2:11:b1: 43:70:6e:a1:90:01:e8:b7:21:e0:7e:05:d8:c4:86:2e:e2:50: 7d:60:48:29:f9:64:53:42:b5:f6:aa:a1:67:b2:d0:55:b9:2c: 14:b7:67:c9:88:7e:5b:06:19:18:b7:3f:d7:b8:e6:d1:99:29: c6:d8:5d:f9:5f:64:80:09:cb:9e:24:ef:35:13:38:80:80:26: ff:3e:3b:32:7b:69:20:b4:8e:56:23:8f:9f:24:94:cd:91:14: 9f:89:68:b8:99:10:51:e8:55:9f:71:05:c3:54:fb:f0:0f:d4: f9:c6:c6:dd:94:fd:3b:21:91:1a:e5:6c:90:8f:50:2b:2d:d1: 72:6c:f2:04:7f:79:a2:9f:44:8b:a3:b7:c1:16:f3:57:ec:6a: 1d:b6:9c:3c:dc:7a:98:b5:41:c6:d4:ff:c2:16:68:3e:3e:1a: f9:0f:be:be:12:20:11:99:4c:00:d9:f5:87:13:21:32:dd:91: 01:49:29:fb:3e:35:78:4f:2f:19:62:45:48:76:24:6c:76:40: 9c:32:1d:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjQxMTIzMDA1MjA2WhcNMjQxMTMwMDA1MjA2WjAYMRYwFAYD VQQDEw02NzQxMjczNi0xZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2g7N9lAc67OI+m5W6Fu99g93Hx3lCQ+bJ+zhRrh7PuMdUerj81DQxyvmjAga FRyV8xsIihbMuwrjlpuBu52EzRVrSKXt06lDk3Mi8BDxeS8NBMctqdFF+35TIGBh bQ5NP2O52Jx8wKjiVvr1doK3zeGGMawzfaC9MIkVAK5XtezJTDt9HbhXyUNsD8O6 QOmWi4Us6vvVBEWHwJvbkIhGhr4V/rfXTyrIYYZ5NOZOppqjFUalLncQkuohPONg MI/+cz3LvyIhPcpH95LiVfP9v8bLA5rs+ISuA7/+Ma2TriPlpXv6gDmf+eVhiHsb 6C2nj1MvZryXXHNuP4MfkCm9mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhzweO4 /7nTWgPR4u8CPGS88rFNMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVvl8ZQenH4V7jVMbXeXjTtCgl9oVZzDu1IrMOyDTD5toTd2bxPJXr /L4Ki4hPTPu4ydviEbFDcG6hkAHotyHgfgXYxIYu4lB9YEgp+WRTQrX2qqFnstBV uSwUt2fJiH5bBhkYtz/XuObRmSnG2F35X2SACcueJO81EziAgCb/Pjsye2kgtI5W I4+fJJTNkRSfiWi4mRBR6FWfcQXDVPvwD9T5xsbdlP07IZEa5WyQj1ArLdFybPIE f3min0SLo7fBFvNX7Godtpw83HqYtUHG1P/CFmg+Phr5D76+EiARmUwA2fWHEyEy 3ZEBSSn7PjV4Ty8ZYkVIdiRsdkCcMh3b -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org