$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: v1xn8J+ugLM6boZikwnIYeMM0CEiNRNftiJ9hPrRizM= Subject key identifier: 14:BD:D3:86:6C:D1:5D:F2:B6:1C:C7:2B:84:C6:EC:78:2C:40:C6:AF Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 07AD Signing time: Fri 22 Nov 2024 20:44:32 +0000 Manifest this update: Fri 22 Nov 2024 20:44:32 +0000 Manifest next update: Fri 29 Nov 2024 20:44:32 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: UOz7a+r+W4153clxsKW3eiRc4AiqIuK6kQUfDzgQIVM=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: BMvYT9IDar1yOpAiOIQ1zT2emoZ3Z/Bj9QOBnQBKVOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Nov 22 20:44:32 2024 GMT Not After : Nov 29 20:44:32 2024 GMT Subject: CN=6740ed30-7a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ae:07:b8:5d:13:df:ed:41:19:30:fe:23:a0: 4f:a2:6e:2e:bf:a2:c4:0d:83:6f:49:23:e0:cb:2b: e3:9a:7e:78:98:22:cd:fa:71:c5:ad:1e:d4:36:89: 92:36:d4:76:2a:4e:13:46:fd:bf:76:0a:e6:99:6b: bf:f0:57:d6:e7:99:aa:3a:76:a8:e7:de:c0:a9:63: bd:70:f9:6a:ae:35:0a:5c:9e:ce:79:a2:84:42:f1: e7:1b:3f:8b:3c:9b:25:62:20:56:e4:26:f0:2d:85: 20:b8:91:d9:38:3b:29:ea:47:0b:43:7e:be:61:16: 8e:07:f2:db:50:bb:be:5e:a2:17:62:b3:41:c1:65: 63:23:7d:84:cd:23:7a:de:07:fc:56:56:8b:2b:a6: b0:6b:45:d1:d3:5c:83:d5:99:63:87:14:c2:00:d0: 40:80:bf:fe:5d:f1:ca:3c:dc:24:4c:e6:f0:ed:0c: 7c:27:cd:a2:b8:8a:c2:34:35:e0:4f:77:17:7c:14: 6e:44:6f:10:3c:b4:d1:28:e0:5e:98:8c:f2:cc:4c: e3:21:96:d5:ec:62:5f:db:22:1c:b2:60:8c:26:73: 08:27:2f:6f:15:a1:95:13:cb:df:f5:67:9d:f6:7c: e0:19:f6:65:72:10:ce:5a:53:b0:78:37:27:47:d0: 7b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BD:D3:86:6C:D1:5D:F2:B6:1C:C7:2B:84:C6:EC:78:2C:40:C6:AF X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:99:43:19:82:2b:9b:34:55:b9:f9:9a:24:21:9d:d3:b2:76: c0:8d:f1:bb:ff:74:2f:a0:dd:64:57:80:f9:86:1c:a4:85:a9: 35:e3:42:98:e4:5a:7a:49:a5:3c:8c:e7:f9:9b:e1:83:5a:c3: 60:a8:fc:6d:4b:e4:38:ce:44:7a:7d:bc:5a:4b:d7:8b:eb:fa: 21:bc:ba:4c:ec:51:22:59:f7:65:99:ac:23:1d:02:d0:cc:71: 8f:7f:9e:87:15:12:b2:e7:53:51:a5:b6:09:96:50:dd:a7:b1: 03:9f:73:3e:a2:c8:96:b4:08:d2:9e:ff:19:a5:7f:1a:09:94: df:43:41:ce:7d:f2:bb:f2:4a:a1:92:1e:18:24:45:b7:c9:59: 8f:5e:10:71:cf:96:53:a8:4f:5f:01:92:25:4c:77:fc:1f:97: 4b:42:8a:a7:d0:8b:83:94:80:f7:76:7b:03:fb:22:7c:f7:01: 92:ba:db:4d:97:f3:ee:da:8e:cd:5c:5a:92:34:d4:ea:e8:4a: d9:3a:9a:96:a1:84:0f:77:87:1a:ea:a5:53:f4:3a:23:c4:79: 53:95:67:22:32:19:d9:9d:85:00:0b:fa:ca:f7:03:25:f3:e8: 47:f0:00:5b:92:26:f6:91:ea:1c:c1:f5:ba:cb:b2:82:bf:02: c4:b2:71:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjQxMTIyMjA0NDMyWhcNMjQxMTI5MjA0NDMyWjAYMRYwFAYD VQQDEw02NzQwZWQzMC03YTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5K4HuF0T3+1BGTD+I6BPom4uv6LEDYNvSSPgyyvjmn54mCLN+nHFrR7UNomS NtR2Kk4TRv2/dgrmmWu/8FfW55mqOnao597AqWO9cPlqrjUKXJ7OeaKEQvHnGz+L PJslYiBW5CbwLYUguJHZODsp6kcLQ36+YRaOB/LbULu+XqIXYrNBwWVjI32EzSN6 3gf8VlaLK6awa0XR01yD1ZljhxTCANBAgL/+XfHKPNwkTObw7Qx8J82iuIrCNDXg T3cXfBRuRG8QPLTRKOBemIzyzEzjIZbV7GJf2yIcsmCMJnMIJy9vFaGVE8vf9Wed 9nzgGfZlchDOWlOweDcnR9B7VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBS904Zs 0V3ythzHK4TG7HgsQMavMB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/mUMZgiubNFW5+ZokIZ3TsnbAjfG7/3QvoN1kV4D5hhykhak140KY 5Fp6SaU8jOf5m+GDWsNgqPxtS+Q4zkR6fbxaS9eL6/ohvLpM7FEiWfdlmawjHQLQ zHGPf56HFRKy51NRpbYJllDdp7EDn3M+osiWtAjSnv8ZpX8aCZTfQ0HOffK78kqh kh4YJEW3yVmPXhBxz5ZTqE9fAZIlTHf8H5dLQoqn0IuDlID3dnsD+yJ89wGSuttN l/Pu2o7NXFqSNNTq6ErZOpqWoYQPd4ca6qVT9DojxHlTlWciMhnZnYUAC/rK9wMl 8+hH8ABbkib2keocwfW6y7KCvwLEsnHR -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org