$ rpki-client -vvf rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft File: -1rPvPn87wNLipO9MZ5iBELWZn8.mft (raw, json) Hash identifier: hTUtQt4U8rLeaVWJrxhNjiffajN1Gpzag+jARvZYZdk= Subject key identifier: 49:55:A6:2C:5B:5B:A0:B6:08:8C:4C:01:6E:6B:5C:0A:9A:2D:5B:C8 Authority key identifier: FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F Certificate issuer: /CN=A912F515/serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft Manifest number: 28 Signing time: Sat 23 Nov 2024 05:44:12 +0000 Manifest this update: Sat 23 Nov 2024 05:44:11 +0000 Manifest next update: Sat 30 Nov 2024 05:44:11 +0000 Files and hashes: 1: -1rPvPn87wNLipO9MZ5iBELWZn8.crl (hash: jgUt9elJvMriln36JqlB1sgHpzNGFPkZX8cxg30lk58=) 2: 6A8E3C9474A811EFA3123A41C4F9AE02.roa (hash: apEkxffopCeqovMKL+kWef8zz6F2P5gxUW9hlBfV7TM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F515/serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Validity Not Before: Nov 23 05:44:11 2024 GMT Not After : Nov 30 05:44:11 2024 GMT Subject: CN=67416bab-9a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:71:f5:ed:28:95:c7:20:ac:88:e2:17:9b:da: b2:3c:16:ef:29:18:8d:bb:ad:65:11:9e:9a:cd:34: 82:ef:83:8c:c7:5a:47:6a:bc:b3:6f:00:e2:0c:26: 6b:5d:32:a5:61:e8:2e:8a:54:24:55:2e:b7:b2:30: 46:46:ac:a7:a5:20:aa:42:fc:bf:fd:9c:5f:3b:53: 2c:85:31:4e:59:30:d0:b2:c9:11:d5:ef:e7:73:21: 41:0a:2f:99:d3:2d:79:61:89:79:43:47:8a:78:7b: f6:17:11:85:25:0a:9c:2a:28:6b:9a:0e:99:3c:3b: a4:9b:a3:d6:8b:87:9b:ea:2c:a0:09:47:78:11:48: 4e:d5:e5:37:8e:06:a9:7f:50:eb:78:e9:59:e9:f7: 47:0a:e1:60:76:47:8b:66:5c:34:ea:23:60:aa:cf: c2:e1:eb:e1:9c:68:cd:6b:7b:18:fa:3a:ec:49:51: 6c:ae:e7:8d:05:71:0a:dc:5d:74:8e:ab:73:42:b3: 87:91:ae:5d:e5:1d:c8:e2:3f:4b:c8:d2:96:61:16: 96:3b:44:ae:ec:2c:e7:05:01:e7:eb:0e:db:dc:97: 2e:15:d2:60:56:b0:02:a7:b3:eb:2e:e8:7c:8c:bf: 37:b4:e0:6b:ed:5e:df:df:e7:79:96:86:fc:a1:30: ec:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:55:A6:2C:5B:5B:A0:B6:08:8C:4C:01:6E:6B:5C:0A:9A:2D:5B:C8 X509v3 Authority Key Identifier: keyid:FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:1e:a2:7a:23:7e:ad:6d:9a:8e:ca:68:3a:37:02:e7:5c:9c: f3:da:7f:ce:92:f9:5b:f9:c5:80:27:82:5c:60:84:e5:58:55: 10:82:96:2d:e4:bf:f0:ab:c8:82:0b:1a:a2:df:d4:05:eb:8d: 52:e6:cb:3c:6a:20:ee:90:25:01:d5:8c:a5:a7:67:4c:c3:94: b8:40:d4:29:1b:20:d1:a1:15:c4:15:36:e6:25:af:9a:01:c5: 18:46:d4:a4:f8:af:e7:9d:18:94:ee:0c:e7:3b:ff:3b:52:cc: 9d:e1:2d:35:99:b5:9b:9b:64:14:a6:4c:5d:d7:ef:9f:f9:2f: 24:95:41:40:1f:65:5e:4e:ef:66:a0:16:ae:af:30:8b:da:9c: 34:c0:d2:d7:7a:52:7f:46:ff:f0:2b:4a:e4:9e:6a:21:ba:26: 00:20:71:db:85:43:0f:2a:f9:02:ea:86:de:f6:e2:a8:9c:ab: 35:12:f7:98:a2:48:96:58:b9:07:f9:54:ca:8b:da:f7:ef:e4: 2b:7e:78:d4:be:53:61:e5:06:c6:96:81:e9:67:50:13:fa:03: e7:2a:ad:76:5d:f5:6e:5f:cb:ab:11:51:6a:65:a1:0d:e8:23: 01:ec:8e:7f:b2:27:6f:58:79:92:41:4b:64:4f:67:0b:45:9e: 61:5e:81:22 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjUxNTExMC8GA1UEBRMoRkI1QUNGQkNGOUZDRUYwMzRCOEE5M0JEMzE5RTYyMDQ0 MkQ2NjY3RjAeFw0yNDExMjMwNTQ0MTFaFw0yNDExMzAwNTQ0MTFaMBgxFjAUBgNV BAMTDTY3NDE2YmFiLTlhMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvcfXtKJXHIKyI4heb2rI8Fu8pGI27rWURnprNNILvg4zHWkdqvLNvAOIMJmtd MqVh6C6KVCRVLreyMEZGrKelIKpC/L/9nF87UyyFMU5ZMNCyyRHV7+dzIUEKL5nT LXlhiXlDR4p4e/YXEYUlCpwqKGuaDpk8O6Sbo9aLh5vqLKAJR3gRSE7V5TeOBql/ UOt46Vnp90cK4WB2R4tmXDTqI2Cqz8Lh6+GcaM1rexj6OuxJUWyu540FcQrcXXSO q3NCs4eRrl3lHcjiP0vI0pZhFpY7RK7sLOcFAefrDtvcly4V0mBWsAKns+su6HyM vze04GvtXt/f53mWhvyhMOxDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSVWmLFtb oLYIjEwBbmtcCpotW8gwHwYDVR0jBBgwFoAU+1rPvPn87wNLipO9MZ5iBELWZn8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNTE1LzNEM0NBMzA4NzRB NzExRUY4RUEyQzUzREM0RjlBRTAyLy0xclB2UG44N3dOTGlwTzlNWjVpQkVMV1pu OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTFyUHZQbjg3d05MaXBPOU1aNWlCRUxXWm44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NTE1LzNEM0NBMzA4NzRBNzExRUY4RUEyQzUzREM0RjlBRTAyLy0xclB2UG44N3dO TGlwTzlNWjVpQkVMV1puOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADEeonojfq1tmo7KaDo3AudcnPPaf86S+Vv5xYAnglxghOVYVRCCli3k v/CryIILGqLf1AXrjVLmyzxqIO6QJQHVjKWnZ0zDlLhA1CkbINGhFcQVNuYlr5oB xRhG1KT4r+edGJTuDOc7/ztSzJ3hLTWZtZubZBSmTF3X75/5LySVQUAfZV5O72ag Fq6vMIvanDTA0td6Un9G//ArSuSeaiG6JgAgcduFQw8q+QLqht724qicqzUS95ii SJZYuQf5VMqL2vfv5Ct+eNS+U2HlBsaWgelnUBP6A+cqrXZd9W5fy6sRUWploQ3o IwHsjn+yJ29YeZJBS2RPZwtFnmFegSI= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org