$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: Q/IgkZU3Mtk4xwQ9i2FYfKNkmLqmqOAC0GTGTaGtoFc= Subject key identifier: B7:B9:9E:C1:D5:87:46:32:D8:73:33:06:F4:A7:19:4B:24:9B:57:41 Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0C3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0C29 Signing time: Fri 22 Nov 2024 18:15:46 +0000 Manifest this update: Fri 22 Nov 2024 18:15:46 +0000 Manifest next update: Fri 29 Nov 2024 18:15:46 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: ioE2++HeiyUkEqfLaworQ+XhgdfWnbs83zKCGNM+iBc=) 2: 1FC5063AE0D411ECB6C0B01CC4F9AE02.roa (hash: logqdhARGTyBkzJX/eotDYOSUYMcRn8n6eQk1B3sltA=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: CFNa1CRrRXsw2NlqSuSKe2rvDg2ywkEC8x6fBZFbOK4=) 4: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: GtVkTj6lkgw7RXe+n4R0d/g9GkOJM8psiPRDO4atRDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3134 (0xc3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Nov 22 18:15:46 2024 GMT Not After : Nov 29 18:15:46 2024 GMT Subject: CN=6740ca52-fc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:19:eb:a1:96:ff:3a:fa:16:07:e9:9c:b5: 47:99:c1:a8:3d:b4:af:25:6a:98:dd:d6:0a:18:23: 14:1f:7f:15:23:2f:7b:91:eb:41:84:5c:0d:fa:98: f7:1b:a4:68:9d:4c:08:19:96:b4:cc:5f:50:35:7f: 52:ad:28:51:05:74:07:e6:3e:60:74:27:0c:59:04: cd:fc:e3:43:8d:37:4c:91:e7:1f:f8:5c:c5:d7:bc: 09:0c:7f:0f:92:eb:cd:30:4e:11:3e:50:38:80:60: 49:32:ef:69:b7:b4:47:59:11:74:84:a2:33:43:00: 54:f1:b5:23:a6:4f:ea:3b:56:2d:d9:81:1e:4d:18: b8:c2:30:06:02:5b:d9:2e:ed:7e:99:46:5e:95:71: 58:59:e1:de:55:44:a5:33:3b:93:fc:77:c5:e8:64: c2:7e:b8:df:fb:03:71:15:77:19:78:8e:f5:9c:c1: a3:a9:8f:87:46:9b:ec:c6:61:db:bc:81:a8:7b:a5: a0:34:be:cb:95:df:d4:30:4a:bd:96:ec:46:cd:7a: 48:aa:41:b8:fe:ab:9e:33:b3:01:27:4b:6f:93:a6: 94:a2:43:9d:39:e2:a0:b3:88:31:68:60:06:77:03: 4c:2e:04:dd:9c:dd:c9:11:e7:fb:c4:b5:17:d1:53: 9a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B9:9E:C1:D5:87:46:32:D8:73:33:06:F4:A7:19:4B:24:9B:57:41 X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ae:2c:f8:a9:3c:3f:08:fa:52:62:1f:a5:7d:b7:ca:ab:4f: f9:03:34:1d:74:96:33:f6:c3:fc:20:23:cc:7f:a0:79:5b:2d: 29:ea:16:01:1a:bd:26:ea:61:bd:23:25:e7:a8:89:df:b5:91: 39:7c:78:b0:12:01:d9:e3:f6:cd:72:46:5a:66:17:7d:9e:e2: 93:3d:91:be:1a:e9:c8:ca:ab:10:6e:66:31:f7:06:6d:06:b1: 9f:60:34:38:b9:3a:55:f3:cc:ab:da:78:48:0f:b3:d4:dd:a3: d3:46:d2:86:5f:70:80:aa:c2:ef:86:2b:d8:be:0f:62:40:4c: c2:ab:d9:da:a7:c2:7f:75:75:9d:f2:2f:0b:f9:ae:fc:13:16: 73:6a:ae:ab:87:06:e6:38:18:f4:98:1d:c7:65:8c:ad:f6:b3: e1:48:a2:d1:e1:ec:26:af:7e:6f:5b:32:75:53:d2:40:3e:59: 6f:dd:6d:43:79:5f:9a:ab:23:9b:46:83:4d:7d:a3:2d:0a:cf: 40:14:75:dc:d3:31:ed:79:3f:b9:04:a2:5f:80:4b:75:21:2b: b6:0d:07:9d:6d:af:0b:41:80:33:d8:a4:c8:f2:64:03:a3:b9: e0:c3:65:86:98:86:be:d4:a8:93:c4:55:60:dd:b7:65:82:5b: 71:7a:b9:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjQxMTIyMTgxNTQ2WhcNMjQxMTI5MTgxNTQ2WjAYMRYwFAYD VQQDEw02NzQwY2E1Mi1mYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnYZ66GW/zr6FgfpnLVHmcGoPbSvJWqY3dYKGCMUH38VIy97ketBhFwN+pj3 G6RonUwIGZa0zF9QNX9SrShRBXQH5j5gdCcMWQTN/ONDjTdMkecf+FzF17wJDH8P kuvNME4RPlA4gGBJMu9pt7RHWRF0hKIzQwBU8bUjpk/qO1Yt2YEeTRi4wjAGAlvZ Lu1+mUZelXFYWeHeVUSlMzuT/HfF6GTCfrjf+wNxFXcZeI71nMGjqY+HRpvsxmHb vIGoe6WgNL7Lld/UMEq9luxGzXpIqkG4/queM7MBJ0tvk6aUokOdOeKgs4gxaGAG dwNMLgTdnN3JEef7xLUX0VOa0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLe5nsHV h0Yy2HMzBvSnGUskm1dBMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsriz4qTw/CPpSYh+lfbfKq0/5AzQddJYz9sP8ICPMf6B5Wy0p6hYB Gr0m6mG9IyXnqInftZE5fHiwEgHZ4/bNckZaZhd9nuKTPZG+GunIyqsQbmYx9wZt BrGfYDQ4uTpV88yr2nhID7PU3aPTRtKGX3CAqsLvhivYvg9iQEzCq9nap8J/dXWd 8i8L+a78ExZzaq6rhwbmOBj0mB3HZYyt9rPhSKLR4ewmr35vWzJ1U9JAPllv3W1D eV+aqyObRoNNfaMtCs9AFHXc0zHteT+5BKJfgEt1ISu2DQedba8LQYAz2KTI8mQD o7ngw2WGmIa+1KiTxFVg3bdlgltxerk7 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org