$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: qRRrmN5PY77xs+h0vQ9VDRl5sD58UFhN7q0xPQkNUTw= Subject key identifier: 67:13:C2:67:C3:F5:DB:89:8F:45:D3:84:1F:BF:6A:28:B2:32:10:F1 Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 074C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 0744 Signing time: Fri 22 Nov 2024 21:08:07 +0000 Manifest this update: Fri 22 Nov 2024 21:08:07 +0000 Manifest next update: Fri 29 Nov 2024 21:08:07 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: PU3anF0y6R5OKbt2BF6gxIvB4sAPT+dHGhwMkjFoaA4=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: IJIqvuaNwhrm7cd6mqT3kr2G5lukf3imyP1z+aoqCD0=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: bTe36H87paM4gMzl+HYUuMJ499eE4eP8i0YbmoF8HP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1868 (0x74c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Nov 22 21:08:07 2024 GMT Not After : Nov 29 21:08:07 2024 GMT Subject: CN=6740f2b7-6e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:bb:35:b9:eb:8d:db:1c:dc:9d:e9:c8:22: 6a:20:f3:2a:06:7f:ff:9e:e0:c3:2a:a5:e1:e0:be: 1d:d6:b8:27:d6:74:1e:a3:e7:23:4a:17:a5:6b:8f: fd:ab:a0:a3:07:a7:90:da:c7:6a:ce:67:97:cf:7a: 24:cc:39:cf:11:a6:af:d1:ae:b9:a4:d4:1a:36:5a: 40:9b:e4:41:83:79:25:0c:c3:47:b6:d4:25:3d:a3: ca:f5:65:4d:dc:56:f7:d5:2e:ff:65:ec:62:30:80: d4:e1:01:da:be:2e:ae:7a:15:89:83:bd:f6:49:89: 9b:f2:43:d9:bc:c4:77:d3:64:7a:a5:48:fc:5b:ae: 71:e7:85:ae:ff:aa:f3:01:dc:17:e9:8e:af:d2:c8: 97:d4:e2:92:ff:87:e4:dd:41:41:84:65:de:9b:e4: 4c:21:2e:cd:de:4b:2c:8d:aa:a0:ef:01:8d:ac:94: f0:d7:87:61:69:66:f1:11:83:b4:ab:bf:36:59:b6: f9:44:76:59:b0:2b:f5:d4:27:d2:f9:13:04:84:c1: 0a:72:eb:a1:6f:36:f0:aa:0c:7f:65:a1:95:6a:20: a4:70:93:a9:2a:9f:62:12:6c:6c:be:8e:f5:2d:40: 11:72:7b:20:5c:b9:34:18:20:44:c3:f9:26:40:dc: f3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:13:C2:67:C3:F5:DB:89:8F:45:D3:84:1F:BF:6A:28:B2:32:10:F1 X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:f8:fe:b8:55:12:b6:41:eb:7d:cd:5f:ef:8f:ae:e1:7e:26: 71:26:10:97:76:11:94:4d:fb:21:8e:aa:8c:35:28:15:00:bd: 68:5f:51:76:1d:1a:35:9b:b9:6d:d8:7c:55:b1:39:6f:56:6a: 50:da:13:44:17:18:2a:a9:2a:4a:c6:43:27:fd:82:98:c1:29: f8:4d:80:44:67:32:1e:4f:af:a9:ba:ec:f8:06:5c:41:33:0e: a8:f8:2d:cc:16:ba:07:ec:33:bf:dc:3c:ae:ec:13:b5:b2:50: 68:79:52:3b:2d:a9:22:01:42:77:42:a5:27:c0:03:fe:55:7b: b7:30:08:af:d7:4b:c7:3e:a7:77:27:00:77:66:90:75:bb:d6: 25:cd:1f:3f:e6:63:1c:45:b4:f2:bb:d1:00:b4:6f:6d:c2:95: ba:03:33:ce:3a:5c:c0:a9:86:6f:94:78:17:11:67:8b:3a:12: 6d:6d:ce:b9:99:ef:2d:9b:86:96:e2:64:b6:ce:63:eb:1c:97: 46:a1:ac:16:69:a7:3f:8d:5a:37:80:ee:b0:75:e4:ff:79:ba: 73:21:fe:5f:8c:35:3a:11:71:2c:8c:c5:37:30:a7:74:22:af: 14:43:d9:77:4e:18:95:d8:79:91:b0:72:7a:11:31:9d:2a:7d: 7f:38:74:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjQxMTIyMjEwODA3WhcNMjQxMTI5MjEwODA3WjAYMRYwFAYD VQQDEw02NzQwZjJiNy02ZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsje7Nbnrjdsc3J3pyCJqIPMqBn//nuDDKqXh4L4d1rgn1nQeo+cjShela4/9 q6CjB6eQ2sdqzmeXz3okzDnPEaav0a65pNQaNlpAm+RBg3klDMNHttQlPaPK9WVN 3Fb31S7/ZexiMIDU4QHavi6uehWJg732SYmb8kPZvMR302R6pUj8W65x54Wu/6rz AdwX6Y6v0siX1OKS/4fk3UFBhGXem+RMIS7N3kssjaqg7wGNrJTw14dhaWbxEYO0 q782Wbb5RHZZsCv11CfS+RMEhMEKcuuhbzbwqgx/ZaGVaiCkcJOpKp9iEmxsvo71 LUARcnsgXLk0GCBEw/kmQNzzdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcTwmfD 9duJj0XThB+/aiiyMhDxMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0+P64VRK2Qet9zV/vj67hfiZxJhCXdhGUTfshjqqMNSgVAL1oX1F2 HRo1m7lt2HxVsTlvVmpQ2hNEFxgqqSpKxkMn/YKYwSn4TYBEZzIeT6+puuz4BlxB Mw6o+C3MFroH7DO/3Dyu7BO1slBoeVI7LakiAUJ3QqUnwAP+VXu3MAiv10vHPqd3 JwB3ZpB1u9YlzR8/5mMcRbTyu9EAtG9twpW6AzPOOlzAqYZvlHgXEWeLOhJtbc65 me8tm4aW4mS2zmPrHJdGoawWaac/jVo3gO6wdeT/ebpzIf5fjDU6EXEsjMU3MKd0 Iq8UQ9l3ThiV2HmRsHJ6ETGdKn1/OHSX -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org