$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft File: MPDbgtWPWD6EiDeboA01rLNSYRA.mft (raw, json) Hash identifier: CSsmZ9owkP4K4rv6nB4Qe6pNz7oE/uYFmoX2RlHgz1M= Subject key identifier: 59:EF:E5:5B:65:04:D3:AF:5C:23:1A:70:EC:16:30:7F:2E:7A:67:05 Authority key identifier: 30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 Certificate issuer: /CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft Manifest number: A0 Signing time: Thu 21 Nov 2024 04:30:11 +0000 Manifest this update: Thu 21 Nov 2024 04:30:11 +0000 Manifest next update: Thu 28 Nov 2024 04:30:11 +0000 Files and hashes: 1: MPDbgtWPWD6EiDeboA01rLNSYRA.crl (hash: 5W7peJgT++kQr3HkVBkzX/1JgeZ/IYbqQ5PXXMvzn3Y=) 2: A20C3500BE6811EEBFF35870C4F9AE02.roa (hash: c6893+1KjPQa/LtrFWR6uLPBm/0LNUFn7UJlPtKcgfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110 Validity Not Before: Nov 21 04:30:11 2024 GMT Not After : Nov 28 04:30:11 2024 GMT Subject: CN=673eb753-a05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e8:df:9a:b0:1d:08:f6:ea:dc:ed:31:de:03: f4:44:df:ad:cd:bc:d8:91:b6:f8:62:0b:a7:96:59: c5:d4:4d:30:7e:3b:32:3c:c9:7f:e3:cf:17:38:29: aa:01:27:52:84:c8:1e:b4:d1:52:fb:4e:5d:5a:48: 94:5d:55:99:6f:4b:5d:21:99:38:1e:fe:b6:df:21: 58:be:d3:85:91:d4:11:f0:a2:8a:7f:67:2d:04:a4: 6c:c9:e0:72:3f:1e:f3:7d:f1:15:4d:91:d9:67:4d: e1:e4:5f:4d:a9:98:31:5f:db:54:c1:09:b0:a2:29: 6f:5f:09:d3:a0:11:a4:17:7c:4d:f1:a6:81:d4:25: 40:f5:85:bd:87:11:3a:92:84:c4:db:03:00:17:33: 99:7f:56:00:5e:6a:67:e6:66:37:41:da:6c:1d:21: 70:99:96:22:c8:a1:34:8f:4f:fd:1b:68:88:74:64: 98:7a:5e:13:45:0d:2f:79:68:ac:d0:ca:95:62:c1: 77:f5:f1:40:1d:8f:2c:53:1b:9d:78:4c:9d:62:93: 1f:d4:05:06:36:00:c3:ca:5d:1d:56:37:73:54:f0: 7b:10:a7:ce:82:31:3d:ac:0a:8d:1a:91:45:0f:46: 04:88:ee:21:78:9c:14:3c:7f:96:22:69:e8:9c:c7: d5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EF:E5:5B:65:04:D3:AF:5C:23:1A:70:EC:16:30:7F:2E:7A:67:05 X509v3 Authority Key Identifier: keyid:30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c3:16:bd:da:5b:e3:42:19:52:b4:5b:33:2f:44:f9:14:2a: bc:43:90:dc:03:8e:bf:52:0f:1a:a4:ad:d4:e8:0e:d1:90:40: 60:5c:22:00:b4:93:db:b7:4d:0f:36:9b:fc:11:99:5d:60:9b: bf:36:22:a6:a7:86:a4:2c:d0:2d:69:40:3d:9b:8d:a6:f9:24: 3f:96:bf:6d:12:b3:3a:21:9e:30:9d:0d:64:51:ec:b6:4d:d8: b3:3d:57:5c:7a:b6:1c:c5:bd:73:68:34:07:53:59:f4:d5:8f: 5a:fd:92:77:b7:0f:31:c8:e6:5e:7c:81:49:d5:ef:f2:50:36: b4:f8:3c:bd:92:b0:64:20:35:54:88:5c:4f:40:1f:d1:43:54: ad:35:a5:5c:34:1f:18:68:6f:28:40:0e:56:b7:24:dc:3e:94: 94:c2:99:d0:38:80:af:c9:8f:db:b3:90:74:c4:c7:5d:77:1c: b0:dc:70:35:77:25:f6:a4:ba:b4:0f:2d:a0:13:a6:68:6d:90: 00:54:95:be:d8:9a:4e:78:37:ee:46:51:7e:08:fd:36:48:80: 7e:f7:d7:c9:8c:c1:05:41:0d:e7:b0:f9:86:55:55:db:0b:2f: 05:7c:b8:71:d2:ec:49:6e:60:26:09:11:71:15:98:7c:43:24: f6:7f:5f:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDMwRjBEQjgyRDU4RjU4M0U4NDg4Mzc5QkEwMEQzNUFD QjM1MjYxMTAwHhcNMjQxMTIxMDQzMDExWhcNMjQxMTI4MDQzMDExWjAYMRYwFAYD VQQDEw02NzNlYjc1My1hMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxejfmrAdCPbq3O0x3gP0RN+tzbzYkbb4YgunllnF1E0wfjsyPMl/488XOCmq ASdShMgetNFS+05dWkiUXVWZb0tdIZk4Hv623yFYvtOFkdQR8KKKf2ctBKRsyeBy Px7zffEVTZHZZ03h5F9NqZgxX9tUwQmwoilvXwnToBGkF3xN8aaB1CVA9YW9hxE6 koTE2wMAFzOZf1YAXmpn5mY3QdpsHSFwmZYiyKE0j0/9G2iIdGSYel4TRQ0veWis 0MqVYsF39fFAHY8sUxudeEydYpMf1AUGNgDDyl0dVjdzVPB7EKfOgjE9rAqNGpFF D0YEiO4heJwUPH+WImnonMfVxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnv5Vtl BNOvXCMacOwWMH8uemcFMB8GA1UdIwQYMBaAFDDw24LVj1g+hIg3m6ANNayzUmEQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GQjE4Mjk5OEJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdENkVpRGVib0EwMXJMTlNZ UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01QRGJndFdQV0Q2RWlEZWJvQTAxckxOU1lSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA3QS9GQjE4Mjk5OEJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdE NkVpRGVib0EwMXJMTlNZUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBwxa92lvjQhlStFszL0T5FCq8Q5DcA46/Ug8apK3U6A7RkEBgXCIA tJPbt00PNpv8EZldYJu/NiKmp4akLNAtaUA9m42m+SQ/lr9tErM6IZ4wnQ1kUey2 TdizPVdcerYcxb1zaDQHU1n01Y9a/ZJ3tw8xyOZefIFJ1e/yUDa0+Dy9krBkIDVU iFxPQB/RQ1StNaVcNB8YaG8oQA5WtyTcPpSUwpnQOICvyY/bs5B0xMdddxyw3HA1 dyX2pLq0Dy2gE6ZobZAAVJW+2JpOeDfuRlF+CP02SIB+99fJjMEFQQ3nsPmGVVXb Cy8FfLhx0uxJbmAmCRFxFZh8QyT2f19i -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:14 2024 by rpki-client on console-fra.rpki-client.org