$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json) Hash identifier: 0i/4mSo6eaC4n1/qT6/koGaZxwCuB4VX2j1h6oZZhdc= Subject key identifier: EB:44:B5:A8:91:41:FE:B8:77:19:3E:8D:31:C2:BF:B1:AC:A5:66:C8 Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 0746 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft Manifest number: 072F Signing time: Fri 22 Nov 2024 21:22:41 +0000 Manifest this update: Fri 22 Nov 2024 21:22:40 +0000 Manifest next update: Fri 29 Nov 2024 21:22:40 +0000 Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: zUsdAsERpI5G0CiOVmMQpvqOoTFlSMpkRGkxWGPA3So=) 2: 4DB84668F3B211EEB1567D09C4F9AE02.roa (hash: ztKXhDhJ14EfJaZkgDLzDwykYjsdVTuhrCRbiAIQ468=) 3: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: 58z0sDsYRtdYBAtwDhNvP7kyEQJboZJS4GpwJLh2ing=) 4: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: gdVUdTDJS2HzCLE0SH5abxwvNMrpuz9i+05KM/O5dKM=) 5: 601DCC529DA211EFA41BEC0DC4F9AE02.roa (hash: 1BHbw59gb/yO1/nis+2geLalX3TlK0Iokwr/SPuQQ3o=) 6: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: ewzgLIZLx9Y5nPTQhL+AITVEb8oh3TwTplFpZhdDOMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1862 (0x746) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Validity Not Before: Nov 22 21:22:40 2024 GMT Not After : Nov 29 21:22:40 2024 GMT Subject: CN=6740f620-3a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fc:ef:98:1f:7e:55:40:b4:6b:aa:ac:2e:e3: e7:08:9a:bb:81:7b:5f:8c:20:1a:b2:2c:e6:48:a2: 7f:68:d7:6c:58:14:32:6a:75:7c:6e:51:ce:ff:11: 1c:82:91:7f:e5:0a:c3:d9:7b:72:69:38:4d:7a:71: df:8b:37:d9:b3:51:5f:34:f4:1f:a3:d1:d7:9f:db: d5:d8:3b:97:32:b9:0e:b3:25:c5:0a:6c:59:c5:a8: 10:8b:99:ca:81:4b:77:11:c2:7a:63:8a:66:78:e3: ad:27:b5:27:b3:9e:83:d2:41:60:4d:69:b0:18:6a: 0a:d5:b9:91:d3:e2:2e:19:f3:b8:3d:b7:64:0b:4b: d9:ac:c8:9c:cb:52:eb:02:e4:33:e1:ab:6c:44:3b: f3:8f:49:34:6b:2d:3b:d3:9b:9b:b9:1f:ae:8f:05: b6:7c:d3:b9:d4:cf:66:20:99:8f:76:64:b5:db:44: ab:37:8d:44:fa:74:e4:11:cf:e9:42:d9:d3:eb:ba: 99:8a:43:d1:3c:7f:f5:60:52:33:1a:bb:e4:09:36: 6e:36:56:d4:80:1f:de:72:1d:f2:88:59:7e:13:9e: 52:44:44:7d:76:8a:5b:6c:82:1f:fb:2d:fd:ce:5b: df:f1:c0:ea:cd:ae:54:4c:c3:7f:0b:4e:5a:85:41: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:44:B5:A8:91:41:FE:B8:77:19:3E:8D:31:C2:BF:B1:AC:A5:66:C8 X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:af:c9:95:b6:bd:87:50:23:c8:5f:ce:bc:34:03:76:a5:28: 53:58:70:67:ee:3c:65:49:c5:a8:cf:50:93:ee:2c:2e:7f:d9: 3e:9a:c5:01:16:6b:6c:0d:14:95:e4:68:13:a6:64:d8:49:8e: 1c:77:f4:58:ca:b1:f2:a3:b7:5a:65:76:20:88:ec:43:2f:d7: 06:a8:80:7f:42:82:76:cd:51:86:f9:81:61:92:b2:9c:fc:79: 70:25:a4:9f:ca:49:f9:35:84:4a:45:88:ee:74:f1:f3:fa:45: c3:2e:88:d9:0f:76:3d:df:06:56:38:90:05:b3:bd:40:f3:41: 89:b3:e3:39:6d:88:85:79:d4:2c:30:98:c2:66:61:00:1c:46: 95:a7:08:ee:fa:52:74:96:cb:48:20:74:33:1c:2d:21:80:82: 14:5a:bc:8a:2e:e8:e5:4f:1f:46:af:53:e7:a0:f8:b2:a1:dd: ac:45:40:ae:5b:c5:1f:93:b7:5a:e2:4b:db:6a:d0:c9:5b:ca: 93:b1:b8:78:61:24:38:e7:1c:41:3f:3b:39:de:0b:a3:98:97: 6b:59:02:09:49:0d:fc:24:8b:fe:a3:1c:eb:df:8c:2d:4e:ea: 1f:b6:69:ac:07:77:19:44:3c:07:b2:1d:25:c1:9b:e2:cc:32: de:80:4b:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjQxMTIyMjEyMjQwWhcNMjQxMTI5MjEyMjQwWjAYMRYwFAYD VQQDEw02NzQwZjYyMC0zYTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvzvmB9+VUC0a6qsLuPnCJq7gXtfjCAasizmSKJ/aNdsWBQyanV8blHO/xEc gpF/5QrD2XtyaThNenHfizfZs1FfNPQfo9HXn9vV2DuXMrkOsyXFCmxZxagQi5nK gUt3EcJ6Y4pmeOOtJ7Uns56D0kFgTWmwGGoK1bmR0+IuGfO4PbdkC0vZrMicy1Lr AuQz4atsRDvzj0k0ay0705ubuR+ujwW2fNO51M9mIJmPdmS120SrN41E+nTkEc/p QtnT67qZikPRPH/1YFIzGrvkCTZuNlbUgB/ech3yiFl+E55SRER9dopbbIIf+y39 zlvf8cDqza5UTMN/C05ahUHydQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtEtaiR Qf64dxk+jTHCv7GspWbIMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDFFQS85QzkzMkI0ODE3M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThj SUVSRG44T1FyVmJjUEx6V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBir8mVtr2HUCPIX868NAN2pShTWHBn7jxlScWoz1CT7iwuf9k+msUB FmtsDRSV5GgTpmTYSY4cd/RYyrHyo7daZXYgiOxDL9cGqIB/QoJ2zVGG+YFhkrKc /HlwJaSfykn5NYRKRYjudPHz+kXDLojZD3Y93wZWOJAFs71A80GJs+M5bYiFedQs MJjCZmEAHEaVpwju+lJ0lstIIHQzHC0hgIIUWryKLujlTx9Gr1PnoPiyod2sRUCu W8Ufk7da4kvbatDJW8qTsbh4YSQ45xxBPzs53gujmJdrWQIJSQ38JIv+oxzr34wt TuoftmmsB3cZRDwHsh0lwZvizDLegEvF -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org