$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: Ia+aEt6kUUUENGA6wClxXfI5noB+SqYhrHr/NPIjgFY= Subject key identifier: AC:D2:3C:5E:6A:08:43:C9:09:9E:5B:41:E2:8A:D7:59:F6:05:A1:BF Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: 49 Signing time: Thu 21 Nov 2024 05:22:06 +0000 Manifest this update: Thu 21 Nov 2024 05:22:06 +0000 Manifest next update: Thu 28 Nov 2024 05:22:06 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: Je0Qu0u5h2KluhNOvbdJHkjWsqxvcN2BlxFMZCk27V0=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: AFifu1YP8FleMFw0L6x+s4qXy39ubAWolO6tvcH8Ipg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Nov 21 05:22:06 2024 GMT Not After : Nov 28 05:22:06 2024 GMT Subject: CN=673ec37e-ce6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:98:f3:44:91:28:3c:b8:94:a4:f9:73:ac:36: be:2d:4b:a6:b7:0b:43:8e:8d:46:02:11:06:12:ec: da:60:db:4f:d4:df:f4:9a:88:f8:3b:e3:95:c2:8d: 28:54:50:58:58:90:fe:dc:d4:20:da:ca:ad:25:06: 5a:f7:4f:79:00:3d:c2:23:4e:f2:7b:ad:2f:f3:7c: 51:88:00:18:09:22:ff:ab:ea:3b:c6:1b:c7:b0:58: 2e:2c:bd:56:07:ff:d5:f6:83:34:4f:89:19:4b:a0: e5:4b:62:3e:f5:f8:63:11:40:f2:e8:02:e1:1c:b5: 2d:4a:fb:27:bc:23:df:78:56:a2:8c:4f:67:fe:b9: 04:65:6f:1c:9c:ba:6d:d0:81:3d:1b:e3:ff:18:99: 6f:e4:f9:4e:96:30:ac:7f:56:13:1b:00:be:74:e0: 2f:0b:38:71:77:e8:84:6c:a0:d6:d0:9a:e3:2a:f6: 4f:2d:26:58:56:ba:9b:ef:39:f7:13:57:20:a3:a4: 54:b5:ab:45:66:3d:c9:89:5d:9f:d4:a0:88:4e:87: 35:8a:aa:35:90:c3:e2:4d:35:bf:fb:86:04:05:5a: 7f:4f:1f:a2:d7:cb:84:e9:de:46:ac:c0:69:fc:7b: b8:b5:59:a2:fb:3b:00:0a:e1:ea:39:41:eb:13:02: 21:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D2:3C:5E:6A:08:43:C9:09:9E:5B:41:E2:8A:D7:59:F6:05:A1:BF X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:dc:c6:51:5d:c3:6b:f5:ad:c3:bb:41:8e:21:d3:ec:b9:c8: 07:dd:5d:e5:bd:3f:fa:54:a7:c7:f1:65:cb:93:3c:c6:6d:79: 6b:a6:a0:89:c5:25:91:cb:ca:e4:e1:f5:f1:5b:b4:74:c7:b0: a1:88:b8:80:58:e7:5d:e2:5c:79:4b:89:36:00:38:9b:f3:c5: c7:21:bd:26:17:cf:4e:9a:4e:4a:95:f2:5e:6b:ee:7d:8d:75: a5:ad:80:59:37:02:4f:30:4b:ca:1d:a7:b2:bb:2f:e0:cd:f2: 9e:0f:07:a9:15:03:26:c2:68:3f:e4:3b:49:50:30:a4:84:03: f1:74:67:24:6c:a7:c4:91:80:6f:7a:34:7a:fc:60:8b:57:53: e3:77:ca:d3:ed:b3:92:26:9c:bf:44:67:96:84:b7:32:89:87: 1f:90:22:63:8f:9a:d4:ec:56:44:c4:f9:a8:16:b0:dc:c6:50: 5f:4b:fc:11:ea:fe:51:cb:99:d5:9c:a3:9e:ab:7f:9b:09:5c: 87:35:36:35:81:89:0a:7d:cd:37:ce:2f:41:4c:93:09:fc:68: 8b:28:a4:e1:98:85:86:da:05:d1:1a:72:71:41:7f:28:73:f6: 32:7d:65:32:73:0b:90:ce:c8:f4:ef:f3:f2:a9:84:fa:fb:16: 28:24:3b:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RjJCRDExMC8GA1UEBRMoRDFFRUJEMTYyNERDREU1MTk0MTBFRDVENjRFNkQ1MTM5 ODRCNzdEMDAeFw0yNDExMjEwNTIyMDZaFw0yNDExMjgwNTIyMDZaMBgxFjAUBgNV BAMTDTY3M2VjMzdlLWNlNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVmPNEkSg8uJSk+XOsNr4tS6a3C0OOjUYCEQYS7Npg20/U3/SaiPg745XCjShU UFhYkP7c1CDayq0lBlr3T3kAPcIjTvJ7rS/zfFGIABgJIv+r6jvGG8ewWC4svVYH /9X2gzRPiRlLoOVLYj71+GMRQPLoAuEctS1K+ye8I994VqKMT2f+uQRlbxycum3Q gT0b4/8YmW/k+U6WMKx/VhMbAL504C8LOHF36IRsoNbQmuMq9k8tJlhWupvvOfcT VyCjpFS1q0VmPcmJXZ/UoIhOhzWKqjWQw+JNNb/7hgQFWn9PH6LXy4Tp3kaswGn8 e7i1WaL7OwAK4eo5QesTAiHbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrNI8XmoI Q8kJnltB4orXWfYFob8wHwYDVR0jBBgwFoAU0e69FiTc3lGUEO1dZObVE5hLd9Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGMkJELzNFRTI3Njc2Mzg5 NjExRUY5RURFODEzNkM0RjlBRTAyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGU2OUZpVGMzbEdVRU8xZFpPYlZFNWhMZDlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNG MkJELzNFRTI3Njc2Mzg5NjExRUY5RURFODEzNkM0RjlBRTAyLzBlNjlGaVRjM2xH VUVPMWRaT2JWRTVoTGQ5QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKzcxlFdw2v1rcO7QY4h0+y5yAfdXeW9P/pUp8fxZcuTPMZteWumoInF JZHLyuTh9fFbtHTHsKGIuIBY513iXHlLiTYAOJvzxcchvSYXz06aTkqV8l5r7n2N daWtgFk3Ak8wS8odp7K7L+DN8p4PB6kVAybCaD/kO0lQMKSEA/F0ZyRsp8SRgG96 NHr8YItXU+N3ytPts5ImnL9EZ5aEtzKJhx+QImOPmtTsVkTE+agWsNzGUF9L/BHq /lHLmdWco56rf5sJXIc1NjWBiQp9zTfOL0FMkwn8aIsopOGYhYbaBdEacnFBfyhz 9jJ9ZTJzC5DOyPTv8/KphPr7FigkOxo= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:14 2024 by rpki-client on console-fra.rpki-client.org