$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json) Hash identifier: c1SCVXYnNWI5+t7nfakBI4PmcPkmGp4Z536/O22bitM= Subject key identifier: 6D:5C:3B:32:87:0B:D5:E4:8D:A7:7C:27:6F:39:4D:8D:92:D1:0E:26 Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft Manifest number: 0106 Signing time: Thu 21 Nov 2024 03:14:56 +0000 Manifest this update: Thu 21 Nov 2024 03:14:55 +0000 Manifest next update: Thu 28 Nov 2024 03:14:55 +0000 Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: M4TdvZhiOSLE+gxNNt+AbjkAwsVdASCedrU3d6itTA8=) 2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: pUYwtk7H4SErO0RmecDKwte6PxJGNXwb2vfQgoNABbY=) 3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: qxnwJg8IFQzglpT6JsIB6JuKL16Bl6FnMy8IuEKj94o=) 4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: ZeCYlYIZOe18L8obkQDh8oWchb2x2gc6pA83/iYindw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Validity Not Before: Nov 21 03:14:55 2024 GMT Not After : Nov 28 03:14:55 2024 GMT Subject: CN=673ea5b0-633b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:ee:e7:b5:65:82:6c:57:13:96:39:38:62: 8c:cc:40:8c:e1:2f:9c:60:e7:19:1d:94:29:aa:f0: 6a:59:e2:ae:d9:3e:0e:b6:92:88:da:1d:08:2f:7d: 94:4a:a2:e4:c0:8d:c7:25:71:c3:a1:4b:b7:30:a1: c1:db:1e:55:e4:0c:89:f3:55:09:51:b7:17:6e:f1: 9f:ad:7b:78:2b:c3:b9:19:d5:0e:20:1a:a7:ea:d2: 9d:92:e1:89:73:a9:b9:76:9b:d0:1c:55:c6:de:fb: 63:98:6f:d8:09:91:08:c2:90:9b:47:83:bb:ab:ee: d8:95:1c:b6:50:e3:89:3c:b2:95:9b:8c:50:a3:9a: 12:8c:ce:3b:cd:19:c2:32:b7:21:f6:6a:6b:32:6d: 5a:fa:86:3f:1f:18:f7:18:00:12:e4:47:b3:49:2d: 1f:45:12:36:a2:55:50:ce:96:c6:93:fd:fe:0e:42: c7:99:78:3d:f5:e4:b4:9e:0a:53:df:88:e7:c6:14: 3a:8e:be:8c:97:a8:9a:7b:64:03:06:74:27:6a:30: 05:f3:bd:6b:a3:67:9a:f8:6d:3a:eb:7b:15:74:9e: df:ca:5e:f8:79:8e:0d:c5:10:40:4b:cb:3d:f9:6a: e3:ff:bd:e1:2d:7a:16:f7:f5:92:85:e8:42:64:ba: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5C:3B:32:87:0B:D5:E4:8D:A7:7C:27:6F:39:4D:8D:92:D1:0E:26 X509v3 Authority Key Identifier: keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e2:ca:16:52:e6:85:c3:5a:c0:21:c6:41:5b:7b:7c:28:e7: d1:7e:a9:5f:85:d1:c8:68:40:da:42:56:da:47:41:e9:96:be: 49:5f:51:25:51:ca:5a:92:03:ad:5e:cc:89:cd:8a:9a:44:81: 21:58:88:15:94:4c:70:43:c2:24:71:00:2e:e6:34:bf:a3:a7: 71:4d:81:6e:8a:9e:d9:87:bb:ba:1a:13:1b:56:7b:49:ab:10: 6b:37:7b:a0:80:0a:f1:98:a2:81:a1:da:50:db:47:bf:18:fd: f0:aa:98:6a:21:91:8e:7c:fe:72:12:02:6f:53:53:03:55:a4: 0b:b0:f0:6f:16:35:36:18:f4:f6:ff:e0:a3:f9:38:1d:bf:2b: 34:83:99:e7:96:69:83:30:23:0b:57:a8:0a:6f:0e:7e:b0:f2: b0:80:2e:32:4a:8c:89:25:62:e0:f7:b5:0d:f7:a2:0a:ac:8f: ed:ef:38:73:89:38:a6:a5:f6:99:a1:08:c8:e2:c7:fa:c7:b3: aa:47:e3:77:f1:2a:88:5f:4b:a2:ad:dd:12:df:0a:85:1e:2d: 0c:dd:22:df:42:1b:48:20:2c:9d:be:5f:bf:8f:fe:e6:1c:7a: 26:66:d7:20:5e:ea:e3:1c:85:9d:c7:85:43:6a:07:6a:38:a6: 1f:74:c0:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC M0VCOEI2MzAwHhcNMjQxMTIxMDMxNDU1WhcNMjQxMTI4MDMxNDU1WjAYMRYwFAYD VQQDEw02NzNlYTViMC02MzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6Du57VlgmxXE5Y5OGKMzECM4S+cYOcZHZQpqvBqWeKu2T4OtpKI2h0IL32U SqLkwI3HJXHDoUu3MKHB2x5V5AyJ81UJUbcXbvGfrXt4K8O5GdUOIBqn6tKdkuGJ c6m5dpvQHFXG3vtjmG/YCZEIwpCbR4O7q+7YlRy2UOOJPLKVm4xQo5oSjM47zRnC Mrch9mprMm1a+oY/Hxj3GAAS5EezSS0fRRI2olVQzpbGk/3+DkLHmXg99eS0ngpT 34jnxhQ6jr6Ml6iae2QDBnQnajAF871ro2ea+G0663sVdJ7fyl74eY4NxRBAS8s9 +Wrj/73hLXoW9/WShehCZLrj1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1cOzKH C9Xkjad8J285TY2S0Q4mMB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2 VS1rcE9LTTA3R3V6NjR0akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz4soWUuaFw1rAIcZBW3t8KOfRfqlfhdHIaEDaQlbaR0Hplr5JX1El UcpakgOtXsyJzYqaRIEhWIgVlExwQ8IkcQAu5jS/o6dxTYFuip7Zh7u6GhMbVntJ qxBrN3uggArxmKKBodpQ20e/GP3wqphqIZGOfP5yEgJvU1MDVaQLsPBvFjU2GPT2 /+Cj+Tgdvys0g5nnlmmDMCMLV6gKbw5+sPKwgC4ySoyJJWLg97UN96IKrI/t7zhz iTimpfaZoQjI4sf6x7OqR+N38SqIX0uird0S3wqFHi0M3SLfQhtIICydvl+/j/7m HHomZtcgXurjHIWdx4VDagdqOKYfdMCb -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:55 2024 by rpki-client on console-fra.rpki-client.org