$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft File: rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json) Hash identifier: 7/Q8ii5iOoHdNRdDVXNstJFHkTl+UNQqL7hVuamcp+E= Subject key identifier: 03:8C:BB:53:A2:CE:38:85:89:BA:3D:62:86:DC:F2:76:99:33:FD:5F Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft Manifest number: 0221 Signing time: Sat 23 Nov 2024 01:28:33 +0000 Manifest this update: Sat 23 Nov 2024 01:28:32 +0000 Manifest next update: Sat 30 Nov 2024 01:28:32 +0000 Files and hashes: 1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: 38FSmwppIQvwGGiFgzsbOEjluG0PjHMNXeR2LHAICBY=) 2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: aPI8mVL7Dstx7y3IRo2S4CN1FA4wN8FwOnV7yts7LdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Validity Not Before: Nov 23 01:28:32 2024 GMT Not After : Nov 30 01:28:32 2024 GMT Subject: CN=67412fc1-9fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:27:e5:6b:68:35:e5:50:49:af:8d:51:6b:74: ef:7e:17:10:78:cf:83:48:5c:8a:67:a2:c0:50:e5: f3:c6:85:a9:fa:e2:3d:a7:e4:31:25:2a:8c:6c:5f: d4:c1:99:d2:5a:55:5f:03:8e:e1:78:b2:16:8b:7f: 86:5a:6c:ac:16:a5:b5:1c:77:99:ec:05:db:63:d7: 67:7f:07:02:df:22:9e:64:bf:e9:d0:da:f1:33:3f: 08:41:75:6a:b2:b1:e7:de:1c:3c:5c:ab:dc:5d:6a: 4f:d7:27:61:74:7b:95:80:a1:13:a0:c2:05:2c:b4: 2b:63:a4:eb:9f:e5:3a:f1:82:34:91:61:0a:a9:38: 1a:4b:d0:db:47:32:37:8f:a3:9d:40:9f:11:b0:07: 6f:a3:ad:9d:dd:c7:cb:6c:53:d2:71:ee:21:67:88: 2d:3f:8b:00:85:3a:2e:6b:36:e4:cf:e1:74:bd:e5: 47:8e:1a:79:75:5c:fd:ce:64:92:d2:31:ca:61:7f: a7:06:b2:df:41:dd:1a:b8:65:19:de:c7:41:b8:e0: 22:55:ba:6e:65:12:21:36:5c:b9:12:c8:3f:94:4b: b1:8a:05:13:40:ad:64:07:02:d0:c4:f2:39:47:07: 61:bd:71:58:51:73:24:cf:55:8a:7f:5e:2e:99:6f: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8C:BB:53:A2:CE:38:85:89:BA:3D:62:86:DC:F2:76:99:33:FD:5F X509v3 Authority Key Identifier: keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:9b:0f:0f:f3:14:2a:59:ed:8c:1c:30:ca:a6:33:c4:f7:83: dc:8e:93:cd:a9:d7:bd:21:eb:a8:02:dc:10:c1:12:dd:d3:ee: f7:3a:da:4c:68:63:34:d5:0b:da:fa:f2:52:d8:ea:bf:36:6c: 9e:f8:05:39:72:3d:f1:43:bc:f5:19:87:b2:0d:06:ac:30:1e: d9:38:a6:61:a0:d8:45:3c:23:a1:f5:06:67:fc:fe:70:1e:ed: 13:cb:98:e0:3a:c1:66:75:64:f0:ab:9e:d2:6b:46:8e:3f:47: 40:5c:7d:5d:49:db:0f:cf:15:8c:0d:27:19:06:e7:c7:5b:1d: 11:b6:8a:a0:d1:ad:55:06:e4:08:08:5e:bb:19:12:3b:f4:e0: a7:0b:54:14:da:e9:15:19:84:c6:4f:19:70:d2:38:04:d2:a6: aa:34:d1:b7:81:8a:44:35:f3:9d:06:95:91:eb:ba:dd:97:bd: a7:45:fe:00:31:43:d7:25:67:f6:f5:3a:48:50:fc:6e:19:de: 38:d3:60:8d:6e:67:3e:16:8c:6b:31:6e:56:fd:44:5f:bb:b3: c6:98:b0:58:b1:45:57:fb:da:02:b6:f8:a7:8b:c7:f9:3f:79: 8e:a1:7b:b8:b3:95:7a:a2:38:66:86:3e:fc:b3:6b:e5:1f:62: ef:67:09:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1ODYxMTAvBgNVBAUTKEFDMjNGNTREMzAxNTBCNDYwMDlDMUEwMjlFNUVFQ0RC NkUwNTU2NTYwHhcNMjQxMTIzMDEyODMyWhcNMjQxMTMwMDEyODMyWjAYMRYwFAYD VQQDEw02NzQxMmZjMS05ZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ifla2g15VBJr41Ra3TvfhcQeM+DSFyKZ6LAUOXzxoWp+uI9p+QxJSqMbF/U wZnSWlVfA47heLIWi3+GWmysFqW1HHeZ7AXbY9dnfwcC3yKeZL/p0NrxMz8IQXVq srHn3hw8XKvcXWpP1ydhdHuVgKEToMIFLLQrY6Trn+U68YI0kWEKqTgaS9DbRzI3 j6OdQJ8RsAdvo62d3cfLbFPSce4hZ4gtP4sAhTouazbkz+F0veVHjhp5dVz9zmSS 0jHKYX+nBrLfQd0auGUZ3sdBuOAiVbpuZRIhNly5Esg/lEuxigUTQK1kBwLQxPI5 RwdhvXFYUXMkz1WKf14umW/EZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOMu1Oi zjiFibo9Yobc8naZM/1fMB8GA1UdIwQYMBaAFKwj9U0wFQtGAJwaAp5e7NtuBVZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTU4Ni8wRDYxOTE2ODA5 OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMwWUFuQm9Dbmw3czIyNEZW bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDUDFUVEFWQzBZQW5Cb0NubDdzMjI0RlZsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTU4Ni8wRDYxOTE2ODA5OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMw WUFuQm9Dbmw3czIyNEZWbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcmw8P8xQqWe2MHDDKpjPE94PcjpPNqde9IeuoAtwQwRLd0+73OtpM aGM01Qva+vJS2Oq/Nmye+AU5cj3xQ7z1GYeyDQasMB7ZOKZhoNhFPCOh9QZn/P5w Hu0Ty5jgOsFmdWTwq57Sa0aOP0dAXH1dSdsPzxWMDScZBufHWx0Rtoqg0a1VBuQI CF67GRI79OCnC1QU2ukVGYTGTxlw0jgE0qaqNNG3gYpENfOdBpWR67rdl72nRf4A MUPXJWf29TpIUPxuGd4402CNbmc+FoxrMW5W/URfu7PGmLBYsUVX+9oCtvini8f5 P3mOoXu4s5V6ojhmhj78s2vlH2LvZwkW -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org