$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: qufzyW9dpeDMRqogj/f6wusWQjSHbdp+OeA6RKzL7d4= Subject key identifier: AE:69:D6:2F:31:95:44:7E:22:7D:87:39:B4:E1:60:4F:84:73:3D:CC Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 0101 Signing time: Sat 23 Nov 2024 03:19:56 +0000 Manifest this update: Sat 23 Nov 2024 03:19:56 +0000 Manifest next update: Sat 30 Nov 2024 03:19:56 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: 38tS/PZ59EL98imQAWvxEIPRe57La9FVf3SE2yCb0aY=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: 4J0ORjYm3cW6dunDewDTVLOKNHiY1sO2eutzlceykHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: Nov 23 03:19:56 2024 GMT Not After : Nov 30 03:19:56 2024 GMT Subject: CN=674149dc-adc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:bc:5d:d6:1b:0b:7c:df:87:08:0b:5c:4e: 7c:88:17:34:32:b7:e0:3f:88:0d:aa:d9:c7:5b:6a: 1d:fa:cc:c6:5b:75:1f:b4:3a:f3:92:b3:3a:d0:08: ff:60:54:52:fa:80:6a:bd:6a:fd:de:d1:64:93:23: de:eb:5c:97:0f:f1:87:24:00:f4:34:2e:51:ab:17: a1:a3:61:34:b1:05:5c:50:7a:51:b3:c8:56:6c:4d: 8a:b9:ca:a0:f3:4e:91:5b:e5:2d:dd:51:a7:33:c8: f0:35:ba:e9:81:49:db:69:a1:c8:ba:04:a9:7f:8c: 9d:66:25:1e:19:18:f0:dd:28:b1:56:70:84:c1:34: 3a:75:44:c9:c3:c4:a1:35:0f:7e:4e:7c:16:4d:7f: b6:84:7f:fd:ad:a0:0f:72:a7:30:e7:84:f5:4f:37: 69:e4:6e:ba:d8:6d:c9:05:81:6d:bb:29:ef:80:7d: 4c:65:b2:30:73:01:4d:af:e5:e2:65:85:0a:69:96: ab:23:57:3e:5b:93:a0:39:ba:38:a0:3d:1f:c9:31: 69:ad:3e:0d:dd:eb:49:d2:28:7f:c0:9c:13:91:18: f7:f9:a1:1d:ca:a6:76:33:4c:d5:f5:8a:86:3e:4c: 5d:3c:57:2e:f6:9a:36:57:b3:f7:80:a6:3a:c4:21: f4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:69:D6:2F:31:95:44:7E:22:7D:87:39:B4:E1:60:4F:84:73:3D:CC X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:b8:14:09:d8:55:52:2f:64:cc:7c:13:a9:38:22:a8:50:bd: 65:44:b1:cf:f0:eb:22:c3:b1:b3:65:cb:74:76:f0:4d:ef:98: 16:7c:31:3f:61:8e:f3:20:0e:f8:90:f9:84:f8:6d:4d:38:58: 20:91:99:d8:82:01:cc:b2:86:0b:4a:7d:60:3e:88:3f:48:a6: ac:d0:ee:ed:66:b8:f8:46:fc:0a:21:04:fc:7d:83:f4:f9:b8: f8:d5:71:89:02:a5:99:23:f1:bd:dc:90:95:5f:f3:e4:4d:f9: 47:21:9f:60:e2:75:5d:3b:1c:b5:2a:3e:bd:37:2c:77:95:b1: 31:07:50:41:f5:95:2b:1f:66:54:57:62:77:71:a2:b0:a9:4c: 10:d0:2d:0a:fe:a7:bf:98:f5:14:38:12:e7:cc:c1:94:bf:57: fd:20:7c:51:47:61:e1:c7:c0:0f:85:af:70:cb:69:78:cd:8a: 41:a0:84:7f:78:0f:3e:57:ef:aa:6b:76:79:5b:43:78:91:b7: 98:05:e1:1f:94:e6:65:5f:07:e9:69:53:05:51:45:81:43:40: ec:2e:06:62:50:12:50:ff:23:38:a5:aa:fe:5b:9f:92:98:29: 4a:41:54:de:57:1b:28:8f:8d:91:a2:62:4e:9b:03:c2:18:fb: da:3e:b0:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjQxMTIzMDMxOTU2WhcNMjQxMTMwMDMxOTU2WjAYMRYwFAYD VQQDEw02NzQxNDlkYy1hZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+28XdYbC3zfhwgLXE58iBc0MrfgP4gNqtnHW2od+szGW3UftDrzkrM60Aj/ YFRS+oBqvWr93tFkkyPe61yXD/GHJAD0NC5Rqxeho2E0sQVcUHpRs8hWbE2Kucqg 806RW+Ut3VGnM8jwNbrpgUnbaaHIugSpf4ydZiUeGRjw3SixVnCEwTQ6dUTJw8Sh NQ9+TnwWTX+2hH/9raAPcqcw54T1Tzdp5G662G3JBYFtuynvgH1MZbIwcwFNr+Xi ZYUKaZarI1c+W5OgObo4oD0fyTFprT4N3etJ0ih/wJwTkRj3+aEdyqZ2M0zV9YqG PkxdPFcu9po2V7P3gKY6xCH0NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5p1i8x lUR+In2HObThYE+Ecz3MMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjuBQJ2FVSL2TMfBOpOCKoUL1lRLHP8Osiw7GzZct0dvBN75gWfDE/ YY7zIA74kPmE+G1NOFggkZnYggHMsoYLSn1gPog/SKas0O7tZrj4RvwKIQT8fYP0 +bj41XGJAqWZI/G93JCVX/PkTflHIZ9g4nVdOxy1Kj69Nyx3lbExB1BB9ZUrH2ZU V2J3caKwqUwQ0C0K/qe/mPUUOBLnzMGUv1f9IHxRR2Hhx8APha9wy2l4zYpBoIR/ eA8+V++qa3Z5W0N4kbeYBeEflOZlXwfpaVMFUUWBQ0DsLgZiUBJQ/yM4par+W5+S mClKQVTeVxsoj42RomJOmwPCGPvaPrBo -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org