$ rpki-client -vvf rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft File: AuKPnUYFERN7IUeII6e0gzlWUhI.mft (raw, json) Hash identifier: HNsK8rB4e+FlRDlwqw/fGJwpx+g6yER4qvEFrQD2Ruw= Subject key identifier: 12:CD:AA:EF:5D:99:58:09:B2:2D:59:77:38:94:D1:36:F9:CF:3B:1C Authority key identifier: 02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12 Certificate issuer: /CN=A9147609/serialNumber=02E28F9D460511137B21478823A7B48339565212 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft Manifest number: 1C88 Signing time: Fri 22 Nov 2024 16:50:53 +0000 Manifest this update: Fri 22 Nov 2024 16:50:53 +0000 Manifest next update: Fri 29 Nov 2024 16:50:53 +0000 Files and hashes: 1: AuKPnUYFERN7IUeII6e0gzlWUhI.crl (hash: v3utzADk8zcblZYkW2ugpMyo+t+1nrsjUIW4mLdvmxQ=) 2: 1268CB8C4E3E11EF891FC80CC4F9AE02.roa (hash: 4HGe1cjFbJfQFWJ6cnAj+BysIZgPQf+tvO/SplIzyq4=) 3: 65A7D4A0974A11EF961C4937C4F9AE02.roa (hash: uFUS3R+R9pN1ZCN/rpeAN2BidcZtMA7vUvv7YeQo5Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147609/serialNumber=02E28F9D460511137B21478823A7B48339565212 Validity Not Before: Nov 22 16:50:53 2024 GMT Not After : Nov 29 16:50:53 2024 GMT Subject: CN=6740b66d-0bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:41:cc:1b:d7:8b:c9:03:fe:73:92:b4:16: a8:04:e0:7e:48:1f:18:ce:05:e9:89:5a:40:8b:51: 89:71:90:fc:96:8b:c0:33:ed:47:e1:47:d3:da:e7: d6:6a:fe:ab:18:f7:63:10:56:04:38:57:b6:6d:d0: aa:0c:b2:4c:25:a1:1b:f7:b2:34:38:62:2b:77:e6: 28:c0:c7:c8:51:f9:41:af:3d:a2:23:a3:29:50:88: 60:c8:7a:b1:ff:be:81:f9:9c:d1:27:3d:c7:2f:5c: e0:37:cd:a6:65:68:ea:93:ba:c6:71:fd:42:6c:66: 3d:be:2d:f0:64:75:50:49:54:30:26:4d:27:d3:77: cc:f4:e8:8b:3d:75:24:50:a6:6a:7c:de:ce:a1:64: a3:54:7c:71:dc:cb:02:d6:9d:d4:c3:bd:64:81:15: 1c:c3:b7:51:70:50:71:a7:f9:91:21:2a:cc:5b:4a: dc:6d:f0:6f:aa:c6:c6:f2:0c:9d:78:96:4d:8e:cf: f6:61:dd:6e:4f:97:1d:cc:65:72:c6:64:d3:de:1c: c3:d3:d7:f9:41:f6:9c:44:dc:f3:56:de:68:ef:61: 9a:cd:f7:a9:54:4d:21:96:93:70:3b:07:9a:9d:8b: 07:aa:af:80:e4:e0:0f:30:05:b2:02:5f:63:e8:94: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CD:AA:EF:5D:99:58:09:B2:2D:59:77:38:94:D1:36:F9:CF:3B:1C X509v3 Authority Key Identifier: keyid:02:E2:8F:9D:46:05:11:13:7B:21:47:88:23:A7:B4:83:39:56:52:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuKPnUYFERN7IUeII6e0gzlWUhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147609/632C30AE440E11E8903D3A5BC4F9AE02/AuKPnUYFERN7IUeII6e0gzlWUhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:cb:ca:75:c2:16:67:1b:e1:09:b0:1e:79:a3:46:23:6b:f8: 5b:51:be:0a:f9:c3:df:9f:85:6f:5e:be:a0:63:ab:35:c3:05: 22:c1:3e:57:3f:24:cc:81:e2:bd:de:bc:42:1c:fe:b5:0d:51: 81:e7:0c:09:23:d7:91:c2:03:32:ae:b5:53:d9:dc:2e:c9:f0: e6:52:88:77:7e:58:d1:f9:6a:c9:25:d8:e9:43:db:69:dd:ad: 2b:83:aa:9f:27:18:95:9c:5a:7e:75:07:c3:1f:60:ac:2f:67: 12:0f:3a:76:d2:e7:15:ba:02:2d:24:bb:46:51:43:0d:46:7b: 8a:ae:80:f5:69:96:a4:4e:13:87:a7:b9:b5:95:a5:72:3d:4f: a3:28:67:e0:0a:0c:36:b2:50:7d:46:93:ae:90:f6:bd:0a:06: 7e:a2:73:db:fa:26:9e:fb:bb:85:6c:a2:d4:14:ef:70:51:f3: 13:f9:b0:41:c1:44:c2:41:bd:19:50:cc:a3:07:99:9a:38:6b: d6:69:e1:c1:4e:34:84:ac:e9:6d:fe:79:5b:66:97:20:51:b6: 1a:65:58:ec:6d:7b:d3:65:08:f0:ae:7d:fa:8c:3d:d6:63:4a: d3:e9:54:7b:2c:21:13:c7:e7:ba:a4:9a:e2:79:90:8e:83:f1: cf:b3:fe:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzYwOTExMC8GA1UEBRMoMDJFMjhGOUQ0NjA1MTExMzdCMjE0Nzg4MjNBN0I0ODMz OTU2NTIxMjAeFw0yNDExMjIxNjUwNTNaFw0yNDExMjkxNjUwNTNaMBgxFjAUBgNV BAMTDTY3NDBiNjZkLTBiYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp3kHMG9eLyQP+c5K0FqgE4H5IHxjOBemJWkCLUYlxkPyWi8Az7UfhR9Pa59Zq /qsY92MQVgQ4V7Zt0KoMskwloRv3sjQ4Yit35ijAx8hR+UGvPaIjoylQiGDIerH/ voH5nNEnPccvXOA3zaZlaOqTusZx/UJsZj2+LfBkdVBJVDAmTSfTd8z06Is9dSRQ pmp83s6hZKNUfHHcywLWndTDvWSBFRzDt1FwUHGn+ZEhKsxbStxt8G+qxsbyDJ14 lk2Oz/Zh3W5Plx3MZXLGZNPeHMPT1/lB9pxE3PNW3mjvYZrN96lUTSGWk3A7B5qd iweqr4Dk4A8wBbICX2PolHSLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEs2q712Z WAmyLVl3OJTRNvnPOxwwHwYDVR0jBBgwFoAUAuKPnUYFERN7IUeII6e0gzlWUhIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NjA5LzYzMkMzMEFFNDQw RTExRTg5MDNEM0E1QkM0RjlBRTAyL0F1S1BuVVlGRVJON0lVZUlJNmUwZ3psV1Vo SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQXVLUG5VWUZFUk43SVVlSUk2ZTBnemxXVWhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NjA5LzYzMkMzMEFFNDQwRTExRTg5MDNEM0E1QkM0RjlBRTAyL0F1S1BuVVlGRVJO N0lVZUlJNmUwZ3psV1VoSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAELLynXCFmcb4QmwHnmjRiNr+FtRvgr5w9+fhW9evqBjqzXDBSLBPlc/ JMyB4r3evEIc/rUNUYHnDAkj15HCAzKutVPZ3C7J8OZSiHd+WNH5askl2OlD22nd rSuDqp8nGJWcWn51B8MfYKwvZxIPOnbS5xW6Ai0ku0ZRQw1Ge4qugPVplqROE4en ubWVpXI9T6MoZ+AKDDayUH1Gk66Q9r0KBn6ic9v6Jp77u4VsotQU73BR8xP5sEHB RMJBvRlQzKMHmZo4a9Zp4cFONISs6W3+eVtmlyBRthplWOxte9NlCPCuffqMPdZj StPpVHssIRPH57qkmuJ5kI6D8c+z/gw= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:43 2024 by rpki-client on console-fra.rpki-client.org