$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft File: X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json) Hash identifier: 8wbzaGnyYd+wJSKDMFdhgEWj9jF5wOarNQUs/Jhgdns= Subject key identifier: 4D:19:29:D7:5C:4A:6B:0C:14:AA:75:99:03:A0:28:7B:96:0C:1A:21 Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 0756 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft Manifest number: 0755 Signing time: Wed 20 Nov 2024 21:01:27 +0000 Manifest this update: Wed 20 Nov 2024 21:01:26 +0000 Manifest next update: Wed 27 Nov 2024 21:01:26 +0000 Files and hashes: 1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: Yvw7Y5SUSDDHWELi5qsgIE91N51r48AXvJArDXzmFTQ=) 2: 799C6AD8149711EFB0CB9E0AC4F9AE02.roa (hash: OvEMaTDL1tgtcZ9K+aKpw88u0wsiPOdL45WKnaEEXFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1878 (0x756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Nov 20 21:01:26 2024 GMT Not After : Nov 27 21:01:26 2024 GMT Subject: CN=673e4e26-b8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:3a:1d:09:f5:fc:a9:61:e8:e5:27:34:70:5c: 31:da:5e:88:2a:4e:88:89:69:f7:95:ae:ee:f2:e8: ae:97:08:43:83:31:6f:19:fe:25:b7:cc:66:eb:fc: d2:ec:58:b3:2b:d5:19:76:e2:1b:b4:dc:cb:50:a5: e0:7e:1e:47:84:64:65:47:c6:d3:c8:c8:14:15:75: 9f:da:e4:db:1c:6f:31:5e:72:42:84:80:48:a2:02: da:d0:62:81:e0:b6:34:47:ae:36:e9:45:1c:81:8d: 50:a7:f4:c1:58:a2:33:55:28:f8:63:b2:27:7b:2b: bb:d4:7d:2c:47:3d:c7:81:a5:63:cc:93:08:95:05: dc:5e:90:e1:40:46:97:19:49:be:de:b4:af:1b:07: d0:84:d3:0a:75:b7:85:c7:ad:18:5b:8a:98:53:1e: 72:f0:c2:25:96:13:ac:1f:0f:f3:2b:b7:98:cd:25: 91:8e:9d:f8:c7:de:c5:a5:8a:91:4e:c3:2f:83:59: 7f:e5:5f:d6:66:c7:0c:56:41:45:e6:84:7c:e0:00: e9:03:f9:1c:11:56:c4:bb:65:44:e2:3c:1c:26:94: ad:4e:ba:38:3b:97:46:17:51:68:60:89:01:c8:e0: f4:a2:25:28:f6:d0:d7:ee:33:ac:84:49:b9:01:39: e4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:19:29:D7:5C:4A:6B:0C:14:AA:75:99:03:A0:28:7B:96:0C:1A:21 X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:8b:1b:70:e1:fa:e1:03:b5:04:95:7e:92:08:20:94:4f:4f: 89:56:6a:ff:d6:9b:d1:1a:24:18:df:bf:40:b0:1f:99:7d:d2: 65:e8:b4:b1:bc:61:24:cf:12:d5:41:b1:1d:50:23:13:29:65: fd:32:a1:ea:63:15:74:8e:6b:52:fa:47:18:7e:42:a7:63:cb: 8d:e9:a2:cf:eb:73:41:d0:fa:ba:bf:6e:f6:86:97:f0:50:10: 24:13:02:a0:e5:db:a9:21:21:a4:c0:c8:ba:6f:50:6a:ab:db: 3f:d1:63:1e:31:d2:21:f6:de:22:af:be:77:77:8d:03:e2:9b: be:9a:12:f6:f0:32:3b:29:8d:fa:da:e7:15:d2:8c:98:a4:9a: 8c:cd:38:ef:42:8f:76:5d:37:a5:99:94:4b:44:bd:e2:8b:6f: 33:51:19:15:37:90:7d:46:9b:9b:fb:43:bb:cb:33:5c:8d:b1: db:f9:7c:44:a2:37:41:f3:e6:bd:5b:36:99:57:a9:81:c1:16: 7c:7c:07:27:6e:5a:ba:4e:67:21:ea:15:3c:93:e4:5c:c9:be: d2:62:9c:4b:de:2f:96:f3:d8:11:41:34:7a:95:48:7d:0d:69: 78:18:17:4a:1e:c7:d0:af:3d:fd:36:cd:1a:97:50:f0:68:39: 2b:e7:b4:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjQxMTIwMjEwMTI2WhcNMjQxMTI3MjEwMTI2WjAYMRYwFAYD VQQDEw02NzNlNGUyNi1iOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6jodCfX8qWHo5Sc0cFwx2l6IKk6IiWn3la7u8uiulwhDgzFvGf4lt8xm6/zS 7FizK9UZduIbtNzLUKXgfh5HhGRlR8bTyMgUFXWf2uTbHG8xXnJChIBIogLa0GKB 4LY0R6426UUcgY1Qp/TBWKIzVSj4Y7Ineyu71H0sRz3HgaVjzJMIlQXcXpDhQEaX GUm+3rSvGwfQhNMKdbeFx60YW4qYUx5y8MIllhOsHw/zK7eYzSWRjp34x97FpYqR TsMvg1l/5V/WZscMVkFF5oR84ADpA/kcEVbEu2VE4jwcJpStTro4O5dGF1FoYIkB yOD0oiUo9tDX7jOshEm5ATnk6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0ZKddc SmsMFKp1mQOgKHuWDBohMB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5 VmZFODhJRzJaVFladE9MQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSixtw4frhA7UElX6SCCCUT0+JVmr/1pvRGiQY379AsB+ZfdJl6LSx vGEkzxLVQbEdUCMTKWX9MqHqYxV0jmtS+kcYfkKnY8uN6aLP63NB0Pq6v272hpfw UBAkEwKg5dupISGkwMi6b1Bqq9s/0WMeMdIh9t4ir753d40D4pu+mhL28DI7KY36 2ucV0oyYpJqMzTjvQo92XTelmZRLRL3ii28zURkVN5B9Rpub+0O7yzNcjbHb+XxE ojdB8+a9WzaZV6mBwRZ8fAcnblq6Tmch6hU8k+Rcyb7SYpxL3i+W89gRQTR6lUh9 DWl4GBdKHsfQrz39Ns0al1DwaDkr57Tg -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:38 2024 by rpki-client on console-fra.rpki-client.org