$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft File: sB58Ht4QIlHuYHQeLhnwYDA9cck.mft (raw, json) Hash identifier: ERRqpg0xvyGZPSedgZ8rkCm0w3zRiBZUv+QHhrbv/lU= Subject key identifier: 2D:D3:F5:86:C7:F3:3F:1B:A3:84:10:76:5A:22:F8:AD:EF:C2:9D:C3 Authority key identifier: B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 Certificate issuer: /CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Certificate serial: 0557 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft Manifest number: 052E Signing time: Fri 22 Nov 2024 23:13:53 +0000 Manifest this update: Fri 22 Nov 2024 23:13:52 +0000 Manifest next update: Fri 29 Nov 2024 23:13:52 +0000 Files and hashes: 1: sB58Ht4QIlHuYHQeLhnwYDA9cck.crl (hash: Ssr/T0FqjEs6435z0mf1Qh5iI4/OcCaSLwSuk8cXEg0=) 2: 1E143AA26E7D11EFBB48F63EC4F9AE02.roa (hash: lZ6AOIyl3S5M47ndOuSHTErSZa7F4BYm3WORE1Zw2mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1367 (0x557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF04/serialNumber=B01E7C1EDE102251EE60741E2E19F060303D71C9 Validity Not Before: Nov 22 23:13:52 2024 GMT Not After : Nov 29 23:13:52 2024 GMT Subject: CN=67411031-8015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:32:50:c3:04:95:36:fc:85:bc:44:93:18: 9b:48:5d:a8:a7:66:66:08:0e:c3:ba:bb:b8:ef:c2: 78:5c:c3:db:f9:19:07:e2:a3:b5:c8:d5:2b:9f:0a: 08:5d:9e:6b:da:31:28:18:65:4a:83:d9:1a:a1:32: 3c:6b:5c:bb:f0:9e:a9:63:b4:cc:fb:cb:28:34:e6: 1e:04:09:a4:a0:73:27:cc:2e:30:f5:85:8d:fd:82: 0a:76:5b:ac:61:7e:61:a9:ca:13:86:24:c7:93:91: 50:4c:e5:ce:b1:d7:10:e6:6e:af:68:f7:2d:de:de: aa:81:b0:6e:c3:e5:45:62:ea:6d:38:d5:2a:f1:8f: 13:55:d5:e5:82:f4:89:b5:4c:8f:ed:f8:3a:b6:1b: 34:d5:23:7c:d3:48:1e:05:9a:b8:c3:19:c7:03:df: ae:69:f2:5e:00:96:0e:d8:89:15:98:bd:ec:f3:68: 6e:0f:71:16:c4:b5:f5:7e:72:06:97:c8:5c:fd:e9: 70:5f:7d:66:cb:89:26:09:88:2e:87:10:f2:16:b0: 05:48:98:a5:3b:22:1d:f2:b2:58:2a:ca:e6:ca:15: 45:19:5d:b4:cc:ed:92:78:10:a2:c8:d9:6f:07:67: a3:63:0b:f1:9c:3a:03:f6:03:c6:83:09:a1:31:c9: 9f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D3:F5:86:C7:F3:3F:1B:A3:84:10:76:5A:22:F8:AD:EF:C2:9D:C3 X509v3 Authority Key Identifier: keyid:B0:1E:7C:1E:DE:10:22:51:EE:60:74:1E:2E:19:F0:60:30:3D:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sB58Ht4QIlHuYHQeLhnwYDA9cck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF04/DA538A56EA2811EB9AE60B74C4F9AE02/sB58Ht4QIlHuYHQeLhnwYDA9cck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:99:9c:5e:3c:30:f9:7e:71:4c:c3:1b:38:95:e1:0c:a6:21: 0b:e5:9b:cf:3c:be:9a:62:83:34:11:59:fa:48:e6:20:15:4c: 35:db:0a:19:ff:d8:45:9a:fa:a5:21:4c:71:08:b0:04:d1:81: 8b:4a:01:47:1f:ca:8f:25:16:1a:52:b2:57:29:54:56:15:58: 4c:71:e4:d5:f1:49:99:6c:e6:a5:90:8c:56:93:67:3d:91:0c: 23:1c:cf:b6:bc:d3:4e:92:74:fe:f7:c9:44:b8:49:2a:83:15: 8d:92:75:1b:8a:4a:50:21:64:31:95:28:0e:7c:8f:9d:95:57: 3d:c1:5a:92:34:bf:ab:6e:5d:ad:7e:9b:54:1f:f7:c5:a8:dc: 35:db:af:82:8c:4d:1f:ba:ac:34:c1:01:ec:35:2d:83:84:e6: dc:a2:9e:70:14:67:60:06:24:c9:82:46:b8:b5:bc:d2:c8:1c: e5:4d:71:f1:b0:d3:5b:d5:37:46:7a:57:6c:24:52:31:2a:63: 63:9c:fa:9d:48:df:22:63:6c:ff:6c:e7:05:89:8d:b3:cd:79: c4:fb:fb:8c:e6:fb:e2:e6:79:10:1c:41:ae:39:1c:e9:a9:a4: b2:0e:d0:49:aa:f6:1b:aa:e3:74:1d:9d:93:dc:dc:e6:64:4c: 76:d6:5d:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMDQxMTAvBgNVBAUTKEIwMUU3QzFFREUxMDIyNTFFRTYwNzQxRTJFMTlGMDYw MzAzRDcxQzkwHhcNMjQxMTIyMjMxMzUyWhcNMjQxMTI5MjMxMzUyWjAYMRYwFAYD VQQDEw02NzQxMTAzMS04MDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqA4yUMMElTb8hbxEkxibSF2op2ZmCA7Duru478J4XMPb+RkH4qO1yNUrnwoI XZ5r2jEoGGVKg9kaoTI8a1y78J6pY7TM+8soNOYeBAmkoHMnzC4w9YWN/YIKdlus YX5hqcoThiTHk5FQTOXOsdcQ5m6vaPct3t6qgbBuw+VFYuptONUq8Y8TVdXlgvSJ tUyP7fg6ths01SN800geBZq4wxnHA9+uafJeAJYO2IkVmL3s82huD3EWxLX1fnIG l8hc/elwX31my4kmCYguhxDyFrAFSJilOyId8rJYKsrmyhVFGV20zO2SeBCiyNlv B2ejYwvxnDoD9gPGgwmhMcmfbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3T9YbH 8z8bo4QQdloi+K3vwp3DMB8GA1UdIwQYMBaAFLAefB7eECJR7mB0Hi4Z8GAwPXHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYwNC9EQTUzOEE1NkVB MjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUlsSHVZSFFlTGhud1lEQTlj Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCNThIdDRRSWxIdVlIUWVMaG53WURBOWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYwNC9EQTUzOEE1NkVBMjgxMUVCOUFFNjBCNzRDNEY5QUUwMi9zQjU4SHQ0UUls SHVZSFFlTGhud1lEQTljY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsmZxePDD5fnFMwxs4leEMpiEL5ZvPPL6aYoM0EVn6SOYgFUw12woZ /9hFmvqlIUxxCLAE0YGLSgFHH8qPJRYaUrJXKVRWFVhMceTV8UmZbOalkIxWk2c9 kQwjHM+2vNNOknT+98lEuEkqgxWNknUbikpQIWQxlSgOfI+dlVc9wVqSNL+rbl2t fptUH/fFqNw126+CjE0fuqw0wQHsNS2DhObcop5wFGdgBiTJgka4tbzSyBzlTXHx sNNb1TdGeldsJFIxKmNjnPqdSN8iY2z/bOcFiY2zzXnE+/uM5vvi5nkQHEGuORzp qaSyDtBJqvYbquN0HZ2T3NzmZEx21l1N -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org