$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft File: D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json) Hash identifier: 5YnJpaz735NlNGxOV5BphmhFvUCP8xyzILU+8FCalmY= Subject key identifier: 9D:8F:02:92:0B:CC:26:4A:E6:53:EE:C7:6A:79:F2:12:42:CB:05:3A Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Certificate serial: 0C84 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft Manifest number: 0C79 Signing time: Fri 22 Nov 2024 15:36:11 +0000 Manifest this update: Fri 22 Nov 2024 15:36:11 +0000 Manifest next update: Fri 29 Nov 2024 15:36:11 +0000 Files and hashes: 1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: WGC0gjkVxPfWYVlxGnpeSc6Pqt5ZTcCUwDcoI/F2DKI=) 2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: lu8oWRNPgJxFZ7Lozlet3TlMRukqbbGr2PrraLSuCsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3204 (0xc84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Validity Not Before: Nov 22 15:36:11 2024 GMT Not After : Nov 29 15:36:11 2024 GMT Subject: CN=6740a4eb-ccd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0e:c2:34:82:4d:43:88:02:72:8b:99:61:46: ea:c5:f9:f7:c0:c3:ab:45:31:95:2a:cd:ee:1b:d7: 00:9e:b4:5b:27:db:7d:71:5c:d4:4c:b2:eb:6c:e5: e0:e3:0a:69:6a:68:d3:2b:6a:29:21:b4:ca:cb:55: 85:e6:dc:32:d7:f8:71:7f:14:d4:f3:94:7f:81:d6: 6f:7f:6e:52:85:01:f7:eb:17:de:7b:c9:ba:3b:e6: 83:d0:a6:77:31:94:04:ca:c7:b6:54:ef:ea:45:8e: 8d:2c:05:df:06:0f:a8:5d:b8:ba:dd:25:31:ca:8c: fa:54:2e:4f:cc:cf:f5:81:c5:86:f4:8b:2d:6d:b5: 8f:4b:03:26:0e:af:2c:73:ea:88:d6:58:ba:e0:74: e6:29:f8:d1:78:aa:5a:fe:c1:52:68:2a:68:80:ab: 5f:05:0d:5a:18:02:dd:68:03:53:de:11:ad:36:c0: cd:92:dc:2d:e2:e9:cf:20:1a:99:44:8e:1f:ce:c6: f2:3c:03:fc:91:d9:8c:14:a6:a7:ff:ba:0c:e3:c9: c7:75:c7:8b:72:04:81:2d:ac:d0:cc:2c:76:86:ec: 76:13:b1:e1:6d:4b:2c:42:82:73:af:ef:52:82:64: f4:ef:99:bd:b3:1a:7b:0d:9d:5d:86:6c:6b:5f:9a: 8a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8F:02:92:0B:CC:26:4A:E6:53:EE:C7:6A:79:F2:12:42:CB:05:3A X509v3 Authority Key Identifier: keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:e2:1b:bf:58:35:d9:c3:d0:92:0e:9d:11:c8:d3:83:fd:ac: f9:fc:03:d2:b9:8b:99:de:24:10:53:ac:0e:ee:25:63:ec:db: 24:ee:5b:b3:a1:bc:79:ba:48:d0:af:5c:b7:f1:32:4d:fe:74: e9:b4:1d:34:d9:46:2e:ac:5d:45:2a:2a:8b:2e:77:ff:ec:48: 81:6b:28:f3:90:e4:16:9d:0b:74:97:18:b7:39:6d:d9:00:c5: d4:49:b1:f5:2f:1d:44:60:14:1a:91:e4:7c:4f:87:a2:1a:41: b7:29:d8:0a:0a:64:bb:5f:b6:36:75:f6:43:d1:c4:04:e6:a0: c5:64:72:31:be:98:e3:49:bf:94:25:f0:61:fd:87:5d:b6:ca: 6f:c4:b3:a4:3f:6c:9a:14:15:f5:a4:24:05:c1:73:61:5c:2c: 4d:33:66:ec:20:9d:25:f8:16:5d:a6:04:80:cd:3b:fe:7f:f6: 74:23:fd:da:a8:ca:4c:e3:29:84:10:db:09:c0:56:75:f9:17: f3:5b:2c:4c:bc:d4:c8:3c:9a:10:bb:64:1b:25:60:9e:64:df: 5e:51:91:87:28:9a:d6:5e:7b:28:ae:45:01:7b:1d:ac:1a:0e: 4c:31:ff:9b:d2:2e:29:eb:f1:1d:84:1d:91:49:ca:ea:bd:b5: 58:42:06:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDBGREU4MkQyNzk0ODU0QzlBRkNERDg1RUZCN0VGRTQ5 QzQ3RDJFRUUwHhcNMjQxMTIyMTUzNjExWhcNMjQxMTI5MTUzNjExWjAYMRYwFAYD VQQDEw02NzQwYTRlYi1jY2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQ7CNIJNQ4gCcouZYUbqxfn3wMOrRTGVKs3uG9cAnrRbJ9t9cVzUTLLrbOXg 4wppamjTK2opIbTKy1WF5twy1/hxfxTU85R/gdZvf25ShQH36xfee8m6O+aD0KZ3 MZQEyse2VO/qRY6NLAXfBg+oXbi63SUxyoz6VC5PzM/1gcWG9IstbbWPSwMmDq8s c+qI1li64HTmKfjReKpa/sFSaCpogKtfBQ1aGALdaANT3hGtNsDNktwt4unPIBqZ RI4fzsbyPAP8kdmMFKan/7oM48nHdceLcgSBLazQzCx2hux2E7HhbUssQoJzr+9S gmT075m9sxp7DZ1dhmxrX5qKJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2PApIL zCZK5lPux2p58hJCywU6MB8GA1UdIwQYMBaAFA/egtJ5SFTJr83YXvt+/knEfS7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS84RjQ3QTlGQUU5 N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZNbXZ6ZGhlLTM3LVNjUjlM dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q5NkMwbmxJVk1tdnpkaGUtMzctU2NSOUx1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS84RjQ3QTlGQUU5N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZN bXZ6ZGhlLTM3LVNjUjlMdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE4hu/WDXZw9CSDp0RyNOD/az5/APSuYuZ3iQQU6wO7iVj7Nsk7luz obx5ukjQr1y38TJN/nTptB002UYurF1FKiqLLnf/7EiBayjzkOQWnQt0lxi3OW3Z AMXUSbH1Lx1EYBQakeR8T4eiGkG3KdgKCmS7X7Y2dfZD0cQE5qDFZHIxvpjjSb+U JfBh/YddtspvxLOkP2yaFBX1pCQFwXNhXCxNM2bsIJ0l+BZdpgSAzTv+f/Z0I/3a qMpM4ymEENsJwFZ1+RfzWyxMvNTIPJoQu2QbJWCeZN9eUZGHKJrWXnsorkUBex2s Gg5MMf+b0i4p6/EdhB2RScrqvbVYQgaz -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:44 2024 by rpki-client on console-fra.rpki-client.org