$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft File: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json) Hash identifier: N1WSI/gFWlLxZhQ0K/zSjKZgXA5mzLZtUw5uRGAtPxA= Subject key identifier: F9:13:1B:FF:C2:A7:A9:9F:D1:12:41:67:C0:6E:31:DC:07:0E:8B:60 Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0BCE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft Manifest number: 0BB0 Signing time: Fri 22 Nov 2024 18:42:36 +0000 Manifest this update: Fri 22 Nov 2024 18:42:36 +0000 Manifest next update: Fri 29 Nov 2024 18:42:36 +0000 Files and hashes: 1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: MlnxizAleTF5q4X0m9BZ4aWnatTkSYzIkfDkl+l11HY=) 2: 183DE570057A11EC822F230EC4F9AE02.roa (hash: T/McJ5En79O5emQR3B04RpPV6mswqcUCGzmxSn4YxJs=) 3: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: CNGsqoztjTbrkhU2KUlENyCvY9hpR0eOtsVpUByDXno=) 4: 140E693613BF11ECA64D821AC4F9AE02.roa (hash: xm/w/oPJ3AzyQi0qyiNFGzq6ZLvojh9/dJGPYUqz8nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3022 (0xbce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Validity Not Before: Nov 22 18:42:36 2024 GMT Not After : Nov 29 18:42:36 2024 GMT Subject: CN=6740d09c-79e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:80:22:7d:24:36:84:c6:97:67:a0:69:e6: 43:61:14:ed:ae:7c:97:6e:19:7b:5e:7f:68:37:21: 91:33:fb:3e:cc:7b:2f:c6:49:8a:d8:a9:ee:bf:c8: b5:26:12:69:94:09:6b:07:51:01:20:a3:98:5b:dd: 61:86:4d:49:ce:9c:6c:86:97:d8:83:63:7c:3c:88: c1:b2:d3:09:f8:db:7e:a6:ed:4e:44:fa:d3:b2:d5: 0f:6f:38:a5:89:c2:d5:20:55:c8:e2:ae:2c:df:44: 60:ca:4c:fb:15:ff:ed:6d:6f:db:46:65:07:30:84: 05:fb:dc:4a:67:5e:a1:e1:be:f2:96:a3:78:72:00: 85:a9:da:89:04:ce:f0:9e:ef:be:dc:c9:ac:ed:15: 0c:a7:78:0f:6a:ba:84:75:4a:23:fc:d9:c9:52:16: c6:a8:fb:cb:3a:61:79:38:1c:c7:ae:4e:ad:4a:4f: 2f:4a:72:d5:56:de:8f:d5:37:cf:23:00:a6:a5:58: 9a:04:8e:4b:cd:3c:14:80:2f:ce:9a:7c:e4:3e:b9: 94:82:65:95:91:a6:97:36:a4:59:8f:f9:2f:a8:a8: 63:4d:04:b1:d5:cf:45:72:1b:01:e8:41:7f:63:ef: f3:6e:7b:a5:79:97:1b:95:d7:62:64:04:51:24:14: b8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:13:1B:FF:C2:A7:A9:9F:D1:12:41:67:C0:6E:31:DC:07:0E:8B:60 X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:56:bc:b7:ea:af:05:8b:b2:32:fd:6b:51:6f:77:3a:d5:df: 8c:fa:f8:6b:3d:6b:60:c3:4e:25:dd:14:5a:4d:fc:95:e0:16: a6:b1:a7:f5:16:c3:f5:81:08:bc:3c:5d:61:2a:45:ef:e6:30: 42:9d:c2:05:1c:5e:0c:64:62:3e:70:42:0e:aa:f4:ac:65:17: f1:ac:d5:b5:6a:b6:70:07:3c:a8:da:37:24:2d:73:12:ef:a2: 5f:b6:50:34:ba:b5:8c:0d:be:d8:ec:34:a4:a5:40:7a:09:0c: 32:20:cf:3c:cd:df:ec:01:b4:8e:a3:56:c5:ae:a1:c1:94:ad: 18:88:39:e0:b2:a9:68:9a:b3:bd:cd:4a:d2:21:2c:9b:69:6d: 10:b3:ae:11:44:bd:57:30:5f:55:d2:64:26:07:49:12:41:e7: 0c:b6:89:22:d5:91:dd:7c:80:60:5d:c9:60:c2:f5:34:69:5f: 3d:f7:d2:11:14:fe:ce:34:0b:68:6b:0c:09:21:ad:a8:99:f0: 16:17:bb:98:8d:6b:1b:25:83:f2:ef:f3:23:61:a6:52:ed:58: cb:5e:d7:d4:c9:20:ea:cd:0f:3d:a2:55:e5:29:1d:25:76:5d: 0c:14:59:4c:aa:35:20:c2:95:46:b1:85:ac:b2:fc:a0:d8:95: cc:a3:d1:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjQxMTIyMTg0MjM2WhcNMjQxMTI5MTg0MjM2WjAYMRYwFAYD VQQDEw02NzQwZDA5Yy03OWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIaAIn0kNoTGl2egaeZDYRTtrnyXbhl7Xn9oNyGRM/s+zHsvxkmK2Knuv8i1 JhJplAlrB1EBIKOYW91hhk1JzpxshpfYg2N8PIjBstMJ+Nt+pu1ORPrTstUPbzil icLVIFXI4q4s30Rgykz7Ff/tbW/bRmUHMIQF+9xKZ16h4b7ylqN4cgCFqdqJBM7w nu++3Mms7RUMp3gParqEdUoj/NnJUhbGqPvLOmF5OBzHrk6tSk8vSnLVVt6P1TfP IwCmpViaBI5LzTwUgC/OmnzkPrmUgmWVkaaXNqRZj/kvqKhjTQSx1c9FchsB6EF/ Y+/zbnuleZcblddiZARRJBS4OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkTG//C p6mf0RJBZ8BuMdwHDotgMB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0JGMy8xQkM2RUIyMDExRTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4 NHVkc1FzZk14dDBaTlJCd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Vry36q8Fi7Iy/WtRb3c61d+M+vhrPWtgw04l3RRaTfyV4Bamsaf1 FsP1gQi8PF1hKkXv5jBCncIFHF4MZGI+cEIOqvSsZRfxrNW1arZwBzyo2jckLXMS 76JftlA0urWMDb7Y7DSkpUB6CQwyIM88zd/sAbSOo1bFrqHBlK0YiDngsqlomrO9 zUrSISybaW0Qs64RRL1XMF9V0mQmB0kSQecMtoki1ZHdfIBgXclgwvU0aV8999IR FP7ONAtoawwJIa2omfAWF7uYjWsbJYPy7/MjYaZS7VjLXtfUySDqzQ89olXlKR0l dl0MFFlMqjUgwpVGsYWssvyg2JXMo9G3 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org