$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft File: sCeV0uCeOqo-NtK1ktLg6fu3770.mft (raw, json) Hash identifier: P7nLctFBsGiABN/pm4x9GO33YK21kfEsZgt5JWeQZbk= Subject key identifier: BB:59:7D:C1:F0:7E:50:7E:DC:05:CD:5F:3D:42:71:24:1A:E2:EA:D7 Authority key identifier: B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD Certificate issuer: /CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft Manifest number: 12 Signing time: Wed 25 Dec 2024 06:06:36 +0000 Manifest this update: Wed 25 Dec 2024 06:06:35 +0000 Manifest next update: Wed 01 Jan 2025 06:06:35 +0000 Files and hashes: 1: sCeV0uCeOqo-NtK1ktLg6fu3770.crl (hash: qZHUTKqYom2lY6t5/wfixLh620j5YD4a3/OGIKe8jxQ=) 2: FF3178EAB14B11EFB6CD146AC4F9AE02.roa (hash: KPgMUtF2z6om6dSm7+mB/ufWiwTV8TpJVcH2+or0fgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E0FE/serialNumber=B02795D2E09E3AAA3E36D2B592D2E0E9FBB7EFBD Validity Not Before: Dec 25 06:06:35 2024 GMT Not After : Jan 1 06:06:35 2025 GMT Subject: CN=676ba0ec-a7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:97:f6:54:a3:f1:c1:53:e3:b2:00:85:5a: 1a:f4:ab:78:fc:6b:36:56:ff:93:1c:3c:e3:af:86: 0e:7a:91:05:b7:91:d7:8b:82:77:8e:b2:0f:da:08: 00:17:99:e3:42:d5:39:02:14:f2:0c:fb:14:62:27: 69:fc:ff:0d:96:7c:c0:c6:59:79:86:5d:fb:47:da: d4:31:43:24:80:04:99:77:ec:e5:38:04:d9:d3:6a: eb:95:25:fb:b8:20:8b:27:7b:70:3a:1e:3b:7a:18: 7a:1f:11:2a:41:a9:25:67:2f:ee:75:ca:a9:4e:fc: 9c:57:9a:b0:16:07:fe:3d:94:9d:4d:65:72:dc:b1: 50:9c:be:9e:00:52:17:b9:50:44:91:0b:21:87:99: 13:13:4e:68:60:52:a5:8f:4b:c7:e5:e8:2a:f0:07: 1e:b7:f8:51:e9:59:5a:f3:31:ed:1d:ab:e3:a5:5f: 1c:6f:dc:08:55:ec:7f:d6:9d:36:04:a3:ed:e4:02: f6:3c:6b:76:dc:14:49:43:21:29:1f:fc:a7:bd:25: 2f:40:69:d5:79:06:4b:b6:1e:23:c7:26:80:9f:c0: 50:e8:b3:65:52:d4:e5:70:d7:9b:2e:3e:f6:fa:d4: 40:02:8b:6a:07:f0:49:ad:3e:66:77:bf:43:e8:92: af:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:59:7D:C1:F0:7E:50:7E:DC:05:CD:5F:3D:42:71:24:1A:E2:EA:D7 X509v3 Authority Key Identifier: keyid:B0:27:95:D2:E0:9E:3A:AA:3E:36:D2:B5:92:D2:E0:E9:FB:B7:EF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCeV0uCeOqo-NtK1ktLg6fu3770.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/37334BE2ABCA11EFA994D129C4F9AE02/sCeV0uCeOqo-NtK1ktLg6fu3770.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:4d:c5:22:3a:e0:b6:d6:44:fd:b2:78:b3:81:02:8f:ca:f2: 23:52:05:e1:8f:9b:8f:60:b9:19:a1:d6:8a:60:54:3f:d9:9c: e5:e4:c5:9d:86:b2:2b:4c:fa:b2:12:2d:46:9a:9b:8e:03:f4: c5:f8:e8:48:b8:e2:6c:b7:cf:d3:f9:32:20:50:1d:c6:0a:0c: 63:7e:60:06:cf:73:35:8f:5f:71:2c:ad:46:fb:a4:86:a9:d0: bd:c3:a2:5c:74:f4:95:2c:51:5c:16:92:73:e1:5d:a6:b9:d4: f4:5d:e5:32:9a:8b:94:f5:f2:49:d8:85:ce:fa:c9:fd:9a:4a: 09:68:7c:c9:ef:f3:e8:42:aa:a3:93:90:c4:1f:3e:79:b8:d4: c9:6b:c5:f9:7d:19:23:99:be:0b:b7:66:4d:ab:ab:a3:10:0f: 53:8b:e4:13:d4:d7:6c:74:63:bb:a4:e4:8c:d5:ff:9f:39:b1: 29:95:ae:44:2d:ae:7c:57:fc:b5:56:51:d1:6e:5d:29:8a:65: 12:1a:51:9e:00:4d:31:c5:85:2f:91:8b:ec:17:da:11:64:18: 60:41:02:92:fe:74:90:32:09:5e:11:0c:ed:c4:37:66:a6:ac: 0e:a5:ff:4a:27:8d:37:84:d6:76:fb:23:ba:ad:c5:ec:0b:50: 1b:1c:cc:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTBGRTExMC8GA1UEBRMoQjAyNzk1RDJFMDlFM0FBQTNFMzZEMkI1OTJEMkUwRTlG QkI3RUZCRDAeFw0yNDEyMjUwNjA2MzVaFw0yNTAxMDEwNjA2MzVaMBgxFjAUBgNV BAMTDTY3NmJhMGVjLWE3ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgWpf2VKPxwVPjsgCFWhr0q3j8azZW/5McPOOvhg56kQW3kdeLgneOsg/aCAAX meNC1TkCFPIM+xRiJ2n8/w2WfMDGWXmGXftH2tQxQySABJl37OU4BNnTauuVJfu4 IIsne3A6Hjt6GHofESpBqSVnL+51yqlO/JxXmrAWB/49lJ1NZXLcsVCcvp4AUhe5 UESRCyGHmRMTTmhgUqWPS8fl6CrwBx63+FHpWVrzMe0dq+OlXxxv3AhV7H/WnTYE o+3kAvY8a3bcFElDISkf/Ke9JS9AadV5Bku2HiPHJoCfwFDos2VS1OVw15suPvb6 1EACi2oH8EmtPmZ3v0Pokq+RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu1l9wfB+ UH7cBc1fPUJxJBri6tcwHwYDVR0jBBgwFoAUsCeV0uCeOqo+NtK1ktLg6fu3770w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFMEZFLzM3MzM0QkUyQUJD QTExRUZBOTk0RDEyOUM0RjlBRTAyL3NDZVYwdUNlT3FvLU50SzFrdExnNmZ1Mzc3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc0NlVjB1Q2VPcW8tTnRLMWt0TGc2ZnUzNzcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF MEZFLzM3MzM0QkUyQUJDQTExRUZBOTk0RDEyOUM0RjlBRTAyL3NDZVYwdUNlT3Fv LU50SzFrdExnNmZ1Mzc3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADRNxSI64LbWRP2yeLOBAo/K8iNSBeGPm49guRmh1opgVD/ZnOXkxZ2G sitM+rISLUaam44D9MX46Ei44my3z9P5MiBQHcYKDGN+YAbPczWPX3EsrUb7pIap 0L3Dolx09JUsUVwWknPhXaa51PRd5TKai5T18knYhc76yf2aSglofMnv8+hCqqOT kMQfPnm41Mlrxfl9GSOZvgu3Zk2rq6MQD1OL5BPU12x0Y7uk5IzV/585sSmVrkQt rnxX/LVWUdFuXSmKZRIaUZ4ATTHFhS+Ri+wX2hFkGGBBApL+dJAyCV4RDO3EN2am rA6l/0onjTeE1nb7I7qtxewLUBsczOw= -----END CERTIFICATE-----Generated at Wed Dec 25 08:00:00 2024 by rpki-client on console-ams.rpki-client.org