$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json) Hash identifier: HKnLFNdN/1euqVcKTAy8pL9875HB+VzAV480OV5IFPs= Subject key identifier: 3D:7F:25:D4:E2:B8:C9:50:72:EF:E5:6E:21:C3:D8:C5:20:1C:CD:4F Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87 Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft Manifest number: 23 Signing time: Thu 21 Nov 2024 05:53:30 +0000 Manifest this update: Thu 21 Nov 2024 05:53:30 +0000 Manifest next update: Thu 28 Nov 2024 05:53:30 +0000 Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: hLaLMP2nnejgsTlNOMLowIApiWJLFhsD8QpxGcCF2QY=) 2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: vFQI0/WMzcqMUL954AE6vlA2OPOfqfsgIiFbV+UqtL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087 Validity Not Before: Nov 21 05:53:30 2024 GMT Not After : Nov 28 05:53:30 2024 GMT Subject: CN=673ecada-1577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:22:75:2d:dd:4d:49:ac:bd:b1:a4:13:2f:9a: 6c:17:b0:e0:04:e3:14:49:d7:78:ef:0f:e5:e8:b8: b0:ab:31:aa:24:00:b9:5e:90:85:c8:40:2e:1f:d9: 8e:a9:83:57:1d:f5:c8:0b:e2:74:95:9e:48:3c:60: 5f:48:2a:54:10:64:43:3b:e7:13:b7:ba:0a:5b:58: cc:4b:da:31:03:e0:b2:6a:f4:5d:42:e7:7b:dc:0a: 89:04:9b:cf:8c:ed:22:eb:bc:59:48:c8:45:eb:df: ef:58:1c:9f:90:41:7c:67:5b:2a:98:eb:75:13:69: df:0e:a2:a3:94:ea:31:f6:2b:cf:b7:93:a7:d3:07: 73:06:1f:e6:b4:d5:54:bf:9d:ff:de:e7:a7:0d:5d: bb:31:b4:36:6b:00:6d:bb:78:df:7e:fc:29:a4:b1: df:9d:f8:50:16:1b:4d:0c:ee:4b:2f:29:1a:74:c8: 90:bf:74:f2:9c:30:74:5a:24:be:84:06:f3:2e:a0: ee:1e:2c:00:49:69:24:bd:e4:99:fb:3c:86:45:f5: 84:d9:78:16:97:71:80:d1:c7:00:8a:9f:94:37:43: 92:c6:c9:bd:e2:91:d9:33:08:e4:66:da:f0:77:c5: 39:68:58:26:4f:db:76:80:30:93:90:1a:e5:56:42: b5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7F:25:D4:E2:B8:C9:50:72:EF:E5:6E:21:C3:D8:C5:20:1C:CD:4F X509v3 Authority Key Identifier: keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:2c:fb:87:16:2e:69:cc:da:68:5c:fe:e7:c8:2e:11:db:d6: 46:99:66:49:68:58:25:63:69:14:4f:71:63:84:61:fe:36:17: 06:9a:10:ca:0b:28:a0:e4:34:18:33:16:bc:13:33:c7:6a:56: b5:d9:19:68:ee:fa:21:53:a2:81:12:53:17:a1:ef:71:ea:a5: d5:86:f5:ff:e9:54:fd:5b:40:9a:03:b1:3a:59:fb:0d:25:f1: b7:af:a3:aa:41:c2:d2:e0:51:1b:1d:7d:e4:c7:a4:a2:9a:10: dd:78:68:18:d9:7e:da:cf:dd:78:fd:e8:cd:02:8a:68:37:d3: 4d:32:d9:2d:ec:7b:58:01:b3:d2:ca:79:db:3d:b4:44:8c:27: 0a:2a:75:8e:c2:19:22:64:98:a3:01:82:d2:fc:1c:51:54:c5: 83:d1:d7:01:33:67:05:3d:82:4e:c2:6d:d3:fa:44:1f:57:c3: 11:65:e6:ed:cb:58:e4:07:d4:83:74:8d:b9:77:d7:3d:cc:f3: 32:ee:db:ab:bb:cd:2d:cd:be:b6:fd:fc:a6:f7:6a:2b:c2:0f: aa:6e:51:d4:4b:c2:e4:c0:01:21:e6:93:a7:21:ea:06:19:74: ab:68:ef:c0:99:b1:d4:a1:16:cc:15:a6:fb:05:51:9c:88:1e: 0c:e3:ed:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTYwMDExMC8GA1UEBRMoRTBCOTQ1OEY2OTgyNUZGODI5Mzg3QjEzOUU4OEZEM0JE Njc0MDA4NzAeFw0yNDExMjEwNTUzMzBaFw0yNDExMjgwNTUzMzBaMBgxFjAUBgNV BAMTDTY3M2VjYWRhLTE1NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrInUt3U1JrL2xpBMvmmwXsOAE4xRJ13jvD+XouLCrMaokALlekIXIQC4f2Y6p g1cd9cgL4nSVnkg8YF9IKlQQZEM75xO3ugpbWMxL2jED4LJq9F1C53vcCokEm8+M 7SLrvFlIyEXr3+9YHJ+QQXxnWyqY63UTad8OoqOU6jH2K8+3k6fTB3MGH+a01VS/ nf/e56cNXbsxtDZrAG27eN9+/Cmksd+d+FAWG00M7ksvKRp0yJC/dPKcMHRaJL6E BvMuoO4eLABJaSS95Jn7PIZF9YTZeBaXcYDRxwCKn5Q3Q5LGyb3ikdkzCORm2vB3 xTloWCZP23aAMJOQGuVWQrXPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPX8l1OK4 yVBy7+VuIcPYxSAczU8wHwYDVR0jBBgwFoAU4LlFj2mCX/gpOHsTnoj9O9Z0AIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNjAwLzIyMUJBRUJFNzdG MTExRUZBQzExMjk0MkM0RjlBRTAyLzRMbEZqMm1DWF9ncE9Ic1Rub2o5TzlaMEFJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNExsRmoybUNYX2dwT0hzVG5vajlPOVowQUljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NjAwLzIyMUJBRUJFNzdGMTExRUZBQzExMjk0MkM0RjlBRTAyLzRMbEZqMm1DWF9n cE9Ic1Rub2o5TzlaMEFJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALYs+4cWLmnM2mhc/ufILhHb1kaZZkloWCVjaRRPcWOEYf42FwaaEMoL KKDkNBgzFrwTM8dqVrXZGWju+iFTooESUxeh73HqpdWG9f/pVP1bQJoDsTpZ+w0l 8bevo6pBwtLgURsdfeTHpKKaEN14aBjZftrP3Xj96M0Cimg3000y2S3se1gBs9LK eds9tESMJwoqdY7CGSJkmKMBgtL8HFFUxYPR1wEzZwU9gk7CbdP6RB9XwxFl5u3L WOQH1IN0jbl31z3M8zLu26u7zS3Nvrb9/Kb3aivCD6puUdRLwuTAASHmk6ch6gYZ dKto78CZsdShFswVpvsFUZyIHgzj7R4= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:02 2024 by rpki-client on console-ams.rpki-client.org