$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft File: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json) Hash identifier: SZhJ4BaAx9i16tfd9NBONuga4N3h1NdJ7fE5QtdbhkE= Subject key identifier: DE:AF:F5:40:74:3E:67:C6:13:81:A6:C7:36:F7:DC:A1:3C:AE:D3:A3 Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 Certificate issuer: /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft Manifest number: 29 Signing time: Sat 23 Nov 2024 05:45:43 +0000 Manifest this update: Sat 23 Nov 2024 05:45:43 +0000 Manifest next update: Sat 30 Nov 2024 05:45:43 +0000 Files and hashes: 1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: fbJ9WVkl9l7fA1OuiGKxbe1w9h5e7LiXkQ9tJ0zLNOc=) 2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: SEeajkndfK9XKBY3HRdlq0CgTt3jAkAhBVklDZv6c2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953 Validity Not Before: Nov 23 05:45:43 2024 GMT Not After : Nov 30 05:45:43 2024 GMT Subject: CN=67416c07-f2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:ad:47:87:62:bf:3c:4d:ce:4f:da:4e:4b: 4a:4d:fb:00:2e:68:d0:3b:0c:81:96:18:6f:8d:43: c4:85:f2:95:29:b7:2e:ab:fe:1d:8d:59:b9:ef:45: 3b:66:65:d8:ce:66:2b:74:3f:4d:56:6f:97:1d:47: fd:ae:49:22:c0:b6:a8:12:eb:d3:b1:13:39:1c:d1: 67:c2:b2:0b:b7:64:c9:be:21:cc:0e:b6:70:89:5d: eb:83:33:9c:18:03:14:bf:50:34:15:40:d7:05:3c: 8b:3f:66:56:0f:50:16:11:27:72:94:31:29:a6:f7: e5:43:c0:f5:14:91:2c:70:53:10:53:5c:46:1e:cb: 52:4d:e6:73:e0:49:bd:8c:a8:e3:39:77:ab:f0:22: 92:08:5a:a9:f8:da:d8:c7:29:71:1b:7f:50:c2:0a: 7d:e3:be:14:22:bb:0e:9a:c8:ba:3e:f0:81:a7:84: 9f:42:48:00:33:01:ea:6e:16:cf:ff:28:c1:a9:6d: 47:d3:32:dc:2f:4a:ae:a9:02:e6:ec:dd:79:05:fe: 4c:a1:23:ff:a9:1e:b8:5b:46:0d:e6:0c:d1:ba:01: bb:86:07:9a:08:0f:38:ab:ba:2f:e4:0d:08:59:4f: c2:fd:89:8c:65:90:47:53:28:38:1c:90:f6:dc:2c: 70:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AF:F5:40:74:3E:67:C6:13:81:A6:C7:36:F7:DC:A1:3C:AE:D3:A3 X509v3 Authority Key Identifier: keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:94:97:3f:85:50:75:5f:5d:2e:39:0d:95:b1:39:e6:7b:e5: cd:86:49:b9:b9:29:a1:79:0e:f0:0a:ed:33:96:b6:aa:ff:92: a6:29:ec:f1:d1:4c:e4:19:f3:86:b5:00:7f:78:48:a7:d2:6e: fd:53:b7:0e:4d:04:2b:42:4d:b6:98:36:7d:18:4e:26:16:fa: 68:5e:d5:ec:2d:20:6a:f9:37:d7:b6:c0:bd:2f:64:ff:ed:f2: 7c:0f:37:49:f6:b6:1e:d6:df:89:ee:cd:d9:69:57:02:9a:68: aa:9f:16:ba:30:d7:dc:22:d4:71:69:49:cd:0b:46:77:ac:24: 2f:2e:64:85:d9:2d:a3:f0:56:43:51:61:7a:90:c1:1e:ac:32: 40:c2:a5:d8:89:31:94:44:d0:82:02:27:df:d0:28:a0:c4:80: 0a:ab:c4:34:58:cd:ca:87:70:fc:d6:62:9f:71:7d:a4:97:8c: 0c:e0:98:18:80:40:c2:b4:c0:57:22:c4:5b:05:a0:19:b5:ff: 74:5c:8f:93:f4:8e:42:fa:39:86:52:8c:4e:11:32:e6:f8:a1: 65:79:f3:3f:53:6c:76:6b:5e:8f:63:ca:9d:cd:4c:b1:e7:4f: 9d:55:2a:dc:44:77:d2:02:6a:82:53:66:42:3f:13:e8:a2:e4: 30:2d:ac:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTYwMDExMC8GA1UEBRMoN0Y4MjQ1QkJENEQ0NTk3MjFCNDFENEZGMkJCRkI0MjVG RjExODk1MzAeFw0yNDExMjMwNTQ1NDNaFw0yNDExMzAwNTQ1NDNaMBgxFjAUBgNV BAMTDTY3NDE2YzA3LWYyY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTFa1Hh2K/PE3OT9pOS0pN+wAuaNA7DIGWGG+NQ8SF8pUpty6r/h2NWbnvRTtm ZdjOZit0P01Wb5cdR/2uSSLAtqgS69OxEzkc0WfCsgu3ZMm+IcwOtnCJXeuDM5wY AxS/UDQVQNcFPIs/ZlYPUBYRJ3KUMSmm9+VDwPUUkSxwUxBTXEYey1JN5nPgSb2M qOM5d6vwIpIIWqn42tjHKXEbf1DCCn3jvhQiuw6ayLo+8IGnhJ9CSAAzAepuFs// KMGpbUfTMtwvSq6pAubs3XkF/kyhI/+pHrhbRg3mDNG6AbuGB5oIDzirui/kDQhZ T8L9iYxlkEdTKDgckPbcLHAnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3q/1QHQ+ Z8YTgabHNvfcoTyu06MwHwYDVR0jBBgwFoAUf4JFu9TUWXIbQdT/K7+0Jf8RiVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNjAwLzJBQTdENDVFNzdG MTExRUZBQzExMjk0MkM0RjlBRTAyL2Y0SkZ1OVRVV1hJYlFkVF9LNy0wSmY4UmlW TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZjRKRnU5VFVXWEliUWRUX0s3LTBKZjhSaVZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NjAwLzJBQTdENDVFNzdGMTExRUZBQzExMjk0MkM0RjlBRTAyL2Y0SkZ1OVRVV1hJ YlFkVF9LNy0wSmY4UmlWTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKaUlz+FUHVfXS45DZWxOeZ75c2GSbm5KaF5DvAK7TOWtqr/kqYp7PHR TOQZ84a1AH94SKfSbv1Ttw5NBCtCTbaYNn0YTiYW+mhe1ewtIGr5N9e2wL0vZP/t 8nwPN0n2th7W34nuzdlpVwKaaKqfFrow19wi1HFpSc0LRnesJC8uZIXZLaPwVkNR YXqQwR6sMkDCpdiJMZRE0IICJ9/QKKDEgAqrxDRYzcqHcPzWYp9xfaSXjAzgmBiA QMK0wFcixFsFoBm1/3Rcj5P0jkL6OYZSjE4RMub4oWV58z9TbHZrXo9jyp3NTLHn T51VKtxEd9ICaoJTZkI/E+ii5DAtrIw= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org