$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft File: X-srwGbHr1fSafdXM_D_g-mQOaM.mft (raw, json) Hash identifier: Pipblje9+JkaZUCWaUfNcLP+LY1AaNwRJZtXfj3Mzws= Subject key identifier: A5:9B:00:27:76:31:06:13:16:17:A2:D5:FA:CF:7F:9F:91:45:DB:5F Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft Manifest number: F8 Signing time: Thu 21 Nov 2024 03:31:00 +0000 Manifest this update: Thu 21 Nov 2024 03:30:59 +0000 Manifest next update: Thu 28 Nov 2024 03:30:59 +0000 Files and hashes: 1: X-srwGbHr1fSafdXM_D_g-mQOaM.crl (hash: vhJJ0Bblh5m4SVzjD1bgeFaJhRCeFjlGh1N7NCoHqkw=) 2: 64D342B229B311EFBE0EBC5EC4F9AE02.roa (hash: bQkbYStEcK09kUFm/JpDr4k8pQLp/osVAE1jOUa9QUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3 Validity Not Before: Nov 21 03:30:59 2024 GMT Not After : Nov 28 03:30:59 2024 GMT Subject: CN=673ea974-5e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:06:8a:32:02:2b:6d:98:d0:ec:8b:50:cb:fb: 4a:be:15:6e:c4:f7:4e:f3:d7:97:e2:df:46:78:24: 65:09:20:0d:2d:ee:da:9c:3b:59:a9:48:15:ab:62: a0:a8:4d:a9:b4:5c:31:5c:11:23:db:52:0a:03:58: 05:ad:6c:ac:1e:08:45:d7:62:74:b8:3d:69:b9:22: 02:65:34:24:24:95:cf:06:60:de:0f:7b:b1:17:88: 98:81:0a:23:db:02:f6:4c:8b:d5:55:5b:51:57:f4: 21:03:49:b6:cd:77:5e:8b:d3:50:d1:ef:37:b5:3b: ba:10:43:91:c8:27:9e:ce:d5:e4:2a:21:26:c2:0c: 29:db:14:03:ab:56:51:0f:6c:44:4b:19:78:a0:5b: 9b:9f:7a:7f:51:d1:cf:de:29:8d:a5:9f:60:99:64: b9:fb:cc:c2:fc:88:0d:6e:03:60:c0:a7:b0:88:65: 82:bb:de:be:07:be:70:76:c3:9a:06:0e:75:bd:11: 39:eb:de:2f:4d:96:03:8a:04:1d:4e:49:8e:e9:f7: bb:c0:5f:65:20:82:ff:10:68:7a:5e:af:0b:35:7f: 41:36:b6:11:8c:1c:3c:0a:38:ec:75:31:31:ca:50: c8:e5:ce:33:e7:6f:3e:73:47:43:2c:5e:38:21:18: c8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9B:00:27:76:31:06:13:16:17:A2:D5:FA:CF:7F:9F:91:45:DB:5F X509v3 Authority Key Identifier: keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:58:ba:1a:59:ba:41:27:e1:d9:99:3b:a5:c9:1a:43:9e:49: cb:5b:fe:72:2d:d9:ab:9b:84:3c:0d:a5:db:59:44:40:e7:c0: 23:2e:a7:f8:aa:42:02:db:ac:ae:c4:73:d4:44:48:e6:c1:d2: c0:08:94:e8:f4:83:7e:38:63:09:e1:90:4e:e0:e3:18:f9:8d: 9f:b3:13:33:c3:af:e9:5f:25:ef:c2:f7:7d:e0:4c:d7:90:ee: 11:a5:26:24:1c:56:2c:92:e9:fc:75:9d:2d:77:c6:86:36:7f: fa:73:29:7c:b2:d9:b0:4c:1f:6b:8c:c4:1e:76:37:72:02:13: 04:dc:f4:3e:02:b8:7e:41:fb:d7:19:1a:fc:5d:ba:9e:cc:bd: 97:42:95:ea:b2:4c:85:0e:de:dc:6f:d8:e5:54:8a:c0:95:82: 4e:3a:98:cc:55:7b:9e:90:aa:5c:91:94:07:73:16:ea:af:f1: a9:98:f2:db:d1:e6:42:b1:f1:4d:36:42:a3:4c:c4:86:0e:8e: 75:58:b2:ff:4a:84:b7:67:25:88:96:21:88:4a:df:33:f8:1a: 2b:f3:36:8b:bf:47:30:6c:fd:0f:7a:bc:2d:d9:26:61:ce:72: 44:40:12:ab:48:16:0f:6e:c8:ec:34:35:24:8f:b9:1d:4c:73: b5:20:07:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz RTk5MDM5QTMwHhcNMjQxMTIxMDMzMDU5WhcNMjQxMTI4MDMzMDU5WjAYMRYwFAYD VQQDEw02NzNlYTk3NC01ZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+gaKMgIrbZjQ7ItQy/tKvhVuxPdO89eX4t9GeCRlCSANLe7anDtZqUgVq2Kg qE2ptFwxXBEj21IKA1gFrWysHghF12J0uD1puSICZTQkJJXPBmDeD3uxF4iYgQoj 2wL2TIvVVVtRV/QhA0m2zXdei9NQ0e83tTu6EEORyCeeztXkKiEmwgwp2xQDq1ZR D2xESxl4oFubn3p/UdHP3imNpZ9gmWS5+8zC/IgNbgNgwKewiGWCu96+B75wdsOa Bg51vRE5694vTZYDigQdTkmO6fe7wF9lIIL/EGh6Xq8LNX9BNrYRjBw8CjjsdTEx ylDI5c4z528+c0dDLF44IRjIxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWbACd2 MQYTFhei1frPf5+RRdtfMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RThCRi9CMzg5Q0YzODQxQTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIx ZlNhZmRYTV9EX2ctbVFPYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrWLoaWbpBJ+HZmTulyRpDnknLW/5yLdmrm4Q8DaXbWURA58AjLqf4 qkIC26yuxHPUREjmwdLACJTo9IN+OGMJ4ZBO4OMY+Y2fsxMzw6/pXyXvwvd94EzX kO4RpSYkHFYskun8dZ0td8aGNn/6cyl8stmwTB9rjMQedjdyAhME3PQ+Arh+QfvX GRr8XbqezL2XQpXqskyFDt7cb9jlVIrAlYJOOpjMVXuekKpckZQHcxbqr/GpmPLb 0eZCsfFNNkKjTMSGDo51WLL/SoS3ZyWIliGISt8z+Bor8zaLv0cwbP0Perwt2SZh znJEQBKrSBYPbsjsNDUkj7kdTHO1IAfa -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:56 2024 by rpki-client on console-fra.rpki-client.org