$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: C16Zn9TtkY07onTnt8hnLA0RYr39gxft5iYG0mOOU9Q= Subject key identifier: A8:07:DF:B9:E1:0C:C2:49:E6:7E:41:F6:69:C0:38:F1:73:C3:4D:2E Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 0211 Signing time: Thu 21 Nov 2024 01:33:02 +0000 Manifest this update: Thu 21 Nov 2024 01:33:01 +0000 Manifest next update: Thu 28 Nov 2024 01:33:01 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: 1mN4zTyiHR1rvOWCaPODXASHM8I4logdcN20u1fH2cE=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: MerLsBV6jv2qjNEO4O4NBuQAWQkGnVBjk/HecMpMbfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: Nov 21 01:33:01 2024 GMT Not After : Nov 28 01:33:01 2024 GMT Subject: CN=673e8dcd-16f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:85:9d:24:90:fc:6f:9a:98:19:ef:01:79: d9:4c:6b:11:0a:2c:dc:60:7a:e7:3a:95:1d:7c:dd: 46:f8:c6:a6:ad:29:ae:18:fc:a5:c6:c6:c3:08:7b: e5:90:96:b8:7d:4d:c6:6e:37:42:9a:84:f8:69:b2: 7e:4d:48:78:01:45:ae:0b:bf:cd:bd:00:eb:f3:9d: 37:bf:bd:8e:68:4c:12:c3:ee:e7:85:67:00:ae:c0: 7a:37:da:3b:c8:ac:a3:e9:39:0b:f3:0d:4b:cc:1d: 05:a9:bb:f5:fd:38:ce:cd:68:13:d6:e9:34:3a:ef: b8:05:68:38:9e:5b:93:8e:a6:3e:92:89:4b:1d:3e: b3:fb:f6:24:b5:ec:6c:b0:9f:ce:03:b4:09:ae:33: 91:ab:8a:a2:81:db:4a:b8:fd:a9:19:11:fd:8b:35: 27:9d:1c:7d:e4:5f:08:ed:19:c1:1a:67:82:f1:a5: 65:5b:14:bd:89:b4:ff:87:24:43:de:b2:62:2e:3c: 04:e5:25:84:35:e1:8d:cf:9b:f9:37:ea:1f:51:9c: aa:ee:7c:09:fb:5a:b5:3a:1d:5e:70:99:28:a1:c8: 95:ab:55:0a:25:51:dc:8e:e7:f2:b1:5e:35:d2:15: 58:3e:43:38:cc:a0:ae:5b:f9:06:bf:75:df:24:61: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:07:DF:B9:E1:0C:C2:49:E6:7E:41:F6:69:C0:38:F1:73:C3:4D:2E X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:bb:58:3a:8e:32:77:a1:c2:59:bc:dd:85:ae:47:7d:ba:07: 41:37:98:eb:3d:10:bb:06:42:bc:e7:54:95:f2:1e:e8:97:f8: 16:50:53:ac:a3:97:20:81:72:96:a7:23:76:99:eb:5e:15:57: 7c:e5:de:b2:42:fe:ef:bc:60:12:58:bb:74:90:f3:5f:b2:d9: d1:ae:a5:ba:2b:58:67:34:72:6f:56:e4:30:3b:77:c7:03:5b: e2:2d:67:13:bb:b0:b0:5d:77:94:da:0e:74:fd:79:8f:26:5b: 89:27:8b:89:0c:8f:e8:92:f8:4e:3a:88:20:95:e3:de:89:77: ec:60:c7:32:3a:9a:54:56:8d:a3:e5:1a:cf:98:08:64:22:04: 84:9c:7f:8f:5a:17:61:8e:41:0d:ac:17:96:b2:77:9b:ae:0b: f1:44:66:8d:90:f9:fb:7d:bf:e7:a2:e8:34:95:54:8d:24:ea: f4:29:11:0b:ec:3b:29:54:51:e0:0e:d1:77:37:f4:aa:65:19: 57:33:1e:ef:d5:6d:5a:7d:b7:d0:81:41:95:3a:0d:9d:97:53: 15:84:5e:43:c4:f5:4e:6f:93:ea:85:be:b3:2f:29:da:e8:dd: ea:6c:a7:b4:0c:07:4b:f9:e1:e4:fe:56:f8:8a:f0:a4:d2:71: a4:a5:f8:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjQxMTIxMDEzMzAxWhcNMjQxMTI4MDEzMzAxWjAYMRYwFAYD VQQDEw02NzNlOGRjZC0xNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0mFnSSQ/G+amBnvAXnZTGsRCizcYHrnOpUdfN1G+MamrSmuGPylxsbDCHvl kJa4fU3GbjdCmoT4abJ+TUh4AUWuC7/NvQDr8503v72OaEwSw+7nhWcArsB6N9o7 yKyj6TkL8w1LzB0Fqbv1/TjOzWgT1uk0Ou+4BWg4nluTjqY+kolLHT6z+/Yktexs sJ/OA7QJrjORq4qigdtKuP2pGRH9izUnnRx95F8I7RnBGmeC8aVlWxS9ibT/hyRD 3rJiLjwE5SWENeGNz5v5N+ofUZyq7nwJ+1q1Oh1ecJkoociVq1UKJVHcjufysV41 0hVYPkM4zKCuW/kGv3XfJGEqbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgH37nh DMJJ5n5B9mnAOPFzw00uMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTu1g6jjJ3ocJZvN2Frkd9ugdBN5jrPRC7BkK851SV8h7ol/gWUFOs o5cggXKWpyN2meteFVd85d6yQv7vvGASWLt0kPNfstnRrqW6K1hnNHJvVuQwO3fH A1viLWcTu7CwXXeU2g50/XmPJluJJ4uJDI/okvhOOogglePeiXfsYMcyOppUVo2j 5RrPmAhkIgSEnH+PWhdhjkENrBeWsnebrgvxRGaNkPn7fb/noug0lVSNJOr0KREL 7DspVFHgDtF3N/SqZRlXMx7v1W1afbfQgUGVOg2dl1MVhF5DxPVOb5Pqhb6zLyna 6N3qbKe0DAdL+eHk/lb4ivCk0nGkpfhE -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:55 2024 by rpki-client on console-fra.rpki-client.org