$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: LJAbDnXZ+odOpOGEeGAVTygejwjNetF/dg15/jgekSQ= Subject key identifier: EF:89:62:CE:F0:F9:C5:E5:90:5F:81:86:A1:29:45:68:66:EE:97:76 Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 0423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 041F Signing time: Sun 24 Nov 2024 23:45:41 +0000 Manifest this update: Sun 24 Nov 2024 23:45:40 +0000 Manifest next update: Sun 01 Dec 2024 23:45:40 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: YgqtUHXhiBvp4vVs3m4/qmsKdZ2k6vFaah6ONezqCrQ=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: JRIJmi6CkdzwRl9tqXcDbUlpayemlqeCYja07bnQOys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1059 (0x423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: Nov 24 23:45:40 2024 GMT Not After : Dec 1 23:45:40 2024 GMT Subject: CN=6743baa5-41ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:64:74:24:66:c0:d6:51:cf:45:b1:23:a8: 67:95:ab:fc:0f:34:f2:bf:5a:a9:fd:09:45:5d:97: 3f:59:3c:a6:f0:6a:fa:2e:0a:17:19:30:0a:0e:f7: 34:39:1d:8f:5b:ec:fd:1c:11:23:9e:be:16:a9:00: 3d:ac:44:fc:8d:03:07:b0:51:05:04:bb:88:55:5b: b6:55:31:5f:8b:b5:35:89:9c:b2:ce:57:8f:9a:b9: 74:1b:ef:20:8b:36:c4:59:9a:fa:1f:c7:d9:73:50: b2:67:02:23:65:aa:5c:b4:9d:e4:38:c9:63:56:23: 03:4c:5b:f1:20:29:83:b1:90:ce:56:8b:17:04:a3: 3f:55:d4:6f:68:56:73:65:c8:69:91:99:b0:2d:49: 8a:8a:3b:72:bd:be:22:55:8e:c6:c8:28:95:bf:ea: 12:44:49:e2:32:91:b6:fd:c1:aa:75:3f:03:7f:01: 9d:23:2f:b3:94:aa:3f:4a:27:cc:42:3e:0e:ea:b0: 84:01:44:15:25:5c:b0:28:e1:cb:84:0a:b5:a3:91: 99:66:78:f1:42:75:61:a0:a4:bc:33:a5:c0:b1:87: fa:6d:de:e4:3e:69:a5:40:99:9b:02:68:db:59:e4: 03:8c:71:82:d5:45:1c:96:bc:6a:41:73:2f:c1:6a: 7e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:89:62:CE:F0:F9:C5:E5:90:5F:81:86:A1:29:45:68:66:EE:97:76 X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:0d:a6:7b:3b:98:2f:1e:a3:24:39:7b:c8:a6:dc:d4:af:81: 1a:93:60:b8:f6:d9:85:c6:78:97:11:32:83:24:ff:8e:1e:9c: 17:52:10:ad:fb:ec:ec:a3:3e:a6:e5:48:e6:e5:59:40:4e:dc: 8f:30:49:68:5e:be:92:1a:eb:c1:da:50:fc:f6:ee:c3:16:33: cf:0b:6b:4a:92:64:90:4b:ae:82:26:44:23:a7:da:e3:a9:42: 49:f4:6c:b2:de:52:2a:fd:92:ec:ba:bd:0b:ab:02:9a:82:79: 98:b7:86:12:94:fc:27:dd:86:1a:1a:23:69:4a:3a:74:bf:18: 8c:7b:6b:78:05:e6:ad:18:61:65:81:cc:89:df:89:dc:e3:32: 5a:50:92:99:89:62:89:1c:d5:50:b3:75:4d:34:8f:12:15:ab: 01:b4:80:45:c2:f9:be:d3:eb:e2:69:6d:04:9a:20:cd:cf:0d: 91:56:26:0d:00:ce:87:47:97:89:3c:dc:e6:81:a9:dd:28:09: d5:52:c9:87:a1:ef:23:41:bc:07:3c:11:ef:7d:67:fc:a2:6a: 52:a3:a7:e4:e3:32:aa:e7:61:55:f1:0b:61:b4:5d:98:39:4e: 6f:83:ee:63:70:bf:c4:e4:20:d4:ff:d9:4e:34:92:5b:24:dc: 28:f8:ec:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjQxMTI0MjM0NTQwWhcNMjQxMjAxMjM0NTQwWjAYMRYwFAYD VQQDEw02NzQzYmFhNS00MWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZZkdCRmwNZRz0WxI6hnlav8DzTyv1qp/QlFXZc/WTym8Gr6LgoXGTAKDvc0 OR2PW+z9HBEjnr4WqQA9rET8jQMHsFEFBLuIVVu2VTFfi7U1iZyyzlePmrl0G+8g izbEWZr6H8fZc1CyZwIjZapctJ3kOMljViMDTFvxICmDsZDOVosXBKM/VdRvaFZz ZchpkZmwLUmKijtyvb4iVY7GyCiVv+oSREniMpG2/cGqdT8DfwGdIy+zlKo/SifM Qj4O6rCEAUQVJVywKOHLhAq1o5GZZnjxQnVhoKS8M6XAsYf6bd7kPmmlQJmbAmjb WeQDjHGC1UUclrxqQXMvwWp+3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+JYs7w +cXlkF+BhqEpRWhm7pd2MB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGDaZ7O5gvHqMkOXvIptzUr4Eak2C49tmFxniXETKDJP+OHpwXUhCt ++zsoz6m5Ujm5VlATtyPMEloXr6SGuvB2lD89u7DFjPPC2tKkmSQS66CJkQjp9rj qUJJ9Gyy3lIq/ZLsur0LqwKagnmYt4YSlPwn3YYaGiNpSjp0vxiMe2t4BeatGGFl gcyJ34nc4zJaUJKZiWKJHNVQs3VNNI8SFasBtIBFwvm+0+viaW0EmiDNzw2RViYN AM6HR5eJPNzmgandKAnVUsmHoe8jQbwHPBHvfWf8ompSo6fk4zKq52FV8QthtF2Y OU5vg+5jcL/E5CDU/9lONJJbJNwo+Ow9 -----END CERTIFICATE-----Generated at Mon Nov 25 01:15:27 2024 by rpki-client on console-fra.rpki-client.org