$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: xZop/T2h98rU2/RqYnEUqqlqFm0gQifaLtLVYMyQXng= Subject key identifier: 4C:51:69:C7:D7:B3:86:43:D6:7E:FE:FA:54:BF:0E:D7:9D:5D:FC:B3 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1E3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1DE4 Signing time: Fri 22 Nov 2024 16:06:39 +0000 Manifest this update: Fri 22 Nov 2024 16:06:38 +0000 Manifest next update: Fri 29 Nov 2024 16:06:38 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: jVWgs/Zm5BZn1YHfqKnhE0KYaRoWcnIQ1Wo86h23ANI=) 2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: TImxH9JTLcXW5IxN9KJ3rWqoq711teMsa+dHA5TQbng=) 3: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: NQthKb3GChge6T5RUI263G1tlKE7DYI5g1q3XSDyXjY=) 4: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: fGaqipOEAJZROlVHqINmszGLW3Dq7A8zFedH5L1wbHs=) 5: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: zy+QFw5iZEfYuF0zeVE4tfDmqgvqeWibFWaXm9tRuko=) 6: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: /c8FLvOyw45M3Wp6VhAYx9qw35M/yT9sGg6i1whIIQ0=) 7: B0ACAB905A2011EA9E34F70BC4F9AE02.roa (hash: 4bDo/tDT4JePQ+cpzsR27sq8dyUPCkgeO1cf4JyV7Mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7743 (0x1e3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Nov 22 16:06:38 2024 GMT Not After : Nov 29 16:06:38 2024 GMT Subject: CN=6740ac0f-4a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:65:70:9b:61:14:b9:6a:d6:6a:34:e5:09:12: 32:3f:61:8c:b5:ee:46:7d:93:fa:cc:48:ab:ef:b7: 14:99:79:fa:97:d3:88:84:c3:d4:c7:4a:66:a2:f0: 3b:30:97:a8:56:51:96:79:d4:ec:e0:98:18:80:1f: 02:d5:e2:a4:92:14:0c:1f:da:ed:38:8f:7d:1c:ef: 99:b2:e5:00:3b:23:45:37:88:18:1b:78:48:7a:e9: 6e:af:cf:f4:78:fd:d0:a7:01:a7:12:68:5c:1b:5d: a0:34:9e:6c:51:cf:d8:c8:dd:e7:18:bf:be:e8:1c: b7:58:5e:94:21:11:91:42:12:d3:45:9e:0f:19:56: bf:03:62:07:66:0b:be:f0:ce:ef:14:af:b9:83:55: 0c:f9:ed:d6:79:78:28:9a:d7:6e:dc:be:88:43:85: 67:a9:49:5b:9a:cb:25:5a:a9:e6:6d:83:48:18:50: 86:9c:7b:a7:f2:7d:20:cb:96:f8:83:db:e7:b7:2f: 1a:20:ad:61:a7:03:87:9d:df:5d:92:63:a4:e0:22: bc:ec:ea:54:a6:57:86:98:87:87:25:80:55:84:39: 2f:51:9c:49:b5:db:8e:6d:bc:20:78:6e:6e:9e:8f: 2b:17:36:8f:6e:0e:7d:d2:f0:e3:83:32:d6:96:14: aa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:51:69:C7:D7:B3:86:43:D6:7E:FE:FA:54:BF:0E:D7:9D:5D:FC:B3 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:05:29:b4:9b:ac:28:5b:73:14:51:b4:ae:bc:b8:fc:0d:8a: 99:39:bf:d2:13:67:56:12:01:21:74:14:dd:7b:1d:07:14:56: da:8b:c4:39:4e:2d:14:4d:28:0b:0d:38:6b:89:0c:c0:e8:64: ff:a8:b0:91:99:f2:58:54:71:8a:e0:0f:94:78:a9:d0:c5:db: 8b:6b:ce:51:23:ea:50:54:3a:75:07:c1:ab:65:57:4b:1a:29: b8:4b:83:24:92:5e:1b:90:c6:90:8f:23:07:dc:9b:48:c6:61: 95:85:98:1b:7b:17:a7:40:10:19:32:21:91:f3:47:cc:b3:52: da:9c:43:81:81:35:f1:26:0c:23:17:d8:c8:de:1f:e4:b2:86: d5:2c:e7:1b:44:73:3b:a8:d2:07:c7:15:9c:df:5d:0e:52:01: c2:14:61:40:22:8c:41:8d:1f:b6:38:34:56:60:77:61:dd:e4: 0b:9b:bc:e5:e4:c5:ed:41:cb:80:f7:0b:cb:3c:f4:db:3c:44: f9:b5:01:92:c0:39:76:9a:1a:7d:6c:b9:62:1d:75:16:e6:6d: 98:c7:1d:1c:cf:7d:67:df:d7:8f:78:a2:8c:a0:7d:73:77:0b: bc:e4:59:d6:7e:71:45:55:13:99:66:11:a9:6c:55:a8:61:c5: 9f:fb:69:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjQxMTIyMTYwNjM4WhcNMjQxMTI5MTYwNjM4WjAYMRYwFAYD VQQDEw02NzQwYWMwZi00YTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WVwm2EUuWrWajTlCRIyP2GMte5GfZP6zEir77cUmXn6l9OIhMPUx0pmovA7 MJeoVlGWedTs4JgYgB8C1eKkkhQMH9rtOI99HO+ZsuUAOyNFN4gYG3hIeulur8/0 eP3QpwGnEmhcG12gNJ5sUc/YyN3nGL++6By3WF6UIRGRQhLTRZ4PGVa/A2IHZgu+ 8M7vFK+5g1UM+e3WeXgomtdu3L6IQ4VnqUlbmsslWqnmbYNIGFCGnHun8n0gy5b4 g9vnty8aIK1hpwOHnd9dkmOk4CK87OpUpleGmIeHJYBVhDkvUZxJtduObbwgeG5u no8rFzaPbg590vDjgzLWlhSqLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExRacfX s4ZD1n7++lS/DtedXfyzMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMBSm0m6woW3MUUbSuvLj8DYqZOb/SE2dWEgEhdBTdex0HFFbai8Q5 Ti0UTSgLDThriQzA6GT/qLCRmfJYVHGK4A+UeKnQxduLa85RI+pQVDp1B8GrZVdL Gim4S4Mkkl4bkMaQjyMH3JtIxmGVhZgbexenQBAZMiGR80fMs1LanEOBgTXxJgwj F9jI3h/ksobVLOcbRHM7qNIHxxWc310OUgHCFGFAIoxBjR+2ODRWYHdh3eQLm7zl 5MXtQcuA9wvLPPTbPET5tQGSwDl2mhp9bLliHXUW5m2Yxx0cz31n39ePeKKMoH1z dwu85FnWfnFFVROZZhGpbFWoYcWf+2nS -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org