$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: P3G28nseUJbDjeOCXIuRx8nKPaJqmuiEE5cTFvauAYU= Subject key identifier: A2:81:F0:15:C4:65:BF:2B:52:27:59:F4:D6:C8:14:2E:10:10:08:53 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 0795 Signing time: Fri 22 Nov 2024 20:53:15 +0000 Manifest this update: Fri 22 Nov 2024 20:53:14 +0000 Manifest next update: Fri 29 Nov 2024 20:53:14 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: syZnxEeVthbj4b4TYxKyNgh81AA/FnZbi0o/V1CnnvE=) 2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: nsaH5I08UA9S7pBWJEs95VRVtj6VDnIyoLGMkyvaxCM=) 3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: jtwXRDg4ifzB5YeF9ItYPDeteiV3n1oUq/L6Q79DerA=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: G8R2HGhEO91zZJR3k6r/R5FFkuswRD4+38OOZJqUih0=) 5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: MlL6AakK7qGzM8DE1JwJUAOkQ8rpfwcCeXJ1v0Bdnow=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: 6GaYypzIsDgZggW9KzGhSmmLldD0h0OUbEZlMHiCV0M=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: /t87PANjNW6EpQXUSbODbYse7J1TpUCr6EqoPlENnyw=) 8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: NeWDXo15SqJ2L5IjpW3UHQXI0L4NJwn7CVOw91aHuUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Nov 22 20:53:14 2024 GMT Not After : Nov 29 20:53:14 2024 GMT Subject: CN=6740ef3b-2ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:57:d5:48:af:24:d8:89:52:ee:1d:ce:6a:9b: 45:1b:61:cb:fc:9c:56:d1:0d:e3:cb:33:9f:2a:8d: 0a:77:08:94:a4:e3:f0:9f:3d:eb:49:44:85:3e:12: 4b:99:c6:be:5b:f0:21:3c:43:d7:ff:97:58:10:da: 96:13:69:06:1a:4b:ac:0f:5b:5b:9f:35:ac:59:2f: 1b:ab:68:fd:07:a3:c6:88:14:78:d6:08:1f:e2:4f: 8e:0d:2f:44:4b:26:28:f1:f6:22:99:da:db:30:df: 3e:41:0e:3b:17:8e:a7:9e:f3:ce:41:59:e0:17:ea: 3f:d8:2b:f8:74:65:23:d3:71:8a:07:66:48:31:b9: d7:e7:82:93:43:a1:3c:18:26:36:2d:df:88:16:94: bd:1b:24:dd:e4:dd:f0:c0:28:42:91:85:7b:b7:3c: 5e:82:26:4b:81:b2:c9:3c:ab:d1:20:b5:20:62:ad: 62:0d:d7:3c:95:8b:55:5a:0c:28:bc:d7:23:48:1d: c9:07:45:36:4b:6d:85:b9:2e:f5:f5:41:77:67:71: b9:3b:27:ef:9f:6b:66:67:e7:54:72:1d:d1:e1:f2: 12:81:bb:da:37:28:5f:9b:32:30:9f:33:6d:82:a5: 65:4f:39:c9:68:bd:46:73:66:2f:8b:60:57:ba:da: 8a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:81:F0:15:C4:65:BF:2B:52:27:59:F4:D6:C8:14:2E:10:10:08:53 X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:fe:0c:12:0f:14:ed:2c:c4:9c:0d:ea:4b:9b:32:18:f2:e9: de:be:06:5c:57:ab:4e:23:5a:14:be:7f:a8:f6:fb:0a:67:d3: e9:60:9c:18:51:b5:8c:2c:e3:2a:4f:4d:bf:bb:10:99:c1:01: 4b:00:65:2f:23:62:27:75:c3:92:d2:e0:10:8a:8a:d6:2e:24: f3:c1:4c:00:ac:45:e0:88:be:f6:a8:8e:01:21:9f:60:cb:c9: 6e:b6:af:9f:2a:fb:56:d6:b4:b8:4b:8c:34:af:f1:24:10:d6: aa:8e:d9:d0:cb:85:97:b5:2c:e6:40:d5:5a:c7:11:5e:2d:4a: 42:30:5a:83:04:d1:1b:c8:cc:72:a4:9f:10:f8:5a:ef:2c:45: 41:55:7f:6f:a1:44:ae:c2:9c:26:5d:c6:e5:0f:20:09:4d:91: 7c:29:57:77:63:ef:aa:89:f8:ae:1e:c9:15:4c:cb:25:ed:c1: 0f:be:0f:28:d7:c6:68:fe:c3:99:01:99:85:c3:cb:07:00:4b: 99:7c:01:5f:bd:65:65:76:8e:41:a6:73:58:56:72:98:17:12: ae:a0:42:d0:af:14:5c:1f:17:7c:96:8c:fe:9b:0e:ac:91:36: a1:55:92:71:80:95:87:57:34:28:00:3b:ef:41:a9:4f:7f:c6: 37:ad:bc:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjQxMTIyMjA1MzE0WhcNMjQxMTI5MjA1MzE0WjAYMRYwFAYD VQQDEw02NzQwZWYzYi0yY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lfVSK8k2IlS7h3OaptFG2HL/JxW0Q3jyzOfKo0KdwiUpOPwnz3rSUSFPhJL mca+W/AhPEPX/5dYENqWE2kGGkusD1tbnzWsWS8bq2j9B6PGiBR41ggf4k+ODS9E SyYo8fYimdrbMN8+QQ47F46nnvPOQVngF+o/2Cv4dGUj03GKB2ZIMbnX54KTQ6E8 GCY2Ld+IFpS9GyTd5N3wwChCkYV7tzxegiZLgbLJPKvRILUgYq1iDdc8lYtVWgwo vNcjSB3JB0U2S22FuS719UF3Z3G5Oyfvn2tmZ+dUch3R4fISgbvaNyhfmzIwnzNt gqVlTznJaL1Gc2Yvi2BXutqKNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKB8BXE Zb8rUidZ9NbIFC4QEAhTMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC/gwSDxTtLMScDepLmzIY8unevgZcV6tOI1oUvn+o9vsKZ9PpYJwY UbWMLOMqT02/uxCZwQFLAGUvI2IndcOS0uAQiorWLiTzwUwArEXgiL72qI4BIZ9g y8lutq+fKvtW1rS4S4w0r/EkENaqjtnQy4WXtSzmQNVaxxFeLUpCMFqDBNEbyMxy pJ8Q+FrvLEVBVX9voUSuwpwmXcblDyAJTZF8KVd3Y++qifiuHskVTMsl7cEPvg8o 18Zo/sOZAZmFw8sHAEuZfAFfvWVldo5BpnNYVnKYFxKuoELQrxRcHxd8loz+mw6s kTahVZJxgJWHVzQoADvvQalPf8Y3rbwd -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org