$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: o7RtvJaaaW+2FMrc+UNsn5RdNsxj5vEUxubJUFv/ZY8= Subject key identifier: A8:7F:F3:83:6B:BA:A9:0D:2F:33:B3:E9:53:05:32:6A:FA:D1:E2:79 Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0BF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0BF0 Signing time: Fri 22 Nov 2024 18:21:51 +0000 Manifest this update: Fri 22 Nov 2024 18:21:51 +0000 Manifest next update: Fri 29 Nov 2024 18:21:51 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: BRkE587GndxbIu6bn1zoasoSWUAujCm2dKilom6ZpGA=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: v9azMDMl/yRYmoLHg8R81AQm2XRIdcogmkiu0bE+WLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3062 (0xbf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: Nov 22 18:21:51 2024 GMT Not After : Nov 29 18:21:51 2024 GMT Subject: CN=6740cbbf-51e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f9:05:6c:21:b9:f8:6b:58:39:06:a1:be:f5: b4:12:83:0b:16:74:80:31:07:f6:aa:3a:d6:5b:77: aa:57:fa:c6:2f:7e:0f:9d:5a:9a:8e:11:03:76:75: 8d:be:9e:63:1e:2e:e8:8d:2a:fb:92:9c:e1:e0:16: e8:7c:9d:66:d5:67:a0:9d:e3:18:47:42:31:d7:9a: 97:3c:7c:fe:d5:68:c4:37:8e:8b:93:25:36:81:b6: c3:6f:c7:ad:f6:fb:2a:7d:61:d1:8c:d2:13:11:64: df:9b:ad:47:55:42:82:78:69:d5:82:16:cd:14:55: 60:71:9c:a2:1d:d9:13:70:7b:31:2d:e7:fd:59:d0: 95:0e:c2:87:c3:89:7a:88:30:dd:0d:e6:ed:b7:3e: bb:7c:c0:9b:06:77:e4:93:6c:b7:66:4f:d8:a0:79: ab:94:44:d5:d8:2c:98:5f:ba:46:ae:ea:94:bf:28: 2d:c8:df:64:62:83:38:f5:ae:5b:89:ba:e8:f4:c8: 5c:9e:05:22:a9:f9:a5:34:21:20:4b:a5:6e:a2:67: d3:46:fb:7e:3c:e2:2b:2f:ca:c9:13:87:0a:f5:8d: ec:e6:82:07:26:27:20:d7:f4:08:97:67:22:8d:f2: 48:87:bd:33:df:9b:99:03:37:79:77:5f:f5:de:ac: df:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7F:F3:83:6B:BA:A9:0D:2F:33:B3:E9:53:05:32:6A:FA:D1:E2:79 X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:d3:ea:0c:de:ef:16:e3:c7:51:31:72:ea:fe:bb:dc:2f:de: 72:a6:2c:4c:7f:01:b1:e6:02:5d:a3:46:f0:03:d3:e1:64:30: 14:c7:55:a6:53:0b:d4:81:52:91:b2:11:05:38:a4:3e:da:7c: 22:65:10:87:37:32:e1:5b:b8:a6:9e:4e:18:ea:47:df:69:29: aa:ae:a3:8e:4a:44:5e:6e:da:55:a3:29:44:f1:6d:00:96:46: 1f:06:82:50:99:d4:da:56:c3:dd:75:01:52:9c:ff:a3:b9:5e: 72:1a:73:a2:9d:aa:5f:1b:81:d5:36:c0:90:dc:c9:72:82:76: 88:23:95:6b:5d:03:c7:6a:cd:2f:51:e1:9c:6f:33:d4:73:25: 58:be:3f:26:d8:65:37:f9:7b:d9:e6:a2:af:8a:63:ac:9c:f6: 03:e7:31:5c:4d:15:37:50:b7:1f:2e:48:b2:78:f2:47:c2:6b: 32:03:97:66:13:80:9e:9b:45:bd:6d:9c:d5:19:ac:c0:3f:ed: 14:c8:f9:a6:c4:09:28:bf:bb:f8:cf:a1:f1:43:74:6e:d6:d1: 77:36:7e:52:80:f0:b3:fc:63:b7:7a:96:d7:ad:38:8a:23:27: 73:bb:ec:1d:f1:57:3c:3d:68:53:09:2e:fb:2e:2a:51:40:dc: 7e:ac:6f:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjQxMTIyMTgyMTUxWhcNMjQxMTI5MTgyMTUxWjAYMRYwFAYD VQQDEw02NzQwY2JiZi01MWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPkFbCG5+GtYOQahvvW0EoMLFnSAMQf2qjrWW3eqV/rGL34PnVqajhEDdnWN vp5jHi7ojSr7kpzh4BbofJ1m1WegneMYR0Ix15qXPHz+1WjEN46LkyU2gbbDb8et 9vsqfWHRjNITEWTfm61HVUKCeGnVghbNFFVgcZyiHdkTcHsxLef9WdCVDsKHw4l6 iDDdDebttz67fMCbBnfkk2y3Zk/YoHmrlETV2CyYX7pGruqUvygtyN9kYoM49a5b ibro9MhcngUiqfmlNCEgS6VuomfTRvt+POIrL8rJE4cK9Y3s5oIHJicg1/QIl2ci jfJIh70z35uZAzd5d1/13qzfBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKh/84Nr uqkNLzOz6VMFMmr60eJ5MB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn0+oM3u8W48dRMXLq/rvcL95ypixMfwGx5gJdo0bwA9PhZDAUx1Wm UwvUgVKRshEFOKQ+2nwiZRCHNzLhW7imnk4Y6kffaSmqrqOOSkRebtpVoylE8W0A lkYfBoJQmdTaVsPddQFSnP+juV5yGnOinapfG4HVNsCQ3MlygnaII5VrXQPHas0v UeGcbzPUcyVYvj8m2GU3+XvZ5qKvimOsnPYD5zFcTRU3ULcfLkiyePJHwmsyA5dm E4Cem0W9bZzVGazAP+0UyPmmxAkov7v4z6HxQ3Ru1tF3Nn5SgPCz/GO3epbXrTiK Iydzu+wd8Vc8PWhTCS77LipRQNx+rG/S -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org