$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json) Hash identifier: xbxJEbCc8H/NmHBhJSe0S1BN91gOwnSlpzNT/64jqVM= Subject key identifier: 07:5A:03:A9:00:9F:69:89:73:7B:16:DD:C8:A6:D0:C5:5D:E7:06:CC Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0DDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft Manifest number: 0DD4 Signing time: Fri 22 Nov 2024 17:48:40 +0000 Manifest this update: Fri 22 Nov 2024 17:48:39 +0000 Manifest next update: Fri 29 Nov 2024 17:48:39 +0000 Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: a53od+OrZ2S1A1AZeLqqX5x7hjlSBnEbhYyzX2MuqTY=) 2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: PT85jOUkAj1X0WXEwRPCdUqy+wM3om5TOq/+D9IWTpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3548 (0xddc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: Nov 22 17:48:39 2024 GMT Not After : Nov 29 17:48:39 2024 GMT Subject: CN=6740c3f7-1e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:20:3c:d8:52:d5:09:60:8d:48:04:69:7e:4a: be:53:d6:64:df:5a:cb:43:20:f6:4c:f1:30:95:bc: 2a:41:3f:38:d0:8e:15:56:63:a1:f7:3e:d3:1d:a4: 49:4b:f8:00:30:27:51:36:9d:bd:00:8b:e7:a5:8b: 0c:9b:13:97:07:f2:64:c5:48:04:66:c6:12:a0:64: ab:8f:b6:f6:1e:d8:be:d1:2b:da:6b:5a:f6:2e:de: dc:82:9c:3d:79:39:24:39:d0:bf:6f:2d:de:07:60: 9b:16:28:32:64:b4:26:58:62:73:ca:a1:6f:fe:19: 9f:d6:53:59:e8:de:91:9a:06:60:8c:f1:42:48:a7: f8:12:e8:3b:b7:ad:7b:09:6f:17:b8:65:6e:eb:dd: 36:6d:df:4d:4f:2a:6c:93:0d:1f:a8:7c:9d:7f:67: b9:3d:b7:a9:e6:a3:00:2f:4b:92:c1:72:51:77:0c: e5:6a:5c:d8:d3:0e:24:2c:ab:0c:43:2b:3f:6b:2e: fc:dd:af:aa:6f:7a:6c:27:fe:49:e3:95:aa:be:c0: e2:4b:09:9d:1b:08:15:54:51:f7:7a:e2:35:3a:10: f2:1d:40:18:fd:8f:a5:1a:dd:12:6c:fc:6e:2a:b6: 5b:13:6c:88:4b:96:b0:f2:c2:c6:06:fe:7e:d2:43: b8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5A:03:A9:00:9F:69:89:73:7B:16:DD:C8:A6:D0:C5:5D:E7:06:CC X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:04:89:51:6f:32:df:d4:78:55:e0:c7:9a:3f:fa:64:36:11: 65:e3:ca:e7:d3:d9:6f:6a:85:32:62:3e:b0:33:48:05:f1:5e: f5:87:09:97:69:6c:06:17:4e:03:06:a8:7f:fa:0a:76:5d:76: 3b:b0:f1:5f:ce:1b:15:00:4e:52:da:ec:48:a4:c8:21:a5:6f: a9:71:4c:9f:06:81:9e:af:aa:dd:a2:bb:21:96:90:be:6d:d6: b4:a7:5d:2c:50:78:cf:9e:6e:89:8c:f9:13:1d:53:24:3c:41: 4d:58:d3:54:98:50:64:7b:60:6e:21:79:e4:4f:71:c3:4c:12: d3:52:87:a0:bb:e4:a3:39:ff:ce:09:09:6d:f4:50:a5:1f:a2: 91:92:0b:70:cb:fb:11:d4:46:22:3e:10:e4:41:a2:d1:5e:9b: d2:a7:4d:d4:c4:7f:a9:7c:cc:bf:00:c6:68:3e:f9:49:8b:f8: ae:b0:89:3a:53:5d:15:3e:ff:5c:c5:e5:54:17:5d:4e:e4:85: 7c:cd:29:73:cc:4a:78:f1:68:f9:bd:c4:44:e8:1d:b4:62:d3: 68:44:de:5b:e4:2c:db:38:f6:e6:0f:6c:e1:a1:14:b0:60:d5: 43:b2:aa:13:1f:f3:17:3f:7f:32:0c:08:33:a2:28:be:b0:24: c0:a5:6e:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjQxMTIyMTc0ODM5WhcNMjQxMTI5MTc0ODM5WjAYMRYwFAYD VQQDEw02NzQwYzNmNy0xZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2iA82FLVCWCNSARpfkq+U9Zk31rLQyD2TPEwlbwqQT840I4VVmOh9z7THaRJ S/gAMCdRNp29AIvnpYsMmxOXB/JkxUgEZsYSoGSrj7b2Hti+0Svaa1r2Lt7cgpw9 eTkkOdC/by3eB2CbFigyZLQmWGJzyqFv/hmf1lNZ6N6RmgZgjPFCSKf4Eug7t617 CW8XuGVu6902bd9NTypskw0fqHydf2e5Pbep5qMAL0uSwXJRdwzlalzY0w4kLKsM Qys/ay783a+qb3psJ/5J45WqvsDiSwmdGwgVVFH3euI1OhDyHUAY/Y+lGt0SbPxu KrZbE2yIS5aw8sLGBv5+0kO4XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdaA6kA n2mJc3sW3cim0MVd5wbMMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjg4MC8xRjUxMThBNEEyRUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZl OExONURRNTVZZWlIVW9HWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHBIlRbzLf1HhV4MeaP/pkNhFl48rn09lvaoUyYj6wM0gF8V71hwmX aWwGF04DBqh/+gp2XXY7sPFfzhsVAE5S2uxIpMghpW+pcUyfBoGer6rdorshlpC+ bda0p10sUHjPnm6JjPkTHVMkPEFNWNNUmFBke2BuIXnkT3HDTBLTUoegu+SjOf/O CQlt9FClH6KRkgtwy/sR1EYiPhDkQaLRXpvSp03UxH+pfMy/AMZoPvlJi/iusIk6 U10VPv9cxeVUF11O5IV8zSlzzEp48Wj5vcRE6B20YtNoRN5b5CzbOPbmD2zhoRSw YNVDsqoTH/MXP38yDAgzoii+sCTApW72 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org