$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: GaSHJGOnHkivkR9S/WKy8hUh4nPXH0ux0LtLJ2kS6xQ= Subject key identifier: AD:F1:80:22:0F:C5:46:64:20:1E:0F:CD:7A:54:DD:41:73:80:4C:17 Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 013C Signing time: Sat 23 Nov 2024 02:45:07 +0000 Manifest this update: Sat 23 Nov 2024 02:45:07 +0000 Manifest next update: Sat 30 Nov 2024 02:45:07 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: RsXtfWzZsTmFoRYPYAhnLhik59oMKtMhAN9Vz5TwTT0=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: oLct614lxULJnPg0Rxvnf0inRuQaFav2PCBlzJPAse0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:45:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Nov 23 02:45:07 2024 GMT Not After : Nov 30 02:45:07 2024 GMT Subject: CN=674141b3-659c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f1:b7:c1:e5:58:5e:51:71:69:75:38:c4:22: 46:ff:c2:05:16:a8:a1:17:16:f8:67:6c:b5:e1:1b: 4e:cd:57:64:b3:64:bc:2b:ad:69:36:c3:61:93:62: fe:3e:ed:13:bf:60:0c:24:c5:4c:75:35:59:30:13: 58:3b:85:bf:27:39:47:bb:07:5d:d3:f1:0a:12:65: dc:e6:0f:99:23:c1:5b:6b:a7:41:2e:69:27:a7:dc: 41:20:73:6f:90:6e:d4:b6:c2:6a:3a:b0:6a:ca:26: 67:9c:9f:be:93:0c:da:6f:36:fb:69:8f:98:36:39: d3:bf:16:7f:e1:32:97:3e:66:bf:d0:08:e5:93:31: f7:c9:1a:0c:a7:d8:de:ce:66:9a:91:57:54:c7:f9: 8c:3d:96:9b:17:6f:ec:c6:40:ed:b3:b8:4d:2c:dc: d3:c4:25:e2:f8:05:59:f6:ce:94:0e:0e:f3:46:57: c9:f4:ac:e6:4d:d2:18:99:cc:56:e0:4d:ea:22:d5: 7c:65:a0:b8:60:96:98:91:62:90:c6:10:ff:4d:62: 40:c0:3c:29:80:ac:99:38:4b:61:36:a5:dd:c9:f8: 38:bf:f0:e3:a4:11:c5:58:11:38:0b:35:a0:41:d3: f7:f0:b4:80:a7:78:9d:18:9b:23:76:ec:d6:7d:01: 7a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F1:80:22:0F:C5:46:64:20:1E:0F:CD:7A:54:DD:41:73:80:4C:17 X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:19:ac:52:97:67:65:af:a8:79:8e:e9:55:0b:9a:c3:aa:b4: c3:ce:c8:2a:a5:63:ca:d5:85:dc:98:33:47:b9:64:d0:eb:25: 70:72:fc:a4:62:3f:a2:52:8e:53:8f:91:54:9d:e0:2b:eb:a0: a4:cd:f3:cb:ee:e9:80:e0:76:57:38:f7:1b:57:c0:d9:6c:39: e8:8a:b4:6f:fb:b9:9e:d2:7d:3a:d8:91:f3:f7:88:97:ac:70: bb:d8:20:32:d3:14:b1:af:fe:b5:d8:66:0c:61:82:de:82:af: a4:92:bd:99:47:b7:6b:4c:2e:8d:a7:6b:b5:08:52:ce:e1:2d: 40:e5:02:3e:05:fd:cb:8c:5d:83:26:30:ec:7c:25:7f:ac:96: 01:8c:ef:34:df:10:be:88:42:3f:16:4f:a4:33:9d:6e:7f:4e: 67:04:59:63:a7:a5:40:97:99:af:7c:81:98:77:65:57:94:b1: 80:62:b4:e5:55:89:06:e9:d7:5c:e7:ec:86:1a:c3:6b:d8:a2: b0:72:4e:be:c0:31:39:6e:bb:45:57:ff:ee:4d:57:3b:13:48: 7a:dd:a1:81:1f:7b:e4:a3:e5:5a:5a:b8:64:db:99:13:29:cc: 68:aa:ea:71:8e:82:6b:44:f3:f8:23:78:e2:2e:b6:3c:13:a6: d8:f6:39:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjQxMTIzMDI0NTA3WhcNMjQxMTMwMDI0NTA3WjAYMRYwFAYD VQQDEw02NzQxNDFiMy02NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fG3weVYXlFxaXU4xCJG/8IFFqihFxb4Z2y14RtOzVdks2S8K61pNsNhk2L+ Pu0Tv2AMJMVMdTVZMBNYO4W/JzlHuwdd0/EKEmXc5g+ZI8Fba6dBLmknp9xBIHNv kG7UtsJqOrBqyiZnnJ++kwzabzb7aY+YNjnTvxZ/4TKXPma/0AjlkzH3yRoMp9je zmaakVdUx/mMPZabF2/sxkDts7hNLNzTxCXi+AVZ9s6UDg7zRlfJ9KzmTdIYmcxW 4E3qItV8ZaC4YJaYkWKQxhD/TWJAwDwpgKyZOEthNqXdyfg4v/DjpBHFWBE4CzWg QdP38LSAp3idGJsjduzWfQF6UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3xgCIP xUZkIB4PzXpU3UFzgEwXMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiGaxSl2dlr6h5julVC5rDqrTDzsgqpWPK1YXcmDNHuWTQ6yVwcvyk Yj+iUo5Tj5FUneAr66CkzfPL7umA4HZXOPcbV8DZbDnoirRv+7me0n062JHz94iX rHC72CAy0xSxr/612GYMYYLegq+kkr2ZR7drTC6Np2u1CFLO4S1A5QI+Bf3LjF2D JjDsfCV/rJYBjO803xC+iEI/Fk+kM51uf05nBFljp6VAl5mvfIGYd2VXlLGAYrTl VYkG6ddc5+yGGsNr2KKwck6+wDE5brtFV//uTVc7E0h63aGBH3vko+VaWrhk25kT KcxoqupxjoJrRPP4I3jiLrY8E6bY9jka -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org