$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.mft File: feQwJk1qtGH2pP_KLkB16KZ0Fck.mft (raw, json) Hash identifier: BleYI/fjGmkf0+JzSzgoFSgVgD8PeuOQ4wrVZvy4pXs= Subject key identifier: D1:FF:07:0B:58:2B:FE:83:86:3A:0A:C5:76:FC:0D:FB:04:0A:A7:B8 Authority key identifier: 7D:E4:30:26:4D:6A:B4:61:F6:A4:FF:CA:2E:40:75:E8:A6:74:15:C9 Certificate issuer: /CN=A915DB10/serialNumber=7DE430264D6AB461F6A4FFCA2E4075E8A67415C9 Certificate serial: 12B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/feQwJk1qtGH2pP_KLkB16KZ0Fck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.mft Manifest number: 12A4 Signing time: Fri 22 Nov 2024 17:05:22 +0000 Manifest this update: Fri 22 Nov 2024 17:05:22 +0000 Manifest next update: Fri 29 Nov 2024 17:05:22 +0000 Files and hashes: 1: feQwJk1qtGH2pP_KLkB16KZ0Fck.crl (hash: 3TWRgP6ryI4h9L/KWAd8BYbJPnd+ZazFmYJK56g/Ep0=) 2: F5EE9E5E96A011EF85606B0DC4F9AE02.roa (hash: /8jhrCUeyEJ+dkS/dj7KrGLt48nPFSHhTYuVcePeKe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.crl rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/feQwJk1qtGH2pP_KLkB16KZ0Fck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4786 (0x12b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB10/serialNumber=7DE430264D6AB461F6A4FFCA2E4075E8A67415C9 Validity Not Before: Nov 22 17:05:22 2024 GMT Not After : Nov 29 17:05:22 2024 GMT Subject: CN=6740b9d2-fbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:6f:bf:52:b5:99:da:71:28:4a:4c:fb:ff: be:b5:49:3b:5b:6b:07:a1:9f:8b:f0:53:35:c4:be: 15:05:77:85:dd:76:26:2e:e3:3f:c8:50:b3:e9:92: 72:ab:71:5f:2d:81:de:de:ac:c9:fa:a4:19:a9:88: b7:44:b5:1c:bd:b2:72:ad:74:89:5c:ea:3d:61:ad: 44:fe:12:e4:90:8a:7e:12:bd:7d:ce:e0:bb:74:6c: 73:68:4a:ad:87:d0:d3:80:da:a0:9f:be:8a:f7:43: b1:e8:a4:d6:c8:a9:60:1b:86:9f:b7:d5:d2:50:0b: 24:5f:f6:42:62:63:e7:37:bc:cd:26:bc:4e:b0:e0: d8:1b:b5:e1:79:9f:97:07:96:2d:5d:1c:6d:e7:21: 3e:00:3e:16:96:c4:c3:72:fb:d1:26:bf:2e:14:40: ca:6e:40:9e:b9:c7:36:8a:82:dd:b2:51:4e:24:fc: 3c:8e:01:b1:bd:62:ec:a3:59:ae:8c:2c:b9:a3:0a: 72:ff:b8:0e:51:be:47:78:8c:39:12:0e:2e:b5:43: e6:5d:76:7d:3f:18:cf:5f:22:9d:5c:64:bc:8d:ec: b8:42:86:73:f9:10:4e:9c:5d:80:fd:56:cf:37:a7: e1:49:9c:49:82:cb:50:bc:85:c4:9d:41:fd:6c:8e: 88:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FF:07:0B:58:2B:FE:83:86:3A:0A:C5:76:FC:0D:FB:04:0A:A7:B8 X509v3 Authority Key Identifier: keyid:7D:E4:30:26:4D:6A:B4:61:F6:A4:FF:CA:2E:40:75:E8:A6:74:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/feQwJk1qtGH2pP_KLkB16KZ0Fck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e6:53:a5:96:b8:e3:f7:20:87:57:cc:e2:84:87:63:65:a0: b3:cd:a4:dc:b1:64:ad:09:ff:83:e2:36:bc:35:ae:1f:ee:64: b1:43:d3:ed:ea:b9:90:e3:8f:02:37:6f:15:f8:16:32:6f:b8: 62:ab:c1:fa:7d:70:ab:59:23:e9:d9:7c:65:25:8e:0f:e9:05: f7:a8:d5:d0:3b:a8:25:d0:c4:b4:81:10:99:12:57:e0:71:a5: 6f:1f:44:66:dc:c4:e5:ff:1e:48:6e:b6:52:c5:10:86:98:b0: 97:97:18:4a:2e:53:d6:a8:88:fc:2f:16:05:21:c4:cb:89:c9: 7d:a1:0d:5a:26:90:6a:cb:97:44:ce:78:70:b4:c3:e9:0f:f0: b2:7e:a9:21:5e:e1:5a:ff:8e:4b:e2:92:85:27:46:18:34:df: a3:d3:ac:e5:89:d2:c2:ee:3d:18:75:bb:66:10:29:67:3e:41: 04:26:23:d0:c5:0d:52:2d:ab:01:49:de:3c:d9:1c:60:52:d2: 04:fe:a5:d4:2e:7c:8e:df:13:f9:ea:03:13:14:5d:c9:07:83: f2:63:7a:f4:2d:94:f1:d9:8b:cb:45:dc:be:78:6f:bd:79:b2: e8:3d:fe:59:d8:5a:56:5f:37:e3:9f:db:1b:e2:0a:5e:a1:e0: 6f:ed:8b:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCMTAxMTAvBgNVBAUTKDdERTQzMDI2NEQ2QUI0NjFGNkE0RkZDQTJFNDA3NUU4 QTY3NDE1QzkwHhcNMjQxMTIyMTcwNTIyWhcNMjQxMTI5MTcwNTIyWjAYMRYwFAYD VQQDEw02NzQwYjlkMi1mYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKJvv1K1mdpxKEpM+/++tUk7W2sHoZ+L8FM1xL4VBXeF3XYmLuM/yFCz6ZJy q3FfLYHe3qzJ+qQZqYi3RLUcvbJyrXSJXOo9Ya1E/hLkkIp+Er19zuC7dGxzaEqt h9DTgNqgn76K90Ox6KTWyKlgG4aft9XSUAskX/ZCYmPnN7zNJrxOsODYG7XheZ+X B5YtXRxt5yE+AD4WlsTDcvvRJr8uFEDKbkCeucc2ioLdslFOJPw8jgGxvWLso1mu jCy5owpy/7gOUb5HeIw5Eg4utUPmXXZ9PxjPXyKdXGS8jey4QoZz+RBOnF2A/VbP N6fhSZxJgstQvIXEnUH9bI6IdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH/BwtY K/6DhjoKxXb8DfsECqe4MB8GA1UdIwQYMBaAFH3kMCZNarRh9qT/yi5AdeimdBXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REIxMC9FNEZFRDNBOEIz NzUxMUU4QjI1RDhGNkJDNEY5QUUwMi9mZVF3SmsxcXRHSDJwUF9LTGtCMTZLWjBG Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZlUXdKazFxdEdIMnBQX0tMa0IxNktaMEZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REIxMC9FNEZFRDNBOEIzNzUxMUU4QjI1RDhGNkJDNEY5QUUwMi9mZVF3SmsxcXRH SDJwUF9LTGtCMTZLWjBGY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw5lOllrjj9yCHV8zihIdjZaCzzaTcsWStCf+D4ja8Na4f7mSxQ9Pt 6rmQ448CN28V+BYyb7hiq8H6fXCrWSPp2XxlJY4P6QX3qNXQO6gl0MS0gRCZElfg caVvH0Rm3MTl/x5IbrZSxRCGmLCXlxhKLlPWqIj8LxYFIcTLicl9oQ1aJpBqy5dE znhwtMPpD/CyfqkhXuFa/45L4pKFJ0YYNN+j06zlidLC7j0YdbtmEClnPkEEJiPQ xQ1SLasBSd482RxgUtIE/qXULnyO3xP56gMTFF3JB4PyY3r0LZTx2YvLRdy+eG+9 ebLoPf5Z2FpWXzfjn9sb4gpeoeBv7YuY -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org