$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: 9jZLSN2trY1Phmqdjo9K9kApaJM42eoxhOTtdaia4i8= Subject key identifier: A1:44:70:3D:A1:D6:90:A1:AE:B8:14:D1:73:CB:F8:F0:D0:42:9E:7F Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 25DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 24DD Signing time: Fri 22 Nov 2024 15:47:51 +0000 Manifest this update: Fri 22 Nov 2024 15:47:50 +0000 Manifest next update: Fri 29 Nov 2024 15:47:50 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: ju43x3H+fFY8rtzOpwLzbc+JgCyxZTkOSxECRFFGr3k=) 2: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: ZeH6ECuQSQ7jbEvsw/ti8Ne5hW6qGOm2ObSN2ziSRtc=) 3: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: 1dZ/PYF2y/rA4g03VyVZaVZy6CLwb/t5eX6QNNHBKU4=) 4: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: /OIV93XTmaqNcQdoy+u+KBTNCx5sq1KiAVNHrTFDsPk=) 5: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: Iw9+JOdav50YSnSQXp9Mgjc+tFnSJTCmgJVv03j+03E=) 6: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: a8WMRrKXqOWpbHlU3tbV4FzyKQszu4zB5F1ouGdfBCA=) 7: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: 3xgwAlFAD++SNOBnqBO1zaeR1ssuXDrrYrvWI6Sll60=) 8: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: ffEWhmrNXjBc0Nb4WuWVQZiVVzyHTO8bmJ3skIR6GwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9691 (0x25db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Nov 22 15:47:50 2024 GMT Not After : Nov 29 15:47:50 2024 GMT Subject: CN=6740a7a7-6580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:77:1c:67:fc:d9:f9:aa:87:34:e9:95:15:37: 99:67:83:c7:59:74:98:18:ae:98:cf:2e:ba:84:a6: 89:66:fa:97:65:9d:ae:3d:df:b2:ae:28:c4:5b:13: 98:c7:5b:0a:e5:25:17:7d:1b:67:db:ea:1a:9f:a1: b5:8a:91:f7:e8:b0:16:cb:50:65:6f:07:81:df:af: 8d:34:f2:3a:9c:a9:e1:23:02:b7:1e:29:98:dd:99: fc:87:40:f4:5e:fc:76:0d:6d:9e:18:48:66:1b:39: 1c:fa:3f:3f:e8:e0:3f:d4:50:88:17:22:a7:37:c0: f8:62:b6:cb:3e:43:7a:7e:2a:74:4c:0f:25:02:be: be:47:d6:d8:1d:00:db:51:e6:b9:5f:85:dd:b6:7f: 34:99:ec:65:91:43:bc:2a:b0:c3:b0:01:75:0a:17: ed:c8:09:e4:a0:df:a2:b0:45:ac:37:79:9f:e4:dc: 2b:fa:b0:3d:d0:16:48:9f:60:c6:7f:cd:b5:f8:39: 53:4f:f0:ca:b9:7f:08:85:4d:32:e4:74:8c:5a:97: 7a:63:fd:3f:96:16:45:4e:8b:e3:68:b9:7b:18:a5: 43:b5:b7:54:19:40:e5:46:9b:ab:d9:5b:f9:74:d3: 32:3c:81:ab:d7:98:3b:d4:79:f8:31:4f:56:ac:41: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:44:70:3D:A1:D6:90:A1:AE:B8:14:D1:73:CB:F8:F0:D0:42:9E:7F X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:30:8a:17:9c:89:19:ab:c4:49:de:8d:2c:98:f0:2b:b7:24: ff:c1:83:6b:27:3c:29:fa:26:13:a4:5c:a4:cf:0f:ec:e1:cb: fe:3b:aa:24:04:e4:d6:86:45:d8:09:e8:34:d1:4c:2f:4d:e9: a0:8e:e7:aa:13:92:8e:3d:5a:95:2d:68:59:d7:27:cb:76:34: a7:85:f9:ba:37:f9:b5:3b:b5:93:b3:17:2b:83:dc:f3:52:6d: 04:5b:70:27:dc:67:48:a8:76:e1:23:93:68:a8:73:42:1c:b9: d5:03:c4:24:62:6e:28:5c:77:99:f3:09:74:72:e2:34:36:79: e2:3d:94:d9:aa:fd:dc:89:61:d9:98:a5:af:02:12:d2:7d:31: 1d:9f:77:7e:5d:71:5e:69:be:a4:2b:30:d9:2c:06:71:5d:11: 10:58:da:66:05:36:6c:3d:69:e7:ff:75:5b:c7:6b:d7:1b:86: 94:8c:fa:5c:e8:b1:91:c3:b6:df:55:43:7f:2e:a7:8d:4d:d8: f6:e8:fa:75:28:74:8b:73:7d:13:3f:3b:9f:f2:be:49:f7:1f: 12:58:84:56:8e:5c:16:68:21:ed:74:f1:44:6c:08:03:7d:87: f2:da:0b:02:3e:26:9f:a0:59:7c:9f:25:6a:cb:7b:b0:2f:17: c3:16:30:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjQxMTIyMTU0NzUwWhcNMjQxMTI5MTU0NzUwWjAYMRYwFAYD VQQDEw02NzQwYTdhNy02NTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63ccZ/zZ+aqHNOmVFTeZZ4PHWXSYGK6Yzy66hKaJZvqXZZ2uPd+yrijEWxOY x1sK5SUXfRtn2+oan6G1ipH36LAWy1BlbweB36+NNPI6nKnhIwK3HimY3Zn8h0D0 Xvx2DW2eGEhmGzkc+j8/6OA/1FCIFyKnN8D4YrbLPkN6fip0TA8lAr6+R9bYHQDb Uea5X4Xdtn80mexlkUO8KrDDsAF1ChftyAnkoN+isEWsN3mf5Nwr+rA90BZIn2DG f821+DlTT/DKuX8IhU0y5HSMWpd6Y/0/lhZFTovjaLl7GKVDtbdUGUDlRpur2Vv5 dNMyPIGr15g71Hn4MU9WrEH1owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFEcD2h 1pChrrgU0XPL+PDQQp5/MB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1MIoXnIkZq8RJ3o0smPArtyT/wYNrJzwp+iYTpFykzw/s4cv+O6ok BOTWhkXYCeg00UwvTemgjueqE5KOPVqVLWhZ1yfLdjSnhfm6N/m1O7WTsxcrg9zz Um0EW3An3GdIqHbhI5NoqHNCHLnVA8QkYm4oXHeZ8wl0cuI0NnniPZTZqv3ciWHZ mKWvAhLSfTEdn3d+XXFeab6kKzDZLAZxXREQWNpmBTZsPWnn/3Vbx2vXG4aUjPpc 6LGRw7bfVUN/LqeNTdj26Pp1KHSLc30TPzuf8r5J9x8SWIRWjlwWaCHtdPFEbAgD fYfy2gsCPiafoFl8nyVqy3uwLxfDFjCX -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:47 2024 by rpki-client on console-fra.rpki-client.org