$ rpki-client -vvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft File: 065iZEnDqd0Od5i86Ly7OWYqJ_8.mft (raw, json) Hash identifier: WDi7u+SwdaRafhamawNairqRGMIoanfHpZjQzCwycIc= Subject key identifier: 37:1E:92:03:1A:2A:AF:B1:C8:21:CE:42:AF:43:F3:00:CD:40:D7:B7 Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF Certificate issuer: /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft Manifest number: 011D Signing time: Sat 23 Nov 2024 03:00:47 +0000 Manifest this update: Sat 23 Nov 2024 03:00:47 +0000 Manifest next update: Sat 30 Nov 2024 03:00:47 +0000 Files and hashes: 1: 065iZEnDqd0Od5i86Ly7OWYqJ_8.crl (hash: Gegdkpcf/t1TRoosktCB7eDQm7BWKT61cIYsMZDp2RA=) 2: 52CA5FA4FBDA11EDBC5C2B51C4F9AE02.roa (hash: Pxm4f7x+lDVGmZDDz1zwJyjk4SQINSwd/O+ak1CuE3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF Validity Not Before: Nov 23 03:00:47 2024 GMT Not After : Nov 30 03:00:47 2024 GMT Subject: CN=6741455f-8940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:c2:19:71:fd:71:d0:47:ac:ad:23:2f:55: ec:3b:36:b7:96:66:e7:3c:36:68:91:40:32:2f:6b: bd:6d:1c:d7:72:88:9a:20:6f:3e:dc:55:e5:0e:26: f4:ad:76:b3:34:d1:39:c0:b5:56:0a:23:5e:3c:a9: 53:92:95:87:94:a3:f8:b9:2e:84:18:9f:78:04:af: 1e:10:29:e1:9f:6b:73:46:18:9b:39:c5:c0:ae:33: 57:60:38:12:87:09:e9:25:af:54:e2:c3:bb:61:95: ba:41:15:11:7a:00:fb:12:26:fd:1c:71:c6:cd:1e: f4:c7:85:6b:57:15:12:e2:dc:ea:50:32:e5:b3:04: ec:15:a3:25:9a:70:5b:c7:3f:12:30:d2:1a:3a:f6: 48:60:dc:a3:15:bd:f3:f2:b6:e0:77:d0:45:18:1f: fc:71:36:82:04:a9:42:88:9e:90:dd:0c:24:df:78: 08:41:1b:5d:04:5a:a4:44:69:f7:d5:01:35:81:cc: a4:4e:9f:3b:19:33:24:e1:45:f9:9c:40:10:30:d5: d1:bd:14:fd:7c:5f:b8:f2:ef:9c:d0:81:89:b7:b0: 5f:a1:67:69:32:60:b1:69:85:0f:64:38:42:4f:29: 33:7b:49:be:3f:cc:61:6d:1a:ee:64:aa:db:d6:5f: 13:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1E:92:03:1A:2A:AF:B1:C8:21:CE:42:AF:43:F3:00:CD:40:D7:B7 X509v3 Authority Key Identifier: keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:f6:d2:c9:97:67:17:ac:be:a8:65:ae:6b:9d:5a:10:dc:67: ea:ed:de:36:82:cb:20:fc:bb:8f:c8:d7:e0:0f:da:bc:2c:5f: b3:43:d6:5d:7e:53:a4:8b:a7:0d:9d:48:80:a9:e8:69:7d:c9: 3c:0f:90:f4:ac:42:8e:07:46:9e:b7:43:90:43:88:5a:b5:98: fb:e5:94:f4:81:6e:e0:ee:42:0e:ed:04:8e:6f:ac:db:87:eb: c2:83:b6:28:5b:e4:94:24:23:75:0a:19:fa:d5:24:9f:42:12: af:60:2a:d3:ab:b9:50:e8:3e:87:7d:cd:0b:34:3e:f5:19:9b: ac:6f:30:7b:33:15:d0:08:ac:66:50:50:ab:79:7d:43:c2:44: b1:49:a6:cf:d7:ba:94:f7:b8:81:da:5c:fc:1c:a7:dd:1a:51: ee:44:60:9b:12:af:69:9b:fd:29:d1:0b:df:84:e1:85:95:63: fb:bc:32:a3:3b:1e:04:b2:ec:41:95:5f:53:a5:18:45:54:96: 1c:2c:01:ca:55:4c:6e:c0:40:32:95:f7:c5:31:bd:d5:55:d7: 45:5c:5f:7f:0d:de:f4:78:0b:ec:92:49:2b:6e:4e:3b:74:e8: dd:88:13:67:72:46:83:81:80:f5:84:0f:4f:4b:ac:55:84:13: e4:86:cf:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCNjIxMTAvBgNVBAUTKEQzQUU2MjY0NDlDM0E5REQwRTc3OThCQ0U4QkNCQjM5 NjYyQTI3RkYwHhcNMjQxMTIzMDMwMDQ3WhcNMjQxMTMwMDMwMDQ3WjAYMRYwFAYD VQQDEw02NzQxNDU1Zi04OTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouLCGXH9cdBHrK0jL1XsOza3lmbnPDZokUAyL2u9bRzXcoiaIG8+3FXlDib0 rXazNNE5wLVWCiNePKlTkpWHlKP4uS6EGJ94BK8eECnhn2tzRhibOcXArjNXYDgS hwnpJa9U4sO7YZW6QRURegD7Eib9HHHGzR70x4VrVxUS4tzqUDLlswTsFaMlmnBb xz8SMNIaOvZIYNyjFb3z8rbgd9BFGB/8cTaCBKlCiJ6Q3Qwk33gIQRtdBFqkRGn3 1QE1gcykTp87GTMk4UX5nEAQMNXRvRT9fF+48u+c0IGJt7BfoWdpMmCxaYUPZDhC Tykze0m+P8xhbRruZKrb1l8TFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcekgMa Kq+xyCHOQq9D8wDNQNe3MB8GA1UdIwQYMBaAFNOuYmRJw6ndDneYvOi8uzlmKif/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0I2Mi80RTlCNzZEMkZC RDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFkME9kNWk4Nkx5N09XWXFK XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA2NWlaRW5EcWQwT2Q1aTg2THk3T1dZcUpfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0I2Mi80RTlCNzZEMkZCRDIxMUVEQTA4NjQzNDVDNEY5QUUwMi8wNjVpWkVuRHFk ME9kNWk4Nkx5N09XWXFKXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH9tLJl2cXrL6oZa5rnVoQ3Gfq7d42gssg/LuPyNfgD9q8LF+zQ9Zd flOki6cNnUiAqehpfck8D5D0rEKOB0aet0OQQ4hatZj75ZT0gW7g7kIO7QSOb6zb h+vCg7YoW+SUJCN1Chn61SSfQhKvYCrTq7lQ6D6Hfc0LND71GZusbzB7MxXQCKxm UFCreX1DwkSxSabP17qU97iB2lz8HKfdGlHuRGCbEq9pm/0p0QvfhOGFlWP7vDKj Ox4EsuxBlV9TpRhFVJYcLAHKVUxuwEAylffFMb3VVddFXF9/Dd70eAvskkkrbk47 dOjdiBNnckaDgYD1hA9PS6xVhBPkhs8x -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org