$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: 7hWR71esmr+b0WgqS1EwAdu5vMtF2MNi0EEfvQwkehg= Subject key identifier: 36:75:55:43:A7:7B:7E:BF:62:84:17:1F:37:F4:99:9D:65:54:BB:33 Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: 23 Signing time: Sat 23 Nov 2024 05:47:36 +0000 Manifest this update: Sat 23 Nov 2024 05:47:36 +0000 Manifest next update: Sat 30 Nov 2024 05:47:36 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: 9xWHvRWKbd9+zRtqPCipjRCzfYyzdyikvF0ZidS6LTc=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: XBKKNWAXn91g8U8p9IncnaKYMksmwYcj3BAK92xQbrY=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: WqNZ01BJf912ER9E1SW1cMixBzAePTfawzNryqp3V6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: Nov 23 05:47:36 2024 GMT Not After : Nov 30 05:47:36 2024 GMT Subject: CN=67416c78-6b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:18:39:2c:99:0b:b3:a5:c3:ea:fc:10:a9: 72:4f:aa:f2:8a:d6:30:e6:51:c5:fc:d9:71:f4:e9: 14:ae:63:a1:97:63:7f:7e:b5:d4:df:71:50:f5:59: 06:4f:bd:5b:25:ab:1b:0d:53:7c:21:86:e0:c1:2a: 83:c1:e7:fb:b9:57:45:83:6e:51:14:30:20:d7:76: 06:c3:bc:17:59:fa:85:25:55:84:94:b4:01:93:a6: ea:f6:72:bb:c1:a5:35:28:46:46:00:1f:c3:89:01: 3e:48:82:b9:26:b5:30:ef:fe:a8:9b:df:63:c3:62: d0:b4:87:8e:4d:f7:50:be:0c:50:cf:3f:05:4a:44: b9:90:1b:ed:50:b2:5c:76:bd:10:14:59:ff:84:bb: 38:da:30:05:87:2e:9e:c9:66:30:5d:67:07:5d:c5: 40:fd:ff:72:76:cb:97:89:39:ab:fb:9e:9e:1a:ff: 11:0b:5b:c5:48:41:f8:d1:3a:b2:3f:09:5f:b1:94: 9b:b2:c3:04:27:43:1b:2d:14:a7:31:d8:4e:6e:01: fc:69:45:f4:06:fc:06:1f:3e:60:c3:51:46:03:0d: 56:44:0a:dc:a3:0d:64:a2:ee:9d:3e:fe:22:89:8e: 61:6c:97:9d:35:65:8b:b0:c2:73:ea:6c:29:d1:dc: 1f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:75:55:43:A7:7B:7E:BF:62:84:17:1F:37:F4:99:9D:65:54:BB:33 X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:90:64:f6:54:97:39:62:c2:d6:61:2f:50:31:52:1a:18:eb: 97:95:c2:d8:25:d0:da:3a:30:2d:0d:83:46:a3:fd:53:11:39: 22:cf:ec:f2:f4:88:f2:c7:4c:91:23:e9:d1:8f:3e:0f:7e:e8: 05:8b:74:88:a8:81:8f:fe:50:c3:7b:63:bc:12:f9:61:52:4c: 79:d2:5a:26:d9:27:f7:0b:22:06:96:7d:b2:94:4e:50:a1:26: 9d:e2:4c:17:0c:f6:d1:3a:cf:b7:3d:01:7b:e5:1c:b0:dd:12: fb:67:37:59:f3:0c:6a:c4:1b:f9:57:c1:ce:fe:4c:2e:53:a5: 59:cf:2f:9e:9c:a3:b2:5c:7a:c0:be:4b:80:44:9e:1b:4a:62: 75:bb:a1:08:1b:df:78:1d:37:25:8f:cc:42:6a:99:e8:91:1b: f0:ae:ec:2c:66:27:8a:f3:c8:b8:c0:d5:ad:64:80:58:ae:8a: fa:ec:10:64:15:9b:89:00:f0:02:95:b7:74:9a:0d:01:16:0a: f8:88:39:4a:0c:c2:ab:38:8d:dc:1b:5d:3f:0b:f0:61:5a:d6: f7:36:e1:0c:6d:92:ff:f4:3d:e7:ae:58:05:28:d2:24:20:c1: c4:02:f0:5c:dd:16:d0:b0:c7:7e:1f:ae:54:6e:57:2e:a6:99: b4:43:92:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUE1ODExMC8GA1UEBRMoRjI0N0FFQkQwNzVGQzhDQkYzRDlCODA1NTY5RUFCQkVF Nzk3NUIwQjAeFw0yNDExMjMwNTQ3MzZaFw0yNDExMzAwNTQ3MzZaMBgxFjAUBgNV BAMTDTY3NDE2Yzc4LTZiMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3wRg5LJkLs6XD6vwQqXJPqvKK1jDmUcX82XH06RSuY6GXY39+tdTfcVD1WQZP vVslqxsNU3whhuDBKoPB5/u5V0WDblEUMCDXdgbDvBdZ+oUlVYSUtAGTpur2crvB pTUoRkYAH8OJAT5IgrkmtTDv/qib32PDYtC0h45N91C+DFDPPwVKRLmQG+1Qslx2 vRAUWf+EuzjaMAWHLp7JZjBdZwddxUD9/3J2y5eJOav7np4a/xELW8VIQfjROrI/ CV+xlJuywwQnQxstFKcx2E5uAfxpRfQG/AYfPmDDUUYDDVZECtyjDWSi7p0+/iKJ jmFsl501ZYuwwnPqbCnR3B9ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNnVVQ6d7 fr9ihBcfN/SZnWVUuzMwHwYDVR0jBBgwFoAU8keuvQdfyMvz2bgFVp6rvueXWwsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QTU4L0Q2RjEwNTIyN0JG RDExRUZBN0I4RUI1Q0M0RjlBRTAyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGtldXZRZGZ5TXZ6MmJnRlZwNnJ2dWVYV3dzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 QTU4L0Q2RjEwNTIyN0JGRDExRUZBN0I4RUI1Q0M0RjlBRTAyLzhrZXV2UWRmeU12 ejJiZ0ZWcDZydnVlWFd3cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJaQZPZUlzliwtZhL1AxUhoY65eVwtgl0No6MC0Ng0aj/VMROSLP7PL0 iPLHTJEj6dGPPg9+6AWLdIiogY/+UMN7Y7wS+WFSTHnSWibZJ/cLIgaWfbKUTlCh Jp3iTBcM9tE6z7c9AXvlHLDdEvtnN1nzDGrEG/lXwc7+TC5TpVnPL56co7JcesC+ S4BEnhtKYnW7oQgb33gdNyWPzEJqmeiRG/Cu7CxmJ4rzyLjA1a1kgFiuivrsEGQV m4kA8AKVt3SaDQEWCviIOUoMwqs4jdwbXT8L8GFa1vc24Qxtkv/0PeeuWAUo0iQg wcQC8FzdFtCwx34frlRuVy6mmbRDkok= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org