$ rpki-client -vvf rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft File: 4YMttqUeSiWekP7IHkfFRpxSpok.mft (raw, json) Hash identifier: pNlajbHECtKAknv4nDPTBVsLsX5jgjkUVIMwd5hD+uc= Subject key identifier: C6:11:B3:AB:4B:62:3E:C8:EC:BF:4D:5E:2D:CE:BE:5D:AB:FF:07:5C Authority key identifier: E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 Certificate issuer: /CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Certificate serial: 15A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft Manifest number: 15A0 Signing time: Fri 22 Nov 2024 16:46:46 +0000 Manifest this update: Fri 22 Nov 2024 16:46:45 +0000 Manifest next update: Fri 29 Nov 2024 16:46:45 +0000 Files and hashes: 1: 4YMttqUeSiWekP7IHkfFRpxSpok.crl (hash: xv+0OmFDOyI3pwvy329giSEBTe3yLkK+d97ThmZl8xo=) 2: B4FED5FC8E5311EBB81E6C70C4F9AE02.roa (hash: +LSpdxgmnQsDAx20JaVGpFVFr9fua3QqkhZrGQgsPA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5545 (0x15a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916814B/serialNumber=E1832DB6A51E4A259E90FEC81E47C5469C52A689 Validity Not Before: Nov 22 16:46:45 2024 GMT Not After : Nov 29 16:46:45 2024 GMT Subject: CN=6740b575-61fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:d9:66:ba:67:e5:0c:e5:bb:11:60:4b:f8: b0:5e:ef:a6:a1:93:d7:d7:09:f5:9b:06:d5:48:b4: ce:dd:74:80:e2:70:61:d1:bc:8e:03:9f:d7:75:9d: 2b:db:a7:31:e5:11:15:1b:00:16:17:5b:f8:03:7c: d5:fd:a7:ef:2f:d9:81:24:14:d1:7c:1d:18:a3:b2: 40:1c:ed:0b:7d:98:8e:a9:aa:32:2e:a8:a7:19:d2: d1:f4:73:83:ab:42:23:49:d4:55:d5:c2:2b:a5:12: bc:48:ba:1b:2d:e9:2e:e8:02:06:1e:f6:38:ed:ba: 6d:de:96:1f:39:9a:ff:3c:46:ed:90:7b:c7:53:02: 01:b0:7e:7a:23:ab:e5:36:d7:0c:ae:14:a3:c5:5d: 8b:c6:59:ea:b6:57:b1:06:86:db:bd:7d:a0:1e:b8: e9:8b:7a:ea:41:6a:78:10:e6:69:c9:94:e9:8a:4f: d9:b3:41:8f:03:df:9e:24:d3:21:90:14:69:ca:d5: 73:8e:e8:4c:fb:1f:4e:f0:35:2d:a0:7f:57:af:81: 5b:75:98:82:ac:10:84:92:21:5a:d5:af:73:8e:78: c4:a7:1d:f0:7c:e6:9d:70:33:df:a6:af:14:71:e3: 74:50:0e:19:2d:57:88:a7:e6:4b:bf:1d:ee:40:b2: c6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:11:B3:AB:4B:62:3E:C8:EC:BF:4D:5E:2D:CE:BE:5D:AB:FF:07:5C X509v3 Authority Key Identifier: keyid:E1:83:2D:B6:A5:1E:4A:25:9E:90:FE:C8:1E:47:C5:46:9C:52:A6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YMttqUeSiWekP7IHkfFRpxSpok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916814B/02A2D970162F11E8B8DE2669C4F9AE02/4YMttqUeSiWekP7IHkfFRpxSpok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:16:4d:3b:81:88:7a:a6:cd:29:14:f5:fc:03:16:32:82:3e: e0:e5:06:f7:16:03:83:e2:c0:fe:c5:03:3a:f1:7d:ec:49:b1: 18:5a:08:94:06:be:8f:ef:dc:db:a5:49:84:5e:b8:1c:30:dc: 82:4b:35:d1:72:1d:40:57:bf:0c:70:2e:06:3c:72:04:9c:77: 85:4d:3b:d4:58:d5:ff:b8:b4:4c:55:0d:62:3b:09:25:c8:58: 91:3e:91:3f:c7:ec:cb:f8:07:a7:b4:21:ca:68:ed:7e:dd:56: 80:24:5f:2a:d5:65:eb:24:2d:be:76:f2:09:da:88:64:41:3f: 5a:3f:f1:c7:66:0d:e9:3d:b2:7d:95:eb:62:af:a7:31:bf:4b: d3:73:2e:a2:93:16:87:c8:75:72:41:69:06:21:3b:a4:ef:c2: 04:86:6a:7d:fe:72:03:c0:fc:8c:74:ca:b2:0a:45:e9:39:f3: 71:53:35:74:3a:03:e1:77:75:7b:81:88:8f:39:1c:cd:c8:b2: c1:53:4e:c4:61:69:bd:78:96:33:de:ea:a2:0a:23:5b:5c:02: 47:c9:cb:ea:29:3b:63:07:e7:4c:e9:ca:13:1c:02:81:d0:33: f9:dc:a4:d7:88:ec:c0:7b:a4:4e:e3:65:09:31:5b:d9:a1:44: ce:90:d2:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgxNEIxMTAvBgNVBAUTKEUxODMyREI2QTUxRTRBMjU5RTkwRkVDODFFNDdDNTQ2 OUM1MkE2ODkwHhcNMjQxMTIyMTY0NjQ1WhcNMjQxMTI5MTY0NjQ1WjAYMRYwFAYD VQQDEw02NzQwYjU3NS02MWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskTZZrpn5QzluxFgS/iwXu+moZPX1wn1mwbVSLTO3XSA4nBh0byOA5/XdZ0r 26cx5REVGwAWF1v4A3zV/afvL9mBJBTRfB0Yo7JAHO0LfZiOqaoyLqinGdLR9HOD q0IjSdRV1cIrpRK8SLobLeku6AIGHvY47bpt3pYfOZr/PEbtkHvHUwIBsH56I6vl NtcMrhSjxV2LxlnqtlexBobbvX2gHrjpi3rqQWp4EOZpyZTpik/Zs0GPA9+eJNMh kBRpytVzjuhM+x9O8DUtoH9Xr4FbdZiCrBCEkiFa1a9zjnjEpx3wfOadcDPfpq8U ceN0UA4ZLVeIp+ZLvx3uQLLGxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYRs6tL Yj7I7L9NXi3Ovl2r/wdcMB8GA1UdIwQYMBaAFOGDLbalHkolnpD+yB5HxUacUqaJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODE0Qi8wMkEyRDk3MDE2 MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNpV2VrUDdJSGtmRlJweFNw b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZTXR0cVVlU2lXZWtQN0lIa2ZGUnB4U3Bvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODE0Qi8wMkEyRDk3MDE2MkYxMUU4QjhERTI2NjlDNEY5QUUwMi80WU10dHFVZVNp V2VrUDdJSGtmRlJweFNwb2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuFk07gYh6ps0pFPX8AxYygj7g5Qb3FgOD4sD+xQM68X3sSbEYWgiU Br6P79zbpUmEXrgcMNyCSzXRch1AV78McC4GPHIEnHeFTTvUWNX/uLRMVQ1iOwkl yFiRPpE/x+zL+AentCHKaO1+3VaAJF8q1WXrJC2+dvIJ2ohkQT9aP/HHZg3pPbJ9 letir6cxv0vTcy6ikxaHyHVyQWkGITuk78IEhmp9/nIDwPyMdMqyCkXpOfNxUzV0 OgPhd3V7gYiPORzNyLLBU07EYWm9eJYz3uqiCiNbXAJHycvqKTtjB+dM6coTHAKB 0DP53KTXiOzAe6RO42UJMVvZoUTOkNLm -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:48 2024 by rpki-client on console-fra.rpki-client.org