$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json) Hash identifier: cXSGSpmWxmAdSyZ0xqwV5KCLYQ+vKHvOS4h5MgLCU2w= Subject key identifier: 59:71:E2:78:A1:01:9B:89:A3:62:DA:02:5E:8A:70:D2:83:3F:26:3A Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft Manifest number: 34 Signing time: Thu 21 Nov 2024 05:40:33 +0000 Manifest this update: Thu 21 Nov 2024 05:40:32 +0000 Manifest next update: Thu 28 Nov 2024 05:40:32 +0000 Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: qwEZpQsad0JKW+6OO5/CXmoLjdyfSS6TDHyf+vfWYRM=) 2: 53287AF45DDF11EF9B31E965C4F9AE02.roa (hash: l9NwgF2p4gRADdXEDeNTklsFvOfiw2xnBPOYK8nZgtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Validity Not Before: Nov 21 05:40:32 2024 GMT Not After : Nov 28 05:40:32 2024 GMT Subject: CN=673ec7d1-8caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:8a:29:58:b9:09:a6:dd:8c:1a:2e:55:fa: 12:a4:07:e8:67:24:67:33:4d:62:13:a9:46:17:21: 32:64:7b:c1:64:de:5d:9f:02:b1:5b:ca:ad:3c:0a: 81:9f:1f:f7:73:15:b5:0f:02:5f:2a:6d:e7:1d:cf: 90:62:2d:9a:7f:af:ed:6b:e4:8f:d2:e7:62:f9:15: df:40:59:d1:87:bc:24:5d:3f:1d:fc:5c:30:27:eb: b4:6c:1f:f3:54:05:bb:f7:39:b6:50:0d:66:37:3f: 2c:7c:24:c8:a6:d0:f2:69:c1:a7:7c:6a:b5:c0:10: d8:22:eb:cd:e9:5e:89:b3:e6:fd:4d:80:30:bc:fc: 0f:4e:f1:64:40:61:c7:d1:f3:be:11:7d:e5:83:c2: 27:d0:b9:5c:aa:1d:08:fd:1d:06:fc:cb:c6:38:92: b4:24:85:f0:73:38:c4:34:d8:26:e6:de:d0:53:24: 29:2c:ed:4f:b9:69:bd:b2:52:a9:09:eb:ee:f9:53: b3:d3:1d:06:5b:a6:6d:dd:25:41:ca:66:d8:ee:72: 2b:b0:9b:db:3e:58:27:77:98:14:54:59:cd:1e:90: d4:e8:de:14:f7:0f:50:13:68:63:99:54:59:30:e2: 78:83:11:6a:16:62:f3:76:ce:9a:e9:52:ae:e2:43: 1a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:71:E2:78:A1:01:9B:89:A3:62:DA:02:5E:8A:70:D2:83:3F:26:3A X509v3 Authority Key Identifier: keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ea:c1:f5:a0:4b:0b:9a:c5:08:c3:e2:bf:64:8d:77:d7:bf: 61:6f:82:54:02:a5:23:f4:c6:fe:83:71:94:7f:59:94:d9:54: 6a:47:67:00:92:90:e2:4e:9c:58:95:de:a7:55:9f:bb:bb:41: 2d:19:ac:37:4c:f8:d9:13:5b:8a:0c:d3:70:22:c7:d8:ba:4f: b3:83:8c:5b:6d:53:5d:d1:e6:9f:48:b7:97:ec:6b:a7:35:3a: 0d:64:7e:5d:8a:bb:f2:1e:46:9c:8e:ec:95:f7:24:98:73:4b: af:43:c6:0a:de:d6:ac:d6:50:3b:2a:5c:2c:fd:09:1f:e8:37: d1:f3:59:7e:8b:f2:c4:bb:96:27:3b:0f:eb:04:77:54:d6:86: 42:50:7d:75:47:67:c2:ef:cb:41:45:e5:11:b7:34:00:c3:ae: a1:f9:7c:2f:8e:b5:83:71:93:89:79:87:2f:93:cc:fa:66:e5: dd:99:44:46:4b:68:ad:b2:7f:2c:ba:29:6b:71:5a:ae:c2:15: 3d:a5:78:aa:48:2b:11:24:8a:ed:49:a4:83:97:83:cd:fb:87: 6a:d3:1f:16:5a:74:67:4f:fb:84:f1:c8:c1:c3:bd:5f:1b:7f: 2b:2b:6a:2e:66:f5:b3:3c:27:a0:5f:38:26:b3:b8:ff:9a:f2: 6a:06:cb:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODkyQTExMC8GA1UEBRMoN0QxNzIyOEY0NDVFMTg0QjE0ODQ5QkU0MDhGQkQ5REIy OTdCQjgwMTAeFw0yNDExMjEwNTQwMzJaFw0yNDExMjgwNTQwMzJaMBgxFjAUBgNV BAMTDTY3M2VjN2QxLThjYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4rYopWLkJpt2MGi5V+hKkB+hnJGczTWITqUYXITJke8Fk3l2fArFbyq08CoGf H/dzFbUPAl8qbecdz5BiLZp/r+1r5I/S52L5Fd9AWdGHvCRdPx38XDAn67RsH/NU Bbv3ObZQDWY3Pyx8JMim0PJpwad8arXAENgi683pXomz5v1NgDC8/A9O8WRAYcfR 874RfeWDwifQuVyqHQj9HQb8y8Y4krQkhfBzOMQ02Cbm3tBTJCks7U+5ab2yUqkJ 6+75U7PTHQZbpm3dJUHKZtjuciuwm9s+WCd3mBRUWc0ekNTo3hT3D1ATaGOZVFkw 4niDEWoWYvN2zprpUq7iQxoZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWXHieKEB m4mjYtoCXopw0oM/JjowHwYDVR0jBBgwFoAUfRcij0ReGEsUhJvkCPvZ2yl7uAEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OTJBLzBDNTI2RENFNURE RjExRUY4QjU4MzM2NUM0RjlBRTAyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VB RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZlJjaWowUmVHRXNVaEp2a0NQdloyeWw3dUFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OTJBLzBDNTI2RENFNURERjExRUY4QjU4MzM2NUM0RjlBRTAyL2ZSY2lqMFJlR0Vz VWhKdmtDUHZaMnlsN3VBRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFHqwfWgSwuaxQjD4r9kjXfXv2FvglQCpSP0xv6DcZR/WZTZVGpHZwCS kOJOnFiV3qdVn7u7QS0ZrDdM+NkTW4oM03Aix9i6T7ODjFttU13R5p9It5fsa6c1 Og1kfl2Ku/IeRpyO7JX3JJhzS69Dxgre1qzWUDsqXCz9CR/oN9HzWX6L8sS7lic7 D+sEd1TWhkJQfXVHZ8Lvy0FF5RG3NADDrqH5fC+OtYNxk4l5hy+TzPpm5d2ZREZL aK2yfyy6KWtxWq7CFT2leKpIKxEkiu1JpIOXg837h2rTHxZadGdP+4TxyMHDvV8b fysrai5m9bM8J6BfOCazuP+a8moGyzI= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org