$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft File: u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json) Hash identifier: 6bjnzFFowqlW1vYzHkTjjBFSep+d9zUr6xiDhGxsJ5o= Subject key identifier: 01:9E:E2:12:01:70:3A:56:BA:17:0F:B0:28:EE:43:61:52:D0:AC:91 Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C Certificate issuer: /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C Certificate serial: 0BB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft Manifest number: 0BAD Signing time: Fri 22 Nov 2024 18:39:28 +0000 Manifest this update: Fri 22 Nov 2024 18:39:27 +0000 Manifest next update: Fri 29 Nov 2024 18:39:27 +0000 Files and hashes: 1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: KFcnq3IGtzAD3SkTrBeMM2E6G829morkVBxoD9wPpIY=) 2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: fVpTiz95zT96q52Sv8C+QJmIZKHHi2b0N2xlEcRtgMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2998 (0xbb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C Validity Not Before: Nov 22 18:39:27 2024 GMT Not After : Nov 29 18:39:27 2024 GMT Subject: CN=6740cfdf-d050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:2e:8a:d4:2d:52:e7:a5:88:a6:d2:a9:88:27: 18:18:30:ba:63:c8:79:26:6f:2b:9b:a6:bb:88:6f: 93:31:8b:f3:ed:5d:67:ea:12:db:f1:1c:b3:5c:80: ec:06:88:e9:63:d2:b1:b1:bd:5c:b2:1f:7b:9a:c6: 59:75:df:92:09:0c:ee:a3:81:c6:a3:d9:15:7d:2a: 16:32:62:19:d7:ac:65:2a:61:38:e1:bf:e3:8e:ea: 03:bf:ad:d2:d5:5d:f8:c4:1b:5f:84:50:f5:f2:15: f4:be:7a:4c:ca:55:05:4f:62:c9:2b:e0:33:1d:8e: 08:49:de:b7:34:8e:29:92:1e:14:2f:e8:9b:74:a4: af:8a:1e:ac:13:50:63:c0:b1:19:06:f7:67:5d:ba: 08:22:47:bf:8a:3a:be:d7:e5:4a:99:73:f7:4e:6d: 0f:16:de:70:db:1c:e7:db:e1:2a:0e:ea:0b:cc:ee: 57:9f:aa:c6:9f:e2:a1:22:b3:fc:1a:2d:2f:c5:b4: fc:d2:46:81:3a:f3:20:96:92:ec:31:61:ed:d8:f7: 58:31:59:5c:71:c4:0d:eb:de:74:ea:01:30:76:07: 60:fe:a0:7b:8e:f4:55:dc:55:8e:7b:e9:c3:67:f4: 7b:88:c7:29:70:e2:f1:5d:55:d9:76:71:52:58:11: eb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9E:E2:12:01:70:3A:56:BA:17:0F:B0:28:EE:43:61:52:D0:AC:91 X509v3 Authority Key Identifier: keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a0:b4:6f:64:ca:2d:81:9e:e6:eb:ee:aa:4c:44:5c:41:32: 50:da:02:c2:8c:db:7b:5e:8f:24:1a:06:4d:94:02:56:e2:bd: 84:25:00:58:c7:06:89:05:e5:ef:c9:5a:92:3e:aa:60:09:99: a5:e3:6c:d4:df:6f:f9:dd:17:7d:8d:13:0e:68:bd:d8:c3:1f: 6c:fd:d0:b4:e9:88:60:d7:74:4c:16:c7:8a:1c:37:3e:39:dc: 9e:8b:7a:dc:58:5c:36:6f:e5:32:64:8b:ff:01:92:47:a2:1e: 31:fb:bc:8d:19:51:9f:2f:ee:3b:eb:8f:02:56:3d:a2:9d:a2: 03:83:ef:17:24:38:a5:69:a3:a9:3c:2f:58:a0:86:8e:1b:f5: f2:30:47:b6:d0:a4:3c:30:50:e1:8a:5a:c5:5b:32:d5:f6:f2: f8:96:3c:1d:05:90:02:c5:2c:12:20:e5:15:91:d9:12:70:8a: 32:d7:58:b9:af:47:c5:53:f6:ac:cc:ed:3f:81:1e:38:2f:41: 6d:8f:53:e7:9e:f3:16:0b:96:8e:ab:56:5f:1d:56:3b:9c:23: 2a:1f:22:c2:70:6d:36:c6:b1:34:3d:b8:14:68:fa:23:69:08: 22:1e:6d:8a:89:56:46:b4:74:77:ba:7d:86:52:31:c8:7c:63: 95:56:2f:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwQUExMTAvBgNVBAUTKEJCNzQxMDU2QjcxQzc1NUQwM0ZCOUNGMjE0QTQxMjRD QTRGMzc2MEMwHhcNMjQxMTIyMTgzOTI3WhcNMjQxMTI5MTgzOTI3WjAYMRYwFAYD VQQDEw02NzQwY2ZkZi1kMDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9y6K1C1S56WIptKpiCcYGDC6Y8h5Jm8rm6a7iG+TMYvz7V1n6hLb8RyzXIDs BojpY9Kxsb1csh97msZZdd+SCQzuo4HGo9kVfSoWMmIZ16xlKmE44b/jjuoDv63S 1V34xBtfhFD18hX0vnpMylUFT2LJK+AzHY4ISd63NI4pkh4UL+ibdKSvih6sE1Bj wLEZBvdnXboIIke/ijq+1+VKmXP3Tm0PFt5w2xzn2+EqDuoLzO5Xn6rGn+KhIrP8 Gi0vxbT80kaBOvMglpLsMWHt2PdYMVlcccQN69506gEwdgdg/qB7jvRV3FWOe+nD Z/R7iMcpcOLxXVXZdnFSWBHrowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGe4hIB cDpWuhcPsCjuQ2FS0KyRMB8GA1UdIwQYMBaAFLt0EFa3HHVdA/uc8hSkEkyk83YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBQS82QTRGRkM3QTBG MTAxMUVBQTk2OUZFNDNDNEY5QUUwMi91M1FRVnJjY2RWMEQtNXp5RktRU1RLVHpk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UzUVFWcmNjZFYwRC01enlGS1FTVEtUemRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTBBQS82QTRGRkM3QTBGMTAxMUVBQTk2OUZFNDNDNEY5QUUwMi91M1FRVnJjY2RW MEQtNXp5RktRU1RLVHpkZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIoLRvZMotgZ7m6+6qTERcQTJQ2gLCjNt7Xo8kGgZNlAJW4r2EJQBY xwaJBeXvyVqSPqpgCZml42zU32/53Rd9jRMOaL3Ywx9s/dC06Yhg13RMFseKHDc+ Odyei3rcWFw2b+UyZIv/AZJHoh4x+7yNGVGfL+47648CVj2inaIDg+8XJDilaaOp PC9YoIaOG/XyMEe20KQ8MFDhilrFWzLV9vL4ljwdBZACxSwSIOUVkdkScIoy11i5 r0fFU/aszO0/gR44L0Ftj1PnnvMWC5aOq1ZfHVY7nCMqHyLCcG02xrE0PbgUaPoj aQgiHm2KiVZGtHR3un2GUjHIfGOVVi94 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org