$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft File: cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json) Hash identifier: x0/rCJKAJKaNnoT9tMqv6HQuDYJTyuKg3uTsN3ue7NI= Subject key identifier: CD:62:8D:95:71:01:4D:03:31:25:AE:7E:31:F4:B9:F2:4F:99:D9:93 Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Certificate serial: 12B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft Manifest number: 1267 Signing time: Fri 22 Nov 2024 17:08:46 +0000 Manifest this update: Fri 22 Nov 2024 17:08:46 +0000 Manifest next update: Fri 29 Nov 2024 17:08:46 +0000 Files and hashes: 1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: YjDVl679B9nA1IhoEiI0Bn+g/L9hOeRazZvFgRzmK/4=) 2: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: RkoS7hrQ2QANNm5sx/5d46X4OvIfq/xZ9DC2wpSUEMo=) 3: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: dlzvcYSMpJJECDfUD2ttn05KUyNlgHjyRd5FKOecZPA=) 4: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: o9qMusGN5GDjUkb5guKhyMehJeu6p5DVF2ITp61z0FM=) 5: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: SPUciNl7sWVHesGHpuLeYdUCLi+DEMRmn3hpjUZkkzo=) 6: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: CxE2LzQTUSnICEBxSLSJi2DaFZfd5DCFRNbdjbleYco=) 7: DEF977A6E53611EB81682769C4F9AE02.roa (hash: hs6gBEHf+NcXloE+gZDvY1hGrieoi7+2YWZ5lbTwNRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4793 (0x12b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F Validity Not Before: Nov 22 17:08:46 2024 GMT Not After : Nov 29 17:08:46 2024 GMT Subject: CN=6740ba9e-1947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:4f:96:35:6e:d2:e3:25:f8:71:ff:0b:84: e7:9b:9c:2c:02:e9:22:bc:04:59:36:9a:e8:eb:d3: e0:35:62:ce:5f:86:48:71:34:41:33:a9:64:0d:7c: a9:d9:4b:9e:1b:b5:ce:31:64:99:37:54:87:67:78: fa:1a:0a:31:61:fc:f5:49:21:b7:a6:1c:b0:3e:a0: 7a:98:05:be:1e:14:87:96:f0:7e:9d:d9:57:70:cf: bd:e5:8b:87:97:4c:fd:7d:7a:ce:8b:ea:8d:1b:79: 2e:89:0c:9e:70:d5:73:2f:bc:30:7f:c9:b5:54:1f: ea:37:74:76:70:01:51:d1:5a:3e:2b:8c:ab:37:14: a7:9f:cb:49:81:a0:f7:cd:8b:5c:0a:89:9e:9c:b4: 40:79:a5:a0:67:d0:ed:c5:9d:de:d2:dc:74:3d:a7: 8a:a2:c7:ed:1a:ba:6c:73:c4:17:1d:bd:84:8a:81: 6f:ca:35:ab:60:ad:05:8f:02:59:13:be:73:83:f6: 50:41:3c:22:78:c1:b5:94:5f:f7:a4:1e:67:5e:6c: fa:66:54:f6:bb:5c:70:7b:8f:78:8b:cb:85:9e:24: 52:ed:11:e2:cd:37:82:1b:52:96:28:13:f1:f2:b8: 42:35:cd:f3:72:43:7e:7d:5b:cc:5e:f7:2c:88:a9: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:62:8D:95:71:01:4D:03:31:25:AE:7E:31:F4:B9:F2:4F:99:D9:93 X509v3 Authority Key Identifier: keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f7:db:65:90:36:d3:80:4a:ec:65:ce:35:f5:26:58:4d:d0: 05:60:3d:08:fe:5a:4a:94:80:1c:7b:c7:50:51:d5:26:3a:15: 9c:eb:48:72:7a:f2:c7:4b:b3:18:91:b1:74:23:56:e2:cf:87: f9:e8:3b:4e:73:6b:f6:dc:fc:05:94:47:2a:9c:bc:26:8e:2c: 2c:c9:a7:9d:a8:b2:54:fc:44:99:e8:80:19:79:d9:b7:25:d0: 99:35:d8:2d:c7:01:76:32:48:50:8a:7f:fc:d0:89:23:8b:29: c3:dd:11:3f:ee:a2:5c:a5:25:56:8f:a2:11:e6:2c:e4:8b:3c: 8b:71:ab:6c:05:01:42:15:40:c0:e1:d9:e3:0f:8b:2f:3a:bd: 82:78:63:47:ef:74:bd:f9:3f:23:f0:ac:7c:62:70:24:e5:67: 36:5e:e5:d1:43:62:e8:20:fd:8d:74:06:44:ab:53:62:a4:c9: cc:25:71:07:c7:ac:77:97:78:30:e0:25:87:c6:f7:9f:23:85: d1:37:e1:dd:67:9a:c9:e5:75:2c:a9:1a:7f:1b:63:68:a2:8e: 56:40:e4:52:d8:56:f2:ee:56:0c:56:2a:d7:fd:23:d3:78:69: 11:56:99:ae:ce:21:6b:e3:d1:82:54:6a:15:fe:9f:b0:41:4c: 79:31:4c:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDcxNTY1RjJEN0I5MjRDRDcyQjQ1NUI2OEI2NjcxOTQw MTBCQjFBOUYwHhcNMjQxMTIyMTcwODQ2WhcNMjQxMTI5MTcwODQ2WjAYMRYwFAYD VQQDEw02NzQwYmE5ZS0xOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pBPljVu0uMl+HH/C4Tnm5wsAukivARZNpro69PgNWLOX4ZIcTRBM6lkDXyp 2UueG7XOMWSZN1SHZ3j6GgoxYfz1SSG3phywPqB6mAW+HhSHlvB+ndlXcM+95YuH l0z9fXrOi+qNG3kuiQyecNVzL7wwf8m1VB/qN3R2cAFR0Vo+K4yrNxSnn8tJgaD3 zYtcComenLRAeaWgZ9DtxZ3e0tx0PaeKosftGrpsc8QXHb2EioFvyjWrYK0FjwJZ E75zg/ZQQTwieMG1lF/3pB5nXmz6ZlT2u1xwe494i8uFniRS7RHizTeCG1KWKBPx 8rhCNc3zckN+fVvMXvcsiKnlpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1ijZVx AU0DMSWufjH0ufJPmdmTMB8GA1UdIwQYMBaAFHFWXy17kkzXK0VbaLZnGUAQuxqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8xNjczMEQyMENE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1ROY3JSVnRvdG1jWlFCQzdH cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NWWmZMWHVTVE5jclJWdG90bWNaUUJDN0dwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8xNjczMEQyMENEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9jVlpmTFh1U1RO Y3JSVnRvdG1jWlFCQzdHcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR99tlkDbTgErsZc419SZYTdAFYD0I/lpKlIAce8dQUdUmOhWc60hy evLHS7MYkbF0I1biz4f56DtOc2v23PwFlEcqnLwmjiwsyaedqLJU/ESZ6IAZedm3 JdCZNdgtxwF2MkhQin/80IkjiynD3RE/7qJcpSVWj6IR5izkizyLcatsBQFCFUDA 4dnjD4svOr2CeGNH73S9+T8j8Kx8YnAk5Wc2XuXRQ2LoIP2NdAZEq1NipMnMJXEH x6x3l3gw4CWHxvefI4XRN+HdZ5rJ5XUsqRp/G2Nooo5WQORS2Fby7lYMVirX/SPT eGkRVpmuziFr49GCVGoV/p+wQUx5MUxp -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:48 2024 by rpki-client on console-fra.rpki-client.org