$ rpki-client -vvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft File: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft (raw, json) Hash identifier: QNJPj6uWgchSTev3ne3Ai1PhPwrBSd1N5o8SIdRURys= Subject key identifier: 8B:5C:A2:02:97:A1:55:F6:15:92:20:16:0A:62:B3:FA:3F:7A:0F:85 Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 Certificate issuer: /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft Manifest number: C5 Signing time: Sat 23 Nov 2024 03:55:23 +0000 Manifest this update: Sat 23 Nov 2024 03:55:23 +0000 Manifest next update: Sat 30 Nov 2024 03:55:23 +0000 Files and hashes: 1: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl (hash: Pu2yu5cqO4SpJUMlkSprS7d/m9qMJSUpWC+g1YPQFVo=) 2: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (hash: qxZ80C2zZyx5cq4VROiHoH57qrwZSWdC3kAJGztpgCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Validity Not Before: Nov 23 03:55:23 2024 GMT Not After : Nov 30 03:55:23 2024 GMT Subject: CN=6741522b-cd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bd:56:6d:6e:c1:39:34:bb:ba:56:7b:89:10: 1d:54:a5:70:4c:31:cb:fd:ef:be:c1:ee:39:1c:11: fe:90:bd:33:f7:99:dd:71:d0:1e:e1:e9:8d:03:15: 20:85:ec:70:36:5c:9d:00:d7:62:df:81:4a:03:0f: d6:58:27:9e:a0:66:cc:5a:5f:68:d9:1d:1f:5b:a5: c9:b3:b1:4b:79:82:58:68:df:75:54:2e:e3:01:8f: e5:b4:9e:ed:4a:8e:04:bd:45:f6:46:70:9f:d0:7c: e8:67:18:f9:4d:27:b4:39:4c:6c:68:78:d6:bd:55: 80:78:42:68:47:2e:1a:52:12:b3:04:7e:22:6f:ec: 66:de:c0:ea:f0:6d:5a:70:03:2b:c5:f2:e0:ae:ad: 59:d6:2e:af:18:d8:fd:86:83:f0:43:ff:9b:0e:d6: 18:4b:6b:e8:b6:87:6e:75:fe:9d:32:e7:9c:e2:30: b5:12:cf:91:43:6b:b9:ca:5f:6a:c0:b0:58:77:4c: fe:27:67:2d:b1:47:e5:f8:3a:b3:8b:15:d5:e9:da: 5d:c8:18:49:71:7f:a7:b8:43:d7:99:87:56:3a:6f: e9:74:1e:a1:9d:67:bd:5d:95:9a:27:0c:b2:44:1d: 0c:10:5a:36:7f:9c:32:87:2a:2d:f6:fd:b7:10:45: ff:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5C:A2:02:97:A1:55:F6:15:92:20:16:0A:62:B3:FA:3F:7A:0F:85 X509v3 Authority Key Identifier: keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:0a:6d:69:7b:93:5f:01:a1:cd:ea:c4:af:3c:a0:e1:14:83: 4e:d3:a0:44:9e:93:7e:d6:24:b6:4a:99:3f:66:f3:8f:71:0b: 71:73:e6:75:81:f8:49:36:c5:0d:11:27:05:3d:78:f4:43:a4: 7d:4d:80:e9:1c:ce:1d:9a:c0:8a:2b:8c:35:53:78:ac:87:ac: 9c:1f:83:09:1e:ce:e9:39:cc:29:13:f6:3f:af:bc:af:9a:04: 42:e6:09:97:da:54:24:71:06:98:cc:0a:a9:da:59:73:68:ac: e3:6e:b2:62:a4:ad:d7:7e:f1:9d:e1:11:19:a4:98:17:b7:e6: 16:9b:61:38:99:a0:15:43:b7:f1:b7:d3:c1:f3:98:8d:e5:6e: b2:7f:68:6d:da:7c:6c:7d:3f:30:db:ac:c9:e9:cb:70:37:8f: f3:a9:6f:29:f5:65:53:5b:ab:38:91:ce:f9:7b:f0:67:2d:ff: f6:c4:44:93:be:8d:16:75:cf:0c:76:4e:1b:59:3b:3d:66:a1: a4:09:d9:c5:80:f2:e6:50:e4:2f:02:4e:4a:63:ae:30:3e:54: 24:6d:e0:a2:a1:62:de:1d:0b:75:4d:dc:d5:e7:9d:2c:b6:db: 47:33:ef:30:da:50:14:81:1c:a7:a9:70:bf:9a:9b:a6:16:52: 5c:bb:00:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwMkYxMTAvBgNVBAUTKDg3RjMxQjIwMUJERDE4NzU4MTU0MEM1QjhCODY0NDM4 QzI5OTkwQjkwHhcNMjQxMTIzMDM1NTIzWhcNMjQxMTMwMDM1NTIzWjAYMRYwFAYD VQQDEw02NzQxNTIyYi1jZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx71WbW7BOTS7ulZ7iRAdVKVwTDHL/e++we45HBH+kL0z95ndcdAe4emNAxUg hexwNlydANdi34FKAw/WWCeeoGbMWl9o2R0fW6XJs7FLeYJYaN91VC7jAY/ltJ7t So4EvUX2RnCf0HzoZxj5TSe0OUxsaHjWvVWAeEJoRy4aUhKzBH4ib+xm3sDq8G1a cAMrxfLgrq1Z1i6vGNj9hoPwQ/+bDtYYS2votodudf6dMuec4jC1Es+RQ2u5yl9q wLBYd0z+J2ctsUfl+DqzixXV6dpdyBhJcX+nuEPXmYdWOm/pdB6hnWe9XZWaJwyy RB0MEFo2f5wyhyot9v23EEX/9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItcogKX oVX2FZIgFgpis/o/eg+FMB8GA1UdIwQYMBaAFIfzGyAb3Rh1gVQMW4uGRDjCmZC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjAyRi9EN0MzM0FCODdG QkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdIV0JWQXhiaTRaRU9NS1pr TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfTWJJQnZkR0hXQlZBeGJpNFpFT01LWmtMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjAyRi9EN0MzM0FCODdGQkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdI V0JWQXhiaTRaRU9NS1prTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/Cm1pe5NfAaHN6sSvPKDhFINO06BEnpN+1iS2Spk/ZvOPcQtxc+Z1 gfhJNsUNEScFPXj0Q6R9TYDpHM4dmsCKK4w1U3ish6ycH4MJHs7pOcwpE/Y/r7yv mgRC5gmX2lQkcQaYzAqp2llzaKzjbrJipK3XfvGd4REZpJgXt+YWm2E4maAVQ7fx t9PB85iN5W6yf2ht2nxsfT8w26zJ6ctwN4/zqW8p9WVTW6s4kc75e/BnLf/2xEST vo0Wdc8Mdk4bWTs9ZqGkCdnFgPLmUOQvAk5KY64wPlQkbeCioWLeHQt1TdzV550s tttHM+8w2lAUgRynqXC/mpumFlJcuwDj -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org