$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: XsgFaghmnhqCjcI8bwy0ifdE4KheoS9YWEtKHzxmTf0= Subject key identifier: CD:FC:E0:68:B0:2A:B2:E8:7A:01:78:30:E5:41:DC:49:51:7C:6E:80 Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 2433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 23F8 Signing time: Fri 22 Nov 2024 15:48:38 +0000 Manifest this update: Fri 22 Nov 2024 15:48:38 +0000 Manifest next update: Fri 29 Nov 2024 15:48:38 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: 18OkpA0Na0jYl/nOn1nXvv83l31KCtJV/XJxiIV1e+g=) 2: 83684F548DF411E7A230506DC4F9AE02.roa (hash: AclspnZ8iw2tHm0IKz4UG4ixLk56q+FHizPSEyIU7Yg=) 3: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: Xinmf1pF0nmD8G1dr/8oh0iZ6My9MutoBSmESSGjfhg=) 4: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: n5Den4WYpFKZqIXrlnguXiXrj/0j5bJGPd+BTJZJ0No=) 5: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: jSQyyyapjlhB60qfeUaNeUQVSh1wYlF7bLfS517NK9o=) 6: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: ay5i7tS86bmO9kaJDJPqeE4jRkBcKwVm9OWVagFYZoQ=) 7: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: qDvUpQ+pcBdp3oNoCaw3VUb20gdJh67KqNBk3Z1ztMU=) 8: 027532E6385F11EAA879692AC4F9AE02.roa (hash: wjHexyPvkPualq2gUM9+dQ9qJ+4Kj5YvVI5QrOdw33k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9267 (0x2433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: Nov 22 15:48:38 2024 GMT Not After : Nov 29 15:48:38 2024 GMT Subject: CN=6740a7d6-a15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:72:f5:1c:54:27:b3:42:72:b3:68:c0:98:2e: 38:d5:ca:30:0f:bf:91:38:6a:69:0b:d6:b1:c9:99: 21:ce:62:70:d2:8a:5f:ac:b6:11:58:30:e7:72:df: df:88:20:bc:80:e3:71:33:c8:5c:b9:0c:66:d1:1d: 71:fb:02:92:0f:f4:40:14:12:f9:87:a7:d9:21:42: 7b:e5:a3:5e:ae:b4:5e:eb:1c:da:8e:ee:fe:dd:b7: 08:32:de:ec:86:28:90:44:9c:9a:bc:dd:18:40:d3: e5:c6:06:14:ee:77:83:96:bb:6e:31:9a:c9:4f:34: 2b:1a:91:df:f6:5a:38:d9:85:35:38:07:0b:b8:9a: d5:81:a5:cb:9d:00:c5:03:db:2f:46:e5:f4:dd:9d: 76:c5:86:1b:1b:14:d9:ae:be:c4:eb:23:1c:51:63: cf:60:e1:8b:db:c7:98:2e:22:75:dc:8b:4b:e5:73: a5:77:96:22:93:c8:fe:3c:94:3c:96:47:6f:37:8a: 7e:06:63:ea:a4:fb:f1:88:3b:db:29:3d:48:b2:e0: ae:b0:08:a6:be:c8:bc:aa:ea:c3:b0:ca:f2:70:ff: db:6e:58:5e:31:45:b4:09:5d:86:f6:b8:4f:c1:71: d3:b9:c2:02:7f:7d:c8:42:f5:eb:88:8b:90:95:a2: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FC:E0:68:B0:2A:B2:E8:7A:01:78:30:E5:41:DC:49:51:7C:6E:80 X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:bb:cb:83:07:ca:3b:06:80:9e:53:62:93:3c:aa:10:34:1c: e7:a6:4c:19:3f:d5:74:10:05:3a:0b:ec:dc:6d:69:37:4d:fb: 79:43:c5:7e:89:0e:27:ab:cd:ad:6c:db:cd:15:d7:2e:d1:5a: ed:bf:e7:60:c7:53:9f:a3:a7:21:e9:da:96:db:e6:f3:d6:53: 6a:95:96:55:80:d3:bf:4a:f7:82:0b:82:40:fd:0d:da:f0:38: e6:45:ff:e2:9d:a7:a5:f6:44:6b:98:08:a7:f3:b5:09:5b:b5: 4e:7d:ba:99:6f:9d:a5:c5:d9:0a:8d:81:40:bb:cf:2a:f0:c9: 96:d8:38:cb:49:e5:81:e8:e6:bd:30:ba:3c:39:70:25:d4:46: 49:5c:5b:be:9c:b2:1b:b5:4a:b2:e9:34:4b:c6:02:1e:3a:e4: aa:9b:ce:5d:3a:1a:21:c1:23:97:18:87:37:25:d3:28:05:b0: bb:dc:97:07:81:dc:a9:c8:76:f4:36:5b:aa:b4:42:07:82:f6: b0:d5:bf:ef:20:f3:26:32:5a:43:bd:78:6d:a7:0a:db:c3:23: 93:ba:99:0d:e2:e8:d8:b2:94:ac:d0:f8:53:1a:47:f3:87:f5: 25:95:ed:96:4b:dd:e0:62:a9:82:94:b3:90:d3:95:e5:f9:f2: de:3c:9a:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjQxMTIyMTU0ODM4WhcNMjQxMTI5MTU0ODM4WjAYMRYwFAYD VQQDEw02NzQwYTdkNi1hMTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnL1HFQns0Jys2jAmC441cowD7+ROGppC9axyZkhzmJw0opfrLYRWDDnct/f iCC8gONxM8hcuQxm0R1x+wKSD/RAFBL5h6fZIUJ75aNerrRe6xzaju7+3bcIMt7s hiiQRJyavN0YQNPlxgYU7neDlrtuMZrJTzQrGpHf9lo42YU1OAcLuJrVgaXLnQDF A9svRuX03Z12xYYbGxTZrr7E6yMcUWPPYOGL28eYLiJ13ItL5XOld5Yik8j+PJQ8 lkdvN4p+BmPqpPvxiDvbKT1IsuCusAimvsi8qurDsMrycP/bblheMUW0CV2G9rhP wXHTucICf33IQvXriIuQlaJg5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM384Giw KrLoegF4MOVB3ElRfG6AMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBju8uDB8o7BoCeU2KTPKoQNBznpkwZP9V0EAU6C+zcbWk3Tft5Q8V+ iQ4nq82tbNvNFdcu0Vrtv+dgx1Ofo6ch6dqW2+bz1lNqlZZVgNO/SveCC4JA/Q3a 8DjmRf/inael9kRrmAin87UJW7VOfbqZb52lxdkKjYFAu88q8MmW2DjLSeWB6Oa9 MLo8OXAl1EZJXFu+nLIbtUqy6TRLxgIeOuSqm85dOhohwSOXGIc3JdMoBbC73JcH gdypyHb0NluqtEIHgvaw1b/vIPMmMlpDvXhtpwrbwyOTupkN4ujYspSs0PhTGkfz h/Ulle2WS93gYqmClLOQ05Xl+fLePJqm -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:48 2024 by rpki-client on console-fra.rpki-client.org