$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: NWDQXmgp497sLhdCACC5PVgpiDSjVAiA/0+54fBJXS0= Subject key identifier: 8D:9C:A2:8C:C0:48:C6:D0:5B:C8:99:D5:14:39:02:94:5E:2D:0C:80 Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 0765 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 12FE Signing time: Fri 22 Nov 2024 18:40:57 +0000 Manifest this update: Fri 22 Nov 2024 18:40:56 +0000 Manifest next update: Fri 29 Nov 2024 18:40:56 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: Xpew9XJpaQf3efK/ReSrI45iA1IMnqEsxKoLtPTJ16E=) 2: 002F950CFF6611EABE77DA4FC4F9AE02.roa (hash: i6cG/zwGHDxZhgko6olaCJkVcCmriXcczI+8bQ1+3KU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1893 (0x765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Nov 22 18:40:56 2024 GMT Not After : Nov 29 18:40:56 2024 GMT Subject: CN=6740d039-d97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:da:80:17:7c:74:43:f3:b3:cd:31:7b:2f: ad:ce:47:69:fb:2d:44:a6:30:8d:22:00:2c:9c:ec: df:1d:af:0f:6c:fa:0d:21:9e:82:7d:29:68:5f:13: 57:59:5c:6d:48:41:53:97:68:9b:de:05:a6:6c:83: 4e:d2:ad:19:12:67:5d:20:dd:07:5f:2c:fe:f2:9d: 2b:51:02:5e:e3:73:aa:fa:30:14:dd:7d:32:71:1b: dd:0f:07:f6:a2:66:df:73:00:e3:bb:50:39:20:51: f6:c9:bf:3f:eb:f8:bd:b5:36:4f:0d:43:3e:85:da: 9d:c5:fa:56:b6:29:45:f7:74:b8:cc:cf:1c:d7:3b: 72:87:26:35:50:60:ea:06:6d:3e:d8:e7:b7:ef:c9: 2d:36:a1:e7:04:0b:ca:5e:df:28:b5:21:30:b4:af: 66:32:74:fd:8a:64:90:cd:f2:96:f9:87:63:3d:6f: 9c:49:7f:6d:18:94:e1:8b:b4:ae:5c:4c:bb:a6:33: 85:c5:0d:fa:f3:a4:4a:d6:4a:81:ec:47:9a:1b:f8: 1f:31:02:9a:5d:92:31:e0:93:95:1a:b8:ec:e1:35: 41:1c:36:fb:e5:b5:d2:4f:6a:17:95:93:e8:36:c9: fc:59:13:9a:16:79:5a:db:9c:7c:22:e2:44:29:97: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9C:A2:8C:C0:48:C6:D0:5B:C8:99:D5:14:39:02:94:5E:2D:0C:80 X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:29:d0:85:52:ed:fc:fc:7f:99:bb:b0:ad:76:db:73:12:da: 33:fb:d6:06:04:1b:30:d9:b3:8e:f6:9e:ee:c5:a4:60:91:3f: 09:aa:cb:8d:a0:c6:ec:d6:f6:2e:89:82:30:f3:e9:2b:e3:e3: 5c:72:fa:65:8a:18:f3:94:56:77:79:32:85:5a:f7:c5:83:32: 74:eb:b3:a2:86:7b:c1:87:f2:58:0d:b1:5a:5c:5a:29:3a:a3: a3:45:8e:39:52:b1:85:ec:23:26:9a:70:66:d7:ca:54:c9:53: 10:43:25:37:98:cf:1d:9b:ac:60:38:7f:31:6f:e9:f5:f5:66: 93:41:d8:0c:8b:91:e2:bc:15:3b:0d:d7:23:b5:8b:a9:10:4e: 50:3f:1f:1f:3f:a7:3c:08:4c:aa:d1:79:85:f9:99:df:7e:e9: b0:d1:d8:d7:e6:e3:7b:48:2e:f5:61:33:9d:88:b3:e0:6e:37: 77:46:d3:ec:36:f0:70:cb:6d:27:c3:45:b6:5a:7c:3d:ea:34: aa:3d:97:d6:8a:ba:b4:10:e1:69:68:01:50:ad:e8:4e:36:63: a7:e4:c3:b0:10:5a:73:80:55:e9:99:5f:0a:78:ac:d9:90:c3: 90:7d:0c:07:f1:eb:ca:35:01:27:a1:01:6d:11:7f:9a:bf:49: 31:f4:47:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjQxMTIyMTg0MDU2WhcNMjQxMTI5MTg0MDU2WjAYMRYwFAYD VQQDEw02NzQwZDAzOS1kOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuILagBd8dEPzs80xey+tzkdp+y1EpjCNIgAsnOzfHa8PbPoNIZ6CfSloXxNX WVxtSEFTl2ib3gWmbINO0q0ZEmddIN0HXyz+8p0rUQJe43Oq+jAU3X0ycRvdDwf2 ombfcwDju1A5IFH2yb8/6/i9tTZPDUM+hdqdxfpWtilF93S4zM8c1ztyhyY1UGDq Bm0+2Oe378ktNqHnBAvKXt8otSEwtK9mMnT9imSQzfKW+YdjPW+cSX9tGJThi7Su XEy7pjOFxQ3686RK1kqB7EeaG/gfMQKaXZIx4JOVGrjs4TVBHDb75bXST2oXlZPo Nsn8WROaFnla25x8IuJEKZdTtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2coozA SMbQW8iZ1RQ5ApReLQyAMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKKdCFUu38/H+Zu7CtdttzEtoz+9YGBBsw2bOO9p7uxaRgkT8JqsuN oMbs1vYuiYIw8+kr4+NccvplihjzlFZ3eTKFWvfFgzJ067OihnvBh/JYDbFaXFop OqOjRY45UrGF7CMmmnBm18pUyVMQQyU3mM8dm6xgOH8xb+n19WaTQdgMi5HivBU7 DdcjtYupEE5QPx8fP6c8CEyq0XmF+Znffumw0djX5uN7SC71YTOdiLPgbjd3RtPs NvBwy20nw0W2Wnw96jSqPZfWirq0EOFpaAFQrehONmOn5MOwEFpzgFXpmV8KeKzZ kMOQfQwH8evKNQEnoQFtEX+av0kx9Edw -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org