$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json) Hash identifier: TGaBWbumPaVaisJkF8rzSzRRopXKvo+TeZu9TXz7oWg= Subject key identifier: F3:31:7D:F5:FB:B8:F9:1A:62:56:79:D6:7C:6A:D7:76:5A:F3:FA:82 Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft Manifest number: 0B Signing time: Thu 21 Nov 2024 06:12:51 +0000 Manifest this update: Thu 21 Nov 2024 06:12:51 +0000 Manifest next update: Thu 28 Nov 2024 06:12:51 +0000 Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: w4fQSnzwAr6RJ0VInoAmXg1A4+TLyRacZ8QDS4ewnTU=) 2: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: FU5mvxZceIbuuDUak3lQhNYET6+mipMS+ZwuFdmTgz4=) 3: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: CPi02y7OafcXkgb9VVseAE7oZRDlXJZ3/Z4BzqOI2qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Validity Not Before: Nov 21 06:12:51 2024 GMT Not After : Nov 28 06:12:51 2024 GMT Subject: CN=673ecf63-f373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:72:0e:7f:c6:eb:e0:23:ea:5f:46:57:13: 74:f1:45:cf:7a:d4:5b:5d:a4:af:4e:53:01:6b:1a: da:35:d5:8e:6b:85:b2:a7:e6:7f:53:90:f0:4b:aa: 34:f8:6e:ab:62:00:4f:86:ab:38:90:97:c7:ed:f5: b4:4b:72:69:ff:b3:1e:db:14:76:49:cc:48:bf:96: a4:0d:eb:77:fe:15:5b:8b:10:b5:fc:e4:1b:d6:b6: d4:b6:98:f0:3e:54:3f:a6:2d:7b:62:9d:f6:77:a7: 02:d8:cb:67:ff:fd:c9:9b:9f:2f:9d:ef:25:b7:1a: 40:d3:38:45:eb:b6:57:64:28:d4:40:e2:75:13:04: 76:7c:04:a2:f3:77:2c:12:67:25:2c:02:92:94:16: a5:25:b5:97:f2:ed:7a:8b:8b:38:e6:6d:5d:8e:6f: 3a:69:d1:ec:e2:5a:fd:20:8b:f7:1e:92:28:57:4e: 14:56:58:18:38:91:d1:00:77:6f:35:0a:0b:73:ab: 83:ab:f1:95:18:13:cc:f5:64:f1:cc:83:ba:a2:e1: 60:de:06:d3:bf:07:eb:5b:84:87:76:e3:26:63:20: ac:f7:d6:4d:0f:38:92:59:93:79:1d:2f:97:55:70: 8e:63:85:9d:bb:f5:dc:63:00:0a:1f:76:8f:59:d6: e6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:31:7D:F5:FB:B8:F9:1A:62:56:79:D6:7C:6A:D7:76:5A:F3:FA:82 X509v3 Authority Key Identifier: keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:47:8d:9c:00:9c:f7:bc:71:2a:7c:52:e4:15:72:ad:d9:5f: 7d:fc:bd:2a:5b:c5:6b:fb:2b:a8:24:42:0c:6e:98:5c:bb:87: 16:4b:1c:19:45:49:49:db:2a:e6:e1:15:b6:18:8f:8d:45:11: 03:1f:73:8a:3e:af:05:53:2e:d4:d6:99:8b:b3:29:eb:1e:3d: 4f:26:c7:50:65:25:04:d6:d8:24:2d:fe:1f:e7:2a:bf:05:5b: fa:34:d9:c4:98:b4:fc:7a:55:87:3e:a7:2f:cb:3b:4f:8d:62: 1b:b7:99:8b:77:68:17:2a:b2:60:9b:30:ef:05:f6:3d:5d:79: 15:43:57:fe:20:8f:1f:bd:3c:6d:0a:19:33:b3:5e:fd:37:26: 03:f8:8f:90:67:bc:85:9b:73:3f:ed:d2:69:ea:16:bf:a6:ef: 33:8e:17:ff:08:b2:b0:36:9b:f4:cf:ba:29:ad:85:10:1e:02: 0c:04:e2:f6:45:56:cb:0d:02:74:d8:94:3b:42:90:0e:3e:88: 2d:38:42:3b:9d:20:a6:7b:fe:4f:24:53:1a:3a:a4:7b:2f:cd: c0:18:f2:da:cb:f3:11:61:f3:87:52:99:52:cc:0d:7d:b1:59: 2d:36:4f:41:f7:e1:40:7c:43:8d:4c:ad:69:2d:7a:4e:dd:ab: 6b:00:bd:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjdCRTExMC8GA1UEBRMoMEY5QUE4REU1M0YwODVFRTg2NUExRTNERDJBMjM0NEUy MTMwQUYxNDAeFw0yNDExMjEwNjEyNTFaFw0yNDExMjgwNjEyNTFaMBgxFjAUBgNV BAMTDTY3M2VjZjYzLWYzNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxIXIOf8br4CPqX0ZXE3TxRc961FtdpK9OUwFrGto11Y5rhbKn5n9TkPBLqjT4 bqtiAE+GqziQl8ft9bRLcmn/sx7bFHZJzEi/lqQN63f+FVuLELX85BvWttS2mPA+ VD+mLXtinfZ3pwLYy2f//cmbny+d7yW3GkDTOEXrtldkKNRA4nUTBHZ8BKLzdywS ZyUsApKUFqUltZfy7XqLizjmbV2Obzpp0eziWv0gi/cekihXThRWWBg4kdEAd281 Cgtzq4Or8ZUYE8z1ZPHMg7qi4WDeBtO/B+tbhId24yZjIKz31k0POJJZk3kdL5dV cI5jhZ279dxjAAofdo9Z1uYhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8zF99fu4 +RpiVnnWfGrXdlrz+oIwHwYDVR0jBBgwFoAUD5qo3lPwhe6GWh490qI0TiEwrxQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGN0JFLzA5Q0UzMjY0OUNG RTExRUY4RUVDOTA0QUM0RjlBRTAyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRDVxbzNsUHdoZTZHV2g0OTBxSTBUaUV3cnhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG N0JFLzA5Q0UzMjY0OUNGRTExRUY4RUVDOTA0QUM0RjlBRTAyL0Q1cW8zbFB3aGU2 R1doNDkwcUkwVGlFd3J4US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADRHjZwAnPe8cSp8UuQVcq3ZX338vSpbxWv7K6gkQgxumFy7hxZLHBlF SUnbKubhFbYYj41FEQMfc4o+rwVTLtTWmYuzKesePU8mx1BlJQTW2CQt/h/nKr8F W/o02cSYtPx6VYc+py/LO0+NYhu3mYt3aBcqsmCbMO8F9j1deRVDV/4gjx+9PG0K GTOzXv03JgP4j5BnvIWbcz/t0mnqFr+m7zOOF/8IsrA2m/TPuimthRAeAgwE4vZF VssNAnTYlDtCkA4+iC04QjudIKZ7/k8kUxo6pHsvzcAY8trL8xFh84dSmVLMDX2x WS02T0H34UB8Q41MrWktek7dq2sAvZQ= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org