$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft File: PfacqYyxMelltbxKM_znG50156g.mft (raw, json) Hash identifier: jAAxbvFk8A0je46Ei7Nf2uihzzIldE/XVYflSWAs2IE= Subject key identifier: 33:70:CC:92:C1:E7:9A:40:C4:00:71:F5:12:BC:89:69:37:96:4B:FE Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 Certificate issuer: /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8 Certificate serial: 06F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft Manifest number: 06EC Signing time: Sun 24 Nov 2024 21:22:47 +0000 Manifest this update: Sun 24 Nov 2024 21:22:47 +0000 Manifest next update: Sun 01 Dec 2024 21:22:46 +0000 Files and hashes: 1: PfacqYyxMelltbxKM_znG50156g.crl (hash: zTNcjPzgzmW8LXfk1g20RLBr0w49Hit0QTx2jnlg218=) 2: F1C686AA1D5811EFA8D26E3EC4F9AE02.roa (hash: BpRU5vtlWu8GxUpnxUXfCoGbkigqKOaTyGe8e4bcbw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785 (0x6f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8 Validity Not Before: Nov 24 21:22:47 2024 GMT Not After : Dec 1 21:22:46 2024 GMT Subject: CN=67439927-be37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:33:31:89:99:3c:31:09:9c:5e:2c:2e:24: 44:a9:e2:7b:51:d8:c3:77:ce:05:09:5b:fb:90:e4: c0:9b:d2:99:e7:73:a0:5e:3d:17:17:a2:a3:d7:aa: e7:cd:6f:cd:ad:28:19:2f:f8:aa:3b:40:e9:e0:de: 1b:fb:e0:15:c5:c2:26:b2:24:71:55:75:ad:13:75: 32:1f:07:74:0d:39:ec:1f:66:d4:d2:30:c0:22:65: 15:66:f1:35:54:ff:88:8d:36:aa:70:8f:ad:e4:da: 9d:fc:76:73:8d:8d:f6:67:22:3f:5c:40:28:11:77: 60:bd:a9:65:9f:3a:cf:50:82:e4:1f:fc:12:d5:e3: 35:2a:96:86:d0:2e:5b:53:11:2a:af:e8:f8:13:1c: 20:87:55:57:67:17:6d:14:63:74:8c:17:3f:0d:68: b9:66:e1:97:62:3e:05:21:6a:1b:ee:8a:ae:60:a9: 33:a4:06:58:8e:24:bb:7f:7e:f3:6a:ae:78:35:cd: 2d:03:27:12:50:1a:14:02:89:a8:eb:c9:3e:51:15: 46:ef:55:0f:46:e9:75:f4:89:76:c0:4e:d3:ba:9f: 1c:eb:8a:20:7b:be:76:cc:9e:32:62:06:64:e4:7e: 6f:d3:2c:11:b3:46:26:fa:d7:6a:91:4f:6a:a6:25: e6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:70:CC:92:C1:E7:9A:40:C4:00:71:F5:12:BC:89:69:37:96:4B:FE X509v3 Authority Key Identifier: keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e9:2b:61:76:f5:6b:67:6a:69:bd:eb:d5:8e:92:07:d6:1b: a5:c5:b8:af:5a:70:5c:d7:92:d0:01:40:5b:77:65:84:ac:1f: 42:b8:c3:ab:21:6b:f4:af:04:28:4d:12:5a:50:3b:ee:9f:2e: 1e:68:93:ab:53:18:dc:0e:31:6a:95:84:4d:01:ba:fc:18:0a: 14:e3:85:e2:e7:46:d0:bd:df:83:0a:8f:c8:fd:29:cc:f0:8c: 91:c5:7f:62:1c:87:0b:9a:fb:b7:fa:ff:61:d7:90:e7:a8:fc: 30:fa:4b:90:94:1e:aa:7f:57:95:60:8a:5e:db:67:54:d2:23: e0:d3:40:9c:a6:62:c7:bb:4c:66:d1:f7:57:aa:6f:51:1f:be: 58:50:b9:b6:74:06:b3:fa:9c:70:49:ed:a2:2e:d2:31:b0:e0: 75:8c:d3:3f:0a:55:4a:b6:7b:71:12:0a:ee:64:09:af:05:88: 8e:41:86:13:17:e5:c6:cc:b8:26:23:b9:57:c1:b4:22:93:98: 60:a0:1b:6c:f4:61:37:db:55:92:9c:a0:64:dd:b5:05:10:98: b1:ef:64:18:7c:43:6f:41:1c:5e:6d:83:0e:e9:1f:b4:b8:19: 42:43:7b:1c:bf:6d:5f:a4:0a:f0:de:0b:10:8f:ba:e6:20:c0: dc:36:48:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGMTMxMTAvBgNVBAUTKDNERjY5Q0E5OENCMTMxRTk2NUI1QkM0QTMzRkNFNzFC OUQzNUU3QTgwHhcNMjQxMTI0MjEyMjQ3WhcNMjQxMjAxMjEyMjQ2WjAYMRYwFAYD VQQDEw02NzQzOTkyNy1iZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3MzMYmZPDEJnF4sLiREqeJ7UdjDd84FCVv7kOTAm9KZ53OgXj0XF6Kj16rn zW/NrSgZL/iqO0Dp4N4b++AVxcImsiRxVXWtE3UyHwd0DTnsH2bU0jDAImUVZvE1 VP+IjTaqcI+t5Nqd/HZzjY32ZyI/XEAoEXdgvallnzrPUILkH/wS1eM1KpaG0C5b UxEqr+j4Exwgh1VXZxdtFGN0jBc/DWi5ZuGXYj4FIWob7oquYKkzpAZYjiS7f37z aq54Nc0tAycSUBoUAomo68k+URVG71UPRul19Il2wE7Tup8c64oge752zJ4yYgZk 5H5v0ywRs0Ym+tdqkU9qpiXmtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNwzJLB 55pAxABx9RK8iWk3lkv+MB8GA1UdIwQYMBaAFD32nKmMsTHpZbW8SjP85xudNeeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUYxMy81Mzg3MzJGRTI5 NEMxMUVCQTZCRjZEMzFDNEY5QUUwMi9QZmFjcVl5eE1lbGx0YnhLTV96bkc1MDE1 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmYWNxWXl4TWVsbHRieEtNX3puRzUwMTU2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUYxMy81Mzg3MzJGRTI5NEMxMUVCQTZCRjZEMzFDNEY5QUUwMi9QZmFjcVl5eE1l bGx0YnhLTV96bkc1MDE1NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ6SthdvVrZ2ppvevVjpIH1hulxbivWnBc15LQAUBbd2WErB9CuMOr IWv0rwQoTRJaUDvuny4eaJOrUxjcDjFqlYRNAbr8GAoU44Xi50bQvd+DCo/I/SnM 8IyRxX9iHIcLmvu3+v9h15DnqPww+kuQlB6qf1eVYIpe22dU0iPg00CcpmLHu0xm 0fdXqm9RH75YULm2dAaz+pxwSe2iLtIxsOB1jNM/ClVKtntxEgruZAmvBYiOQYYT F+XGzLgmI7lXwbQik5hgoBts9GE321WSnKBk3bUFEJix72QYfENvQRxebYMO6R+0 uBlCQ3scv21fpArw3gsQj7rmIMDcNkjx -----END CERTIFICATE-----Generated at Sun Nov 24 22:11:59 2024 by rpki-client on console-fra.rpki-client.org