$ rpki-client -vvf rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft File: mKWpVZLATr7Thxa8Hc41F7exLQg.mft (raw, json) Hash identifier: gEv1Hi6b9wjb0PsFvAmMpRJHXQdk0vRzknVVHwRchmw= Subject key identifier: 92:92:57:E0:35:D6:45:8B:CC:1E:55:82:F1:FC:BC:11:14:32:22:8F Authority key identifier: 98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 Certificate issuer: /CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08 Certificate serial: 053D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft Manifest number: 0538 Signing time: Fri 22 Nov 2024 23:03:39 +0000 Manifest this update: Fri 22 Nov 2024 23:03:38 +0000 Manifest next update: Fri 29 Nov 2024 23:03:38 +0000 Files and hashes: 1: mKWpVZLATr7Thxa8Hc41F7exLQg.crl (hash: 0j1a03DkloEEdd6uvzy6hfbpLci++QzQV1gF2OAuQZQ=) 2: BF8F70C67B8211ED9C4EDD3BC4F9AE02.roa (hash: C2RsYbuvVkPn9nhOkeMiqyxQvhJHdbdxyne9j3bxktw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1341 (0x53d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B647/serialNumber=98A5A95592C04EBED38716BC1DCE3517B7B12D08 Validity Not Before: Nov 22 23:03:38 2024 GMT Not After : Nov 29 23:03:38 2024 GMT Subject: CN=67410dcb-98f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d4:5e:e4:43:28:b2:e1:40:21:ba:4c:85:3d: f1:6a:b9:a8:9a:86:d7:44:d8:ef:fd:97:5d:c6:a9: 0f:c9:fe:3b:8e:c0:54:1d:34:14:07:7c:d3:40:21: de:23:87:22:fa:ff:59:f5:17:29:f3:d6:00:89:ac: eb:a7:e1:db:4b:22:3a:5c:5d:f7:d3:4d:5f:f1:2d: 89:36:5c:df:75:35:a9:d6:62:30:2c:a5:82:2e:1f: 3f:d9:a3:b1:a5:0a:ef:f3:01:2b:56:91:00:f7:90: 40:c6:ce:c1:56:35:99:d3:13:74:a1:5f:65:02:56: 5f:9e:14:a1:a9:92:ae:53:7c:5a:62:00:77:dd:7a: b8:43:45:ba:61:91:f0:27:6e:5e:a3:f8:1c:3e:89: 9b:e3:2c:c9:c5:d9:7f:2d:28:ee:35:6c:5d:8c:9f: a8:b3:df:90:e7:95:af:87:99:d5:2a:6c:2a:9d:5c: cb:d0:d9:fd:ad:f9:a4:9f:90:3a:1d:9f:aa:44:f1: 12:cb:9c:ab:2c:6c:5f:38:aa:a8:1b:77:ed:d0:07: ee:38:8c:1c:bd:b7:ae:fb:e7:d1:49:1f:6b:31:70: eb:cf:0b:97:d4:8f:40:cd:33:b1:5b:d3:e7:b6:44: 28:1e:78:0c:ce:ea:9b:d0:2d:93:bc:c4:3e:1e:da: ac:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:92:57:E0:35:D6:45:8B:CC:1E:55:82:F1:FC:BC:11:14:32:22:8F X509v3 Authority Key Identifier: keyid:98:A5:A9:55:92:C0:4E:BE:D3:87:16:BC:1D:CE:35:17:B7:B1:2D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mKWpVZLATr7Thxa8Hc41F7exLQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B647/0157BADED24911EBA04B4C3BC4F9AE02/mKWpVZLATr7Thxa8Hc41F7exLQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2e:eb:5c:6e:5b:de:4a:c3:9d:0f:62:a6:a6:26:60:89:72: e7:28:0a:d1:29:54:cb:c4:76:ff:d1:d2:f9:83:f5:a9:9b:71: 74:37:8f:0b:cf:c8:3f:89:3a:ce:a6:7c:e5:b3:ef:bf:08:1c: 87:96:7c:9e:36:fd:59:e7:f9:aa:30:1b:70:36:e1:bf:22:e6: 63:af:8d:d5:94:bf:2a:31:b1:c7:a4:d8:f9:2a:ec:27:82:7a: 04:51:6a:27:de:71:68:d1:59:e8:06:01:2c:76:c4:77:d4:56: 23:1e:79:4b:06:c4:a5:cd:05:36:e3:25:02:d4:34:08:db:0b: f5:07:ed:12:5a:1e:22:2a:ea:00:61:f9:33:4b:c9:1a:02:87: 24:ed:f8:d3:ec:4e:7c:4d:e4:a6:f9:fe:a7:7f:bd:4c:c2:f3: 9e:4e:76:34:e5:c2:9d:cb:f1:7b:c8:6b:9e:64:04:a8:94:f0: 78:78:68:68:68:6c:3f:8d:24:09:5a:b3:18:1e:78:75:f9:f1: 3f:a6:f3:62:f4:88:8a:97:6a:97:2e:1e:b1:42:f5:02:e7:d5: ae:ca:00:26:7c:dc:de:30:ac:b2:cd:b1:e4:43:cb:4c:3f:8b: 6d:8b:69:06:f6:33:08:35:9a:66:56:af:72:5d:c1:d9:bc:15: c9:3c:61:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2NDcxMTAvBgNVBAUTKDk4QTVBOTU1OTJDMDRFQkVEMzg3MTZCQzFEQ0UzNTE3 QjdCMTJEMDgwHhcNMjQxMTIyMjMwMzM4WhcNMjQxMTI5MjMwMzM4WjAYMRYwFAYD VQQDEw02NzQxMGRjYi05OGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtRe5EMosuFAIbpMhT3xarmomobXRNjv/ZddxqkPyf47jsBUHTQUB3zTQCHe I4ci+v9Z9Rcp89YAiazrp+HbSyI6XF33001f8S2JNlzfdTWp1mIwLKWCLh8/2aOx pQrv8wErVpEA95BAxs7BVjWZ0xN0oV9lAlZfnhShqZKuU3xaYgB33Xq4Q0W6YZHw J25eo/gcPomb4yzJxdl/LSjuNWxdjJ+os9+Q55Wvh5nVKmwqnVzL0Nn9rfmkn5A6 HZ+qRPESy5yrLGxfOKqoG3ft0AfuOIwcvbeu++fRSR9rMXDrzwuX1I9AzTOxW9Pn tkQoHngMzuqb0C2TvMQ+HtqsdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKSV+A1 1kWLzB5VgvH8vBEUMiKPMB8GA1UdIwQYMBaAFJilqVWSwE6+04cWvB3ONRe3sS0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjY0Ny8wMTU3QkFERUQy NDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRyN1RoeGE4SGM0MUY3ZXhM UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21LV3BWWkxBVHI3VGh4YThIYzQxRjdleExRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjY0Ny8wMTU3QkFERUQyNDkxMUVCQTA0QjRDM0JDNEY5QUUwMi9tS1dwVlpMQVRy N1RoeGE4SGM0MUY3ZXhMUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8LutcblveSsOdD2KmpiZgiXLnKArRKVTLxHb/0dL5g/Wpm3F0N48L z8g/iTrOpnzls++/CByHlnyeNv1Z5/mqMBtwNuG/IuZjr43VlL8qMbHHpNj5Kuwn gnoEUWon3nFo0VnoBgEsdsR31FYjHnlLBsSlzQU24yUC1DQI2wv1B+0SWh4iKuoA YfkzS8kaAock7fjT7E58TeSm+f6nf71MwvOeTnY05cKdy/F7yGueZASolPB4eGho aGw/jSQJWrMYHnh1+fE/pvNi9IiKl2qXLh6xQvUC59WuygAmfNzeMKyyzbHkQ8tM P4tti2kG9jMINZpmVq9yXcHZvBXJPGH4 -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org