$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft File: ML4eudOsSdCv7hNTw_nRFnoAexc.mft (raw, json) Hash identifier: QP5lTiEjfZIcrk861e8tjtSp9vcDmfjhKmxfuqTftSQ= Subject key identifier: E8:70:0D:10:1A:16:CD:B0:79:8B:45:C6:A1:2D:3D:9A:A1:A3:E2:EC Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 Certificate issuer: /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft Manifest number: 1D Signing time: Thu 21 Nov 2024 05:58:15 +0000 Manifest this update: Thu 21 Nov 2024 05:58:15 +0000 Manifest next update: Thu 28 Nov 2024 05:58:15 +0000 Files and hashes: 1: ML4eudOsSdCv7hNTw_nRFnoAexc.crl (hash: YOoinKWlDT7Ms7CP51ZmLBZsTayqzRFgNUhCZCKb2yI=) 2: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (hash: vmnzZgJnt+b/L6c8qgw+DSQ8jwFFglsidxJ8BHdXZNA=) 3: EBC0BF3A843411EFA205900AC4F9AE02.roa (hash: QXoKpJpbgRJcIp+0doP/Q1eeP997MeneOQxJwxVTZF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17 Validity Not Before: Nov 21 05:58:15 2024 GMT Not After : Nov 28 05:58:15 2024 GMT Subject: CN=673ecbf7-27c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d7:63:40:3b:7a:7f:84:b9:6a:6b:88:eb:cc: d1:04:b8:51:93:5b:d6:cf:ab:6e:c6:90:12:04:6e: 32:14:69:92:c3:bd:19:a6:51:db:e2:b8:9e:26:ba: f0:1a:cd:aa:0a:55:50:13:86:f7:9e:1b:d8:d8:90: ea:e7:04:45:ac:ba:a4:7f:e3:04:6b:29:bf:24:a6: 33:f3:5c:7e:b9:48:94:b5:61:2c:42:61:69:37:c6: a6:e5:77:10:37:1f:ae:e2:eb:5b:55:7e:72:83:dd: 90:01:ec:bd:19:50:11:e6:c4:5b:b8:e6:b0:98:08: 94:d9:d4:42:53:da:15:bd:6f:0c:49:35:b9:1d:f5: e1:e9:8d:a2:1a:c3:75:45:1b:4f:f3:aa:28:4e:ab: e4:64:f3:ff:39:4b:f7:f7:52:e7:19:1d:f1:62:5a: 3e:e5:dc:02:bb:77:69:c1:81:4b:e2:a0:7f:6b:8f: b8:d5:d6:22:8d:59:f7:93:55:a7:08:d3:2a:42:02: af:cd:22:16:96:91:24:64:b4:27:5d:31:a5:c4:26: 66:2b:f9:39:f7:cc:db:77:ef:f3:00:c1:4f:24:aa: 62:f9:96:94:82:86:58:be:39:4a:cc:ce:fe:f2:e2: e1:93:94:61:4f:d8:bb:0f:c3:99:56:6a:ea:a6:18: 3b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:70:0D:10:1A:16:CD:B0:79:8B:45:C6:A1:2D:3D:9A:A1:A3:E2:EC X509v3 Authority Key Identifier: keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:72:09:c0:80:87:bc:d2:e1:6d:34:77:d2:16:64:8b:09:02: 80:bb:82:41:f3:34:17:ca:4a:db:72:61:07:67:26:47:2d:a1: e9:90:a2:cc:b6:85:d9:cf:db:70:4e:f7:45:44:7e:fd:cf:d0: 13:30:0c:1f:1b:2f:1b:4d:3f:52:e5:76:7d:1d:a0:b9:92:58: b5:82:18:35:c1:f3:a0:4a:71:77:6d:14:c0:89:44:03:28:80: 4f:f6:b6:1f:57:d7:5e:aa:b4:42:b9:18:7d:02:df:31:43:b9: 78:56:58:b4:86:95:9b:c9:c6:d2:68:15:ad:1b:4b:48:7a:cd: d2:93:b9:5f:f7:90:51:40:29:d4:fb:eb:ef:75:14:0b:8b:8c: 99:9d:cf:7b:00:96:43:4e:f0:28:11:36:c3:7b:4f:df:07:03: 4a:f1:ca:a2:23:8c:57:20:eb:05:23:7f:d7:63:2d:18:e3:95: cb:7d:9e:5f:7c:f9:1c:a8:d9:4f:c0:19:33:3f:b6:2e:6d:05: 67:a4:9b:c7:01:19:b7:b2:17:f4:e3:ad:65:dc:2d:cb:bf:08: 02:13:00:04:d4:08:8a:a6:c9:15:5f:01:ed:cd:2e:85:44:6a: e2:ab:96:33:fd:53:70:70:ac:24:e7:b7:10:0b:cf:84:e1:97: aa:48:a0:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjczNjExMC8GA1UEBRMoMzBCRTFFQjlEM0FDNDlEMEFGRUUxMzUzQzNGOUQxMTY3 QTAwN0IxNzAeFw0yNDExMjEwNTU4MTVaFw0yNDExMjgwNTU4MTVaMBgxFjAUBgNV BAMTDTY3M2VjYmY3LTI3YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU12NAO3p/hLlqa4jrzNEEuFGTW9bPq27GkBIEbjIUaZLDvRmmUdviuJ4muvAa zaoKVVAThveeG9jYkOrnBEWsuqR/4wRrKb8kpjPzXH65SJS1YSxCYWk3xqbldxA3 H67i61tVfnKD3ZAB7L0ZUBHmxFu45rCYCJTZ1EJT2hW9bwxJNbkd9eHpjaIaw3VF G0/zqihOq+Rk8/85S/f3UucZHfFiWj7l3AK7d2nBgUvioH9rj7jV1iKNWfeTVacI 0ypCAq/NIhaWkSRktCddMaXEJmYr+Tn3zNt37/MAwU8kqmL5lpSChli+OUrMzv7y 4uGTlGFP2LsPw5lWauqmGDstAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6HANEBoW zbB5i0XGoS09mqGj4uwwHwYDVR0jBBgwFoAUML4eudOsSdCv7hNTw/nRFnoAexcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNzM2L0YxMzNFRjBDODQy RDExRUY5OUU4M0Q4NEM0RjlBRTAyL01MNGV1ZE9zU2RDdjdoTlR3X25SRm5vQWV4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUw0ZXVkT3NTZEN2N2hOVHdfblJGbm9BZXhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NzM2L0YxMzNFRjBDODQyRDExRUY5OUU4M0Q4NEM0RjlBRTAyL01MNGV1ZE9zU2RD djdoTlR3X25SRm5vQWV4Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFZyCcCAh7zS4W00d9IWZIsJAoC7gkHzNBfKSttyYQdnJkctoemQosy2 hdnP23BO90VEfv3P0BMwDB8bLxtNP1Lldn0doLmSWLWCGDXB86BKcXdtFMCJRAMo gE/2th9X116qtEK5GH0C3zFDuXhWWLSGlZvJxtJoFa0bS0h6zdKTuV/3kFFAKdT7 6+91FAuLjJmdz3sAlkNO8CgRNsN7T98HA0rxyqIjjFcg6wUjf9djLRjjlct9nl98 +Ryo2U/AGTM/ti5tBWekm8cBGbeyF/TjrWXcLcu/CAITAATUCIqmyRVfAe3NLoVE auKrljP9U3BwrCTntxALz4Thl6pIoHM= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:18 2024 by rpki-client on console-fra.rpki-client.org