$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: OBGnKwczbPm7fwQT1yWexYVQhUXdSdORTbrz1NTX3yk= Subject key identifier: FC:78:FF:7F:33:01:97:95:74:85:04:D2:EE:1D:1E:B1:B5:3E:34:DB Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 0224 Signing time: Thu 21 Nov 2024 01:36:06 +0000 Manifest this update: Thu 21 Nov 2024 01:36:05 +0000 Manifest next update: Thu 28 Nov 2024 01:36:05 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: PdPsFD0vtm/1BK72aXZfSbbDuk+t4k6oJ8XvMtixZJg=) 2: 3632957E441311EE8A03A472C4F9AE02.roa (hash: hc0GUtEKKEGW9gMZlTO39H3fWKoJ6wdGBAjVqIVrLxQ=) 3: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: voNhvFt+rl48+RXxjQWaNEIjDq7tMEczadZRVwJF374=) 4: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: J3Ksm9WsEr0TXjLLhaQloclJKmSPXVrqrAzTlf/eKtU=) 5: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: SMaX3aa/UFh43gcKCcEgmT4cm/dWEuQesSH3aBzRpfE=) 6: 3D34A750A88111ED80831318C4F9AE02.roa (hash: a76JQF1qiEmLZKSWyiAc52KnTZOIYMAyGXRjtxdQkfY=) 7: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: I/sFHc7XYiJ8eT0AIMA2+7XdYKHUvmlkXtbK7T+Me2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Nov 21 01:36:05 2024 GMT Not After : Nov 28 01:36:05 2024 GMT Subject: CN=673e8e85-c02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:fa:19:7e:c3:3d:48:09:82:b3:e3:43:1f: c1:8d:31:29:61:e8:e3:53:97:6a:74:78:c8:1c:f9: 72:49:90:25:fe:66:d0:34:6c:e6:df:b7:33:1a:20: 19:9f:1b:af:f3:d2:38:76:9c:8f:a8:e1:8c:67:73: 13:b5:62:ac:d6:c1:81:61:54:03:53:18:bf:b1:e0: 6f:3e:cb:06:ad:b2:ff:83:b7:8a:d3:66:43:16:ee: 71:89:85:ff:ba:0c:87:62:24:cb:59:0e:7f:69:77: bf:b0:55:14:66:89:40:b1:01:67:cc:26:c8:73:aa: 55:b6:c6:7b:2c:11:7d:f7:d5:48:68:55:76:89:12: f4:b0:9d:96:85:45:ac:cb:7c:77:51:0f:db:51:a0: 56:a7:5b:db:92:f6:96:66:29:2d:75:2d:94:c4:8d: f6:f2:89:78:91:50:42:19:80:57:91:e0:6f:82:f5: 2d:ba:02:67:01:01:c4:00:bd:cc:23:d3:3b:30:62: 85:0a:a0:fe:e4:67:82:3f:6a:0c:5f:4b:1f:f8:0c: 47:df:ef:c4:e9:a8:5c:5a:a0:12:ef:c0:58:ee:49: 7f:af:10:72:58:70:13:37:4b:99:55:86:35:36:11: 4a:14:25:d4:a5:65:b8:80:0d:5f:35:0d:b6:96:f8: 61:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:78:FF:7F:33:01:97:95:74:85:04:D2:EE:1D:1E:B1:B5:3E:34:DB X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:89:8d:b8:c6:ca:53:75:e9:1d:94:27:ba:7d:29:73:52:44: 11:1e:62:77:83:e3:3a:c7:3a:60:ab:0a:ae:b6:14:06:b0:cf: 32:dd:46:36:bb:f4:9f:a8:84:18:bb:90:de:85:25:98:e0:d7: a6:7e:b3:8d:56:15:8f:0c:b5:9e:48:d0:4d:5d:85:5b:c8:27: 95:f9:6e:8c:9d:f6:0e:1b:d9:04:05:8c:60:63:9d:72:94:b3: 67:d3:d8:cc:cf:91:e6:d1:5c:01:9d:08:db:75:b7:16:2a:e0: e4:1c:97:8e:00:4f:b7:f7:8b:68:19:a4:5f:2a:d6:a5:7e:73: d3:52:34:e2:94:80:65:dd:f3:cc:15:71:94:13:1e:40:b1:13: 1e:99:fe:d2:59:f5:5f:9b:98:03:db:18:30:07:10:43:09:de: f1:fd:a7:71:a9:50:ae:2e:6d:84:3e:7b:6c:99:5f:db:f5:7d: 4d:79:b8:49:bf:4f:97:d6:ea:c4:e2:fe:6d:0f:0f:c7:a8:1d: 6f:26:72:fb:20:d2:cd:23:9f:f6:fb:1a:2d:5c:82:aa:e3:6e: 1a:b6:bc:78:cb:51:14:86:bf:d5:1b:82:11:6a:8a:cf:a6:48: df:55:7d:1c:c6:a3:e1:32:60:1f:4e:ef:e0:ab:74:92:66:8a: 73:c4:bb:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjQxMTIxMDEzNjA1WhcNMjQxMTI4MDEzNjA1WjAYMRYwFAYD VQQDEw02NzNlOGU4NS1jMDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOj6GX7DPUgJgrPjQx/BjTEpYejjU5dqdHjIHPlySZAl/mbQNGzm37czGiAZ nxuv89I4dpyPqOGMZ3MTtWKs1sGBYVQDUxi/seBvPssGrbL/g7eK02ZDFu5xiYX/ ugyHYiTLWQ5/aXe/sFUUZolAsQFnzCbIc6pVtsZ7LBF999VIaFV2iRL0sJ2WhUWs y3x3UQ/bUaBWp1vbkvaWZiktdS2UxI328ol4kVBCGYBXkeBvgvUtugJnAQHEAL3M I9M7MGKFCqD+5GeCP2oMX0sf+AxH3+/E6ahcWqAS78BY7kl/rxByWHATN0uZVYY1 NhFKFCXUpWW4gA1fNQ22lvhh3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPx4/38z AZeVdIUE0u4dHrG1PjTbMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAiY24xspTdekdlCe6fSlzUkQRHmJ3g+M6xzpgqwquthQGsM8y3UY2 u/SfqIQYu5DehSWY4NemfrONVhWPDLWeSNBNXYVbyCeV+W6MnfYOG9kEBYxgY51y lLNn09jMz5Hm0VwBnQjbdbcWKuDkHJeOAE+394toGaRfKtalfnPTUjTilIBl3fPM FXGUEx5AsRMemf7SWfVfm5gD2xgwBxBDCd7x/adxqVCuLm2EPntsmV/b9X1NebhJ v0+X1urE4v5tDw/HqB1vJnL7INLNI5/2+xotXIKq424atrx4y1EUhr/VG4IRaorP pkjfVX0cxqPhMmAfTu/gq3SSZopzxLtE -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:59 2024 by rpki-client on console-fra.rpki-client.org