$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft File: cPhdBJUBOFatAizAkilp4Mj8ReI.mft (raw, json) Hash identifier: R/AeCTiVJIcV0nwIRWOas/VD/Fuw5KtfzHbxqdjGOLc= Subject key identifier: A9:52:B7:2F:51:7E:59:26:BB:D7:0C:13:47:56:82:19:56:DD:E8:C7 Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 Certificate issuer: /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Certificate serial: 052A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft Manifest number: 0524 Signing time: Wed 20 Nov 2024 23:06:16 +0000 Manifest this update: Wed 20 Nov 2024 23:06:16 +0000 Manifest next update: Wed 27 Nov 2024 23:06:16 +0000 Files and hashes: 1: cPhdBJUBOFatAizAkilp4Mj8ReI.crl (hash: qBdCe+s5pxr2noGRsGjVX9GCVZFiyU1YD4XZIUzKziQ=) 2: A7F88866489611EFA3CACC09C4F9AE02.roa (hash: K+W6rT3tNiWzS6zxZo8wMVS4noOj7tuApl6Pzt9kSYU=) 3: C454E4B4D94F11EBAB5C652FC4F9AE02.roa (hash: lG1e8twU+pC/94F4+2eaNuYCV+UrLlvL+jYILvf5cpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1322 (0x52a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2 Validity Not Before: Nov 20 23:06:16 2024 GMT Not After : Nov 27 23:06:16 2024 GMT Subject: CN=673e6b68-00f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ef:3d:bb:f9:94:70:14:50:10:5f:cb:6d:04: 38:1c:64:e9:b5:98:53:f8:c6:50:fe:82:f2:87:fd: 85:59:03:05:be:68:05:89:45:0d:85:80:8b:e8:a9: da:19:55:1f:48:84:57:20:af:5d:8e:35:cc:87:da: a6:c4:2e:84:51:27:b6:a1:f8:01:6d:47:6d:06:77: aa:ed:22:cd:9d:bd:10:44:6f:0a:50:93:11:dc:1a: da:70:b1:84:a7:fd:92:5a:f2:16:65:42:5f:ec:d2: 9b:ab:ee:ce:d9:bc:2c:78:79:a6:bc:b5:3a:c3:f6: 4c:ce:6d:36:62:44:02:02:28:52:5c:1b:aa:1f:e9: 54:85:db:40:98:f7:6f:e0:71:3c:e2:53:66:ca:b9: dd:fa:70:e5:67:06:ed:ce:76:e1:57:8d:c8:38:b8: 33:f4:14:92:34:bd:aa:0b:cd:83:ec:2a:a2:e7:f5: be:68:65:0c:a1:03:36:c5:05:90:67:ea:0f:df:e7: ea:a4:69:99:bb:79:c3:20:d4:62:98:c5:46:a4:69: 62:62:5a:b6:41:b9:68:dd:eb:c1:4e:aa:4c:05:e0: 50:3e:fe:86:e7:37:cd:b2:58:11:06:07:72:20:0c: 65:45:b3:6c:97:05:31:5d:8c:38:5f:60:82:0f:8e: 61:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:52:B7:2F:51:7E:59:26:BB:D7:0C:13:47:56:82:19:56:DD:E8:C7 X509v3 Authority Key Identifier: keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:3b:f5:04:cd:63:c4:93:c3:fa:73:67:09:16:7b:82:7f:1f: 11:4d:ef:65:fa:d2:31:fa:91:f4:01:5d:0d:bd:71:11:3a:c4: 1a:c9:af:c7:4a:8f:0d:8b:db:0a:31:62:f6:19:ef:00:3a:f9: dc:9a:88:75:84:33:f1:5c:79:16:c4:c9:dd:04:c0:76:0a:0b: ad:b3:2b:0f:74:ff:8e:a3:ac:97:f9:75:e7:2f:ed:d1:cb:5d: ea:4c:42:87:4d:47:6b:ee:61:02:c8:a5:e2:01:89:27:88:fb: 9f:a6:b1:1d:bf:ec:19:dc:02:c3:cc:81:b5:d5:b5:a3:02:ff: 06:bf:20:80:25:5d:56:13:9e:2b:58:91:2c:d5:b1:d9:9a:bb: 51:45:39:a2:14:50:40:d5:32:dc:f4:43:93:01:ef:9f:83:35: 80:83:87:c1:96:86:e0:3a:b0:d8:eb:10:47:04:de:ae:41:06: fd:2e:c9:6b:5c:45:ae:07:98:5e:a1:81:67:bd:87:19:00:f3: 84:a8:8b:dc:c4:01:b4:d6:14:05:e3:26:8a:a7:5f:f9:03:b2: 8f:89:91:ff:9f:2a:76:87:1a:da:3b:34:48:08:42:9a:22:52: eb:a6:ae:35:b3:54:cc:70:71:6e:fd:a0:16:3d:78:66:fa:3c: f6:7e:9e:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGMkQxMTAvBgNVBAUTKDcwRjg1RDA0OTUwMTM4NTZBRDAyMkNDMDkyMjk2OUUw QzhGQzQ1RTIwHhcNMjQxMTIwMjMwNjE2WhcNMjQxMTI3MjMwNjE2WjAYMRYwFAYD VQQDEw02NzNlNmI2OC0wMGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6O89u/mUcBRQEF/LbQQ4HGTptZhT+MZQ/oLyh/2FWQMFvmgFiUUNhYCL6Kna GVUfSIRXIK9djjXMh9qmxC6EUSe2ofgBbUdtBneq7SLNnb0QRG8KUJMR3BracLGE p/2SWvIWZUJf7NKbq+7O2bwseHmmvLU6w/ZMzm02YkQCAihSXBuqH+lUhdtAmPdv 4HE84lNmyrnd+nDlZwbtznbhV43IOLgz9BSSNL2qC82D7Cqi5/W+aGUMoQM2xQWQ Z+oP3+fqpGmZu3nDINRimMVGpGliYlq2Qblo3evBTqpMBeBQPv6G5zfNslgRBgdy IAxlRbNslwUxXYw4X2CCD45hmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlSty9R flkmu9cME0dWghlW3ejHMB8GA1UdIwQYMBaAFHD4XQSVAThWrQIswJIpaeDI/EXi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEYyRC9DRkJFRDM3MEQ5 NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9GYXRBaXpBa2lscDRNajhS ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NQaGRCSlVCT0ZhdEFpekFraWxwNE1qOFJlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEYyRC9DRkJFRDM3MEQ5NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9G YXRBaXpBa2lscDRNajhSZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABO/UEzWPEk8P6c2cJFnuCfx8RTe9l+tIx+pH0AV0NvXEROsQaya/H So8Ni9sKMWL2Ge8AOvncmoh1hDPxXHkWxMndBMB2CgutsysPdP+Oo6yX+XXnL+3R y13qTEKHTUdr7mECyKXiAYkniPufprEdv+wZ3ALDzIG11bWjAv8GvyCAJV1WE54r WJEs1bHZmrtRRTmiFFBA1TLc9EOTAe+fgzWAg4fBlobgOrDY6xBHBN6uQQb9Lslr XEWuB5heoYFnvYcZAPOEqIvcxAG01hQF4yaKp1/5A7KPiZH/nyp2hxraOzRICEKa IlLrpq41s1TMcHFu/aAWPXhm+jz2fp6u -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:21 2024 by rpki-client on console-fra.rpki-client.org