$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft File: 4659B01pZ-L0n_njuNebv6KAmpI.mft (raw, json) Hash identifier: 92zGkm1p1eCFo0JtsRBLstQMGWnxvVVAXmQA2WeiwuM= Subject key identifier: 8A:A9:ED:6C:36:CF:E0:6A:DF:CD:8F:52:FD:03:81:BF:2E:42:ED:32 Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 Certificate issuer: /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft Manifest number: 1C Signing time: Wed 23 Oct 2024 06:34:31 +0000 Manifest this update: Wed 23 Oct 2024 06:34:31 +0000 Manifest next update: Wed 30 Oct 2024 06:34:31 +0000 Files and hashes: 1: 4659B01pZ-L0n_njuNebv6KAmpI.crl (hash: wCcL7rFQ/N3TEIji7mwbOVDBWo6oB79v52qJrOa8n/Q=) 2: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (hash: 13S0uPk78cTkONRaoiB2NygyvHW1IriAd1JcSvRHXys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Validity Not Before: Oct 23 06:34:31 2024 GMT Not After : Oct 30 06:34:31 2024 GMT Subject: CN=671898f7-87c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:83:99:69:b0:a5:d4:59:34:0e:25:b1:74: 7c:b9:5f:fe:0f:76:93:d2:96:f7:15:81:45:b7:62: dd:a6:73:7c:04:33:ec:4b:82:41:51:0f:3d:ef:1f: e8:b4:db:b9:74:7e:0f:e3:a7:53:a9:be:14:f4:f2: 09:0e:75:8c:46:3e:af:12:c0:6d:4e:53:fc:ee:66: c8:f3:d5:ad:56:28:b8:1c:23:00:e7:3b:97:aa:e5: c7:48:13:c8:e5:2b:fa:62:3d:bd:01:ca:ad:e9:87: bf:91:47:9c:7b:b6:a3:45:dc:81:56:d8:83:90:ad: 50:10:27:66:f1:db:88:12:c8:0d:ab:f8:12:a5:eb: 86:7a:6a:71:96:ee:79:1f:78:be:13:38:cf:93:62: 0b:c8:cd:44:fd:f1:b9:4d:4e:e2:2c:a2:54:7b:dc: af:f9:f3:03:f3:22:c3:f3:f5:d3:05:98:b6:a8:a3: d3:de:c8:28:27:af:1b:b1:37:1e:d5:a5:d2:38:57: 3c:05:6a:fe:45:03:36:94:58:88:90:68:22:08:73: 80:cf:a1:22:65:59:de:59:89:77:c7:ae:07:19:85: ea:e6:cb:18:50:35:6f:ed:eb:e8:08:9c:91:40:00: 3a:3d:a6:a9:d8:e9:eb:b3:6e:bb:cc:4f:b8:24:c8: 2c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A9:ED:6C:36:CF:E0:6A:DF:CD:8F:52:FD:03:81:BF:2E:42:ED:32 X509v3 Authority Key Identifier: keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ca:c7:2c:0b:be:6b:03:e3:05:61:4b:49:59:2d:ca:48:01: db:a7:6d:9a:a3:54:62:12:df:75:2a:3d:ef:71:1c:d9:7e:b2: 2d:75:67:fb:20:99:d2:22:ec:05:35:45:75:c0:f4:5e:9a:aa: 2f:44:9e:3c:59:df:d7:82:37:ca:f7:17:b0:52:0a:f0:f5:35: d2:c0:c5:99:25:58:03:cc:85:ad:49:a7:d9:97:7a:a0:65:6a: 8a:54:0b:6a:1b:60:8a:1f:d2:a5:d6:fe:f5:25:62:1d:b1:98: b1:9e:4e:78:9b:20:e7:ad:d9:10:1e:82:6c:fc:02:8c:ce:e6: 95:32:97:2f:a2:5e:6f:2f:02:ba:61:2f:86:f2:7e:ee:95:fe: da:34:ff:d4:18:9a:d1:24:a4:a5:ae:c8:ba:33:28:c8:a3:bc: 4e:84:df:9a:42:aa:45:2c:50:13:25:61:8e:38:7e:c7:bc:72: e3:03:a9:75:e4:ef:d6:09:52:ed:58:d7:71:bc:96:d4:80:42: 85:7c:6b:38:e3:08:b6:77:8c:da:8b:2e:ab:d6:d4:7e:8c:0c: 55:a5:b6:36:a9:92:7e:66:96:91:43:10:b1:62:6e:62:5c:74: 53:d8:80:83:65:09:4c:f0:03:6d:3b:37:8d:76:85:ea:0d:ac: cc:b2:61:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTY5NTExMC8GA1UEBRMoRTNBRTdEMDc0RDY5NjdFMkY0OUZGOUUzQjhENzlCQkZB MjgwOUE5MjAeFw0yNDEwMjMwNjM0MzFaFw0yNDEwMzAwNjM0MzFaMBgxFjAUBgNV BAMTDTY3MTg5OGY3LTg3YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI3oOZabCl1Fk0DiWxdHy5X/4PdpPSlvcVgUW3Yt2mc3wEM+xLgkFRDz3vH+i0 27l0fg/jp1OpvhT08gkOdYxGPq8SwG1OU/zuZsjz1a1WKLgcIwDnO5eq5cdIE8jl K/piPb0Byq3ph7+RR5x7tqNF3IFW2IOQrVAQJ2bx24gSyA2r+BKl64Z6anGW7nkf eL4TOM+TYgvIzUT98blNTuIsolR73K/58wPzIsPz9dMFmLaoo9PeyCgnrxuxNx7V pdI4VzwFav5FAzaUWIiQaCIIc4DPoSJlWd5ZiXfHrgcZhermyxhQNW/t6+gInJFA ADo9pqnY6euzbrvMT7gkyCyvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiqntbDbP 4GrfzY9S/QOBvy5C7TIwHwYDVR0jBBgwFoAU4659B01pZ+L0n/njuNebv6KAmpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNjk1LzhERUZFODBFNjkx RDExRUZCOEZEMUU2NEM0RjlBRTAyLzQ2NTlCMDFwWi1MMG5fbmp1TmVidjZLQW1w SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNDY1OUIwMXBaLUwwbl9uanVOZWJ2NktBbXBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB Njk1LzhERUZFODBFNjkxRDExRUZCOEZEMUU2NEM0RjlBRTAyLzQ2NTlCMDFwWi1M MG5fbmp1TmVidjZLQW1wSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF/KxywLvmsD4wVhS0lZLcpIAdunbZqjVGIS33UqPe9xHNl+si11Z/sg mdIi7AU1RXXA9F6aqi9EnjxZ39eCN8r3F7BSCvD1NdLAxZklWAPMha1Jp9mXeqBl aopUC2obYIof0qXW/vUlYh2xmLGeTnibIOet2RAegmz8AozO5pUyly+iXm8vArph L4byfu6V/to0/9QYmtEkpKWuyLozKMijvE6E35pCqkUsUBMlYY44fse8cuMDqXXk 79YJUu1Y13G8ltSAQoV8azjjCLZ3jNqLLqvW1H6MDFWltjapkn5mlpFDELFibmJc dFPYgINlCUzwA207N412heoNrMyyYRA= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:22 2024 by rpki-client on console-fra.rpki-client.org