$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json) Hash identifier: senQOZ2DW2HxXG6WIbpL2U+nffvs6iPuv9KH4U3CIlI= Subject key identifier: AA:9E:9D:64:94:82:AD:64:89:00:59:55:80:40:C5:7E:7F:92:C1:92 Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Certificate serial: 0ADE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft Manifest number: 0AC9 Signing time: Fri 22 Nov 2024 19:11:25 +0000 Manifest this update: Fri 22 Nov 2024 19:11:24 +0000 Manifest next update: Fri 29 Nov 2024 19:11:24 +0000 Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: H+5W/6COdQF7JTZUjfV8eB4vLiuJLNM6F/vvnLFPflc=) 2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: da18YanehMb25ZME1c4CpzCwhlEVLs96RlfGiZoiMxU=) 3: E324E2F6F40611EAA5B2244FC4F9AE02.roa (hash: feQeohVrk3aa2EM/daTKcvI0d6w6k0q2b/efqxvduBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2782 (0xade) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Validity Not Before: Nov 22 19:11:24 2024 GMT Not After : Nov 29 19:11:24 2024 GMT Subject: CN=6740d75c-0cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:63:1c:a7:f1:f8:56:ff:f4:81:7c:df:85: 83:b1:20:86:3e:5d:08:ba:66:f4:01:5e:9f:1e:92: 75:49:48:a3:95:f7:3e:10:54:64:0a:e7:6f:b9:de: 28:5b:5a:0f:ec:a3:31:49:c0:bd:19:d9:ca:90:fe: 8c:0e:27:47:37:23:17:03:3e:fa:d8:6f:25:82:ae: 1e:46:10:5b:26:7e:1c:82:80:a0:51:17:0a:21:36: f6:07:ce:44:89:20:21:f8:12:3f:ff:5e:85:4a:ea: 54:26:d8:16:e0:46:07:ac:4a:c3:aa:00:c3:56:87: 79:8c:97:12:d6:b3:35:db:bc:79:9e:fe:d6:e1:89: 3b:f7:3e:76:79:c5:34:d4:e4:03:1a:5e:41:4b:9a: b4:32:86:10:ce:5a:4d:25:f2:22:0b:01:6a:71:ec: 4b:b6:74:17:c3:cd:94:a6:0f:83:a4:b7:eb:33:0f: 23:04:dc:7f:7e:82:2c:0b:67:bb:8b:49:3f:2f:e9: 43:f4:4f:c6:54:b5:69:a1:ce:7a:4b:7c:35:5a:a5: 5c:02:a6:de:4d:6d:08:54:d0:2a:36:1d:1b:18:37: 51:a9:44:cd:2d:02:5a:a9:34:5b:45:ac:c9:5b:fd: 7b:27:a9:8a:b4:9f:b6:83:a8:fa:ea:6f:61:ce:44: 08:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9E:9D:64:94:82:AD:64:89:00:59:55:80:40:C5:7E:7F:92:C1:92 X509v3 Authority Key Identifier: keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f0:32:a9:4c:af:fc:bd:0d:b8:6d:88:80:54:1a:f7:ef:8a:7d: 2c:ad:95:42:af:1c:ef:be:b2:68:a1:a5:b5:68:45:2e:e7:bb: 55:1e:78:0b:d4:df:e5:2f:b3:4a:d8:c5:fa:58:34:21:20:0f: c1:04:c7:5b:55:5c:aa:52:58:54:de:68:99:fd:ce:a7:96:4a: 82:2b:e4:6e:e4:f2:01:22:15:4d:93:2c:44:0d:7e:7c:80:2c: 6a:3f:4f:c7:a6:6f:ed:56:91:09:ea:ce:c2:bd:9a:f9:98:c3: 76:d3:ae:9b:52:b5:d2:9b:6b:18:a8:95:54:19:b1:2b:cb:13: 31:2f:ca:9d:4a:e0:ab:89:18:67:a4:01:db:98:44:6f:07:54: 63:34:1c:0e:d3:5e:da:5b:7e:09:b4:c0:94:59:30:f1:26:7b: 3a:64:ee:72:da:4c:65:dd:8d:37:a0:b5:e4:ac:c7:b9:16:e8: 57:c5:16:1a:89:37:10:d7:dd:a8:50:8a:b2:16:7a:67:44:db: 57:7c:15:c2:6b:34:52:8d:a5:ec:84:10:41:60:d3:d6:5a:1a: 2f:0c:50:49:79:27:16:d8:5b:59:82:a0:b3:95:bd:f1:fa:33: d6:b0:3e:66:61:fa:6d:78:e8:6b:cf:44:a5:c8:95:31:ed:34: 24:fc:a1:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM4OEQxMTAvBgNVBAUTKDMyNjQ0MzY0NzlBNTBFRDQwQ0NGRDJCNzA0RTYwMjQ5 NjA4RTQzQTgwHhcNMjQxMTIyMTkxMTI0WhcNMjQxMTI5MTkxMTI0WjAYMRYwFAYD VQQDEw02NzQwZDc1Yy0wY2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzi5jHKfx+Fb/9IF834WDsSCGPl0Iumb0AV6fHpJ1SUijlfc+EFRkCudvud4o W1oP7KMxScC9GdnKkP6MDidHNyMXAz762G8lgq4eRhBbJn4cgoCgURcKITb2B85E iSAh+BI//16FSupUJtgW4EYHrErDqgDDVod5jJcS1rM127x5nv7W4Yk79z52ecU0 1OQDGl5BS5q0MoYQzlpNJfIiCwFqcexLtnQXw82Upg+DpLfrMw8jBNx/foIsC2e7 i0k/L+lD9E/GVLVpoc56S3w1WqVcAqbeTW0IVNAqNh0bGDdRqUTNLQJaqTRbRazJ W/17J6mKtJ+2g6j66m9hzkQI3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqenWSU gq1kiQBZVYBAxX5/ksGSMB8GA1UdIwQYMBaAFDJkQ2R5pQ7UDM/StwTmAklgjkOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzg4RC8zOEFCNTkxRTNE QzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0UU16OUszQk9ZQ1NXQ09R NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tUkRaSG1sRHRRTXo5SzNCT1lDU1dDT1E2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzg4RC8zOEFCNTkxRTNEQzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0 UU16OUszQk9ZQ1NXQ09RNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDwMqlMr/y9DbhtiIBUGvfvin0srZVCrxzvvrJooaW1aEUu57tVHngL 1N/lL7NK2MX6WDQhIA/BBMdbVVyqUlhU3miZ/c6nlkqCK+Ru5PIBIhVNkyxEDX58 gCxqP0/Hpm/tVpEJ6s7CvZr5mMN2066bUrXSm2sYqJVUGbEryxMxL8qdSuCriRhn pAHbmERvB1RjNBwO017aW34JtMCUWTDxJns6ZO5y2kxl3Y03oLXkrMe5FuhXxRYa iTcQ192oUIqyFnpnRNtXfBXCazRSjaXshBBBYNPWWhovDFBJeScW2FtZgqCzlb3x +jPWsD5mYfpteOhrz0SlyJUx7TQk/KEE -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org