$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft File: 5wLFqnTYyWzI7vVhjk_-79UdN_k.mft (raw, json) Hash identifier: Vz3llu3eb54KI1Ip2s620XscqFl2cnPy2hNobaxl8HM= Subject key identifier: E2:60:29:A0:9D:9D:AE:43:B5:B9:58:80:F3:A1:22:DF:9E:CB:FD:44 Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 Certificate issuer: /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Certificate serial: 060A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft Manifest number: 0605 Signing time: Fri 22 Nov 2024 22:15:36 +0000 Manifest this update: Fri 22 Nov 2024 22:15:36 +0000 Manifest next update: Fri 29 Nov 2024 22:15:36 +0000 Files and hashes: 1: 5wLFqnTYyWzI7vVhjk_-79UdN_k.crl (hash: 49thufuD3Un5trxZpd6OxCftf0DfY3lUD7HPR8mrAXg=) 2: 98C0AE7E808411EBA15C9251C4F9AE02.roa (hash: 4dUVKwERkH/QTGoIXRLz0nS6ysGT9dt9/C/hSIpCKRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1546 (0x60a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9 Validity Not Before: Nov 22 22:15:36 2024 GMT Not After : Nov 29 22:15:36 2024 GMT Subject: CN=67410288-2c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:fe:64:ef:bf:08:e3:ff:6d:ae:c7:35:fa: 6a:08:35:a4:a6:66:fa:3b:38:e3:cf:f9:cc:81:8b: 1a:66:3c:cd:87:d1:46:11:fb:dc:f5:4e:d9:f0:e2: a5:4c:a4:59:02:a3:66:8e:bf:c6:22:2e:df:fd:bc: 34:36:3b:e8:82:f1:45:27:04:eb:7e:2e:f7:58:21: 20:d9:be:92:d7:22:df:11:3f:5a:2e:1b:fb:7a:77: 37:8c:4e:46:76:df:b2:9a:78:f0:53:69:86:64:26: bc:0d:72:ac:08:b1:cb:6a:50:45:0a:0e:64:83:d4: 44:11:d0:bf:5c:82:19:9d:29:60:f3:5b:44:9c:b3: 05:95:50:ed:6e:50:a9:04:48:9d:0d:c2:34:e3:33: 89:50:94:1b:a1:1b:2b:a4:9f:a5:ac:48:0a:fd:0a: 86:fa:5c:4a:78:ba:5e:f7:5a:3a:0e:8a:60:5e:b7: 8a:6b:8c:dc:bf:62:a9:2a:60:2f:26:ff:f8:cf:7c: 97:27:07:fb:29:8f:e3:2e:8b:0a:92:02:56:c8:6d: ac:bc:f0:80:64:b8:b8:b3:e5:95:bf:61:a9:26:3f: 84:5c:1a:ff:15:d5:e4:f0:00:82:84:53:68:f0:6c: af:d8:e9:82:2a:48:b3:5c:42:a0:25:20:9a:e1:26: 3b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:60:29:A0:9D:9D:AE:43:B5:B9:58:80:F3:A1:22:DF:9E:CB:FD:44 X509v3 Authority Key Identifier: keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:54:ff:2d:f2:5e:00:b4:bb:cf:0e:98:96:09:c6:30:c8:dc: 28:4a:30:35:62:e9:e9:f4:8c:75:1a:ea:ba:01:cc:3d:07:c7: 99:3d:f2:14:13:34:05:2b:78:11:93:8a:7b:86:ea:f3:ba:cd: 50:f0:fb:d0:dd:7b:5e:c6:ed:5f:3c:99:29:f7:33:94:ec:08: df:d2:72:3a:61:6a:2c:9c:53:45:63:f2:55:f1:86:b9:06:86: 6e:62:6b:0a:93:80:dc:77:c3:98:f1:fa:46:03:f9:b8:60:b2: 39:50:c8:9b:cf:4a:51:b0:32:04:23:c0:d0:0b:0d:f9:d5:d9: 92:34:a5:c2:51:0f:fe:f2:1b:f1:91:04:8a:4a:a3:8d:31:18: ce:af:80:4a:71:ef:7f:99:be:ad:7b:95:db:d9:d5:57:b1:b0: c2:e8:97:0f:df:5b:18:9b:c3:a1:3b:17:c9:be:7c:d1:f6:29: 2c:35:d5:b5:ec:5c:1d:bf:d4:05:0d:82:d7:f7:17:f7:00:3f: 32:51:22:bc:16:9a:48:14:bf:53:c5:54:79:42:66:12:8b:ef: ac:dc:d7:5e:7d:86:e6:c2:57:c6:4f:98:68:6e:45:36:30:55: 35:ad:78:45:57:78:c2:ca:92:eb:f8:b1:a8:5d:a6:a6:5d:13: c2:28:2d:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMEUxMTAvBgNVBAUTKEU3MDJDNUFBNzREOEM5NkNDOEVFRjU2MThFNEZGRUVG RDUxRDM3RjkwHhcNMjQxMTIyMjIxNTM2WhcNMjQxMTI5MjIxNTM2WjAYMRYwFAYD VQQDEw02NzQxMDI4OC0yYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzp7+ZO+/COP/ba7HNfpqCDWkpmb6Ozjjz/nMgYsaZjzNh9FGEfvc9U7Z8OKl TKRZAqNmjr/GIi7f/bw0NjvogvFFJwTrfi73WCEg2b6S1yLfET9aLhv7enc3jE5G dt+ymnjwU2mGZCa8DXKsCLHLalBFCg5kg9REEdC/XIIZnSlg81tEnLMFlVDtblCp BEidDcI04zOJUJQboRsrpJ+lrEgK/QqG+lxKeLpe91o6DopgXreKa4zcv2KpKmAv Jv/4z3yXJwf7KY/jLosKkgJWyG2svPCAZLi4s+WVv2GpJj+EXBr/FdXk8ACChFNo 8Gyv2OmCKkizXEKgJSCa4SY7IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJgKaCd na5DtblYgPOhIt+ey/1EMB8GA1UdIwQYMBaAFOcCxap02MlsyO71YY5P/u/VHTf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0EwRS84QTExNjRDQTgw NzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlXekk3dlZoamtfLTc5VWRO X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3TEZxblRZeVd6STd2Vmhqa18tNzlVZE5fay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0EwRS84QTExNjRDQTgwNzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlX ekk3dlZoamtfLTc5VWROX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5VP8t8l4AtLvPDpiWCcYwyNwoSjA1Yunp9Ix1Guq6Acw9B8eZPfIU EzQFK3gRk4p7hurzus1Q8PvQ3Xtexu1fPJkp9zOU7Ajf0nI6YWosnFNFY/JV8Ya5 BoZuYmsKk4Dcd8OY8fpGA/m4YLI5UMibz0pRsDIEI8DQCw351dmSNKXCUQ/+8hvx kQSKSqONMRjOr4BKce9/mb6te5Xb2dVXsbDC6JcP31sYm8OhOxfJvnzR9iksNdW1 7Fwdv9QFDYLX9xf3AD8yUSK8FppIFL9TxVR5QmYSi++s3NdefYbmwlfGT5hobkU2 MFU1rXhFV3jCypLr+LGoXaamXRPCKC0q -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:30 2024 by rpki-client on console-fra.rpki-client.org