$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft File: 61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json) Hash identifier: Zi9koAqqfvFsHAi9eaeDDVq1kQNM9YcYrjWGEqiK+gY= Subject key identifier: 0F:E3:FF:F1:EB:34:29:7A:91:1B:0C:B6:27:AB:D8:10:D7:2F:BE:36 Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 Certificate issuer: /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft Manifest number: 0577 Signing time: Fri 22 Nov 2024 22:52:07 +0000 Manifest this update: Fri 22 Nov 2024 22:52:07 +0000 Manifest next update: Fri 29 Nov 2024 22:52:07 +0000 Files and hashes: 1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: Am7cWsA+9CC1flON8iyjnUx97ECClW9QYGLAhK9rkYU=) 2: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: Sk3MXf9hmKLKaZp7ZXhyP99sQACjplOfFz1EgPLs6Ek=) 3: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: BQWLLp5AImfbBq763vvDpgX+6Q3xmVvjxSK4ih5JSF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Validity Not Before: Nov 22 22:52:07 2024 GMT Not After : Nov 29 22:52:07 2024 GMT Subject: CN=67410b17-43c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:68:0a:26:27:bf:cc:0b:6f:37:9d:5b:e2:9e: 20:79:e1:61:9b:c5:dd:d2:a5:75:14:c8:c7:2e:f6: 48:e1:8b:44:77:02:17:c1:f9:d0:7c:44:2a:d6:38: 4f:d4:ca:1e:d5:9b:3c:1e:d8:d9:5f:56:40:ef:58: 5b:6d:c8:d6:a9:fa:91:1c:5b:0a:43:e9:17:ba:97: b8:0b:ac:8b:a9:ea:f0:6e:61:90:20:25:bd:bd:b8: 90:1b:8e:d8:aa:d8:e1:9f:8e:5f:12:c1:1e:90:5d: 0a:71:9c:cc:87:08:ab:8f:45:55:8e:57:39:36:ac: 32:62:4e:8a:1c:54:8e:ea:61:ec:54:f8:7b:f2:86: 73:95:ba:c2:a6:90:7f:84:68:89:4e:f7:41:a9:b9: c9:25:85:ae:79:05:d2:6d:3b:77:fb:87:4a:a2:9b: d8:24:92:3d:65:8b:87:cb:02:55:20:9a:28:1e:3f: bd:49:07:80:55:b9:a3:51:fd:82:5f:34:a7:fa:9b: 4a:a7:87:86:34:3a:05:48:41:ac:8e:ea:16:7b:68: c4:a3:98:3f:56:dd:61:cf:36:fa:23:93:d4:50:88: 8d:ef:b6:7e:94:a0:75:cf:c9:c0:17:f4:b7:49:dd: 51:78:f5:c0:87:25:11:48:27:e7:d2:88:d4:3b:00: a4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E3:FF:F1:EB:34:29:7A:91:1B:0C:B6:27:AB:D8:10:D7:2F:BE:36 X509v3 Authority Key Identifier: keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b9:ad:d7:2c:94:4c:19:4b:30:e4:bf:70:74:37:5e:f6:b0: 4d:a0:07:5c:b1:47:51:3a:dc:f5:57:29:de:28:6f:1f:61:98: cf:fe:54:af:12:ab:6e:84:92:bc:56:bd:6f:de:63:45:cc:01: 02:26:07:29:f8:0d:4b:8f:ca:f3:53:43:b7:8d:16:2b:3f:d6: a0:a2:21:01:92:47:88:a7:4e:94:8c:af:ce:49:a2:6e:47:d0: 21:5a:fc:48:7f:4e:8c:68:1d:71:a6:4d:a8:48:4a:a8:b7:04: af:ee:1c:3c:43:e4:f5:8d:38:73:bc:e5:de:3f:76:9c:5d:35: 8b:8d:5c:ad:e9:ca:b4:e1:f1:6b:77:b1:67:0e:f0:48:b5:cb: 4a:31:34:1d:28:f8:da:5b:d7:50:b8:77:66:bb:74:9b:f8:d1: 73:d4:fd:34:05:04:1c:a8:68:e4:72:a0:b8:5e:de:d0:38:79: 3f:ad:61:98:90:4e:f5:0f:8e:ab:a5:3e:89:46:57:f9:d6:ee: 0c:cd:93:f7:b9:1e:3e:46:cc:06:59:24:75:2c:1d:67:45:84: 1a:ae:bf:af:6f:a3:02:b1:56:88:10:03:10:ee:08:4d:00:5d: 26:ae:d3:1b:84:e5:3d:fd:da:dc:9d:f1:0d:99:4f:d1:cf:b9: 3e:21:20:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENERUMxMTAvBgNVBAUTKEVCNTY5OTQzNTJFQjAxRTQwRTYwQzc4QTQzQjk1N0FF MjkwRUY3NDUwHhcNMjQxMTIyMjI1MjA3WhcNMjQxMTI5MjI1MjA3WjAYMRYwFAYD VQQDEw02NzQxMGIxNy00M2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GgKJie/zAtvN51b4p4geeFhm8Xd0qV1FMjHLvZI4YtEdwIXwfnQfEQq1jhP 1Moe1Zs8HtjZX1ZA71hbbcjWqfqRHFsKQ+kXupe4C6yLqerwbmGQICW9vbiQG47Y qtjhn45fEsEekF0KcZzMhwirj0VVjlc5NqwyYk6KHFSO6mHsVPh78oZzlbrCppB/ hGiJTvdBqbnJJYWueQXSbTt3+4dKopvYJJI9ZYuHywJVIJooHj+9SQeAVbmjUf2C XzSn+ptKp4eGNDoFSEGsjuoWe2jEo5g/Vt1hzzb6I5PUUIiN77Z+lKB1z8nAF/S3 Sd1RePXAhyURSCfn0ojUOwCkkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/j//Hr NCl6kRsMtier2BDXL742MB8GA1UdIwQYMBaAFOtWmUNS6wHkDmDHikO5V64pDvdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0RFQy83RjlEOTg0MkJB QjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFlUU9ZTWVLUTdsWHJpa085 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxYVpRMUxyQWVRT1lNZUtRN2xYcmlrTzkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0RFQy83RjlEOTg0MkJBQjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFl UU9ZTWVLUTdsWHJpa085MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsua3XLJRMGUsw5L9wdDde9rBNoAdcsUdROtz1VyneKG8fYZjP/lSv EqtuhJK8Vr1v3mNFzAECJgcp+A1Lj8rzU0O3jRYrP9agoiEBkkeIp06UjK/OSaJu R9AhWvxIf06MaB1xpk2oSEqotwSv7hw8Q+T1jThzvOXeP3acXTWLjVyt6cq04fFr d7FnDvBItctKMTQdKPjaW9dQuHdmu3Sb+NFz1P00BQQcqGjkcqC4Xt7QOHk/rWGY kE71D46rpT6JRlf51u4MzZP3uR4+RswGWSR1LB1nRYQarr+vb6MCsVaIEAMQ7ghN AF0mrtMbhOU9/drcnfENmU/Rz7k+ISCa -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:30 2024 by rpki-client on console-fra.rpki-client.org