$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json) Hash identifier: BOvHDUNj3KrNn916aXpuxL11W3BlRVKh3KXY6nOLd+0= Subject key identifier: 2E:CE:31:B0:2D:1D:3D:04:35:AF:E7:5D:C2:72:4B:9E:CE:F4:38:A2 Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft Manifest number: 7C Signing time: Mon 25 Nov 2024 04:40:32 +0000 Manifest this update: Mon 25 Nov 2024 04:40:31 +0000 Manifest next update: Mon 02 Dec 2024 04:40:31 +0000 Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: ArwBvN76ZHH+Mvk7UD8pGLxLdt0DqTK3mmAWt5CcDfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Validity Not Before: Nov 25 04:40:31 2024 GMT Not After : Dec 2 04:40:31 2024 GMT Subject: CN=6743ffc0-f7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:14:5b:2f:12:a9:51:83:81:92:0d:08:2c: 22:b4:2f:b1:74:d1:63:71:c6:ca:39:17:dc:2a:3d: 22:63:84:da:22:b2:77:d9:34:ba:71:c0:6d:0f:51: d9:95:38:b6:90:9b:94:3d:99:6e:4b:16:62:2d:73: 66:ec:38:37:3f:b8:b7:95:60:5c:4b:e0:d9:5e:5d: 46:b9:3b:8b:b2:42:12:81:3d:16:dc:37:7d:89:7c: a0:5e:27:03:ec:54:39:e8:a7:4f:78:67:99:15:b5: 88:98:8a:b0:cc:a2:00:01:90:56:34:73:f2:2b:11: 47:ce:28:74:64:f9:9e:60:c2:09:6d:5b:64:19:d2: a6:b6:6b:0b:6a:7c:fd:89:d4:91:dd:8a:05:44:45: 0f:eb:33:e9:94:18:96:e5:43:c2:29:15:81:f2:70: a1:bf:c4:fe:5c:0f:67:03:f0:e4:a4:e8:27:fd:8b: ec:6f:6b:61:0d:9f:ac:d6:22:c8:0d:cc:67:a2:66: 45:bd:87:b0:bf:62:da:42:9f:c0:e9:93:e3:68:34: 05:4a:75:cc:06:26:1c:e1:e5:1a:bc:90:5d:f3:18: 1a:1d:ce:f7:e9:e6:88:de:fb:88:56:92:72:e5:32: 69:7c:fc:3d:f1:31:13:70:d6:6b:18:65:87:df:fa: e3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CE:31:B0:2D:1D:3D:04:35:AF:E7:5D:C2:72:4B:9E:CE:F4:38:A2 X509v3 Authority Key Identifier: keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:31:4c:2b:a7:9b:66:4b:78:42:e5:3d:02:44:f6:aa:2f:ea: 7b:ff:f3:13:40:cb:bd:8b:da:98:11:7a:a8:09:2b:56:77:c5: 96:1a:54:49:80:42:a2:e0:a1:e5:57:7a:cc:de:bf:49:5f:b6: f5:2b:c7:9e:d7:c6:21:cc:63:f5:f6:0c:ef:a4:34:e1:87:a0: 5e:f9:4c:4c:d7:78:d4:c8:c8:9b:45:76:86:6a:64:22:e6:95: 6f:a2:79:b1:26:6f:4a:4a:0b:de:d0:4c:f0:ce:56:79:80:a5: 34:31:ae:15:2e:76:72:5d:27:d3:ef:fe:d2:49:2e:d1:b1:fb: cb:0a:d4:0a:63:4e:8b:90:d3:0d:40:69:c1:67:44:a5:76:a5: 41:58:4e:51:ff:67:73:05:25:eb:cd:c2:6d:51:d7:a2:85:0c: b0:53:22:57:7b:c0:a1:99:8a:68:7b:5b:8b:86:fd:66:25:a6: 36:28:60:6b:ec:bb:a0:eb:5d:60:a8:12:8e:61:8f:ca:37:43: c2:49:64:66:73:07:35:8d:f4:79:cc:64:f2:1e:e2:cc:f0:1f: 8b:7c:9c:5d:ef:01:30:75:c0:a9:99:6f:43:71:44:9d:95:67: 11:77:16:e7:61:4e:82:e0:17:f2:da:ee:15:3a:16:a6:6c:c8: 26:20:ac:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Q0ZBRDExMC8GA1UEBRMoMDNGRjA2NTdDMEVDRjg3Mzk4MzAzM0Y3QzZDNjQ4OEIz Mzc4OUM0MzAeFw0yNDExMjUwNDQwMzFaFw0yNDEyMDIwNDQwMzFaMBgxFjAUBgNV BAMTDTY3NDNmZmMwLWY3ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC08xRbLxKpUYOBkg0ILCK0L7F00WNxxso5F9wqPSJjhNoisnfZNLpxwG0PUdmV OLaQm5Q9mW5LFmItc2bsODc/uLeVYFxL4NleXUa5O4uyQhKBPRbcN32JfKBeJwPs VDnop094Z5kVtYiYirDMogABkFY0c/IrEUfOKHRk+Z5gwgltW2QZ0qa2awtqfP2J 1JHdigVERQ/rM+mUGJblQ8IpFYHycKG/xP5cD2cD8OSk6Cf9i+xva2ENn6zWIsgN zGeiZkW9h7C/YtpCn8Dpk+NoNAVKdcwGJhzh5Rq8kF3zGBodzvfp5oje+4hWknLl Mml8/D3xMRNw1msYZYff+uPlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULs4xsC0d PQQ1r+ddwnJLns70OKIwHwYDVR0jBBgwFoAUA/8GV8Ds+HOYMDP3xsZIizN4nEMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDRkFELzU2MUQ2NjJFRUEw NDExRUU5MkQxMDYxMUM0RjlBRTAyL0FfOEdWOERzLUhPWU1EUDN4c1pJaXpONG5F TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQV84R1Y4RHMtSE9ZTURQM3hzWklpek40bkVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD RkFELzU2MUQ2NjJFRUEwNDExRUU5MkQxMDYxMUM0RjlBRTAyL0FfOEdWOERzLUhP WU1EUDN4c1pJaXpONG5FTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABUxTCunm2ZLeELlPQJE9qov6nv/8xNAy72L2pgReqgJK1Z3xZYaVEmA QqLgoeVXeszev0lftvUrx57XxiHMY/X2DO+kNOGHoF75TEzXeNTIyJtFdoZqZCLm lW+iebEmb0pKC97QTPDOVnmApTQxrhUudnJdJ9Pv/tJJLtGx+8sK1ApjTouQ0w1A acFnRKV2pUFYTlH/Z3MFJevNwm1R16KFDLBTIld7wKGZimh7W4uG/WYlpjYoYGvs u6DrXWCoEo5hj8o3Q8JJZGZzBzWN9HnMZPIe4szwH4t8nF3vATB1wKmZb0NxRJ2V ZxF3FudhToLgF/La7hU6FqZsyCYgrFc= -----END CERTIFICATE-----Generated at Mon Nov 25 06:05:08 2024 by rpki-client on console-fra.rpki-client.org