$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json) Hash identifier: pJd1RAQ1621GZOhk26g78yzdxN8ap5EzBrpOc9J6Yts= Subject key identifier: F8:22:B7:E7:A4:4C:1B:4C:FF:E1:92:07:67:41:94:3F:C3:F3:3F:69 Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft Manifest number: 6A Signing time: Sat 23 Nov 2024 04:59:58 +0000 Manifest this update: Sat 23 Nov 2024 04:59:58 +0000 Manifest next update: Sat 30 Nov 2024 04:59:58 +0000 Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: dDWW4Zghym2T2CdB7U1YSvkFCw/O3Up3Sa6P4Y+92qA=) 2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: bHWlYJultpd4141lSOHtlDGQNuKfjn0r+UBsEdeuoEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Validity Not Before: Nov 23 04:59:58 2024 GMT Not After : Nov 30 04:59:58 2024 GMT Subject: CN=6741614e-948f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:2c:78:3f:b5:dd:90:4f:2b:31:96:8a:3d: 63:67:75:60:c8:d2:56:c7:62:19:35:c3:42:59:4c: 75:2e:48:f5:0a:b0:68:17:b5:62:4b:e2:92:d1:68: 2e:05:8e:39:5a:cb:06:91:9c:1b:52:85:cc:87:d5: cf:59:5d:07:9b:ca:db:5a:b7:21:ec:c7:47:cb:ca: 86:44:61:cb:44:69:0b:56:18:1a:d9:01:a9:44:10: 94:26:84:47:cb:c8:ca:8b:69:89:18:ae:f9:bc:9c: 37:3f:1a:c7:d3:bc:15:1b:af:1d:6d:e1:4d:92:21: 40:ae:71:19:40:ff:de:a9:67:47:a8:8a:f2:62:ae: 65:60:2b:32:df:87:47:04:62:5f:06:9f:65:f6:b5: 49:be:e2:a8:12:f8:db:01:09:74:66:7c:f0:4f:77: 9f:3c:74:54:cd:37:8e:be:44:f6:95:fb:38:e1:26: 5b:17:0a:05:0e:c5:47:66:ae:d9:ef:c0:4d:f7:ca: f0:aa:62:70:7d:b3:64:5f:e5:02:d6:7f:30:52:32: 86:8c:b8:c8:6c:ab:e4:47:c3:88:23:a4:2b:d7:53: 4a:ea:bc:6d:89:4f:78:39:12:25:9d:40:d3:f0:f6: 76:d2:84:16:a4:24:15:b6:64:69:d5:9a:cf:bc:b2: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:22:B7:E7:A4:4C:1B:4C:FF:E1:92:07:67:41:94:3F:C3:F3:3F:69 X509v3 Authority Key Identifier: keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ba:9b:34:c4:47:73:3b:02:a4:de:ed:95:f1:f0:01:a1:75: a1:a8:c4:06:3b:46:6e:9d:46:08:29:71:93:3c:86:f7:e6:96: 94:49:55:a1:53:d4:12:a4:37:cc:f4:4c:d5:82:db:3b:52:50: 14:04:c9:dc:38:b1:da:0f:da:38:1f:d4:b3:53:d9:86:50:5c: 4f:cc:03:4f:7a:96:3d:7c:fa:1f:c7:33:ea:11:9d:00:da:3a: 71:56:0c:68:26:66:9e:e8:00:17:e4:88:61:ca:1c:f8:bc:1a: 12:04:7b:26:14:95:6b:9b:4d:c7:1d:ed:31:cd:f8:46:9f:50: ee:d3:92:91:87:4e:d7:67:e9:7e:a5:7d:77:2e:aa:fe:01:fd: e8:5d:d3:60:af:62:c3:a8:b0:28:f0:77:5a:aa:47:38:cf:4e: 04:43:8c:23:f9:d5:70:52:3a:04:b1:68:8b:7a:e9:47:fd:9a: 3e:19:d7:ea:b6:10:3b:19:48:04:00:49:91:a3:59:b0:ab:ad: ff:94:7b:0b:b4:8d:2d:0d:ea:40:87:f0:71:30:4e:4d:99:05: e7:7f:3b:bf:3f:88:91:2a:4f:38:98:f5:7c:eb:de:5b:e7:4c: d6:7e:0a:9d:62:bc:2f:ed:77:dc:f0:bc:70:e5:34:51:1a:ba: 84:a1:d4:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY5OTExMC8GA1UEBRMoQTc0Q0U3REFENUZCNTA0REIxNkJCRTcwQzJGOURGMEFB OUYwMDYwOTAeFw0yNDExMjMwNDU5NThaFw0yNDExMzAwNDU5NThaMBgxFjAUBgNV BAMTDTY3NDE2MTRlLTk0OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAtix4P7XdkE8rMZaKPWNndWDI0lbHYhk1w0JZTHUuSPUKsGgXtWJL4pLRaC4F jjlaywaRnBtShcyH1c9ZXQebyttatyHsx0fLyoZEYctEaQtWGBrZAalEEJQmhEfL yMqLaYkYrvm8nDc/GsfTvBUbrx1t4U2SIUCucRlA/96pZ0eoivJirmVgKzLfh0cE Yl8Gn2X2tUm+4qgS+NsBCXRmfPBPd588dFTNN46+RPaV+zjhJlsXCgUOxUdmrtnv wE33yvCqYnB9s2Rf5QLWfzBSMoaMuMhsq+RHw4gjpCvXU0rqvG2JT3g5EiWdQNPw 9nbShBakJBW2ZGnVms+8skQVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+CK356RM G0z/4ZIHZ0GUP8PzP2kwHwYDVR0jBBgwFoAUp0zn2tX7UE2xa75wwvnfCqnwBgkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjk5LzU1ODZFRjZBMTdF OTExRUZBMkNENTAxN0M0RjlBRTAyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jn ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcDB6bjJ0WDdVRTJ4YTc1d3d2bmZDcW53QmdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE Njk5LzU1ODZFRjZBMTdFOTExRUZBMkNENTAxN0M0RjlBRTAyL3Awem4ydFg3VUUy eGE3NXd3dm5mQ3Fud0Jnay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA26mzTER3M7AqTe7ZXx8AGhdaGoxAY7Rm6dRggpcZM8hvfmlpRJVaFT 1BKkN8z0TNWC2ztSUBQEydw4sdoP2jgf1LNT2YZQXE/MA096lj18+h/HM+oRnQDa OnFWDGgmZp7oABfkiGHKHPi8GhIEeyYUlWubTccd7THN+EafUO7TkpGHTtdn6X6l fXcuqv4B/ehd02CvYsOosCjwd1qqRzjPTgRDjCP51XBSOgSxaIt66Uf9mj4Z1+q2 EDsZSAQASZGjWbCrrf+Uewu0jS0N6kCH8HEwTk2ZBed/O78/iJEqTziY9Xzr3lvn TNZ+Cp1ivC/td9zwvHDlNFEauoSh1I4= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:27 2024 by rpki-client on console-fra.rpki-client.org