$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft File: aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json) Hash identifier: nEiV4Y6SRI4ipohbq7QCL/NMOEonvvZVFrxQEqsd0uk= Subject key identifier: F7:CB:96:68:6B:02:01:7C:B8:64:EE:54:13:50:56:2B:BA:C8:04:22 Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 Certificate issuer: /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Certificate serial: 073E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft Manifest number: 0738 Signing time: Wed 20 Nov 2024 21:11:40 +0000 Manifest this update: Wed 20 Nov 2024 21:11:40 +0000 Manifest next update: Wed 27 Nov 2024 21:11:40 +0000 Files and hashes: 1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: 3GnDTOLX7XokoTdAil9jSdjvU2RUDh7Ev6HUGosxWVY=) 2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: MoYCzKz4ghJi1D1zSWKy/H/ig794mxo8w546loZw0HA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854 (0x73e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531 Validity Not Before: Nov 20 21:11:40 2024 GMT Not After : Nov 27 21:11:40 2024 GMT Subject: CN=673e508c-4657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:e4:38:c3:34:d5:7d:1e:96:3c:48:61:39: 1f:df:74:e0:1d:08:5a:99:80:4f:14:86:8c:28:2a: 33:8b:22:02:33:b2:97:15:6a:7e:f7:b7:68:c8:26: a5:41:45:e4:92:ea:68:53:bc:12:0b:45:a3:87:d5: 4e:fc:9d:84:af:aa:33:4e:13:fe:74:fc:22:24:46: 3b:9d:ba:29:d4:b1:91:fb:3c:af:33:01:1b:ef:5e: ff:60:07:f9:8b:79:96:c6:bd:de:1b:f3:da:33:fd: 28:19:71:85:22:99:4d:ef:1b:6e:48:4b:bd:0d:97: 52:66:18:e3:05:d3:9e:af:2d:eb:59:06:14:ed:6f: ee:9c:8e:e4:36:2e:df:2a:d0:8d:18:b4:4d:34:dd: 80:51:7b:f0:22:42:16:e1:f4:50:19:da:8e:40:a0: 10:b2:73:b0:06:4d:1e:70:2e:71:2c:64:f8:ce:aa: 3d:f7:28:3f:f2:7e:e3:b7:80:9d:34:63:88:65:e8: 93:dd:c3:f4:ab:09:33:e8:c8:e6:e2:38:42:85:ed: 25:1c:89:6a:39:cd:2a:e5:94:2c:82:5b:02:28:f4: 16:17:bf:5f:e3:c0:d6:8a:16:a9:f1:3b:01:42:ed: d7:fe:a0:45:da:81:42:45:5d:58:41:be:27:9b:8c: 13:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CB:96:68:6B:02:01:7C:B8:64:EE:54:13:50:56:2B:BA:C8:04:22 X509v3 Authority Key Identifier: keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:3d:57:24:81:ff:86:2f:c8:6b:66:60:46:f8:c3:9f:3b:81: b7:87:e2:54:59:51:5e:b2:58:11:d7:94:2f:a1:ac:30:a7:f1: aa:22:0c:5e:d8:92:22:93:51:7f:a5:77:44:aa:9a:6c:1a:3a: 83:99:4e:46:31:54:15:c3:0f:00:c3:30:ab:87:ee:ca:94:7a: ad:16:22:8e:0b:fe:cd:ff:6e:88:0f:e8:e4:5f:b4:ff:63:e4: 23:21:56:1b:ad:0a:57:6c:3e:94:f3:ec:c0:54:22:06:03:e3: 64:bd:e9:9c:94:ff:2a:ef:28:b4:51:ee:33:e9:a5:34:9a:4a: 40:a3:87:40:a6:2e:3a:61:ce:c5:66:06:c0:23:97:82:5c:54: 1c:e5:9c:88:e9:a5:92:ec:44:83:99:57:a9:a9:5b:85:d5:7a: 3e:58:91:e6:2d:28:4b:8e:b9:02:97:80:91:f5:6e:7f:bb:26: 60:31:53:c1:f4:3a:2c:54:8e:32:aa:49:10:c5:cd:b8:df:28: 22:87:ab:3c:5f:1d:81:b4:36:2f:ab:3f:20:b4:4c:57:22:a0: 7c:ca:1e:08:cc:ad:67:7e:6e:81:a1:e7:4a:af:b4:19:6c:f9: bb:7b:de:d6:39:6e:c8:93:22:ab:41:b6:f0:f0:71:29:42:f1: 43:cb:27:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ5MzExMTAvBgNVBAUTKDY4REE0RTg1QTc5ODRCM0ZEMTBBRUYzNEM3RDFEMDBG MUI0NjQ1MzEwHhcNMjQxMTIwMjExMTQwWhcNMjQxMTI3MjExMTQwWjAYMRYwFAYD VQQDEw02NzNlNTA4Yy00NjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1/kOMM01X0eljxIYTkf33TgHQhamYBPFIaMKCoziyICM7KXFWp+97doyCal QUXkkupoU7wSC0Wjh9VO/J2Er6ozThP+dPwiJEY7nbop1LGR+zyvMwEb717/YAf5 i3mWxr3eG/PaM/0oGXGFIplN7xtuSEu9DZdSZhjjBdOery3rWQYU7W/unI7kNi7f KtCNGLRNNN2AUXvwIkIW4fRQGdqOQKAQsnOwBk0ecC5xLGT4zqo99yg/8n7jt4Cd NGOIZeiT3cP0qwkz6Mjm4jhChe0lHIlqOc0q5ZQsglsCKPQWF79f48DWihap8TsB Qu3X/qBF2oFCRV1YQb4nm4wTUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfLlmhr AgF8uGTuVBNQViu6yAQiMB8GA1UdIwQYMBaAFGjaToWnmEs/0QrvNMfR0A8bRkUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDkzMS9GQjVBNTA4NDA4 NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6X1JDdTgweDlIUUR4dEdS VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FOcE9oYWVZU3pfUkN1ODB4OUhRRHh0R1JURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDkzMS9GQjVBNTA4NDA4NTgxMUVCOTNCN0E2NkJDNEY5QUUwMi9hTnBPaGFlWVN6 X1JDdTgweDlIUUR4dEdSVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8PVckgf+GL8hrZmBG+MOfO4G3h+JUWVFeslgR15Qvoawwp/GqIgxe 2JIik1F/pXdEqppsGjqDmU5GMVQVww8AwzCrh+7KlHqtFiKOC/7N/26ID+jkX7T/ Y+QjIVYbrQpXbD6U8+zAVCIGA+NkvemclP8q7yi0Ue4z6aU0mkpAo4dApi46Yc7F ZgbAI5eCXFQc5ZyI6aWS7ESDmVepqVuF1Xo+WJHmLShLjrkCl4CR9W5/uyZgMVPB 9DosVI4yqkkQxc243ygih6s8Xx2BtDYvqz8gtExXIqB8yh4IzK1nfm6BoedKr7QZ bPm7e97WOW7IkyKrQbbw8HEpQvFDyyej -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:42 2024 by rpki-client on console-fra.rpki-client.org