$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft File: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft (raw, json) Hash identifier: ELfdbGEHQxxAnjHDnE0yIXKdl8fIXFHwgBs50mjGtPE= Subject key identifier: 61:7A:2F:31:EA:13:40:04:27:20:9B:C4:95:96:A7:C4:49:8E:50:9D Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A Certificate issuer: /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A Certificate serial: 0A1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft Manifest number: 0A18 Signing time: Fri 22 Nov 2024 19:33:51 +0000 Manifest this update: Fri 22 Nov 2024 19:33:50 +0000 Manifest next update: Fri 29 Nov 2024 19:33:50 +0000 Files and hashes: 1: hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl (hash: lA/XzUxCZ2WtigStfx/pPJYW1WKnat2Y8jScNRM+gX0=) 2: BF77D1785DCB11EA880A7643C4F9AE02.roa (hash: YfnYnQuUGAiZHci6lnxWl6oKmlz3blTiBiw9ZN2WAFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2589 (0xa1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A Validity Not Before: Nov 22 19:33:50 2024 GMT Not After : Nov 29 19:33:50 2024 GMT Subject: CN=6740dc9f-92f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:a0:dc:6b:07:55:1a:b1:45:f6:8b:fa:18: 00:f3:74:a2:8a:da:6a:f6:71:63:da:40:43:d6:10: 9b:f5:3c:3a:af:38:f8:d4:34:29:21:f8:b1:dc:5b: 8d:2f:8a:b8:5f:5e:ac:62:fe:a8:e0:cf:fc:40:ac: f7:cc:9a:4e:ec:49:a3:37:4c:c4:cc:56:0c:fa:3c: 1b:fb:05:c3:95:06:0a:52:98:b8:b1:b6:c5:a9:81: 96:72:1e:37:ab:ba:bd:53:dd:fe:b5:a8:08:d4:0c: 5c:ff:ab:c7:26:e7:40:5e:c8:eb:22:1a:e3:c5:aa: 6f:ce:4b:da:bd:9a:66:6f:c8:ad:41:32:98:76:a0: f2:a6:ca:d6:05:c3:7f:61:f1:c5:63:28:3b:a9:70: 02:41:32:90:7e:c7:e5:e1:96:ca:34:49:0d:a6:11: 71:b0:30:68:fd:f8:f9:af:ab:41:52:32:54:ba:68: d3:e9:d2:41:c7:4b:55:92:33:ff:09:f8:e3:a0:e3: 39:e1:2d:40:39:4c:18:60:eb:75:f5:5d:3e:75:85: 05:9e:d4:6f:6a:1e:b2:45:74:fb:54:93:ed:9d:31: e6:9a:c1:7e:a8:6d:c8:16:7d:83:e6:7f:8a:7d:9a: 76:28:79:d4:a7:5e:9b:c4:57:48:45:87:56:05:35: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7A:2F:31:EA:13:40:04:27:20:9B:C4:95:96:A7:C4:49:8E:50:9D X509v3 Authority Key Identifier: keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:6a:ca:c0:6f:4c:3b:8c:37:5a:4c:ca:74:39:66:13:2a:68: ef:e8:56:fe:21:57:31:60:99:c0:2c:de:cb:2d:5d:32:fa:fe: ba:50:ce:92:25:72:fb:84:06:da:e2:14:82:2f:37:67:ed:08: 60:ba:fb:52:bb:be:15:00:86:6a:32:3c:35:42:d9:a9:22:ed: 8c:54:8f:a6:0c:07:bc:64:50:e0:68:63:9e:a7:b6:d5:03:90: 3d:ea:fd:48:25:a8:a2:f0:04:2e:ca:1e:19:96:68:8d:62:d4: 25:47:6e:c4:af:84:a6:74:f7:2b:43:fb:2c:67:fc:8d:85:c9: cb:50:9b:4a:63:dd:30:fb:ed:f5:7f:f7:91:35:f2:3a:2b:0e: 27:4c:e4:59:fa:4c:91:dc:58:df:ff:4e:99:ab:21:5e:ec:a4: aa:9e:f3:bc:6e:b7:7c:b8:92:02:ce:82:81:2c:b2:9f:60:c0: 70:26:4c:7e:ef:b6:5b:b9:e5:40:39:e3:40:dd:da:47:67:07: 87:91:c6:38:5a:9a:7a:2e:4c:b6:a4:bf:d1:ec:ab:92:f2:c2: ab:ab:ba:34:77:24:02:b4:96:0d:30:6f:61:f8:6a:8f:82:b7: 0f:21:78:99:62:4a:ac:5a:97:27:8e:17:7c:87:1a:c1:ac:72: fb:f5:58:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDNzgxMTAvBgNVBAUTKDg0OEE3OUFCNTA0MUU3MUNFNjIyNTBCNTdGQzFFMEY1 NDk3OEM5M0EwHhcNMjQxMTIyMTkzMzUwWhcNMjQxMTI5MTkzMzUwWjAYMRYwFAYD VQQDEw02NzQwZGM5Zi05MmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm+g3GsHVRqxRfaL+hgA83Siitpq9nFj2kBD1hCb9Tw6rzj41DQpIfix3FuN L4q4X16sYv6o4M/8QKz3zJpO7EmjN0zEzFYM+jwb+wXDlQYKUpi4sbbFqYGWch43 q7q9U93+tagI1Axc/6vHJudAXsjrIhrjxapvzkvavZpmb8itQTKYdqDypsrWBcN/ YfHFYyg7qXACQTKQfsfl4ZbKNEkNphFxsDBo/fj5r6tBUjJUumjT6dJBx0tVkjP/ CfjjoOM54S1AOUwYYOt19V0+dYUFntRvah6yRXT7VJPtnTHmmsF+qG3IFn2D5n+K fZp2KHnUp16bxFdIRYdWBTVv1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGF6LzHq E0AEJyCbxJWWp8RJjlCdMB8GA1UdIwQYMBaAFISKeatQQecc5iJQtX/B4PVJeMk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM3OC8xOTJFRkYwODVE Q0IxMUVBODRFMDI5NDNDNEY5QUUwMi9oSXA1cTFCQjV4em1JbEMxZjhIZzlVbDR5 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJcDVxMUJCNXh6bUlsQzFmOEhnOVVsNHlUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM3OC8xOTJFRkYwODVEQ0IxMUVBODRFMDI5NDNDNEY5QUUwMi9oSXA1cTFCQjV4 em1JbEMxZjhIZzlVbDR5VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpasrAb0w7jDdaTMp0OWYTKmjv6Fb+IVcxYJnALN7LLV0y+v66UM6S JXL7hAba4hSCLzdn7QhguvtSu74VAIZqMjw1QtmpIu2MVI+mDAe8ZFDgaGOep7bV A5A96v1IJaii8AQuyh4ZlmiNYtQlR27Er4SmdPcrQ/ssZ/yNhcnLUJtKY90w++31 f/eRNfI6Kw4nTORZ+kyR3Fjf/06ZqyFe7KSqnvO8brd8uJICzoKBLLKfYMBwJkx+ 77ZbueVAOeNA3dpHZweHkcY4Wpp6Lky2pL/R7KuS8sKrq7o0dyQCtJYNMG9h+GqP grcPIXiZYkqsWpcnjhd8hxrBrHL79Viq -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org