$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft File: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft (raw, json) Hash identifier: gmqwfzD9naf76KKqsNSrYayEHrTn97pQyxDCueZhwQQ= Subject key identifier: B8:9E:70:C5:06:BE:45:92:17:CB:A1:07:4C:78:58:0E:7A:37:A5:6C Authority key identifier: 76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 Certificate issuer: /CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Certificate serial: 0B41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft Manifest number: 0B36 Signing time: Fri 22 Nov 2024 18:58:45 +0000 Manifest this update: Fri 22 Nov 2024 18:58:44 +0000 Manifest next update: Fri 29 Nov 2024 18:58:44 +0000 Files and hashes: 1: ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl (hash: 4RSyNpJVs3YSIlmytlvUHG8EJ1+VWT7CLdv5WMS/sR8=) 2: FB5C375499DB11EBBC50C376C4F9AE02.roa (hash: ajVn4diWFPT8JIGqvgdW0p8NW0uUNco4psFMwsNIN3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2881 (0xb41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC79/serialNumber=76CD021E0C281DA5FE64D87803553808889A1167 Validity Not Before: Nov 22 18:58:44 2024 GMT Not After : Nov 29 18:58:44 2024 GMT Subject: CN=6740d465-0035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:da:3c:a6:50:e6:0a:62:e7:99:ba:8a:2e:b1: 6b:47:60:cd:e0:59:de:9d:9f:3a:ad:ff:9d:eb:18: 49:c4:a8:c2:a1:cf:51:b6:78:88:b8:57:07:5c:cc: fd:c8:34:57:df:b8:de:ab:b9:ab:31:aa:93:21:95: 97:f3:4d:8b:e1:4b:2b:05:bf:0d:92:67:cc:16:52: c8:a1:be:cb:35:91:43:4b:f9:bb:57:93:18:4f:2d: 94:e7:c8:70:bf:2f:fe:4c:ed:43:a4:15:ea:88:d8: 9f:4f:82:c1:68:63:b1:e3:17:ae:4a:ec:0f:aa:37: a8:d2:b5:13:37:f3:a7:63:21:be:e2:f2:a5:88:fd: 11:b5:36:0e:0f:15:c9:a8:12:e3:c1:1d:28:74:69: 3d:37:21:31:cb:83:42:d2:07:51:bc:96:8d:4e:1c: 09:a5:e0:44:d9:14:10:bb:60:c7:20:a4:87:d1:26: 1d:9c:d7:c5:83:e7:a3:6b:52:f4:a3:04:0f:6e:7f: 1b:1b:d2:e3:fd:62:7f:78:5f:18:25:34:5e:e1:39: ac:48:ce:45:da:59:a6:93:88:ed:ba:bd:5c:82:14: 08:16:10:80:e3:c3:e7:6f:35:ef:db:25:1a:7b:07: 35:b8:c1:d6:5f:87:0b:a0:87:1d:fd:78:38:21:b3: a9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9E:70:C5:06:BE:45:92:17:CB:A1:07:4C:78:58:0E:7A:37:A5:6C X509v3 Authority Key Identifier: keyid:76:CD:02:1E:0C:28:1D:A5:FE:64:D8:78:03:55:38:08:88:9A:11:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC79/A63F93D627CE11EA8E407E5BC4F9AE02/ds0CHgwoHaX-ZNh4A1U4CIiaEWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:70:ff:3f:7e:7a:d5:9c:3b:32:22:6e:5d:16:0f:e7:1b:b7: f5:16:97:bb:3d:7e:70:24:76:32:07:ad:ae:39:ab:19:74:77: 10:81:0e:a2:76:d0:8d:e1:52:2f:d9:46:88:be:10:4a:1c:bc: 53:a6:92:3a:1f:c5:39:04:63:a4:93:84:b0:e8:74:a6:9b:55: 34:2f:e0:5c:f3:02:76:ac:ea:02:5d:76:3d:45:e6:0d:0f:29: ba:e3:44:71:b6:0e:c8:21:58:60:fe:68:68:08:10:99:68:98: 55:09:3b:69:e6:30:98:17:08:c5:d8:22:8b:fa:e7:1c:be:68: b9:22:42:07:ff:d1:11:a3:80:7b:f3:3b:fd:46:67:9a:14:c7: 3a:3e:4d:c0:54:fe:66:9f:7a:24:74:b7:18:18:a8:c6:47:28: 3f:0c:b9:b2:40:57:f5:bd:54:df:95:52:7e:1d:b7:d1:80:46: c6:6f:ed:90:bb:e5:6a:bb:35:3c:d2:5a:28:ac:8e:5e:87:22: df:0f:db:d3:c3:ba:45:e4:92:f9:d4:0a:8e:ce:65:70:2a:2a: 17:e1:f9:d6:07:48:5b:20:59:bd:4e:19:3e:6c:52:05:41:3e: 50:68:6b:a2:c4:cf:e2:b6:90:d8:e9:07:1c:d1:0d:ee:63:9b: 13:8c:8d:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzkxMTAvBgNVBAUTKDc2Q0QwMjFFMEMyODFEQTVGRTY0RDg3ODAzNTUzODA4 ODg5QTExNjcwHhcNMjQxMTIyMTg1ODQ0WhcNMjQxMTI5MTg1ODQ0WjAYMRYwFAYD VQQDEw02NzQwZDQ2NS0wMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtto8plDmCmLnmbqKLrFrR2DN4FnenZ86rf+d6xhJxKjCoc9RtniIuFcHXMz9 yDRX37jeq7mrMaqTIZWX802L4UsrBb8NkmfMFlLIob7LNZFDS/m7V5MYTy2U58hw vy/+TO1DpBXqiNifT4LBaGOx4xeuSuwPqjeo0rUTN/OnYyG+4vKliP0RtTYODxXJ qBLjwR0odGk9NyExy4NC0gdRvJaNThwJpeBE2RQQu2DHIKSH0SYdnNfFg+eja1L0 owQPbn8bG9Lj/WJ/eF8YJTRe4TmsSM5F2lmmk4jtur1cghQIFhCA48PnbzXv2yUa ewc1uMHWX4cLoIcd/Xg4IbOpwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiecMUG vkWSF8uhB0x4WA56N6VsMB8GA1UdIwQYMBaAFHbNAh4MKB2l/mTYeANVOAiImhFn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3OS9BNjNGOTNENjI3 Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hhWC1aTmg0QTFVNENJaWFF V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RzMENIZ3dvSGFYLVpOaDRBMVU0Q0lpYUVXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3OS9BNjNGOTNENjI3Q0UxMUVBOEU0MDdFNUJDNEY5QUUwMi9kczBDSGd3b0hh WC1aTmg0QTFVNENJaWFFV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPcP8/fnrVnDsyIm5dFg/nG7f1Fpe7PX5wJHYyB62uOasZdHcQgQ6i dtCN4VIv2UaIvhBKHLxTppI6H8U5BGOkk4Sw6HSmm1U0L+Bc8wJ2rOoCXXY9ReYN Dym640Rxtg7IIVhg/mhoCBCZaJhVCTtp5jCYFwjF2CKL+uccvmi5IkIH/9ERo4B7 8zv9RmeaFMc6Pk3AVP5mn3okdLcYGKjGRyg/DLmyQFf1vVTflVJ+HbfRgEbGb+2Q u+VquzU80loorI5ehyLfD9vTw7pF5JL51AqOzmVwKioX4fnWB0hbIFm9Thk+bFIF QT5QaGuixM/itpDY6Qcc0Q3uY5sTjI0F -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org