$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json) Hash identifier: m0UQGVadyoaLajwqGF/pmN9WtTXQuN3VGlDvU1Vc+84= Subject key identifier: 2E:61:8A:F1:44:27:D7:75:8D:33:1E:58:E3:FE:93:E5:4B:43:CB:DD Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Certificate serial: 0BCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft Manifest number: 0BC1 Signing time: Fri 22 Nov 2024 18:38:06 +0000 Manifest this update: Fri 22 Nov 2024 18:38:06 +0000 Manifest next update: Fri 29 Nov 2024 18:38:06 +0000 Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: pTFMkObr8lYrG8tLCWEL7PTTSU2kQ+W5irVpPx7t60s=) 2: 7714B9B20CA611EAA69C3B41C4F9AE02.roa (hash: q5Ip+XJJXjIIuk4O+US/jQ4BGRmoQDtfjgDsKC944jA=) 3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: P2hK1V8n6283lOYlU0zk/lZoroeJfCtrYMgaRe8W0vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3019 (0xbcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Validity Not Before: Nov 22 18:38:06 2024 GMT Not After : Nov 29 18:38:06 2024 GMT Subject: CN=6740cf8e-7753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:39:b9:e2:25:65:02:d3:f4:8a:ee:f1:e0:c1: a4:98:14:3a:a6:de:cb:d6:46:80:a0:42:7e:5f:62: 7f:6d:4f:75:c1:a0:98:57:99:dc:3b:b9:45:67:ed: ab:97:1e:28:71:8a:7e:ee:bc:a9:a8:d9:09:9c:7c: a5:07:77:2c:fb:7f:77:a1:4b:d2:fd:a7:28:d8:71: b4:b9:00:ab:14:e4:ee:0d:d9:b0:82:a6:1b:f0:f4: 63:fb:1b:96:4c:e3:cb:d8:5f:74:5a:1d:53:0c:92: 7b:dc:e7:cc:60:2b:40:66:14:9d:fd:0e:fa:31:94: 89:63:41:88:01:2b:c5:85:cf:33:0a:c3:5e:86:e3: 8d:44:bc:17:df:41:cd:48:53:5d:a5:8d:c3:de:02: a8:2c:7b:f1:15:d3:ad:cf:2c:16:46:3d:76:26:12: 05:8a:3c:d5:83:4c:66:c7:93:a8:f5:37:c4:3e:a8: 34:40:ef:6a:9d:5d:fd:91:1e:f2:ca:bf:05:9d:f4: ec:69:33:89:62:3e:ad:73:ce:39:7e:d4:27:1f:30: 45:e1:3f:8f:2a:12:b0:2f:be:5e:50:75:bd:ee:48: bd:c2:05:28:c0:6c:40:a7:e6:0b:6b:34:58:cf:9b: 55:74:e4:1e:83:9f:e5:f6:6f:fe:12:82:cb:40:d2: 1a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:61:8A:F1:44:27:D7:75:8D:33:1E:58:E3:FE:93:E5:4B:43:CB:DD X509v3 Authority Key Identifier: keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:08:7e:fa:21:be:97:7e:35:50:6a:6f:8a:6d:8c:d2:d9:0d: db:3d:91:5b:98:f8:7e:b4:13:61:51:9c:15:74:38:1e:23:5e: 2d:9f:0c:51:8d:b4:03:33:7b:40:fd:c4:8b:71:c9:6a:99:15: 0d:c1:7f:dd:90:2c:67:54:66:40:8f:e4:8c:2b:df:3a:0a:d6: 3d:a0:4c:e9:e9:49:cf:ff:6c:6b:79:1c:d2:6a:bf:eb:01:5c: 4f:05:82:68:0b:89:e2:9f:d1:e0:19:f8:3f:93:f4:9d:b8:1c: e5:a8:cf:86:8f:de:3a:32:3a:9a:84:2f:07:4a:44:7b:15:c9: 50:3a:f2:11:b5:80:56:4c:94:46:c4:10:f0:ba:ef:f7:31:3c: 3f:c3:50:2f:95:a3:55:4a:6d:bb:16:0c:ca:9a:3b:ad:32:b4: 0e:ba:48:0d:48:71:8c:54:84:12:53:86:a6:21:d0:55:4e:27: 88:ae:5d:ee:17:0e:d1:83:48:6f:03:bb:cf:da:af:c3:48:a6: 3b:5f:9b:4f:6e:50:bb:16:5c:05:98:c8:f0:f9:01:a9:c4:b3: 57:e7:e7:1a:f2:5e:ab:76:86:2d:32:a3:de:76:01:6c:03:d1: 90:88:c9:a2:c7:d7:d1:f8:d3:71:e3:8a:97:d7:03:0a:55:2c: a8:44:f8:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC MzU1REFCRjQwHhcNMjQxMTIyMTgzODA2WhcNMjQxMTI5MTgzODA2WjAYMRYwFAYD VQQDEw02NzQwY2Y4ZS03NzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Dm54iVlAtP0iu7x4MGkmBQ6pt7L1kaAoEJ+X2J/bU91waCYV5ncO7lFZ+2r lx4ocYp+7rypqNkJnHylB3cs+393oUvS/aco2HG0uQCrFOTuDdmwgqYb8PRj+xuW TOPL2F90Wh1TDJJ73OfMYCtAZhSd/Q76MZSJY0GIASvFhc8zCsNehuONRLwX30HN SFNdpY3D3gKoLHvxFdOtzywWRj12JhIFijzVg0xmx5Oo9TfEPqg0QO9qnV39kR7y yr8FnfTsaTOJYj6tc845ftQnHzBF4T+PKhKwL75eUHW97ki9wgUowGxAp+YLazRY z5tVdOQeg5/l9m/+EoLLQNIaWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5hivFE J9d1jTMeWOP+k+VLQ8vdMB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG ajBGTzZqN3c3dC16VmRxX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5CH76Ib6XfjVQam+KbYzS2Q3bPZFbmPh+tBNhUZwVdDgeI14tnwxR jbQDM3tA/cSLcclqmRUNwX/dkCxnVGZAj+SMK986CtY9oEzp6UnP/2xreRzSar/r AVxPBYJoC4nin9HgGfg/k/SduBzlqM+Gj946MjqahC8HSkR7FclQOvIRtYBWTJRG xBDwuu/3MTw/w1AvlaNVSm27FgzKmjutMrQOukgNSHGMVIQSU4amIdBVTieIrl3u Fw7Rg0hvA7vP2q/DSKY7X5tPblC7FlwFmMjw+QGpxLNX5+ca8l6rdoYtMqPedgFs A9GQiMmix9fR+NNx44qX1wMKVSyoRPhI -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org