$ rpki-client -vvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft File: htoZAOYVDL2c2BWsZ9xTpebTwCc.mft (raw, json) Hash identifier: wnZnN4kfFhYcEdqi1OpgvoGW933HEPp2ZxnKWZgAQFg= Subject key identifier: EB:AC:B3:D0:97:0F:84:F3:BD:C0:9F:80:68:C4:38:B4:D3:23:0C:C5 Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft Manifest number: BC Signing time: Sat 23 Nov 2024 04:04:13 +0000 Manifest this update: Sat 23 Nov 2024 04:04:12 +0000 Manifest next update: Sat 30 Nov 2024 04:04:12 +0000 Files and hashes: 1: htoZAOYVDL2c2BWsZ9xTpebTwCc.crl (hash: ri4czjVx19/FVlZQTVhRZpt5EARdfwy/W/qFj+B+uU0=) 2: 1B000B60A70A11EE9D90E754C4F9AE02.roa (hash: XRSbm92iiBJ9xxjhhCi5I/tUaB0t9fuY2aP6/h6Ck2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027 Validity Not Before: Nov 23 04:04:12 2024 GMT Not After : Nov 30 04:04:12 2024 GMT Subject: CN=6741543c-2221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:92:ca:e2:2a:85:64:cb:7a:8c:01:fb:09:40: 2b:0c:55:a9:2e:88:8f:fe:da:f5:47:df:d3:bd:c2: e9:73:c4:e0:1d:ef:0b:39:0b:93:13:b0:e7:f3:23: 4f:bc:1a:e1:9c:c0:e8:17:7a:74:0f:ad:24:09:74: bc:70:fe:9f:3e:8f:c2:8d:c9:f2:80:45:81:1a:16: 27:09:86:84:5d:70:05:42:71:94:2c:83:9d:04:01: e9:73:d0:e9:d4:18:d2:12:75:2f:60:ed:2b:f0:25: 5b:88:50:d5:44:44:8c:b2:14:c8:dd:c4:49:4c:5f: 45:5b:82:03:45:1e:7c:6d:d2:6d:32:61:d0:5e:f9: 6f:de:31:76:37:c2:05:cd:58:0b:a1:28:fd:a3:2c: 2d:54:22:3e:15:44:87:84:cd:48:00:e5:a6:2d:04: b5:ae:f8:de:ca:96:89:54:f0:1f:45:7e:c8:c9:d0: a6:c1:cf:3d:16:bc:f1:e2:e8:bc:d4:4d:d4:a2:5b: a2:33:dc:12:b6:f7:7e:4d:77:39:a0:d4:84:16:d8: 38:cb:2b:94:ba:bc:85:4b:6d:26:eb:6f:bb:d6:65: e9:d6:9f:09:8f:f8:31:90:65:ab:67:32:6a:5a:0d: b3:6d:3e:c5:d7:28:8f:6b:ba:ef:d1:02:64:1b:7a: ce:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AC:B3:D0:97:0F:84:F3:BD:C0:9F:80:68:C4:38:B4:D3:23:0C:C5 X509v3 Authority Key Identifier: keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:44:f3:31:6b:21:b1:16:6f:00:3d:7b:46:3e:44:f4:f4:fa: fd:81:af:13:2a:87:c5:53:81:dd:c3:09:f1:05:f2:be:b3:45: d8:bd:ea:d1:df:9e:4e:34:83:60:6d:fd:dc:54:fa:6f:46:48: c2:74:c3:14:b4:54:40:68:47:a6:98:3d:48:6b:0d:22:ae:73: 71:c1:8e:a5:0e:85:59:ca:ad:93:60:46:66:60:f6:84:fd:7b: 37:9b:d8:04:5b:b4:e6:28:25:3d:5c:29:f5:c5:13:0d:af:33: 1a:28:38:7f:a0:cb:b5:19:a8:31:2e:1d:4b:ab:6a:f0:a6:ec: 02:be:3f:f6:35:34:51:5c:97:e2:2d:75:27:8d:9e:53:27:63: cd:4a:31:66:af:9a:42:14:8d:22:ab:4f:25:0c:36:60:c9:c4: 46:20:f9:a5:2a:4e:9f:a4:71:33:8b:9b:ae:47:6d:f6:35:e6: e5:e3:c7:b2:6f:2e:3a:69:87:22:da:f8:60:b6:38:84:b1:18: d9:3c:41:5e:af:92:99:07:89:38:bc:8c:8f:a3:80:3c:fe:07: aa:7f:db:0a:7d:61:bd:98:fa:59:04:85:5c:bf:97:e3:d5:17: 97:c1:a3:33:02:cd:15:b8:6f:db:9e:48:66:98:51:68:fd:96: ec:b8:a4:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzM0IxMTAvBgNVBAUTKDg2REExOTAwRTYxNTBDQkQ5Q0Q4MTVBQzY3REM1M0E1 RTZEM0MwMjcwHhcNMjQxMTIzMDQwNDEyWhcNMjQxMTMwMDQwNDEyWjAYMRYwFAYD VQQDEw02NzQxNTQzYy0yMjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZLK4iqFZMt6jAH7CUArDFWpLoiP/tr1R9/TvcLpc8TgHe8LOQuTE7Dn8yNP vBrhnMDoF3p0D60kCXS8cP6fPo/CjcnygEWBGhYnCYaEXXAFQnGULIOdBAHpc9Dp 1BjSEnUvYO0r8CVbiFDVRESMshTI3cRJTF9FW4IDRR58bdJtMmHQXvlv3jF2N8IF zVgLoSj9oywtVCI+FUSHhM1IAOWmLQS1rvjeypaJVPAfRX7IydCmwc89Frzx4ui8 1E3UoluiM9wStvd+TXc5oNSEFtg4yyuUuryFS20m62+71mXp1p8Jj/gxkGWrZzJq Wg2zbT7F1yiPa7rv0QJkG3rOLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuss9CX D4TzvcCfgGjEOLTTIwzFMB8GA1UdIwQYMBaAFIbaGQDmFQy9nNgVrGfcU6Xm08An MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzQi9FOThBMTEzRTky NjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRMMmMyQldzWjl4VHBlYlR3 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h0b1pBT1lWREwyYzJCV3NaOXhUcGViVHdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTMzQi9FOThBMTEzRTkyNjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRM MmMyQldzWjl4VHBlYlR3Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0RPMxayGxFm8APXtGPkT09Pr9ga8TKofFU4HdwwnxBfK+s0XYverR 355ONINgbf3cVPpvRkjCdMMUtFRAaEemmD1Iaw0irnNxwY6lDoVZyq2TYEZmYPaE /Xs3m9gEW7TmKCU9XCn1xRMNrzMaKDh/oMu1GagxLh1Lq2rwpuwCvj/2NTRRXJfi LXUnjZ5TJ2PNSjFmr5pCFI0iq08lDDZgycRGIPmlKk6fpHEzi5uuR232Nebl48ey by46aYci2vhgtjiEsRjZPEFer5KZB4k4vIyPo4A8/geqf9sKfWG9mPpZBIVcv5fj 1ReXwaMzAs0VuG/bnkhmmFFo/ZbsuKTw -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:00 2024 by rpki-client on console-ams.rpki-client.org