$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: e2fIsrbKnXwJoQK4Lb112WkMytZK9h0p1oUh8S6oVVM= Subject key identifier: ED:FD:5D:E3:A8:86:3C:5D:2B:5C:29:5D:76:CB:11:61:77:68:89:3A Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 0189 Signing time: Sat 23 Nov 2024 01:58:31 +0000 Manifest this update: Sat 23 Nov 2024 01:58:31 +0000 Manifest next update: Sat 30 Nov 2024 01:58:31 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: cZrvnVryR1zrfGHrNPNWpb3fQNxJnqdtYkZdsEhaTrM=) 2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: nNolV6pGC+51y0HfDWOeN167s3LmxvmNsiZckSYAvXg=) 3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: i7wRWkvg7vS6wr4a7kGEzT/c0WRahwhqZQnRfyjAoJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: Nov 23 01:58:31 2024 GMT Not After : Nov 30 01:58:31 2024 GMT Subject: CN=674136c7-f366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:38:e2:95:35:8d:eb:3d:73:94:c8:03:86:a0: 97:2d:9b:80:7e:af:bf:29:88:5c:06:03:f9:67:54: bf:cd:96:ab:f1:67:48:98:6d:ce:f9:cb:5a:77:04: 95:12:d5:0f:ba:00:4a:21:84:6d:26:89:88:69:5a: f9:00:89:6f:8a:ad:30:9a:8e:3c:33:c9:ea:f4:d4: c7:0a:29:6a:b8:be:ee:15:84:e1:85:a3:cc:fb:31: 2f:9b:5a:f5:d9:7d:fe:05:0e:47:39:f1:7e:c0:ed: eb:9a:26:b4:bd:23:26:29:c4:34:d0:f4:6d:13:7b: cd:f7:45:04:40:26:59:e3:39:13:e4:6f:35:9f:5a: 37:8a:a5:8d:45:53:cb:8f:4d:dc:b9:ea:44:55:03: 76:6a:45:e9:9c:34:fd:4c:62:4f:1b:f6:c7:27:af: bf:c9:c7:ca:52:14:02:0a:b9:9c:20:14:d0:d3:1d: 63:96:c5:dc:f1:66:70:8b:5f:14:f7:9f:3d:98:fb: 0a:d6:0e:98:55:84:44:39:2a:48:51:fe:5e:72:04: 6d:c4:b1:16:72:53:bd:4a:25:ee:ef:83:d0:33:98: 85:7d:40:0f:84:e7:54:48:07:30:5f:e6:be:46:dc: d3:0e:8e:d0:ca:70:a3:8e:a9:cd:bc:8e:c1:a8:2d: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FD:5D:E3:A8:86:3C:5D:2B:5C:29:5D:76:CB:11:61:77:68:89:3A X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:1d:3f:ac:04:07:6b:5c:75:07:fc:ab:a1:8b:8c:33:5f:de: 18:00:03:3a:96:56:71:03:f1:a6:20:9f:a8:23:12:b0:eb:7c: 88:d0:f2:cb:2f:0e:d2:b9:1a:9d:20:c8:8f:be:80:4e:96:f2: 7c:73:47:3f:dd:e8:bb:6e:eb:67:fa:dd:ca:80:3d:ba:d1:01: 89:52:08:46:db:92:bf:8b:71:d5:d1:49:ff:3e:36:6e:38:9a: 74:1b:40:9d:e6:3c:13:b7:22:58:09:7c:02:7b:b5:a9:fa:fd: 4c:51:de:44:52:c4:0c:0b:d3:79:7a:bf:0a:18:e0:9e:85:02: 3d:5d:30:86:ec:32:8f:5e:b3:92:2b:66:fb:30:7f:d6:8b:8a: 22:fb:6b:78:42:c2:b8:40:4e:64:37:aa:c8:13:af:b8:f7:9b: db:84:8a:c8:a1:34:12:fe:e7:49:9d:1a:2b:97:2f:d4:39:92: 14:62:6c:1d:56:4e:f9:a8:09:91:ce:b5:7d:06:4e:0c:3b:9e: a2:0c:7e:9d:ad:26:22:5d:78:4b:8f:85:c5:10:c5:10:54:cb: e9:8f:58:3c:49:97:d3:0f:90:3b:aa:56:10:4a:34:07:f9:cf: e6:ce:4b:ff:e2:53:fd:65:0f:ac:13:e0:f0:b3:e3:19:e2:6c: cb:5a:69:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjQxMTIzMDE1ODMxWhcNMjQxMTMwMDE1ODMxWjAYMRYwFAYD VQQDEw02NzQxMzZjNy1mMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jjilTWN6z1zlMgDhqCXLZuAfq+/KYhcBgP5Z1S/zZar8WdImG3O+ctadwSV EtUPugBKIYRtJomIaVr5AIlviq0wmo48M8nq9NTHCilquL7uFYThhaPM+zEvm1r1 2X3+BQ5HOfF+wO3rmia0vSMmKcQ00PRtE3vN90UEQCZZ4zkT5G81n1o3iqWNRVPL j03cuepEVQN2akXpnDT9TGJPG/bHJ6+/ycfKUhQCCrmcIBTQ0x1jlsXc8WZwi18U 9589mPsK1g6YVYREOSpIUf5ecgRtxLEWclO9SiXu74PQM5iFfUAPhOdUSAcwX+a+ RtzTDo7QynCjjqnNvI7BqC0w0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO39XeOo hjxdK1wpXXbLEWF3aIk6MB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNHT+sBAdrXHUH/Kuhi4wzX94YAAM6llZxA/GmIJ+oIxKw63yI0PLL Lw7SuRqdIMiPvoBOlvJ8c0c/3ei7butn+t3KgD260QGJUghG25K/i3HV0Un/PjZu OJp0G0Cd5jwTtyJYCXwCe7Wp+v1MUd5EUsQMC9N5er8KGOCehQI9XTCG7DKPXrOS K2b7MH/Wi4oi+2t4QsK4QE5kN6rIE6+495vbhIrIoTQS/udJnRorly/UOZIUYmwd Vk75qAmRzrV9Bk4MO56iDH6drSYiXXhLj4XFEMUQVMvpj1g8SZfTD5A7qlYQSjQH +c/mzkv/4lP9ZQ+sE+Dws+MZ4mzLWmkf -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:33 2024 by rpki-client on console-ams.rpki-client.org