$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json) Hash identifier: OT3YTh3IC+Z1DuGqOSPacIFdEhk4XCDjnloOog48WFE= Subject key identifier: 44:9B:D5:D0:6F:B6:73:F4:36:6B:4B:71:18:D7:85:58:58:CF:83:9A Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0B10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft Manifest number: 0B09 Signing time: Fri 22 Nov 2024 19:01:49 +0000 Manifest this update: Fri 22 Nov 2024 19:01:49 +0000 Manifest next update: Fri 29 Nov 2024 19:01:49 +0000 Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: 7N3Wm6l3BX+0FLQRSFxyveWQTClDH5WL56qhu2qoDTc=) 2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: UpiX7Cqqtl0g5R+6w/YacrFNgDs2XRQxBgBI8gsoR+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2832 (0xb10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: Nov 22 19:01:49 2024 GMT Not After : Nov 29 19:01:49 2024 GMT Subject: CN=6740d51d-2c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:7f:71:f2:65:ed:76:ab:23:bb:f5:80:db: e3:5e:4f:1c:4b:c2:63:3b:f1:b7:d5:70:25:00:51: af:b8:34:18:7e:ee:e3:2c:a0:43:01:f4:1a:68:a0: c8:d3:4e:e6:76:d4:86:5c:67:bf:ea:d9:a4:fb:b6: a6:15:96:33:c6:42:32:ef:ea:d4:15:38:89:91:37: 2c:4c:0c:0b:12:6d:46:b6:85:3a:86:23:a4:92:b1: f0:09:19:1b:f7:30:0a:af:b7:8d:de:37:b9:f5:d0: f5:a8:1f:55:c3:50:dc:58:23:e9:da:0d:7f:7f:5b: 23:62:21:7d:d3:e8:9c:e3:83:e8:c8:a6:53:59:a1: 2f:f2:8e:94:4b:29:92:df:c5:76:ac:e4:66:dd:e3: e5:99:74:cf:f7:ac:9c:4c:7c:05:2f:98:a7:e4:86: 57:91:21:23:cc:30:a8:30:dc:90:aa:5f:86:cc:fa: 3f:ac:ab:6a:7f:70:55:94:24:3c:65:9f:79:c0:0e: cc:4a:0b:4e:18:99:97:a0:db:f7:45:d7:c7:7d:9a: ef:1d:0b:f6:a6:51:1f:df:80:22:af:c3:e1:62:b6: f5:c1:37:a1:a1:4c:b9:a1:b0:30:e3:1a:be:9c:ec: cf:f3:20:08:bb:e9:bf:03:d4:6b:eb:e2:2f:64:ff: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9B:D5:D0:6F:B6:73:F4:36:6B:4B:71:18:D7:85:58:58:CF:83:9A X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:3c:7b:54:56:a4:fc:fe:dd:73:dd:6e:e1:e4:63:23:8f:36: 3d:7d:b7:b8:14:4f:4d:82:a6:96:93:8d:19:a4:12:c6:fd:76: 2d:e1:78:82:a5:1c:1f:20:05:18:c2:15:95:19:5b:0f:d0:7e: 9c:31:20:e8:7b:85:88:06:64:32:20:85:c0:a9:f6:71:39:c8: 71:d9:1c:79:ea:f3:d8:71:44:54:49:60:3f:23:95:53:95:64: d5:c8:1b:07:cd:ae:3d:15:6b:e3:2f:c9:ac:cb:cb:72:e5:ea: bc:45:5b:2f:70:71:90:64:5e:ae:ec:75:15:4f:ff:d2:69:b4: 72:90:5a:64:de:5b:c6:6e:ac:da:fa:cc:b2:d9:f4:1e:f8:3c: 2f:c5:a9:a0:f2:7f:dc:4c:3d:e6:66:d8:df:b6:7b:9e:ba:a9: 41:b9:24:5e:2c:3c:d2:0d:a1:e5:77:12:1b:45:c3:c0:bd:56: 28:ee:b2:d7:0e:23:ab:26:b2:31:13:d8:1b:fc:16:06:89:67: 4e:8c:58:15:85:d7:e9:98:62:9e:a0:99:4d:cf:76:e2:a6:9c: 40:f1:ca:e3:23:c5:6c:9a:e1:70:96:fb:16:36:5b:dc:46:4d: a9:22:8c:ba:46:de:23:ac:94:31:7f:26:38:2b:bc:1f:a7:84: bc:ad:d1:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjQxMTIyMTkwMTQ5WhcNMjQxMTI5MTkwMTQ5WjAYMRYwFAYD VQQDEw02NzQwZDUxZC0yYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOB/cfJl7XarI7v1gNvjXk8cS8JjO/G31XAlAFGvuDQYfu7jLKBDAfQaaKDI 007mdtSGXGe/6tmk+7amFZYzxkIy7+rUFTiJkTcsTAwLEm1GtoU6hiOkkrHwCRkb 9zAKr7eN3je59dD1qB9Vw1DcWCPp2g1/f1sjYiF90+ic44PoyKZTWaEv8o6USymS 38V2rORm3ePlmXTP96ycTHwFL5in5IZXkSEjzDCoMNyQql+GzPo/rKtqf3BVlCQ8 ZZ95wA7MSgtOGJmXoNv3RdfHfZrvHQv2plEf34Air8PhYrb1wTehoUy5obAw4xq+ nOzP8yAIu+m/A9Rr6+IvZP/eEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESb1dBv tnP0NmtLcRjXhVhYz4OaMB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjE0Qi9GMkE0OTI0RTJGNzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZz bHU2dXpaaV9YVlBodzVEcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoPHtUVqT8/t1z3W7h5GMjjzY9fbe4FE9NgqaWk40ZpBLG/XYt4XiC pRwfIAUYwhWVGVsP0H6cMSDoe4WIBmQyIIXAqfZxOchx2Rx56vPYcURUSWA/I5VT lWTVyBsHza49FWvjL8msy8ty5eq8RVsvcHGQZF6u7HUVT//SabRykFpk3lvGbqza +syy2fQe+Dwvxamg8n/cTD3mZtjftnueuqlBuSReLDzSDaHldxIbRcPAvVYo7rLX DiOrJrIxE9gb/BYGiWdOjFgVhdfpmGKeoJlNz3bippxA8crjI8VsmuFwlvsWNlvc Rk2pIoy6Rt4jrJQxfyY4K7wfp4S8rdET -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org