$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft File: a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json) Hash identifier: FIzF2+x7bzni0yCEWDxvxy69yiZifTCrT1qTz6lYIls= Subject key identifier: A5:70:E3:5E:96:DE:FE:E2:5D:9F:CB:E0:BA:A6:89:AB:9E:BA:40:9D Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 Certificate issuer: /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft Manifest number: 0117 Signing time: Sat 23 Nov 2024 03:01:44 +0000 Manifest this update: Sat 23 Nov 2024 03:01:44 +0000 Manifest next update: Sat 30 Nov 2024 03:01:44 +0000 Files and hashes: 1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: xgOabfk9Q/cVQttme0rbTdRzb8nOKU/3k5CqCWIpMig=) 2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: 5chjhG+4S2xwB6V67WC6HZP171qygBdUyTwykp33M5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Validity Not Before: Nov 23 03:01:44 2024 GMT Not After : Nov 30 03:01:44 2024 GMT Subject: CN=67414598-4216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:3a:7e:fb:cf:8f:f7:76:fe:32:8e:57:bd: 53:cb:86:87:26:46:8a:09:0f:79:30:20:5b:ae:49: c7:f0:46:2e:c0:27:58:99:57:bb:3f:c9:f8:ac:cc: d4:d4:33:ce:46:ef:90:4a:06:8d:1b:a2:ee:be:b3: ea:25:90:d3:b1:0f:6e:72:37:e2:1c:45:16:a1:11: ef:3a:0c:f3:32:60:7b:7b:c1:56:f4:b6:c9:14:3c: 85:d8:85:8c:b5:c2:4e:cb:da:bd:d0:25:d2:a2:75: e0:d2:96:c0:ce:3f:3c:bf:dc:c5:89:7c:17:c6:16: be:f1:c5:da:e4:fc:a8:c2:92:51:da:c5:98:c9:50: fa:ca:b3:16:fb:30:01:47:0f:a9:aa:f2:19:70:41: 80:99:3b:70:0a:98:22:b7:2d:d8:e9:d1:78:5b:af: c3:b0:1d:5a:56:b1:51:f2:00:34:58:d3:1b:39:7c: 7f:00:07:e9:9e:00:ec:40:a8:55:70:99:af:2e:9b: ec:44:a2:6a:31:ce:6a:3c:88:62:c8:36:b9:4f:d6: aa:9a:38:63:c3:8a:c4:ea:fa:98:6f:73:36:66:57: d4:e2:f3:69:6e:7d:8e:81:0b:7a:8d:93:81:0b:70: cc:f5:c7:4e:92:bb:56:db:7c:88:6f:10:74:e2:42: 88:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:70:E3:5E:96:DE:FE:E2:5D:9F:CB:E0:BA:A6:89:AB:9E:BA:40:9D X509v3 Authority Key Identifier: keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:dd:84:70:93:f8:f5:28:9e:65:eb:4f:69:79:c3:2c:64:6c: c0:68:3c:93:35:c6:ea:42:38:06:19:20:b3:70:86:1c:9f:41: 71:06:87:82:6d:e7:68:2e:45:07:64:44:da:48:b4:8e:5c:e2: 80:c5:49:80:05:e6:a6:d0:b2:58:cc:fd:c0:04:01:0d:a1:36: d3:f1:86:95:3a:45:cb:6e:b2:ea:95:92:f9:73:ae:70:89:4e: a8:71:db:42:72:f7:02:6b:ef:f8:20:07:8c:db:af:e8:c5:63: bb:4d:05:49:fa:a3:99:20:f3:49:b9:6d:a8:90:3b:f8:94:12: e2:ea:83:2e:a0:4d:4e:9b:aa:57:b1:48:31:89:27:d0:42:ef: ad:39:4c:33:bd:80:f7:e3:94:5f:4f:77:43:b8:e2:2b:03:65: cb:6e:43:8e:10:ca:e5:06:c3:67:87:57:07:6a:a1:75:5b:e3: 49:9c:36:7a:e6:98:07:18:a6:f2:e5:48:5c:07:c2:a4:fc:de: ba:bf:d0:71:21:7a:5a:41:2c:9e:81:5f:69:c9:62:52:68:6a: 67:d6:a4:6f:d7:f4:74:57:04:42:37:3a:7e:d7:83:f5:b2:4d: a0:80:50:a7:1d:83:89:63:c2:a3:6f:d4:ae:8e:c5:51:09:4e: 16:00:19:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGNzkxMTAvBgNVBAUTKDZCRDhDMEExMTUwMEIzQ0EwRkVDNEE5RkQzNDBDMzEy MDU5NUIwQzcwHhcNMjQxMTIzMDMwMTQ0WhcNMjQxMTMwMDMwMTQ0WjAYMRYwFAYD VQQDEw02NzQxNDU5OC00MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugI6fvvPj/d2/jKOV71Ty4aHJkaKCQ95MCBbrknH8EYuwCdYmVe7P8n4rMzU 1DPORu+QSgaNG6LuvrPqJZDTsQ9ucjfiHEUWoRHvOgzzMmB7e8FW9LbJFDyF2IWM tcJOy9q90CXSonXg0pbAzj88v9zFiXwXxha+8cXa5PyowpJR2sWYyVD6yrMW+zAB Rw+pqvIZcEGAmTtwCpgity3Y6dF4W6/DsB1aVrFR8gA0WNMbOXx/AAfpngDsQKhV cJmvLpvsRKJqMc5qPIhiyDa5T9aqmjhjw4rE6vqYb3M2ZlfU4vNpbn2OgQt6jZOB C3DM9cdOkrtW23yIbxB04kKI/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVw416W 3v7iXZ/L4LqmiaueukCdMB8GA1UdIwQYMBaAFGvYwKEVALPKD+xKn9NAwxIFlbDH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUY3OS9EMEY4NkQ3MkZF MDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4b1A3RXFmMDBEREVnV1Zz TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5akFvUlVBczhvUDdFcWYwMERERWdXVnNNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUY3OS9EMEY4NkQ3MkZFMDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4 b1A3RXFmMDBEREVnV1ZzTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY3YRwk/j1KJ5l609pecMsZGzAaDyTNcbqQjgGGSCzcIYcn0FxBoeC bedoLkUHZETaSLSOXOKAxUmABeam0LJYzP3ABAENoTbT8YaVOkXLbrLqlZL5c65w iU6ocdtCcvcCa+/4IAeM26/oxWO7TQVJ+qOZIPNJuW2okDv4lBLi6oMuoE1Om6pX sUgxiSfQQu+tOUwzvYD345RfT3dDuOIrA2XLbkOOEMrlBsNnh1cHaqF1W+NJnDZ6 5pgHGKby5UhcB8Kk/N66v9BxIXpaQSyegV9pyWJSaGpn1qRv1/R0VwRCNzp+14P1 sk2ggFCnHYOJY8Kjb9SujsVRCU4WABlW -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:36 2024 by rpki-client on console-ams.rpki-client.org