$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft File: i9h5ncunV8W0WNZuOcYMnKP3mms.mft (raw, json) Hash identifier: cecDTSt8cpLzPXvKll1/qznw0P0U4YypkG++CYnS++k= Subject key identifier: 72:F8:7B:B6:61:3F:63:AA:55:8F:DD:77:17:1F:D3:82:5F:7A:EA:51 Authority key identifier: 8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B Certificate issuer: /CN=A912BCCF/serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B Certificate serial: 0715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft Manifest number: 070F Signing time: Fri 22 Nov 2024 21:24:48 +0000 Manifest this update: Fri 22 Nov 2024 21:24:47 +0000 Manifest next update: Fri 29 Nov 2024 21:24:47 +0000 Files and hashes: 1: i9h5ncunV8W0WNZuOcYMnKP3mms.crl (hash: tRTpk3E2M4L4vZYytYFAnYq/mNAUIM/7jU4TL42Ui4E=) 2: 2EEE5DDCB88011EB9C88057CC4F9AE02.roa (hash: NR1SVCvj30A6pQwNp2dHbCZu3umNoMEReinsxF/kIrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCCF/serialNumber=8BD8799DCBA757C5B458D66E39C60C9CA3F79A6B Validity Not Before: Nov 22 21:24:47 2024 GMT Not After : Nov 29 21:24:47 2024 GMT Subject: CN=6740f6a0-99a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cc:4d:e5:a8:8e:38:c2:00:60:f8:da:43:44: 30:5b:6b:7c:ef:2f:40:a0:e0:17:e6:01:c0:17:bc: 5e:42:c5:b0:3f:7c:01:68:c6:30:10:ec:33:f0:bf: 6a:a6:a8:3b:d5:e4:1e:e3:05:ff:fa:22:13:ce:7f: 4d:92:56:69:82:c3:22:d0:e0:4f:e7:1e:53:e6:9c: c3:91:ba:80:d8:2c:d2:90:b8:2e:a8:d7:0e:6d:c4: 92:1f:11:ac:b5:64:ba:28:f0:64:3e:d8:dd:f3:c3: be:cf:40:fb:82:46:bc:f2:c4:52:d6:e1:4b:d0:cb: 5a:9f:54:bb:e4:ce:6a:25:f5:67:ff:2a:f9:a7:c1: 73:63:8d:49:4e:5d:0e:9e:e4:19:b4:82:9f:37:db: 9d:19:52:81:9b:3f:24:4a:50:56:79:23:bd:85:ca: ba:fc:dd:a9:74:32:71:2c:15:17:45:90:29:5c:0f: 80:9e:dc:21:54:ac:5b:f4:5e:09:b2:6e:42:61:aa: 24:a3:8c:d8:9b:ad:7a:f7:98:2c:15:d4:0b:c2:dd: c8:b5:7e:53:a1:1a:c8:01:e0:eb:ae:3d:ec:5f:80: 3d:df:45:85:9c:e1:31:cf:a4:35:51:22:40:62:ed: 8e:f8:f5:8d:a5:87:32:27:62:ed:7e:9e:d2:69:fd: a7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F8:7B:B6:61:3F:63:AA:55:8F:DD:77:17:1F:D3:82:5F:7A:EA:51 X509v3 Authority Key Identifier: keyid:8B:D8:79:9D:CB:A7:57:C5:B4:58:D6:6E:39:C6:0C:9C:A3:F7:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9h5ncunV8W0WNZuOcYMnKP3mms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCCF/6424E160190711EBAF468D2BC4F9AE02/i9h5ncunV8W0WNZuOcYMnKP3mms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:42:80:6f:b7:ec:8d:23:49:88:5d:6e:0e:9d:32:d1:41:12: dc:b5:6d:ea:fd:8a:85:3f:d2:91:8a:bb:19:ed:7f:01:36:cf: 25:cf:e6:dc:a4:74:82:36:bf:e1:ab:ea:bf:08:d4:96:ac:51: 2b:7e:c7:26:95:ef:f4:73:ca:1a:26:bc:11:b6:ab:a7:9f:8e: aa:0b:07:6a:b1:e5:9b:56:cf:bb:71:23:7b:5b:5a:ae:9e:47: 90:78:04:47:92:f9:ee:36:00:18:80:27:53:03:dd:1d:b6:7c: d0:24:3e:28:c2:19:3d:e2:4f:b8:11:4c:1b:17:38:1d:63:88: 07:4d:fb:a4:ef:9d:e0:3f:a2:21:7f:9d:be:1c:a5:91:73:9d: aa:8f:83:77:45:a6:e0:e0:f3:e9:7d:68:e5:7f:ab:ee:72:ab: e2:63:f7:ff:87:a8:ce:47:64:d9:11:8a:26:00:bd:4e:ee:6a: 76:e3:27:37:0a:7f:f5:2b:73:0e:c1:50:38:22:86:96:54:c7: fd:d1:9f:62:f2:7c:02:4e:f6:3f:7a:ad:15:44:91:67:bf:96: 56:30:fe:fb:43:a6:0b:a1:10:ff:74:d0:a3:f0:4a:9d:b8:8b: 3e:ea:77:5b:6a:21:80:51:97:a1:ef:3b:dc:2b:cb:56:bc:30: 0c:38:dd:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQ0YxMTAvBgNVBAUTKDhCRDg3OTlEQ0JBNzU3QzVCNDU4RDY2RTM5QzYwQzlD QTNGNzlBNkIwHhcNMjQxMTIyMjEyNDQ3WhcNMjQxMTI5MjEyNDQ3WjAYMRYwFAYD VQQDEw02NzQwZjZhMC05OWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58xN5aiOOMIAYPjaQ0QwW2t87y9AoOAX5gHAF7xeQsWwP3wBaMYwEOwz8L9q pqg71eQe4wX/+iITzn9NklZpgsMi0OBP5x5T5pzDkbqA2CzSkLguqNcObcSSHxGs tWS6KPBkPtjd88O+z0D7gka88sRS1uFL0Mtan1S75M5qJfVn/yr5p8FzY41JTl0O nuQZtIKfN9udGVKBmz8kSlBWeSO9hcq6/N2pdDJxLBUXRZApXA+AntwhVKxb9F4J sm5CYaoko4zYm61695gsFdQLwt3ItX5ToRrIAeDrrj3sX4A930WFnOExz6Q1USJA Yu2O+PWNpYcyJ2Ltfp7Saf2nrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL4e7Zh P2OqVY/ddxcf04JfeupRMB8GA1UdIwQYMBaAFIvYeZ3Lp1fFtFjWbjnGDJyj95pr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNDRi82NDI0RTE2MDE5 MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1blY4VzBXTlp1T2NZTW5LUDNt bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5aDVuY3VuVjhXMFdOWnVPY1lNbktQM21tcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNDRi82NDI0RTE2MDE5MDcxMUVCQUY0NjhEMkJDNEY5QUUwMi9pOWg1bmN1blY4 VzBXTlp1T2NZTW5LUDNtbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIQoBvt+yNI0mIXW4OnTLRQRLctW3q/YqFP9KRirsZ7X8BNs8lz+bc pHSCNr/hq+q/CNSWrFErfscmle/0c8oaJrwRtqunn46qCwdqseWbVs+7cSN7W1qu nkeQeARHkvnuNgAYgCdTA90dtnzQJD4owhk94k+4EUwbFzgdY4gHTfuk753gP6Ih f52+HKWRc52qj4N3Rabg4PPpfWjlf6vucqviY/f/h6jOR2TZEYomAL1O7mp24yc3 Cn/1K3MOwVA4IoaWVMf90Z9i8nwCTvY/eq0VRJFnv5ZWMP77Q6YLoRD/dNCj8Eqd uIs+6ndbaiGAUZeh7zvcK8tWvDAMON1L -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:36 2024 by rpki-client on console-ams.rpki-client.org