$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft File: pibNzbdx6WVebpGhxy0S-1fRxOg.mft (raw, json) Hash identifier: ziKF2cux91z3t6zWLrWGUPp9DO67yTd1UtWolKnl/Jo= Subject key identifier: 34:DC:00:E4:2A:82:EC:FD:AF:D3:F0:58:ED:F3:83:0B:02:80:EC:37 Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Certificate serial: 0439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft Manifest number: 0432 Signing time: Fri 22 Nov 2024 23:52:54 +0000 Manifest this update: Fri 22 Nov 2024 23:52:53 +0000 Manifest next update: Fri 29 Nov 2024 23:52:53 +0000 Files and hashes: 1: pibNzbdx6WVebpGhxy0S-1fRxOg.crl (hash: p5njV41xXYNCB5/W8Fu9ifD4rWlXr+8VyckVxNYXMus=) 2: CB56435E3C5311EC81D0DB48C4F9AE02.roa (hash: GcZ/jVmf3aFj/tEn6isaoQpB/Anp8WQjarqO/s3Uu4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Validity Not Before: Nov 22 23:52:53 2024 GMT Not After : Nov 29 23:52:53 2024 GMT Subject: CN=67411956-7b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a3:bb:3a:40:ec:78:a7:3b:2a:44:63:62:bf: 39:f7:a9:a9:37:b6:d5:4a:31:9f:6c:2b:b7:87:3c: 1e:34:02:f5:1b:2f:1e:59:97:04:85:86:f4:2a:fb: d0:15:59:e7:1b:f4:64:44:cc:99:f6:f2:49:c8:00: f5:2b:b6:6a:75:9a:6f:f2:73:a1:a0:8c:54:37:67: 54:32:6e:64:89:fb:c7:eb:56:78:bc:8b:f9:c9:7b: 46:ad:d7:bf:50:20:08:db:11:8e:d0:55:16:57:bd: a1:f3:b3:ee:7c:b1:82:48:c5:e8:00:ac:29:8d:c6: ba:eb:c4:3b:fe:a2:1e:98:1a:1f:88:b9:f3:12:fc: 1d:00:f6:f3:88:77:40:be:57:2d:62:c3:6d:fd:fd: f5:ca:48:f9:f8:cb:e8:b8:f1:03:d6:cc:af:ad:98: 9e:0b:8c:73:c4:0a:31:8c:24:68:1d:94:7e:29:32: 3e:95:4f:e0:46:97:68:bc:fc:46:e2:04:59:02:c2: 91:97:f4:d5:d1:2d:fd:ad:69:99:5d:ac:25:19:bc: 1a:09:83:86:35:77:1c:74:4a:9a:5e:22:ac:3f:29: c4:32:44:41:27:02:bc:4f:58:63:9c:46:5c:f7:d3: 09:61:62:0a:20:ea:c1:36:78:34:fe:76:46:5e:7c: 5d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DC:00:E4:2A:82:EC:FD:AF:D3:F0:58:ED:F3:83:0B:02:80:EC:37 X509v3 Authority Key Identifier: keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:73:57:3d:99:df:90:96:91:3d:a5:ee:99:cd:d5:95:22:aa: b0:df:c7:03:65:d7:7b:6f:c4:7b:57:22:68:b6:0b:8a:93:e2: 9e:60:bb:21:45:39:27:47:56:b0:43:7b:6e:fe:09:c6:41:bf: 7c:a1:4a:28:cd:0e:9b:e5:68:18:81:b0:02:61:b6:99:a6:ec: 0e:e9:15:1b:b9:b5:32:21:7f:f9:40:b7:13:2b:65:cf:a3:84: 23:00:82:8f:d8:83:39:63:8f:34:3c:55:75:ce:a0:07:b4:d2: 82:24:bf:2a:35:09:29:67:f4:ee:d1:78:97:e8:f0:e3:9a:ee: e8:f9:16:97:ba:2a:c7:ab:8b:b2:d7:60:8b:cf:2b:8a:4d:f3: a4:75:c0:c3:42:12:23:1d:2e:fc:1b:92:b6:ab:6e:24:78:94: fb:41:88:80:c2:a2:f2:f8:e2:d9:56:b2:22:fb:31:f9:ec:c5: 47:29:e3:95:30:74:11:21:ce:33:80:57:84:ee:27:dc:62:83: c0:95:37:62:3a:e6:e7:5f:75:1c:a6:98:31:e5:f1:5f:7f:53: 50:e6:4a:c1:0c:ff:8c:5c:20:23:79:68:e7:6e:e5:02:3e:68: 4a:07:ee:80:87:4a:ab:27:9d:8b:07:11:8f:b2:f0:66:46:2f: f3:bd:0d:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3QjExMTAvBgNVBAUTKEE2MjZDRENEQjc3MUU5NjU1RTZFOTFBMUM3MkQxMkZC NTdEMUM0RTgwHhcNMjQxMTIyMjM1MjUzWhcNMjQxMTI5MjM1MjUzWjAYMRYwFAYD VQQDEw02NzQxMTk1Ni03YjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKO7OkDseKc7KkRjYr8596mpN7bVSjGfbCu3hzweNAL1Gy8eWZcEhYb0KvvQ FVnnG/RkRMyZ9vJJyAD1K7ZqdZpv8nOhoIxUN2dUMm5kifvH61Z4vIv5yXtGrde/ UCAI2xGO0FUWV72h87PufLGCSMXoAKwpjca668Q7/qIemBofiLnzEvwdAPbziHdA vlctYsNt/f31ykj5+MvouPED1syvrZieC4xzxAoxjCRoHZR+KTI+lU/gRpdovPxG 4gRZAsKRl/TV0S39rWmZXawlGbwaCYOGNXccdEqaXiKsPynEMkRBJwK8T1hjnEZc 99MJYWIKIOrBNng0/nZGXnxdMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTcAOQq guz9r9PwWO3zgwsCgOw3MB8GA1UdIwQYMBaAFKYmzc23cellXm6RocctEvtX0cTo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdCMS9BMEY0ODBCNjND NEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZXVmVicEdoeHkwUy0xZlJ4 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpYk56YmR4NldWZWJwR2h4eTBTLTFmUnhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdCMS9BMEY0ODBCNjNDNEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZX VmVicEdoeHkwUy0xZlJ4T2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjc1c9md+QlpE9pe6ZzdWVIqqw38cDZdd7b8R7VyJotguKk+KeYLsh RTknR1awQ3tu/gnGQb98oUoozQ6b5WgYgbACYbaZpuwO6RUbubUyIX/5QLcTK2XP o4QjAIKP2IM5Y480PFV1zqAHtNKCJL8qNQkpZ/Tu0XiX6PDjmu7o+RaXuirHq4uy 12CLzyuKTfOkdcDDQhIjHS78G5K2q24keJT7QYiAwqLy+OLZVrIi+zH57MVHKeOV MHQRIc4zgFeE7ifcYoPAlTdiOubnX3Ucppgx5fFff1NQ5krBDP+MXCAjeWjnbuUC PmhKB+6Ah0qrJ52LBxGPsvBmRi/zvQ1q -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org