$ rpki-client -vvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft File: 9cHnH7saQdeYC-JY2XxIc5qvgso.mft (raw, json) Hash identifier: f3Ga2wAAfuzLsv29RClMZyO5VoRHWiyG7qAJNee/+3w= Subject key identifier: 7E:C6:38:BE:B7:A6:2E:64:B1:9E:39:20:AD:30:BE:BE:9B:78:C0:F7 Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA Certificate issuer: /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft Manifest number: 0400 Signing time: Sat 23 Nov 2024 00:01:28 +0000 Manifest this update: Sat 23 Nov 2024 00:01:28 +0000 Manifest next update: Sat 30 Nov 2024 00:01:28 +0000 Files and hashes: 1: 9cHnH7saQdeYC-JY2XxIc5qvgso.crl (hash: +BuENNQh6McbE4IZCZ2SYepU23YC3nQL93COTOTI1sQ=) 2: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (hash: OH+ilqdv9s3kTRrQEcIweA5ha/9ZRdWs4Wko3puaZH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA Validity Not Before: Nov 23 00:01:28 2024 GMT Not After : Nov 30 00:01:28 2024 GMT Subject: CN=67411b58-88eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:e2:0c:0c:cb:9f:58:30:b5:ba:1a:1a:e4: ae:0d:72:1a:fd:04:e1:9e:ce:cc:62:b1:0a:35:89: 34:08:07:85:b0:be:8c:be:8e:29:d7:a0:b9:70:ad: b9:2f:a7:5e:ea:cd:7a:99:0d:2e:35:4c:5e:11:14: 61:1f:3d:1d:5d:cb:99:4e:e6:a0:df:1a:1f:60:08: c1:89:8b:25:da:61:ea:57:73:f8:56:80:f6:82:f1: d1:33:ac:d7:8c:20:f9:45:bc:e9:33:05:d2:3f:bc: 44:c7:2d:24:4e:c0:a7:a7:2e:5b:6b:34:ed:31:d1: da:0e:b5:14:dc:06:40:fb:50:2d:36:bc:df:bb:b9: c4:1c:77:4e:15:60:b1:24:8f:86:d8:d2:bb:37:6b: 2d:d1:8b:a6:98:fa:1e:3a:26:8e:62:56:21:55:a9: 6f:fa:32:54:f2:3e:96:c7:e8:ee:81:9a:98:b3:45: fa:d2:e2:ac:eb:92:e7:de:4c:49:74:52:26:ea:68: b6:62:d9:66:e5:e0:04:15:7b:67:c3:64:02:1d:78: a0:38:56:ed:84:d3:2f:f4:bf:20:85:95:a5:8a:78: 52:42:79:66:d5:b2:a9:a8:f0:8d:96:78:4d:c9:62: 29:90:2c:b6:65:c9:84:a8:6e:f7:d1:a0:29:74:92: 4a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C6:38:BE:B7:A6:2E:64:B1:9E:39:20:AD:30:BE:BE:9B:78:C0:F7 X509v3 Authority Key Identifier: keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:39:90:4a:96:fb:d7:c8:40:9f:4c:4a:bc:c8:cd:fb:aa:3c: 73:9a:66:ff:ea:de:23:c8:0a:87:c5:03:bc:16:74:4c:de:dc: 52:c7:2c:d3:b3:a3:24:12:73:90:81:25:55:64:7c:7b:7e:0a: 56:72:52:20:d4:f7:25:67:23:b1:4d:e6:3d:50:97:6c:c2:75: 0e:19:55:b4:fc:0c:b3:6f:c4:89:be:2c:82:34:25:c0:ed:c5: 80:97:ce:ed:17:56:ed:bf:d5:89:16:a1:01:ac:a9:be:60:36: 16:0e:c6:3a:36:e5:92:fd:3d:df:62:33:88:e4:b8:e5:5b:42: a4:41:44:bf:05:df:97:9c:0d:48:d0:b4:22:30:97:b3:f5:19: 32:bd:24:a6:58:78:1f:93:07:13:b5:ed:2c:39:29:f8:51:ab: b3:ba:bb:9a:1d:9a:3f:47:c5:86:95:80:a7:2f:b8:79:ff:c1: 78:5c:eb:26:c9:4d:98:66:de:60:e0:5f:07:1a:b3:b1:59:49: 4e:14:ed:80:d6:d0:6b:8b:17:7f:d0:e5:43:2b:ab:32:fa:a4: e1:41:27:f2:fb:1a:dd:ca:31:78:65:5d:d0:df:58:ff:c8:a4: 76:3e:67:15:85:95:12:e7:fd:0a:7c:87:65:b3:dc:c9:f5:da: 06:d9:86:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxNkQxMTAvBgNVBAUTKEY1QzFFNzFGQkIxQTQxRDc5ODBCRTI1OEQ5N0M0ODcz OUFBRjgyQ0EwHhcNMjQxMTIzMDAwMTI4WhcNMjQxMTMwMDAwMTI4WjAYMRYwFAYD VQQDEw02NzQxMWI1OC04OGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAse/iDAzLn1gwtboaGuSuDXIa/QThns7MYrEKNYk0CAeFsL6Mvo4p16C5cK25 L6de6s16mQ0uNUxeERRhHz0dXcuZTuag3xofYAjBiYsl2mHqV3P4VoD2gvHRM6zX jCD5RbzpMwXSP7xExy0kTsCnpy5bazTtMdHaDrUU3AZA+1AtNrzfu7nEHHdOFWCx JI+G2NK7N2st0YummPoeOiaOYlYhValv+jJU8j6Wx+jugZqYs0X60uKs65Ln3kxJ dFIm6mi2Ytlm5eAEFXtnw2QCHXigOFbthNMv9L8ghZWlinhSQnlm1bKpqPCNlnhN yWIpkCy2ZcmEqG730aApdJJKiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7GOL63 pi5ksZ45IK0wvr6beMD3MB8GA1UdIwQYMBaAFPXB5x+7GkHXmAviWNl8SHOar4LK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDE2RC9GMDQyMDdBNDRG MDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFkZVlDLUpZMlh4SWM1cXZn c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljSG5IN3NhUWRlWUMtSlkyWHhJYzVxdmdzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDE2RC9GMDQyMDdBNDRGMDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFk ZVlDLUpZMlh4SWM1cXZnc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBOZBKlvvXyECfTEq8yM37qjxzmmb/6t4jyAqHxQO8FnRM3txSxyzT s6MkEnOQgSVVZHx7fgpWclIg1PclZyOxTeY9UJdswnUOGVW0/Ayzb8SJviyCNCXA 7cWAl87tF1btv9WJFqEBrKm+YDYWDsY6NuWS/T3fYjOI5LjlW0KkQUS/Bd+XnA1I 0LQiMJez9RkyvSSmWHgfkwcTte0sOSn4UauzuruaHZo/R8WGlYCnL7h5/8F4XOsm yU2YZt5g4F8HGrOxWUlOFO2A1tBrixd/0OVDK6sy+qThQSfy+xrdyjF4ZV3Q31j/ yKR2PmcVhZUS5/0KfIdls9zJ9doG2YaQ -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org