$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json) Hash identifier: +eD1CNjEqvfMNM8f2UFzzyiYDonTJxy59mpddPjCYyQ= Subject key identifier: 31:42:88:1F:DF:0B:A0:97:10:03:60:54:B4:C0:ED:F5:59:6D:B4:98 Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft Manifest number: 0212 Signing time: Sat 23 Nov 2024 01:32:50 +0000 Manifest this update: Sat 23 Nov 2024 01:32:50 +0000 Manifest next update: Sat 30 Nov 2024 01:32:50 +0000 Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: cr5OsBEIisUmr3r4nUkn1IIcs4T1U0X33tN/Pfv3ZZM=) 2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: btdqLhAPDRMz6WI33tnEvNcscLygEeQNr9pA6TuXIcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Validity Not Before: Nov 23 01:32:50 2024 GMT Not After : Nov 30 01:32:50 2024 GMT Subject: CN=674130c2-7034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3f:b7:7d:35:ed:26:b4:58:40:a0:10:50:5d: 1d:d4:47:6a:57:11:f9:09:31:05:9e:4d:87:50:bb: e3:89:36:a1:d9:59:73:87:94:39:0e:02:c1:0f:03: 89:c0:06:c0:89:2f:94:12:8a:27:aa:f1:65:ef:0d: a9:a6:af:39:23:21:07:6a:aa:66:9e:0e:d6:15:ed: 96:11:e0:60:7b:6a:9c:42:76:f1:60:99:33:d4:f5: e5:54:08:f5:f4:7a:af:4c:d3:d4:74:80:98:56:e2: ae:33:1e:72:16:0f:24:43:1a:a1:bf:6c:59:71:4f: 16:e7:c5:c1:e0:b8:87:b9:97:65:13:61:cb:79:ab: 61:a3:36:c6:79:d1:30:98:c7:66:89:9f:22:72:9d: 8a:3f:24:61:da:ed:11:bb:36:ee:b9:11:fb:ef:40: 6e:59:09:fe:0f:f6:76:46:d6:45:df:34:ad:ab:66: 6f:62:6a:82:6d:71:dc:d1:ee:6a:74:31:7d:3a:e2: 8c:2e:71:45:28:0c:d5:a8:45:b4:9c:26:b8:ff:d7: 5d:91:fb:03:bc:b1:06:cb:4b:04:4c:36:7d:a1:3c: 54:5c:27:ad:8d:25:f8:7d:b7:52:ea:cd:1b:0e:64: 0d:15:54:86:f8:08:5f:86:47:56:67:d1:f8:f7:a8: 0a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:42:88:1F:DF:0B:A0:97:10:03:60:54:B4:C0:ED:F5:59:6D:B4:98 X509v3 Authority Key Identifier: keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ca:d7:35:23:0c:6c:3f:d2:a7:7a:9d:10:f2:8f:0c:fa:8e: 56:b5:fc:56:f7:30:f9:7c:29:7a:01:60:a4:fb:47:30:8c:3a: cc:5b:13:85:51:6a:42:6e:8f:82:58:2f:6b:02:d6:03:2e:a6: 6e:0e:c0:76:dc:05:41:84:56:33:f1:ef:4e:b6:64:3d:3c:84: 1d:c9:1c:e3:92:52:df:f9:3a:c8:ed:2d:63:c9:09:7a:75:4c: eb:69:03:25:18:cd:ac:da:46:a9:67:ba:88:65:84:74:7c:60: ee:34:64:46:b4:b5:40:f6:e7:b6:62:cb:f7:c0:d9:30:9c:52: 84:39:6e:07:5c:a9:f4:df:e2:31:44:fa:88:63:6a:32:39:a8: fd:e5:5d:ec:97:41:96:16:b2:b1:ad:35:b2:e4:11:72:ee:02: 8f:b1:fa:7d:00:4b:93:81:4e:08:ef:d7:0e:42:a1:2e:a6:6e: aa:a4:11:6e:94:a2:8a:1a:47:1f:43:0f:99:38:6d:19:f7:22: e9:bb:c1:d9:11:e3:00:ef:ce:86:07:7c:01:46:de:81:f0:c2: 64:c1:a6:1e:d6:52:e5:b1:0d:e1:85:1b:73:dd:e4:d3:a2:fb: 23:25:81:c2:d7:71:a8:f9:c2:1c:18:33:e0:9c:e6:e2:8d:19: b2:61:1f:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThEQzYxMTAvBgNVBAUTKDQ3ODZEQkNDQjVDQzI5NkIxREFCMTc1RTgzQ0M0ODEx QTYzNjE3QzcwHhcNMjQxMTIzMDEzMjUwWhcNMjQxMTMwMDEzMjUwWjAYMRYwFAYD VQQDEw02NzQxMzBjMi03MDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj+3fTXtJrRYQKAQUF0d1EdqVxH5CTEFnk2HULvjiTah2Vlzh5Q5DgLBDwOJ wAbAiS+UEoonqvFl7w2ppq85IyEHaqpmng7WFe2WEeBge2qcQnbxYJkz1PXlVAj1 9HqvTNPUdICYVuKuMx5yFg8kQxqhv2xZcU8W58XB4LiHuZdlE2HLeathozbGedEw mMdmiZ8icp2KPyRh2u0RuzbuuRH770BuWQn+D/Z2RtZF3zStq2ZvYmqCbXHc0e5q dDF9OuKMLnFFKAzVqEW0nCa4/9ddkfsDvLEGy0sETDZ9oTxUXCetjSX4fbdS6s0b DmQNFVSG+AhfhkdWZ9H496gKnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFCiB/f C6CXEANgVLTA7fVZbbSYMB8GA1UdIwQYMBaAFEeG28y1zClrHasXXoPMSBGmNhfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OERDNi80QTAxMjI3QzBG RjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtXc2RxeGRlZzh4SUVhWTJG OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0YmJ6TFhNS1dzZHF4ZGVnOHhJRWFZMkY4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OERDNi80QTAxMjI3QzBGRjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtX c2RxeGRlZzh4SUVhWTJGOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6ytc1IwxsP9Knep0Q8o8M+o5WtfxW9zD5fCl6AWCk+0cwjDrMWxOF UWpCbo+CWC9rAtYDLqZuDsB23AVBhFYz8e9OtmQ9PIQdyRzjklLf+TrI7S1jyQl6 dUzraQMlGM2s2kapZ7qIZYR0fGDuNGRGtLVA9ue2Ysv3wNkwnFKEOW4HXKn03+Ix RPqIY2oyOaj95V3sl0GWFrKxrTWy5BFy7gKPsfp9AEuTgU4I79cOQqEupm6qpBFu lKKKGkcfQw+ZOG0Z9yLpu8HZEeMA786GB3wBRt6B8MJkwaYe1lLlsQ3hhRtz3eTT ovsjJYHC13Go+cIcGDPgnObijRmyYR/g -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org