$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft File: AfrBm6ETU1D3rq6bWBqFlSisi64.mft (raw, json) Hash identifier: F9pNu1JKBCAO/2mBfH0KGflsR8V/1xDML9zV8Bw3eTk= Subject key identifier: 5B:54:2C:3A:38:DD:9C:36:74:9D:09:B1:41:AA:49:4D:AB:CE:22:9B Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE Certificate issuer: /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Certificate serial: 3455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft Manifest number: 343D Signing time: Sun 24 Nov 2024 14:16:51 +0000 Manifest this update: Sun 24 Nov 2024 14:16:50 +0000 Manifest next update: Sun 01 Dec 2024 14:16:50 +0000 Files and hashes: 1: AfrBm6ETU1D3rq6bWBqFlSisi64.crl (hash: QSp27+Zr/CFltGHL8VPcYxdfFSGquQFfODtBxdBbc/c=) 2: 7D512C7EB0C611E5BDBA5065C4F9AE02.roa (hash: oKEra+z5HTLTSNTTjpMj+EhrYzyjYHuTj8yp31ybe8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13397 (0x3455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Validity Not Before: Nov 24 14:16:50 2024 GMT Not After : Dec 1 14:16:50 2024 GMT Subject: CN=67433552-2af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:e5:89:af:b7:f9:99:1f:9f:07:c5:92:2e: 45:47:f7:10:b9:52:a4:56:52:5e:ae:4f:fd:85:2e: 5b:9b:6e:42:f5:fe:a1:d0:60:70:19:4d:15:7f:74: 15:06:19:3e:5b:f1:95:82:2a:76:78:b4:dd:45:6c: 0b:c1:1f:9f:e3:c9:7a:5d:fd:ed:27:e5:79:f2:83: e6:1a:f0:1b:5b:81:7a:ef:dd:d1:65:67:7e:64:27: 3f:c7:d7:a3:48:02:8e:df:76:a8:d8:2d:18:f2:83: d5:79:1c:84:0b:47:c6:3a:98:e5:2d:09:2b:f4:7f: da:e6:23:f6:f4:e2:32:d5:4e:08:58:0f:f1:0c:e1: c3:4d:c4:9d:6b:41:4a:b8:8c:8a:35:91:7c:16:19: f7:2b:a0:e7:cc:86:6c:59:59:39:b7:2a:6e:02:4a: 59:6e:76:2a:b6:c0:1b:a7:27:b0:fe:8c:fd:b2:44: d4:08:ba:06:6f:3c:8f:cc:77:2c:a2:cd:a9:6b:f2: 96:2e:bd:17:3e:27:de:be:0e:f7:f7:e9:33:78:a5: 7c:87:ad:fa:16:80:3f:00:99:36:a4:9e:49:0d:11: fb:ec:64:68:19:8e:54:36:91:41:7e:1b:7d:30:f6: 84:a4:4b:ab:93:ef:ea:1a:a0:35:8e:73:20:56:d5: 09:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:54:2C:3A:38:DD:9C:36:74:9D:09:B1:41:AA:49:4D:AB:CE:22:9B X509v3 Authority Key Identifier: keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:cf:d7:3a:49:3b:f2:40:5b:1a:30:71:33:82:e1:8d:16:71: 07:31:cc:12:b0:e9:27:4c:0c:23:6f:a3:c5:9b:a1:27:a6:d8: cf:5c:9a:4d:2f:98:8b:11:6b:13:1b:11:e8:b9:a4:8a:aa:79: 95:67:2f:3d:1d:97:62:7b:77:13:41:e3:92:1f:cc:c3:24:e1: 61:3f:d2:1a:00:9d:ce:3a:ca:0e:03:f4:6e:c3:9b:af:43:36: 8e:b1:20:fa:ec:43:47:87:8c:70:19:06:ad:c0:e4:d5:ca:c6: 9f:40:7c:07:08:e9:de:1f:f5:e1:04:2c:19:c0:a5:c9:07:54: cc:82:c7:76:a8:92:7f:54:94:12:4c:ea:90:c7:11:fd:65:86: 94:d3:71:5c:bd:3e:40:65:58:8d:38:29:9c:dc:8e:34:82:c4: 27:82:fa:80:9c:fe:48:c7:37:9c:5f:6b:de:3b:30:4c:18:d5: 03:8a:1c:40:b9:fc:2f:22:06:d1:d9:e9:bc:d5:e8:d4:0a:4d: 69:1f:58:a2:f3:8e:36:76:89:1d:16:d9:e0:df:89:a2:68:9d: b8:cd:10:b3:10:63:ee:ee:ee:bf:32:9d:0a:1a:6d:b9:0f:e2: 14:86:10:6c:dd:8e:37:f3:ec:c5:18:51:38:8d:16:a6:1b:fe: 2c:ab:e6:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3NUMxMTAvBgNVBAUTKDAxRkFDMTlCQTExMzUzNTBGN0FFQUU5QjU4MUE4NTk1 MjhBQzhCQUUwHhcNMjQxMTI0MTQxNjUwWhcNMjQxMjAxMTQxNjUwWjAYMRYwFAYD VQQDEw02NzQzMzU1Mi0yYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu23lia+3+ZkfnwfFki5FR/cQuVKkVlJerk/9hS5bm25C9f6h0GBwGU0Vf3QV Bhk+W/GVgip2eLTdRWwLwR+f48l6Xf3tJ+V58oPmGvAbW4F6793RZWd+ZCc/x9ej SAKO33ao2C0Y8oPVeRyEC0fGOpjlLQkr9H/a5iP29OIy1U4IWA/xDOHDTcSda0FK uIyKNZF8Fhn3K6DnzIZsWVk5typuAkpZbnYqtsAbpyew/oz9skTUCLoGbzyPzHcs os2pa/KWLr0XPifevg739+kzeKV8h636FoA/AJk2pJ5JDRH77GRoGY5UNpFBfht9 MPaEpEurk+/qGqA1jnMgVtUJHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtULDo4 3Zw2dJ0JsUGqSU2rziKbMB8GA1UdIwQYMBaAFAH6wZuhE1NQ966um1gahZUorIuu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDc1Qy9FQUM5NUZBQzFE NkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUxRDNycTZiV0JxRmxTaXNp NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmckJtNkVUVTFEM3JxNmJXQnFGbFNpc2k2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDc1Qy9FQUM5NUZBQzFENkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUx RDNycTZiV0JxRmxTaXNpNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgz9c6STvyQFsaMHEzguGNFnEHMcwSsOknTAwjb6PFm6EnptjPXJpN L5iLEWsTGxHouaSKqnmVZy89HZdie3cTQeOSH8zDJOFhP9IaAJ3OOsoOA/Ruw5uv QzaOsSD67ENHh4xwGQatwOTVysafQHwHCOneH/XhBCwZwKXJB1TMgsd2qJJ/VJQS TOqQxxH9ZYaU03FcvT5AZViNOCmc3I40gsQngvqAnP5IxzecX2veOzBMGNUDihxA ufwvIgbR2em81ejUCk1pH1ii8442dokdFtng34miaJ24zRCzEGPu7u6/Mp0KGm25 D+IUhhBs3Y438+zFGFE4jRamG/4sq+a+ -----END CERTIFICATE-----Generated at Sun Nov 24 15:31:15 2024 by rpki-client on console-ams.rpki-client.org