$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json) Hash identifier: aV/FaiPYaA8XvhvCYblylROTHFwu5Y8E1PLWLRPZ4Jo= Subject key identifier: 6E:E3:B2:27:0E:6B:47:9C:67:42:5C:0C:67:ED:FB:74:57:B6:94:40 Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Certificate serial: 0B01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft Manifest number: 0AFB Signing time: Fri 22 Nov 2024 19:03:48 +0000 Manifest this update: Fri 22 Nov 2024 19:03:47 +0000 Manifest next update: Fri 29 Nov 2024 19:03:47 +0000 Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: bQFV+5b6L4pW6auCtupfaun72eJ24T2blTje4HXvuc0=) 2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: r3hCeoo/8rZ4yVlQzn0i2w+wVbmmd0oZgL7ngll8YYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Validity Not Before: Nov 22 19:03:47 2024 GMT Not After : Nov 29 19:03:47 2024 GMT Subject: CN=6740d594-09b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fb:7a:90:b6:f3:2b:5c:0c:4d:7e:9b:5d:fd: 1a:9d:71:c7:81:16:6c:92:2f:a6:9f:65:35:3c:c9: fc:20:8f:ff:58:83:dc:08:bf:d7:5b:93:c4:ce:16: 50:09:a3:c2:4d:ad:8b:39:a2:0e:5b:a1:4d:33:01: 69:aa:e1:43:ce:7c:9c:a0:7b:2c:9a:f0:f9:46:a9: a1:0d:c4:d8:62:f7:09:9c:16:d8:04:34:be:b5:e4: b7:44:b5:94:f9:15:4c:fe:fb:c3:77:5f:29:62:f5: 32:9c:30:fc:84:33:4d:5c:53:f0:03:28:14:5f:6b: cc:ee:ba:98:dd:75:22:e5:e7:1e:c1:9a:37:ae:99: ea:9a:f2:44:e5:cf:0c:f4:88:17:f8:64:f1:29:d2: 49:01:87:9e:2d:f5:f8:1c:f4:15:4d:e7:b1:35:d0: f3:27:d7:b1:a6:41:34:8c:3c:5b:b0:96:de:e1:be: 02:7d:f2:2b:a2:f4:a9:72:a3:78:94:7f:ec:c5:1d: db:bc:f4:d5:fa:56:1c:c8:34:60:a8:09:97:8f:17: 10:ed:45:36:3a:57:2e:a0:9a:b9:9e:2a:66:b2:75: 3f:c4:75:b3:8d:00:9c:67:14:2f:0d:97:81:a5:60: d2:05:22:d0:86:d5:aa:89:52:a3:fe:61:cd:45:0a: a4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E3:B2:27:0E:6B:47:9C:67:42:5C:0C:67:ED:FB:74:57:B6:94:40 X509v3 Authority Key Identifier: keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b0:11:bb:bb:4c:b7:50:ea:84:91:7d:52:ab:34:3a:6f:f4: ef:42:94:2d:9e:77:16:0e:6c:d5:84:a7:06:c2:d0:30:3e:f2: bd:8a:61:6e:bb:43:53:81:3d:8a:99:a9:f3:7e:7d:50:89:c8: d8:c3:c3:83:6a:d8:29:7e:25:23:10:cb:65:e2:5e:96:b6:50: d1:4d:6b:a7:1f:3c:ff:45:94:66:2f:75:e1:4e:b6:3b:2a:d5: 8b:da:5a:cb:90:67:b0:26:2f:d4:6c:a8:32:2f:b4:87:e3:0f: 48:f5:39:2b:33:aa:07:91:0f:03:ca:2b:a2:73:8a:e7:f3:d1: dd:3f:66:ae:e6:17:7a:24:3a:e6:74:f3:af:52:c5:4a:c7:68: 7d:3c:14:d5:60:72:bb:8a:ee:2e:51:f3:ce:93:5f:04:22:ba: ec:c8:5d:fb:11:ca:62:2a:0a:c7:92:bf:a7:e5:b6:f4:9a:60: 76:1e:35:49:84:b2:6a:c3:ad:94:ba:de:a4:1a:49:d3:c2:00: 01:b8:43:b6:8a:d8:6b:a7:6d:71:39:49:92:d2:ff:c6:4d:a3: d6:bd:43:de:78:82:84:de:18:c7:a5:34:05:9c:ea:13:60:21: 7c:f8:24:fc:43:87:9b:43:82:76:66:1e:97:b8:d6:f9:b5:ee: c0:dc:d8:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0 NENCODU4QzgwHhcNMjQxMTIyMTkwMzQ3WhcNMjQxMTI5MTkwMzQ3WjAYMRYwFAYD VQQDEw02NzQwZDU5NC0wOWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/t6kLbzK1wMTX6bXf0anXHHgRZski+mn2U1PMn8II//WIPcCL/XW5PEzhZQ CaPCTa2LOaIOW6FNMwFpquFDznycoHssmvD5RqmhDcTYYvcJnBbYBDS+teS3RLWU +RVM/vvDd18pYvUynDD8hDNNXFPwAygUX2vM7rqY3XUi5ecewZo3rpnqmvJE5c8M 9IgX+GTxKdJJAYeeLfX4HPQVTeexNdDzJ9expkE0jDxbsJbe4b4CffIrovSpcqN4 lH/sxR3bvPTV+lYcyDRgqAmXjxcQ7UU2OlcuoJq5nipmsnU/xHWzjQCcZxQvDZeB pWDSBSLQhtWqiVKj/mHNRQqkOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7jsicO a0ecZ0JcDGft+3RXtpRAMB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzdCNi80M0Y2QTU3ODMxRUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5 aEI2ZnF5VnRER0JFeTRXTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBusBG7u0y3UOqEkX1SqzQ6b/TvQpQtnncWDmzVhKcGwtAwPvK9imFu u0NTgT2Kmanzfn1QicjYw8ODatgpfiUjEMtl4l6WtlDRTWunHzz/RZRmL3XhTrY7 KtWL2lrLkGewJi/UbKgyL7SH4w9I9TkrM6oHkQ8Dyiuic4rn89HdP2au5hd6JDrm dPOvUsVKx2h9PBTVYHK7iu4uUfPOk18EIrrsyF37EcpiKgrHkr+n5bb0mmB2HjVJ hLJqw62Uut6kGknTwgABuEO2ithrp21xOUmS0v/GTaPWvUPeeIKE3hjHpTQFnOoT YCF8+CT8Q4ebQ4J2Zh6XuNb5te7A3NjM -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org