$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json) Hash identifier: 2Yyefoqi9ES4aRiPMM4NuBc9KFV+LM5mFIe38CrlzrE= Subject key identifier: 98:E7:01:70:E4:33:CA:66:1C:60:D8:34:1D:D9:49:93:2D:18:80:D3 Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 08B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft Manifest number: 08A5 Signing time: Fri 22 Nov 2024 20:16:58 +0000 Manifest this update: Fri 22 Nov 2024 20:16:58 +0000 Manifest next update: Fri 29 Nov 2024 20:16:58 +0000 Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: JZoqvc1Ra4b1q+i5imXgHwuG/Hz12S7AVQ+SLVZ8zHk=) 2: 525850829D5111EC9F57A656C4F9AE02.roa (hash: UPlqEQ+6yrfO8QwofkgwsJWjOy3datbbZML+kp3Ld7c=) 3: 31B2B528217811EEBACF3324C4F9AE02.roa (hash: GgE2GgTXjnlE63xFP6LVosemjRTE0pIIUFRg3E+lupM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2232 (0x8b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Validity Not Before: Nov 22 20:16:58 2024 GMT Not After : Nov 29 20:16:58 2024 GMT Subject: CN=6740e6ba-3f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cb:b6:25:1a:d6:e2:51:2f:6d:f4:ce:7a:f5: 99:6a:6f:13:e1:e4:5e:17:c0:eb:f1:b5:88:51:43: bf:3e:b6:1f:80:b6:1c:81:23:14:56:e6:c7:d3:9b: 42:38:ac:63:6a:0f:c2:48:5a:f1:bd:ae:cb:c2:8d: ed:24:9d:65:a6:20:46:63:92:df:8e:99:ab:7c:a2: 0f:24:06:27:11:d7:b0:3b:33:91:63:fe:d7:2b:a7: 92:ca:8a:08:d0:e5:10:94:f9:96:63:14:2c:77:2d: cc:a6:cb:37:f5:f3:84:57:c8:9d:22:f6:ba:73:53: dd:22:a7:25:6b:5d:79:00:1f:19:30:56:14:1a:a5: 80:2f:bf:1a:5a:cc:29:39:8e:a6:58:56:f2:a8:d4: 51:87:47:34:6c:62:ad:c3:76:21:43:a2:a7:3b:e2: b6:69:8f:c1:11:f8:d2:01:77:f3:90:b6:39:69:04: f3:ab:80:03:46:96:ba:3a:67:9e:9a:ff:ae:ee:f6: f9:49:0c:1a:cc:2b:84:bc:a7:02:f5:a2:46:c4:da: b9:f9:3e:5b:72:63:d2:b1:5f:96:07:d1:27:45:29: b7:e2:30:58:a9:55:52:d9:be:7a:85:e9:6c:9c:d3: 16:7b:84:9e:9f:70:33:6e:f8:70:47:12:fd:5f:9d: 12:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E7:01:70:E4:33:CA:66:1C:60:D8:34:1D:D9:49:93:2D:18:80:D3 X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ff:52:20:86:3d:3c:92:7c:91:de:23:91:01:e9:30:f2:37: 60:fb:f2:2c:8f:4d:4e:ea:dc:3d:76:2c:0a:66:ee:d0:a2:93: 1b:51:5b:b8:02:ec:c9:1c:03:46:86:67:9e:53:72:68:c1:22: ef:8b:7d:37:cb:d6:19:41:76:42:08:89:51:b0:16:e2:9e:ee: a9:7f:4d:59:1a:f9:de:1f:28:bd:cb:83:b4:3e:32:89:df:df: 85:4a:a8:d8:b3:53:b4:7f:32:83:53:fc:fc:b5:c8:c6:89:0c: 79:0c:d3:30:24:85:1c:f4:be:32:e0:c6:40:36:88:b0:f9:aa: a5:9d:0e:26:81:54:e5:a2:d0:a1:c1:a1:02:6c:d2:6d:8a:ee: 72:05:b1:e6:e5:a2:c3:b1:26:64:34:35:5d:54:eb:23:a8:96: cd:f1:b5:bb:ea:2d:85:6f:26:69:ef:e8:b1:23:d6:17:63:aa: ae:be:87:a5:0a:a8:e6:f0:b1:23:42:9a:d3:a8:b2:f2:79:2a: 3c:fe:79:c2:95:5f:38:5b:e1:e8:f7:23:e5:f5:e3:3f:cc:de: b1:db:54:cd:a4:8a:b7:0e:6b:18:33:11:3c:76:fa:8e:0a:2c: 75:ec:b6:61:77:a1:5d:11:2a:e6:65:b9:ca:49:3e:3f:09:b7: 6d:d4:d2:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjQxMTIyMjAxNjU4WhcNMjQxMTI5MjAxNjU4WjAYMRYwFAYD VQQDEw02NzQwZTZiYS0zZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8u2JRrW4lEvbfTOevWZam8T4eReF8Dr8bWIUUO/PrYfgLYcgSMUVubH05tC OKxjag/CSFrxva7Lwo3tJJ1lpiBGY5LfjpmrfKIPJAYnEdewOzORY/7XK6eSyooI 0OUQlPmWYxQsdy3Mpss39fOEV8idIva6c1PdIqcla115AB8ZMFYUGqWAL78aWswp OY6mWFbyqNRRh0c0bGKtw3YhQ6KnO+K2aY/BEfjSAXfzkLY5aQTzq4ADRpa6Omee mv+u7vb5SQwazCuEvKcC9aJGxNq5+T5bcmPSsV+WB9EnRSm34jBYqVVS2b56hels nNMWe4Sen3AzbvhwRxL9X50SGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjnAXDk M8pmHGDYNB3ZSZMtGIDTMB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY4NS8yRDE1OTE4MkE5NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9S M0tUUTM4Ylh5WkIxS1kxXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF/1Ighj08knyR3iORAekw8jdg+/Isj01O6tw9diwKZu7QopMbUVu4 AuzJHANGhmeeU3JowSLvi303y9YZQXZCCIlRsBbinu6pf01ZGvneHyi9y4O0PjKJ 39+FSqjYs1O0fzKDU/z8tcjGiQx5DNMwJIUc9L4y4MZANoiw+aqlnQ4mgVTlotCh waECbNJtiu5yBbHm5aLDsSZkNDVdVOsjqJbN8bW76i2FbyZp7+ixI9YXY6quvoel Cqjm8LEjQprTqLLyeSo8/nnClV84W+Ho9yPl9eM/zN6x21TNpIq3DmsYMxE8dvqO Cix17LZhd6FdESrmZbnKST4/Cbdt1NKV -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org