$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft File: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft (raw, json) Hash identifier: z5IAak+g6gXvrvwfCoNm7ZLLyPUIm56zSGTg48Vtytc= Subject key identifier: 1E:98:EE:00:77:B7:F6:24:E8:DB:BB:2F:37:06:B3:95:82:A4:26:E7 Authority key identifier: E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 Certificate issuer: /CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Certificate serial: 08C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft Manifest number: 08C6 Signing time: Fri 22 Nov 2024 20:12:20 +0000 Manifest this update: Fri 22 Nov 2024 20:12:19 +0000 Manifest next update: Fri 29 Nov 2024 20:12:19 +0000 Files and hashes: 1: 4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl (hash: WC+1qKL8bCOULCdJLuNKDR/6/eKNnKWIDtMtB6yZt/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2246 (0x8c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174FD4/serialNumber=E1C827C3489745E356E90E8B61A3F447D1D15311 Validity Not Before: Nov 22 20:12:19 2024 GMT Not After : Nov 29 20:12:19 2024 GMT Subject: CN=6740e5a3-bc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:eb:a3:e9:c2:be:f1:7f:f2:8f:9b:3e:de: 6e:e5:73:a5:3d:3e:ca:67:96:25:f8:b1:a3:2b:f2: 53:04:93:41:ff:af:82:2f:5c:3d:bb:81:64:12:82: 2b:c5:9c:51:58:7a:22:19:14:25:9a:d5:b9:fb:8a: 1e:91:57:a0:ae:a7:82:38:9f:41:5e:ff:2a:32:b5: 4a:06:92:f7:7c:5b:b7:96:9f:2e:b1:17:0d:af:87: 18:ff:66:77:70:06:2c:fa:c6:71:97:fe:d1:ef:14: 56:0d:7e:b9:59:b4:2a:30:3b:7c:e5:46:4c:a1:16: 33:92:28:39:58:c9:36:70:a1:97:96:01:72:02:78: 5d:c3:e4:48:00:33:f6:40:a9:a2:dc:4e:fb:c0:39: bc:3d:7c:3f:09:e0:5d:0e:90:cb:5b:30:94:6a:f2: ad:52:eb:06:4b:e8:0f:32:77:9d:9b:fd:33:02:bd: 3b:74:34:95:cf:d5:2f:bc:ff:14:17:6a:5c:da:80: 12:c0:10:5c:7c:fd:30:21:58:1b:29:75:ca:81:e2: 12:b3:26:0c:d7:57:da:2e:ae:4a:34:60:6f:ca:30: c9:c6:f3:16:47:65:79:e9:f5:a9:e7:3a:d5:38:e4: 5c:3e:18:6b:55:a5:a9:d8:da:a6:c8:13:7a:fe:95: 0d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:98:EE:00:77:B7:F6:24:E8:DB:BB:2F:37:06:B3:95:82:A4:26:E7 X509v3 Authority Key Identifier: keyid:E1:C8:27:C3:48:97:45:E3:56:E9:0E:8B:61:A3:F4:47:D1:D1:53:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cgnw0iXReNW6Q6LYaP0R9HRUxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FD4/40C013F89F1211EA82A60635C4F9AE02/4cgnw0iXReNW6Q6LYaP0R9HRUxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:9e:02:13:7c:2f:96:b5:58:34:13:5a:c6:ce:18:7a:80:38: ad:79:3b:00:bd:24:a7:26:a3:f2:37:c3:ce:32:1d:cf:15:9c: e3:a8:ca:e1:8d:c2:d5:d8:f8:0d:bf:ac:87:b9:a6:59:88:ac: ae:d6:3d:3a:62:bd:6b:17:55:58:0d:25:34:e8:67:ae:e5:83: 7f:05:9e:74:96:34:eb:35:14:d8:65:57:d0:67:2b:05:2a:b9: 9e:cd:4e:f9:47:d0:ee:b8:03:1e:be:85:24:f4:78:f5:58:25: 7b:14:e4:00:19:d6:01:dd:af:2f:bb:75:fb:81:fd:4c:72:8f: 91:86:0e:7a:9e:cf:47:32:23:f1:b7:67:95:19:79:42:eb:f7: 0c:db:37:5d:f0:70:e5:94:be:75:84:45:8a:39:5e:86:72:ea: be:a3:54:cc:75:65:7b:42:ba:b1:2a:1a:bb:d6:ee:2d:24:14: da:bf:aa:2a:05:ff:a3:c5:f9:d3:f3:05:a1:ee:d1:be:ed:49: e8:1b:6b:9a:48:d3:32:c3:68:39:f2:8f:25:2c:d1:f0:fd:f0: 4b:d2:52:5c:0f:b9:6e:93:25:8b:95:93:d1:7f:9c:56:8a:cb: 45:48:cf:6b:56:29:3c:5d:e6:f9:59:af:b7:cd:39:18:95:f2: c2:12:45:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGRDQxMTAvBgNVBAUTKEUxQzgyN0MzNDg5NzQ1RTM1NkU5MEU4QjYxQTNGNDQ3 RDFEMTUzMTEwHhcNMjQxMTIyMjAxMjE5WhcNMjQxMTI5MjAxMjE5WjAYMRYwFAYD VQQDEw02NzQwZTVhMy1iYzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryXro+nCvvF/8o+bPt5u5XOlPT7KZ5Yl+LGjK/JTBJNB/6+CL1w9u4FkEoIr xZxRWHoiGRQlmtW5+4oekVegrqeCOJ9BXv8qMrVKBpL3fFu3lp8usRcNr4cY/2Z3 cAYs+sZxl/7R7xRWDX65WbQqMDt85UZMoRYzkig5WMk2cKGXlgFyAnhdw+RIADP2 QKmi3E77wDm8PXw/CeBdDpDLWzCUavKtUusGS+gPMnedm/0zAr07dDSVz9UvvP8U F2pc2oASwBBcfP0wIVgbKXXKgeISsyYM11faLq5KNGBvyjDJxvMWR2V56fWp5zrV OORcPhhrVaWp2NqmyBN6/pUNXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6Y7gB3 t/Yk6Nu7LzcGs5WCpCbnMB8GA1UdIwQYMBaAFOHIJ8NIl0XjVukOi2Gj9EfR0VMR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEZENC80MEMwMTNGODlG MTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJlTlc2UTZMWWFQMFI5SFJV eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRjZ253MGlYUmVOVzZRNkxZYVAwUjlIUlV4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEZENC80MEMwMTNGODlGMTIxMUVBODJBNjA2MzVDNEY5QUUwMi80Y2dudzBpWFJl Tlc2UTZMWWFQMFI5SFJVeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDangITfC+WtVg0E1rGzhh6gDiteTsAvSSnJqPyN8POMh3PFZzjqMrh jcLV2PgNv6yHuaZZiKyu1j06Yr1rF1VYDSU06Geu5YN/BZ50ljTrNRTYZVfQZysF KrmezU75R9DuuAMevoUk9Hj1WCV7FOQAGdYB3a8vu3X7gf1Mco+Rhg56ns9HMiPx t2eVGXlC6/cM2zdd8HDllL51hEWKOV6Gcuq+o1TMdWV7QrqxKhq71u4tJBTav6oq Bf+jxfnT8wWh7tG+7UnoG2uaSNMyw2g58o8lLNHw/fBL0lJcD7lukyWLlZPRf5xW istFSM9rVik8Xeb5Wa+3zTkYlfLCEkV0 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org