$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json) Hash identifier: JB8ZjosFz+gvT+TVm6+hvjUfp1W5dyGqcEbiwynB4y0= Subject key identifier: 0B:AF:99:68:91:02:95:45:38:E6:EF:65:60:A2:FA:CA:0A:79:30:BE Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft Manifest number: 0117 Signing time: Sat 23 Nov 2024 03:02:42 +0000 Manifest this update: Sat 23 Nov 2024 03:02:42 +0000 Manifest next update: Sat 30 Nov 2024 03:02:42 +0000 Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: N+H4pyEWPAL9j0zx7YhVupxrbNofnbdK2GG3LCyv/bg=) 2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: Y3/gOL8kX8EHqyXVXkwyE6TktTINUyoqLT6AC0OUCvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A Validity Not Before: Nov 23 03:02:42 2024 GMT Not After : Nov 30 03:02:42 2024 GMT Subject: CN=674145d2-362d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:35:b5:e9:57:57:a9:8d:5a:1c:fc:e6:77: f2:c9:99:a6:db:0f:fa:a1:c0:8f:1d:f1:b1:89:6e: 36:73:66:d5:be:11:1d:6f:ca:3e:2d:9d:41:c1:b1: 98:52:00:ac:4f:86:06:9b:89:63:5a:77:87:f5:7e: 7b:91:74:1f:10:eb:58:a8:42:72:7d:87:58:a2:26: b2:7e:d1:d2:93:4e:41:9b:6f:5d:28:3c:29:20:c4: cb:de:cd:2c:47:c8:36:83:c2:0f:70:fd:39:7f:8c: 5c:8f:7f:74:a0:06:03:21:b1:54:7a:92:9c:6d:08: 00:8b:df:84:af:51:4c:11:55:b6:51:96:51:82:41: a6:b9:65:f0:9a:c4:4a:14:8d:69:ec:51:cf:fd:1d: b4:ef:07:b8:67:41:b2:f0:04:de:8d:d3:d6:f3:d7: 64:da:c8:5a:df:8b:ca:03:a3:8d:86:18:17:e1:89: 8a:6a:30:15:45:96:28:3a:fc:2d:20:19:f1:e1:61: e4:2a:ea:db:68:95:ae:02:c1:c6:07:c8:9d:49:fe: 14:c4:32:f1:89:77:63:04:10:b7:e2:60:70:8e:1f: 51:45:ce:9a:d7:af:a2:4c:5a:dc:43:a2:8a:81:70: ca:0c:6d:da:81:91:50:51:41:32:77:26:cb:fb:2f: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AF:99:68:91:02:95:45:38:E6:EF:65:60:A2:FA:CA:0A:79:30:BE X509v3 Authority Key Identifier: keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a9:00:db:88:26:d6:d2:2d:4c:d3:e1:3b:d2:c5:b5:3a:1e: 7e:c4:12:66:b6:44:e2:e9:ac:31:2d:6f:19:de:da:de:59:05: ec:f4:08:b3:e1:cb:bf:08:8c:f9:0e:ab:d7:a4:c1:f2:21:ae: 90:ab:83:ee:97:5b:8d:b0:e8:cc:5c:58:fc:24:55:ae:6a:f2: 7d:26:86:fd:57:be:99:2b:90:5e:d2:4c:16:0c:21:41:32:92: 0f:45:9f:5d:26:02:a7:2f:6d:38:21:61:a9:bc:6e:41:75:4c: 68:ef:46:50:08:ec:4d:7f:ec:cd:c4:6a:82:0e:01:56:ec:07: fe:5d:96:01:23:a2:92:c9:66:6f:57:2e:6e:a4:e1:64:a7:08: f6:aa:e9:89:49:50:ad:35:78:7a:38:b0:17:78:84:f1:4d:ca: 94:60:c5:a6:0a:47:0e:d9:7c:3d:cf:03:d9:1a:33:19:88:3d: 3d:a8:4f:6d:4c:2f:bb:c7:d2:75:86:bc:74:71:16:44:84:6d: ba:3e:98:3d:bc:87:42:a6:38:2d:3f:1e:ee:8f:57:2c:a7:76: e9:aa:19:b3:4f:73:dc:81:85:2b:20:69:0e:6d:e7:0a:41:3e: ea:71:d1:e6:26:e0:ce:e5:a5:a5:e6:75:0a:30:4b:fa:24:b6: a1:59:5a:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyOUUxMTAvBgNVBAUTKEIyOTM0ODlFM0FDRjI4RjBEMTU3MTQzN0NERjBCQ0My Q0E1NDU0NUEwHhcNMjQxMTIzMDMwMjQyWhcNMjQxMTMwMDMwMjQyWjAYMRYwFAYD VQQDEw02NzQxNDVkMi0zNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUM1telXV6mNWhz85nfyyZmm2w/6ocCPHfGxiW42c2bVvhEdb8o+LZ1BwbGY UgCsT4YGm4ljWneH9X57kXQfEOtYqEJyfYdYoiayftHSk05Bm29dKDwpIMTL3s0s R8g2g8IPcP05f4xcj390oAYDIbFUepKcbQgAi9+Er1FMEVW2UZZRgkGmuWXwmsRK FI1p7FHP/R207we4Z0Gy8ATejdPW89dk2sha34vKA6ONhhgX4YmKajAVRZYoOvwt IBnx4WHkKurbaJWuAsHGB8idSf4UxDLxiXdjBBC34mBwjh9RRc6a16+iTFrcQ6KK gXDKDG3agZFQUUEydybL+y9d/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuvmWiR ApVFOObvZWCi+soKeTC+MB8GA1UdIwQYMBaAFLKTSJ46zyjw0VcUN83wvMLKVFRa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzI5RS8wNDUxMjJBODAx MUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQRFJWeFEzemZDOHdzcFVW Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NwTkluanJQS1BEUlZ4UTN6ZkM4d3NwVVZGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzI5RS8wNDUxMjJBODAxMUMxMUVFQjI2ODRGNEJDNEY5QUUwMi9zcE5JbmpyUEtQ RFJWeFEzemZDOHdzcFVWRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjqQDbiCbW0i1M0+E70sW1Oh5+xBJmtkTi6awxLW8Z3treWQXs9Aiz 4cu/CIz5DqvXpMHyIa6Qq4Pul1uNsOjMXFj8JFWuavJ9Job9V76ZK5Be0kwWDCFB MpIPRZ9dJgKnL204IWGpvG5BdUxo70ZQCOxNf+zNxGqCDgFW7Af+XZYBI6KSyWZv Vy5upOFkpwj2qumJSVCtNXh6OLAXeITxTcqUYMWmCkcO2Xw9zwPZGjMZiD09qE9t TC+7x9J1hrx0cRZEhG26Ppg9vIdCpjgtPx7uj1csp3bpqhmzT3PcgYUrIGkObecK QT7qcdHmJuDO5aWl5nUKMEv6JLahWVoA -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:43 2024 by rpki-client on console-ams.rpki-client.org