$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: 0y1dckqQzref7us19HbaxWxCW6ZrqjVAFaBIjn5a9nQ= Subject key identifier: 59:CA:B2:D8:3A:4A:AF:72:14:5A:37:C4:0F:84:7A:08:82:45:1F:EC Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0BEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0BE9 Signing time: Fri 22 Nov 2024 18:22:36 +0000 Manifest this update: Fri 22 Nov 2024 18:22:36 +0000 Manifest next update: Fri 29 Nov 2024 18:22:36 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: ieVV5ttpb3SA5/Omiy429h5ZIBpfLTcSlgPJSDDzu3c=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: TfslzRg8GnFh8WZZlRlz17hq1aYEemXqD5Pt4nOxrj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3055 (0xbef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Nov 22 18:22:36 2024 GMT Not After : Nov 29 18:22:36 2024 GMT Subject: CN=6740cbec-d1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:9f:59:34:a5:e8:c2:af:ce:0c:c8:e9:07: 5a:47:06:43:fe:87:b8:f9:fd:68:6c:b2:ea:8d:61: a2:42:20:89:40:ff:db:33:0c:e3:75:ce:5f:bc:5d: bf:5d:4f:5e:9c:d2:46:10:9c:ae:ea:13:eb:a5:ae: d9:b9:36:03:77:cf:7f:d3:aa:e1:69:32:46:c2:55: 94:13:ef:08:73:a1:33:84:dd:4c:66:a1:63:a0:50: 5a:31:dd:37:6c:52:53:e2:78:15:7b:41:4d:c7:a9: 6c:70:9f:9d:c8:03:5a:6d:24:d0:8d:85:c1:62:40: 44:99:2a:17:c2:4d:4a:b1:9c:9a:ca:41:b1:08:26: 11:95:6c:db:fa:a5:45:e4:13:8d:f3:a9:75:f2:75: 72:46:ff:8a:ec:a6:82:66:ec:5a:25:4b:88:12:9f: 66:86:c8:fb:fb:e4:8d:cd:ed:c8:4b:f0:60:1d:94: 16:93:bd:61:74:99:51:1d:70:e1:74:6c:32:c5:b9: 1f:8b:ef:bd:53:a3:c0:48:4c:79:ab:4e:b5:cc:1e: c2:a3:0f:3f:f3:f2:75:e4:46:b9:a8:e7:a1:08:47: d3:e4:47:b3:b2:26:9f:e7:c8:4b:82:35:bd:36:7e: a7:9b:f3:88:19:42:53:82:7c:09:89:df:2e:e8:c8: b1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CA:B2:D8:3A:4A:AF:72:14:5A:37:C4:0F:84:7A:08:82:45:1F:EC X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:85:92:96:c0:d7:fe:6e:9b:16:c3:98:fe:ef:55:61:65:e1: 5c:fe:0d:e3:20:b6:7a:f2:5c:29:51:68:54:1a:19:14:b5:bc: 13:a7:c5:94:39:2a:e1:09:c7:5a:0d:28:5b:82:1e:0d:c3:b8: 9a:29:97:56:55:3a:af:8b:eb:57:a5:b1:34:f5:8d:79:64:1f: 4b:18:92:dd:2b:66:b2:11:82:1b:7c:26:f5:88:62:c0:9a:e4: 50:6a:f6:41:a4:9c:4c:a5:6b:b8:66:0b:2d:1c:c8:d3:7b:f3: 5e:53:c9:e2:c5:3d:39:1a:ca:d3:ae:fe:f7:92:e4:2a:b6:ef: 0d:54:86:c3:a3:16:58:a8:bc:a9:2d:4b:c8:08:21:bc:61:b3: 3b:33:21:f5:90:1d:3f:5f:ba:db:2f:2d:6b:57:e5:8f:e3:7e: d1:91:52:aa:6a:fe:02:6f:b3:a4:ad:91:57:33:4c:6a:e4:8f: ad:f2:a4:5a:2e:ac:b0:a4:8f:b6:33:20:85:5b:a7:d1:98:6c: b2:1a:1e:b3:a7:07:d7:27:b7:8e:20:21:17:13:6c:6b:52:95: 91:b6:63:f8:c0:4c:a6:3c:0f:0c:8d:df:97:ef:bd:c1:35:8f: f2:b9:0a:9b:90:b5:f8:74:ed:48:cd:1b:be:8f:9a:c7:0e:78: 99:de:31:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjQxMTIyMTgyMjM2WhcNMjQxMTI5MTgyMjM2WjAYMRYwFAYD VQQDEw02NzQwY2JlYy1kMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/WfWTSl6MKvzgzI6QdaRwZD/oe4+f1obLLqjWGiQiCJQP/bMwzjdc5fvF2/ XU9enNJGEJyu6hPrpa7ZuTYDd89/06rhaTJGwlWUE+8Ic6EzhN1MZqFjoFBaMd03 bFJT4ngVe0FNx6lscJ+dyANabSTQjYXBYkBEmSoXwk1KsZyaykGxCCYRlWzb+qVF 5BON86l18nVyRv+K7KaCZuxaJUuIEp9mhsj7++SNze3IS/BgHZQWk71hdJlRHXDh dGwyxbkfi++9U6PASEx5q061zB7Cow8/8/J15Ea5qOehCEfT5Eezsiaf58hLgjW9 Nn6nm/OIGUJTgnwJid8u6MixhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnKstg6 Sq9yFFo3xA+EegiCRR/sMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRhZKWwNf+bpsWw5j+71VhZeFc/g3jILZ68lwpUWhUGhkUtbwTp8WU OSrhCcdaDShbgh4Nw7iaKZdWVTqvi+tXpbE09Y15ZB9LGJLdK2ayEYIbfCb1iGLA muRQavZBpJxMpWu4ZgstHMjTe/NeU8nixT05GsrTrv73kuQqtu8NVIbDoxZYqLyp LUvICCG8YbM7MyH1kB0/X7rbLy1rV+WP437RkVKqav4Cb7OkrZFXM0xq5I+t8qRa LqywpI+2MyCFW6fRmGyyGh6zpwfXJ7eOICEXE2xrUpWRtmP4wEymPA8Mjd+X773B NY/yuQqbkLX4dO1IzRu+j5rHDniZ3jFn -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org