$ rpki-client -vvf rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft File: at5OHE4cCb8U36pMPWAPQY4X5y4.mft (raw, json) Hash identifier: ZnqNAtxThwUc+Myd7ACeIMxKqc7Oa23DFB39eQ3OLoI= Subject key identifier: 0E:AA:F2:64:66:FF:6B:2A:9C:F8:1B:F7:7E:58:8F:1E:8A:82:BA:0A Authority key identifier: 6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E Certificate issuer: /CN=A918429B/serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Certificate serial: 3424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft Manifest number: 3424 Signing time: Fri 22 Nov 2024 14:53:32 +0000 Manifest this update: Fri 22 Nov 2024 14:53:31 +0000 Manifest next update: Fri 29 Nov 2024 14:53:31 +0000 Files and hashes: 1: at5OHE4cCb8U36pMPWAPQY4X5y4.crl (hash: dkE/7mbyDOaNEM02bMAvTtepTXdF6Ky9OhC2ovHsiGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13348 (0x3424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918429B/serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Validity Not Before: Nov 22 14:53:31 2024 GMT Not After : Nov 29 14:53:31 2024 GMT Subject: CN=67409aec-428a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:e7:31:16:b0:cf:de:23:86:34:28:57:9b: 19:a6:2c:54:a4:8b:16:5c:ba:45:ee:72:f1:a0:37: 77:ac:18:a5:21:64:06:ec:6b:46:14:f3:ae:29:02: 8a:c1:c1:a7:83:16:a6:d6:21:2f:f0:f3:8a:6d:67: 04:c1:a6:4a:aa:e0:30:7d:dd:ac:d9:ad:e8:f5:45: de:f5:7a:8b:bf:a0:51:b6:d9:2f:bc:10:a0:9a:37: ea:a2:bd:17:aa:c6:22:e2:37:2a:48:cf:90:bd:30: a9:3e:28:15:3e:7f:2a:ff:e9:3a:0b:2e:c8:df:53: e2:51:4d:47:ec:34:4a:64:4e:50:1b:6c:35:f3:00: f1:1e:c4:7e:0e:c7:2f:9c:de:af:e8:58:8a:b1:75: fe:e3:96:db:57:45:bc:ea:f2:2b:60:01:75:24:b6: 34:a6:38:bb:d7:84:2c:e5:3f:cf:99:9d:4d:08:ef: a4:2f:55:8f:2d:d5:de:ff:9b:6a:83:ca:cc:f8:26: b6:f4:48:81:b7:07:9c:03:58:85:75:39:8e:28:3d: b1:cb:11:73:a4:4a:a7:55:62:3e:29:c7:e2:dd:8f: 7b:07:7d:2c:36:52:c7:43:f8:c2:4b:fb:42:99:63: 76:aa:7f:47:64:9b:58:5d:a3:d9:a5:cf:07:b0:52: 79:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AA:F2:64:66:FF:6B:2A:9C:F8:1B:F7:7E:58:8F:1E:8A:82:BA:0A X509v3 Authority Key Identifier: keyid:6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b6:e5:df:fc:dd:c5:a7:c6:ea:1a:40:69:89:78:0c:83:17: a9:30:61:7e:66:52:b4:60:a6:21:22:d7:69:4e:d1:a7:bb:45: a6:98:79:d0:44:17:3f:c7:72:dd:3e:c1:f5:f6:bf:93:0f:75: c2:31:52:a1:5d:58:23:aa:69:4b:25:ad:44:5d:94:62:7c:e5: 03:a0:ca:fd:57:ec:55:e7:b0:61:ee:e1:c3:a8:bb:85:57:3a: 03:f9:20:51:30:b2:ad:4a:b7:16:be:bc:98:fb:76:46:f2:5c: da:df:fa:27:dd:b1:9a:c0:ad:63:ac:92:92:71:44:ec:57:5e: 1a:5b:26:74:91:8e:c3:83:92:92:48:94:93:a6:ef:d4:db:c2: c9:ed:2e:6d:fd:5a:c4:5c:be:b9:ac:27:c7:e5:4b:20:9e:d4: 4d:a2:1a:aa:3b:10:9f:a5:37:fa:1e:05:b2:e4:00:72:0b:91: 97:84:61:ee:00:5b:ca:80:30:5f:da:09:71:42:5d:bd:6e:d1: b8:26:be:db:77:73:e3:0c:b5:a6:c1:6f:21:63:d4:a5:db:f0: f4:d5:cd:f2:87:de:07:11:45:04:9c:89:97:f8:12:31:e1:a5: 60:a5:74:58:4c:54:50:97:6c:2d:d6:c9:3f:8f:16:9c:5d:98: 27:f2:ff:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyOUIxMTAvBgNVBAUTKDZBREU0RTFDNEUxQzA5QkYxNERGQUE0QzNENjAwRjQx OEUxN0U3MkUwHhcNMjQxMTIyMTQ1MzMxWhcNMjQxMTI5MTQ1MzMxWjAYMRYwFAYD VQQDEw02NzQwOWFlYy00MjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzznMRawz94jhjQoV5sZpixUpIsWXLpF7nLxoDd3rBilIWQG7GtGFPOuKQKK wcGngxam1iEv8POKbWcEwaZKquAwfd2s2a3o9UXe9XqLv6BRttkvvBCgmjfqor0X qsYi4jcqSM+QvTCpPigVPn8q/+k6Cy7I31PiUU1H7DRKZE5QG2w18wDxHsR+Dscv nN6v6FiKsXX+45bbV0W86vIrYAF1JLY0pji714Qs5T/PmZ1NCO+kL1WPLdXe/5tq g8rM+Ca29EiBtwecA1iFdTmOKD2xyxFzpEqnVWI+Kcfi3Y97B30sNlLHQ/jCS/tC mWN2qn9HZJtYXaPZpc8HsFJ5AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6q8mRm /2sqnPgb935Yjx6KgroKMB8GA1UdIwQYMBaAFGreThxOHAm/FN+qTD1gD0GOF+cu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI5Qi9CNjAwNjNBQzFE OTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0NiOFUzNnBNUFdBUFFZNFg1 eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0NU9IRTRjQ2I4VTM2cE1QV0FQUVk0WDV5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI5Qi9CNjAwNjNBQzFEOTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0Ni OFUzNnBNUFdBUFFZNFg1eTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUtuXf/N3Fp8bqGkBpiXgMgxepMGF+ZlK0YKYhItdpTtGnu0WmmHnQ RBc/x3LdPsH19r+TD3XCMVKhXVgjqmlLJa1EXZRifOUDoMr9V+xV57Bh7uHDqLuF VzoD+SBRMLKtSrcWvryY+3ZG8lza3/on3bGawK1jrJKScUTsV14aWyZ0kY7Dg5KS SJSTpu/U28LJ7S5t/VrEXL65rCfH5UsgntRNohqqOxCfpTf6HgWy5AByC5GXhGHu AFvKgDBf2glxQl29btG4Jr7bd3PjDLWmwW8hY9Sl2/D01c3yh94HEUUEnImX+BIx 4aVgpXRYTFRQl2wt1sk/jxacXZgn8v+G -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org