$ rpki-client -vvf rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft File: 19wEkNjuc-uWU-jiR2_8-4l0qt8.mft (raw, json) Hash identifier: cv2TpPBcBSmhcQ1j0T8IbNbKfkx4q8MdwCBEgBOqL1c= Subject key identifier: 74:32:AC:50:C5:2E:C0:F4:D6:B2:2F:7D:6C:4E:77:74:E7:12:2D:3A Authority key identifier: D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF Certificate issuer: /CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF Certificate serial: 0453 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft Manifest number: 044D Signing time: Fri 22 Nov 2024 23:45:40 +0000 Manifest this update: Fri 22 Nov 2024 23:45:40 +0000 Manifest next update: Fri 29 Nov 2024 23:45:40 +0000 Files and hashes: 1: 19wEkNjuc-uWU-jiR2_8-4l0qt8.crl (hash: nhn/swGwrwhDHEBIe0cQxXtbPu62lZXHWQZwzaebHE0=) 2: 233E4D90309811ECAED04B4AC4F9AE02.roa (hash: mvkJO23Rhne3EOWrAQ2tX8d2RfjeSAd4lU2tWfhmNuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1107 (0x453) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A0B8/serialNumber=D7DC0490D8EE73EB9653E8E2476FFCFB8974AADF Validity Not Before: Nov 22 23:45:40 2024 GMT Not After : Nov 29 23:45:40 2024 GMT Subject: CN=674117a4-01b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:49:d7:32:ee:cb:a3:ad:be:c1:3e:46:bd: c3:7b:1f:66:af:3e:7f:53:2a:9f:e7:e3:91:99:84: 7c:f0:21:44:61:be:b3:d3:e3:16:7f:4b:54:6e:66: 5b:ca:bf:04:0c:fa:82:99:e0:71:0e:18:be:5f:0b: be:0c:0e:07:2d:e3:ab:a2:bc:50:ac:fe:7a:c6:e9: 8c:51:b4:e5:8e:b3:92:36:59:51:39:27:95:ab:0b: 9f:6f:76:c9:eb:4f:2e:f3:7b:cd:86:9c:a3:82:77: cf:f1:21:8e:5f:cf:15:b3:fd:b0:cd:38:2d:8d:61: 86:c1:cf:43:a5:35:d8:29:14:b2:04:5b:59:12:ed: 70:3f:d8:bd:40:6c:2a:5b:e4:c4:97:43:26:7f:e2: e1:cb:bc:fa:bc:52:68:72:0d:37:9e:bc:e3:13:c0: 91:75:c4:5c:64:38:a7:73:b3:02:c3:88:c3:5d:29: 21:27:5c:df:8b:97:d7:d2:48:90:21:fa:bf:d5:62: e0:08:c7:27:9b:97:c4:4b:ac:45:7b:d2:2e:a2:57: d0:5e:e7:0d:c5:98:d9:7e:36:66:7f:a7:8d:50:b1: 27:1e:a8:1b:a8:12:9d:bf:2e:62:e8:0e:aa:c9:43: de:7c:e6:6f:95:08:bc:8c:2b:4a:ce:70:1b:6f:64: 33:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:32:AC:50:C5:2E:C0:F4:D6:B2:2F:7D:6C:4E:77:74:E7:12:2D:3A X509v3 Authority Key Identifier: keyid:D7:DC:04:90:D8:EE:73:EB:96:53:E8:E2:47:6F:FC:FB:89:74:AA:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/19wEkNjuc-uWU-jiR2_8-4l0qt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A0B8/17DEFF142FF611EC9047A243C4F9AE02/19wEkNjuc-uWU-jiR2_8-4l0qt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:27:fd:2a:13:e9:de:3a:4b:35:c1:fb:21:13:c3:58:4c:ca: 77:a0:3d:28:c8:1b:8a:2f:15:e2:fe:32:75:0b:0a:1d:fa:a2: 04:1e:96:f5:19:fb:44:f8:6b:54:f4:0c:00:cb:24:5e:b0:7d: d0:8a:51:9f:a8:9b:c5:61:21:5d:a2:df:bf:81:7e:b7:b2:84: be:df:2f:94:87:22:ab:e2:b9:69:f0:11:c0:e4:8d:2c:91:62: 0f:45:ae:bf:c0:f5:ec:dd:7f:b2:31:5b:0e:66:a0:2a:c1:d4: 86:64:d9:41:5a:50:99:2e:6a:c6:a2:6e:ab:da:68:d6:ae:5b: 9b:f5:26:7c:ed:1f:18:81:23:35:b3:72:7b:03:44:3e:01:ba: eb:9f:04:a7:15:1d:10:56:33:77:17:4f:13:f9:86:df:21:82: a2:61:36:3b:30:ed:75:d8:58:78:d1:31:ad:19:aa:d4:e0:d4: 2a:9f:41:53:0a:58:88:4e:ca:2f:bd:1a:e4:ac:f3:8d:69:5e: 0c:e1:e4:8f:70:37:ce:25:c6:10:93:96:69:24:77:eb:a3:df: 36:d5:9b:79:91:0d:52:54:f8:0c:5c:e5:b9:2a:07:75:0b:83: 10:1a:ad:48:f6:34:e7:36:07:be:4d:37:c0:19:e9:89:85:50: 47:f3:dd:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEwQjgxMTAvBgNVBAUTKEQ3REMwNDkwRDhFRTczRUI5NjUzRThFMjQ3NkZGQ0ZC ODk3NEFBREYwHhcNMjQxMTIyMjM0NTQwWhcNMjQxMTI5MjM0NTQwWjAYMRYwFAYD VQQDEw02NzQxMTdhNC0wMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJJJ1zLuy6OtvsE+Rr3Dex9mrz5/Uyqf5+ORmYR88CFEYb6z0+MWf0tUbmZb yr8EDPqCmeBxDhi+Xwu+DA4HLeOrorxQrP56xumMUbTljrOSNllROSeVqwufb3bJ 608u83vNhpyjgnfP8SGOX88Vs/2wzTgtjWGGwc9DpTXYKRSyBFtZEu1wP9i9QGwq W+TEl0Mmf+Lhy7z6vFJocg03nrzjE8CRdcRcZDinc7MCw4jDXSkhJ1zfi5fX0kiQ Ifq/1WLgCMcnm5fES6xFe9IuolfQXucNxZjZfjZmf6eNULEnHqgbqBKdvy5i6A6q yUPefOZvlQi8jCtKznAbb2QzCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQyrFDF LsD01rIvfWxOd3TnEi06MB8GA1UdIwQYMBaAFNfcBJDY7nPrllPo4kdv/PuJdKrf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTBCOC8xN0RFRkYxNDJG RjYxMUVDOTA0N0EyNDNDNEY5QUUwMi8xOXdFa05qdWMtdVdVLWppUjJfOC00bDBx dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE5d0VrTmp1Yy11V1UtamlSMl84LTRsMHF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTBCOC8xN0RFRkYxNDJGRjYxMUVDOTA0N0EyNDNDNEY5QUUwMi8xOXdFa05qdWMt dVdVLWppUjJfOC00bDBxdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKJ/0qE+neOks1wfshE8NYTMp3oD0oyBuKLxXi/jJ1Cwod+qIEHpb1 GftE+GtU9AwAyyResH3QilGfqJvFYSFdot+/gX63soS+3y+UhyKr4rlp8BHA5I0s kWIPRa6/wPXs3X+yMVsOZqAqwdSGZNlBWlCZLmrGom6r2mjWrlub9SZ87R8YgSM1 s3J7A0Q+AbrrnwSnFR0QVjN3F08T+YbfIYKiYTY7MO112Fh40TGtGarU4NQqn0FT CliITsovvRrkrPONaV4M4eSPcDfOJcYQk5ZpJHfro9821Zt5kQ1SVPgMXOW5Kgd1 C4MQGq1I9jTnNge+TTfAGemJhVBH892F -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:24 2024 by rpki-client on console-ams.rpki-client.org