$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json) Hash identifier: u+97TyNf33nJssif9pu/Or9oAnnIOMiUaeciLBRJF2E= Subject key identifier: 6A:F1:13:56:25:B7:1B:93:DE:06:60:11:5C:BE:89:6F:F5:B2:F3:F0 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft Manifest number: 07A4 Signing time: Fri 22 Nov 2024 20:49:12 +0000 Manifest this update: Fri 22 Nov 2024 20:49:11 +0000 Manifest next update: Fri 29 Nov 2024 20:49:11 +0000 Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: nvgvx3lZt9uQBNWlZ13GIkgc9Tnl22wN2cxuvm2LZjk=) 2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: NCc9hJCBXOq0YAm+ILP4RcqXk9/Ipks9AopJvqBxvro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Nov 22 20:49:11 2024 GMT Not After : Nov 29 20:49:11 2024 GMT Subject: CN=6740ee48-b8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ae:5e:57:c0:6c:e2:1a:1f:e6:68:6c:b5:3e: 03:8e:06:9c:28:61:d4:dd:cc:a8:39:68:50:3b:77: d8:1b:9c:4e:79:7a:6d:af:aa:1d:30:4e:c5:ff:40: 87:f4:3b:a2:00:89:3e:a6:e1:8c:91:8e:5f:d9:8c: 4d:57:a9:fa:d1:fe:43:b0:f4:61:5a:9c:96:2f:35: 0a:65:4e:e8:1c:b9:3e:49:71:6b:0f:51:d5:01:f8: 32:2f:a8:d1:e0:37:01:26:ca:17:3d:01:21:87:37: 8c:a3:e0:c3:2d:7f:33:42:34:bb:2c:25:80:16:b4: 3f:ea:1b:dd:fd:52:0b:17:f7:44:b0:d1:2f:90:14: 96:f1:4f:fe:aa:3a:2e:e2:11:d8:4b:5d:d4:4d:bf: d8:5f:1e:f3:17:9b:0f:b3:41:3c:93:c4:f7:34:c4: 9a:fa:c0:80:39:72:d1:1c:2e:e9:85:bf:9e:d6:bc: 50:ab:1b:87:5f:30:b1:b9:23:e9:9f:ce:e8:0e:f9: 53:09:1f:32:af:e2:b0:5c:20:b4:6a:68:91:3d:3e: 94:8b:33:3b:93:46:25:3d:b0:88:6d:5c:2f:a5:e4: d8:55:a8:43:d3:14:be:ab:f3:e3:d1:cf:2f:03:2c: 73:ef:43:ae:8d:8b:5e:04:a9:e6:b4:b5:5d:6a:43: 1d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F1:13:56:25:B7:1B:93:DE:06:60:11:5C:BE:89:6F:F5:B2:F3:F0 X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:35:77:42:83:8e:aa:3e:7f:f7:85:80:8e:d1:e1:2b:ec:05: bb:64:ff:d9:90:cb:51:7a:07:dd:fd:f8:32:25:8a:d8:23:2d: d6:ee:bf:da:0a:12:7d:34:37:e5:2d:b7:b0:04:97:1a:47:fe: bd:a1:a8:d1:d0:06:8f:82:12:73:22:9d:64:d4:83:10:58:17: 39:31:fc:32:c1:23:0a:97:28:a8:58:8b:0f:2f:e0:4f:f1:e0: c2:69:00:a6:cb:08:cb:5d:38:04:a0:d7:b0:ec:d0:65:b7:2e: 53:f5:19:6f:bf:5b:b6:05:2a:a2:05:c1:ee:06:77:f0:c2:61: 9b:45:c4:bd:3a:2a:b1:45:71:b5:20:82:0a:54:5a:0f:ce:6a: bc:bf:00:8f:8b:fe:63:af:20:39:17:1a:82:ff:a6:f8:93:40: 3e:0e:d1:a9:c7:58:37:31:40:d6:ff:1b:33:2d:44:ad:b4:8f: d7:5e:ca:8c:9d:de:7f:01:a5:42:f7:4f:67:3d:80:b4:43:42: 24:9d:f4:e8:cf:e1:8f:1c:34:a6:bf:df:78:9e:d5:11:28:d8: e3:a9:7f:13:32:af:9c:5f:0a:78:63:39:5b:b3:60:9d:c8:64: c4:fc:9c:86:4c:cd:74:9c:69:5c:7b:10:dc:db:e5:dd:41:14: cc:85:d8:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjQxMTIyMjA0OTExWhcNMjQxMTI5MjA0OTExWjAYMRYwFAYD VQQDEw02NzQwZWU0OC1iOGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0K5eV8Bs4hof5mhstT4DjgacKGHU3cyoOWhQO3fYG5xOeXptr6odME7F/0CH 9DuiAIk+puGMkY5f2YxNV6n60f5DsPRhWpyWLzUKZU7oHLk+SXFrD1HVAfgyL6jR 4DcBJsoXPQEhhzeMo+DDLX8zQjS7LCWAFrQ/6hvd/VILF/dEsNEvkBSW8U/+qjou 4hHYS13UTb/YXx7zF5sPs0E8k8T3NMSa+sCAOXLRHC7phb+e1rxQqxuHXzCxuSPp n87oDvlTCR8yr+KwXCC0amiRPT6UizM7k0YlPbCIbVwvpeTYVahD0xS+q/Pj0c8v Ayxz70OujYteBKnmtLVdakMdbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrxE1Yl txuT3gZgEVy+iW/1svPwMB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2 a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQNXdCg46qPn/3hYCO0eEr7AW7ZP/ZkMtRegfd/fgyJYrYIy3W7r/a ChJ9NDflLbewBJcaR/69oajR0AaPghJzIp1k1IMQWBc5MfwywSMKlyioWIsPL+BP 8eDCaQCmywjLXTgEoNew7NBlty5T9Rlvv1u2BSqiBcHuBnfwwmGbRcS9OiqxRXG1 IIIKVFoPzmq8vwCPi/5jryA5FxqC/6b4k0A+DtGpx1g3MUDW/xszLUSttI/XXsqM nd5/AaVC909nPYC0Q0IknfToz+GPHDSmv994ntURKNjjqX8TMq+cXwp4Yzlbs2Cd yGTE/JyGTM10nGlcexDc2+XdQRTMhdgC -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:34 2024 by rpki-client on console-ams.rpki-client.org