$ rpki-client -vvf rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft File: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft (raw, json) Hash identifier: WPWJ3ZkN5czysXPsWgtq9snBCJmDyHOZrR6YmLYx9hU= Subject key identifier: 15:65:57:CC:5B:88:F0:4E:4C:F3:39:A7:3A:93:E2:75:27:F9:8F:B2 Authority key identifier: A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE Certificate issuer: /CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft Manifest number: 08C5 Signing time: Fri 22 Nov 2024 20:12:55 +0000 Manifest this update: Fri 22 Nov 2024 20:12:54 +0000 Manifest next update: Fri 29 Nov 2024 20:12:54 +0000 Files and hashes: 1: pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl (hash: ExptyTxiK+8Wz7HZBOzqryrBj5OBt/lX76ysQwx/9UI=) 2: 2A1AD3BA9FE711EAAFA97B81C4F9AE02.roa (hash: tZFXSCyWL68XjydECjdTEwQZ8Np1J2KGOQbzVt6+//o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FF9D/serialNumber=A5FE5129D481ED1A00E55E99CE30E008B63D6CEE Validity Not Before: Nov 22 20:12:54 2024 GMT Not After : Nov 29 20:12:54 2024 GMT Subject: CN=6740e5c6-de69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:66:a3:06:de:36:67:28:e3:b7:6b:6c:cb:4f: 48:65:49:8b:c5:1c:44:fa:58:36:4d:1f:c8:d7:92: 4e:f8:4c:e1:7d:37:b9:dc:6b:ae:9d:04:c4:3d:9f: e1:66:20:28:0b:1a:3d:46:89:bc:66:63:ba:13:b8: 63:77:8e:ab:6f:74:23:45:0d:59:65:2e:42:e4:e9: 60:1f:e3:8d:9f:7c:02:6f:d2:18:2d:b7:06:9e:55: 1d:be:b9:76:f5:89:11:e4:d2:cc:0f:64:0f:e1:50: b4:63:e9:d2:48:88:7c:7e:cd:4d:c5:00:40:f3:13: 41:59:0d:67:cf:31:4e:31:b7:12:b3:19:79:db:d4: 44:ec:c3:3c:5e:d1:07:43:42:84:17:f9:4d:28:54: 2b:b0:09:97:11:d7:71:61:99:ee:09:0d:11:01:f7: 28:76:60:41:8f:76:14:ff:68:52:c2:5b:0a:10:3d: 64:2d:e4:ef:a1:22:fe:70:c2:63:a4:e5:9b:55:c9: f2:2b:18:65:e1:b5:d4:6d:98:e9:87:8f:e4:ba:56: d7:0f:0e:3f:33:a1:50:2b:c9:91:01:b5:07:1f:03: 97:a5:1c:84:64:44:9d:00:a8:35:86:2a:1f:70:ce: 7f:74:3d:bc:3e:2a:9d:d5:ed:03:00:f9:38:fa:8e: 94:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:65:57:CC:5B:88:F0:4E:4C:F3:39:A7:3A:93:E2:75:27:F9:8F:B2 X509v3 Authority Key Identifier: keyid:A5:FE:51:29:D4:81:ED:1A:00:E5:5E:99:CE:30:E0:08:B6:3D:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FF9D/CF86D58A9FE511EABB863A80C4F9AE02/pf5RKdSB7RoA5V6ZzjDgCLY9bO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:d4:b3:db:0c:30:57:82:24:a9:33:58:e6:15:c1:e1:0e:c4: 61:8f:e8:4e:36:21:52:78:e0:12:10:7b:93:c6:69:58:79:87: 76:36:04:33:13:56:b1:3a:e1:e5:3f:c1:ac:a3:52:ea:91:16: 34:f8:bc:34:d6:86:6e:87:c1:25:c2:81:ea:d8:b9:9b:15:39: a7:03:03:0c:b3:1d:8f:54:f3:cc:27:32:b0:ad:54:16:41:11: 93:9a:8a:f2:61:5e:63:41:d0:42:e5:45:10:8c:4e:2a:f3:d0: 89:0c:db:9b:0c:4e:cc:77:bf:af:fd:8b:96:c0:41:7d:47:dc: eb:92:80:df:47:37:fc:ad:00:99:0d:60:20:9c:75:c5:4e:c6: 9b:c4:19:61:21:40:39:2b:3a:57:48:7d:f7:16:5b:7d:a0:ac: 12:45:fb:97:42:c6:d7:85:39:66:4d:57:1d:e1:8d:0a:bd:e9: a2:5f:29:82:5c:ea:72:00:4c:dd:16:ca:e5:90:2d:d7:e8:eb: a2:bc:10:22:77:4f:62:de:59:2e:0e:5c:fc:ec:7b:ef:a2:5e: b7:88:39:56:be:c7:e9:c2:38:97:5f:2a:74:54:8f:2a:fa:45: d3:ee:8b:d8:ec:ce:8b:a1:c1:e0:a0:87:e5:40:73:6e:1c:9a: e7:a2:68:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZGOUQxMTAvBgNVBAUTKEE1RkU1MTI5RDQ4MUVEMUEwMEU1NUU5OUNFMzBFMDA4 QjYzRDZDRUUwHhcNMjQxMTIyMjAxMjU0WhcNMjQxMTI5MjAxMjU0WjAYMRYwFAYD VQQDEw02NzQwZTVjNi1kZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9majBt42Zyjjt2tsy09IZUmLxRxE+lg2TR/I15JO+EzhfTe53GuunQTEPZ/h ZiAoCxo9Rom8ZmO6E7hjd46rb3QjRQ1ZZS5C5OlgH+ONn3wCb9IYLbcGnlUdvrl2 9YkR5NLMD2QP4VC0Y+nSSIh8fs1NxQBA8xNBWQ1nzzFOMbcSsxl529RE7MM8XtEH Q0KEF/lNKFQrsAmXEddxYZnuCQ0RAfcodmBBj3YU/2hSwlsKED1kLeTvoSL+cMJj pOWbVcnyKxhl4bXUbZjph4/kulbXDw4/M6FQK8mRAbUHHwOXpRyEZESdAKg1hiof cM5/dD28Piqd1e0DAPk4+o6UnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVlV8xb iPBOTPM5pzqT4nUn+Y+yMB8GA1UdIwQYMBaAFKX+USnUge0aAOVemc4w4Ai2PWzu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkY5RC9DRjg2RDU4QTlG RTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdSb0E1VjZaempEZ0NMWTli TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmNVJLZFNCN1JvQTVWNlp6akRnQ0xZOWJPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkY5RC9DRjg2RDU4QTlGRTUxMUVBQkI4NjNBODBDNEY5QUUwMi9wZjVSS2RTQjdS b0E1VjZaempEZ0NMWTliTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC01LPbDDBXgiSpM1jmFcHhDsRhj+hONiFSeOASEHuTxmlYeYd2NgQz E1axOuHlP8Gso1LqkRY0+Lw01oZuh8ElwoHq2LmbFTmnAwMMsx2PVPPMJzKwrVQW QRGTmoryYV5jQdBC5UUQjE4q89CJDNubDE7Md7+v/YuWwEF9R9zrkoDfRzf8rQCZ DWAgnHXFTsabxBlhIUA5KzpXSH33Flt9oKwSRfuXQsbXhTlmTVcd4Y0KvemiXymC XOpyAEzdFsrlkC3X6OuivBAid09i3lkuDlz87Hvvol63iDlWvsfpwjiXXyp0VI8q +kXT7ovY7M6LocHgoIflQHNuHJrnomiE -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:35 2024 by rpki-client on console-ams.rpki-client.org