$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft File: Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft (raw, json) Hash identifier: iTbXRJ2eXhWKi0PtYEmPmu89LNjfns11jWloOS/j5+4= Subject key identifier: F9:0B:3D:13:D7:94:DC:BC:9D:ED:0E:60:26:1B:6F:8D:78:39:91:A0 Authority key identifier: 49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E Certificate issuer: /CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Certificate serial: 0CEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft Manifest number: 0CE5 Signing time: Fri 22 Nov 2024 18:00:43 +0000 Manifest this update: Fri 22 Nov 2024 18:00:42 +0000 Manifest next update: Fri 29 Nov 2024 18:00:42 +0000 Files and hashes: 1: Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl (hash: xJNuZ+GQalKKxmqtOv/bC773ikLsA1/JO8xI+OJOvzk=) 2: 1214EE40D2BF11E9A7F4EF1FC4F9AE02.roa (hash: 3NvJFO+he2ACqNiLgD+llzSbjPgJVQ7hiMX5hEMIbGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3308 (0xcec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194EF2/serialNumber=49C9E9E3227CD55AD29A213CBAA174785A165C7E Validity Not Before: Nov 22 18:00:42 2024 GMT Not After : Nov 29 18:00:42 2024 GMT Subject: CN=6740c6ca-efb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5f:fa:ea:7c:e1:54:7b:7d:c5:61:cf:cc:4c: 1e:bb:b3:c3:3f:62:52:4d:81:64:6f:2e:6a:f1:ef: 8f:ac:70:97:76:cd:97:b2:fe:62:da:0e:5c:e1:6b: a6:99:73:fd:05:19:cc:53:f1:76:f4:c0:e7:a2:d6: d0:b7:cf:30:19:20:a0:87:2c:61:cd:0c:35:95:c4: 17:db:76:65:aa:31:65:61:ef:4a:89:47:71:12:c0: 21:b3:75:0d:64:aa:01:be:48:67:dd:70:13:7e:0e: 82:0b:0e:f6:24:9c:b7:9a:b9:e5:95:52:7d:6c:ab: 46:2c:9c:68:f1:ce:59:69:98:81:fd:2b:2f:32:9f: 07:c8:fd:6e:93:c4:f3:d0:9e:b1:bd:75:9f:a4:aa: 62:95:49:c0:60:f7:f0:77:7d:b4:3f:52:14:5d:f2: 0d:90:db:39:46:86:07:45:c1:96:4c:86:f5:66:f2: 1f:82:fb:8b:71:84:01:be:15:15:dd:e1:70:2e:44: e0:f2:30:31:1e:23:35:b2:55:ee:33:7a:5f:95:c8: a9:cb:9d:ff:47:34:f1:bc:3c:46:5d:ee:7f:a3:23: 5b:27:86:81:e0:2d:1b:7c:2f:df:88:c0:f9:9e:9c: e8:fc:21:6b:b4:87:1a:b4:cc:04:15:5d:86:f7:e8: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0B:3D:13:D7:94:DC:BC:9D:ED:0E:60:26:1B:6F:8D:78:39:91:A0 X509v3 Authority Key Identifier: keyid:49:C9:E9:E3:22:7C:D5:5A:D2:9A:21:3C:BA:A1:74:78:5A:16:5C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Scnp4yJ81VrSmiE8uqF0eFoWXH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EF2/B6441EB6D2BD11E99A1D4B1DC4F9AE02/Scnp4yJ81VrSmiE8uqF0eFoWXH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:50:0a:f1:c7:c8:38:10:ea:26:02:f2:66:73:41:ec:5e:33: ff:56:68:e3:72:c9:8a:ff:08:47:16:2b:2a:33:14:13:33:4b: a4:75:65:37:43:2c:ce:58:cd:9a:84:28:f8:b1:db:f9:64:95: e4:e3:4c:3b:3f:01:8e:9a:4d:0d:1a:fa:6f:72:eb:8e:5c:5a: c2:3a:c3:b2:3d:24:e2:1a:8f:82:30:94:60:9d:4c:d1:97:31: b6:e3:ad:3b:f6:ad:1a:11:2a:9f:52:5c:8a:52:62:e0:5f:6c: f4:33:e5:a7:68:4d:d4:e9:cc:c0:ea:7b:3f:9d:dd:c9:a1:a2: e6:93:25:ba:00:86:a1:cc:34:98:2a:80:da:43:30:36:6c:1b: cc:da:24:68:90:82:f6:ce:c2:90:4e:b2:23:f6:f3:6c:99:be: 4f:fc:fd:45:5b:48:e2:6a:f3:d8:cf:d2:54:49:a9:fa:7f:98: 37:0c:ba:3a:0b:4c:b3:59:f1:a9:d3:f4:37:d1:72:bc:51:1a: 28:06:09:4f:df:30:f8:ed:88:56:2d:f3:cf:67:aa:f1:a5:d2: 54:09:ae:7b:c5:a7:ae:4b:a9:15:25:42:b3:24:9c:74:9a:c0: 4b:29:f6:fe:7a:5d:e1:ac:bd:bc:22:20:e1:d9:f9:95:6a:da: de:b5:6d:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFRjIxMTAvBgNVBAUTKDQ5QzlFOUUzMjI3Q0Q1NUFEMjlBMjEzQ0JBQTE3NDc4 NUExNjVDN0UwHhcNMjQxMTIyMTgwMDQyWhcNMjQxMTI5MTgwMDQyWjAYMRYwFAYD VQQDEw02NzQwYzZjYS1lZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzV/66nzhVHt9xWHPzEweu7PDP2JSTYFkby5q8e+PrHCXds2Xsv5i2g5c4Wum mXP9BRnMU/F29MDnotbQt88wGSCghyxhzQw1lcQX23ZlqjFlYe9KiUdxEsAhs3UN ZKoBvkhn3XATfg6CCw72JJy3mrnllVJ9bKtGLJxo8c5ZaZiB/SsvMp8HyP1uk8Tz 0J6xvXWfpKpilUnAYPfwd320P1IUXfINkNs5RoYHRcGWTIb1ZvIfgvuLcYQBvhUV 3eFwLkTg8jAxHiM1slXuM3pflcipy53/RzTxvDxGXe5/oyNbJ4aB4C0bfC/fiMD5 npzo/CFrtIcatMwEFV2G9+gGowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkLPRPX lNy8ne0OYCYbb414OZGgMB8GA1UdIwQYMBaAFEnJ6eMifNVa0pohPLqhdHhaFlx+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEVGMi9CNjQ0MUVCNkQy QkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFWclNtaUU4dXFGMGVGb1dY SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NjbnA0eUo4MVZyU21pRTh1cUYwZUZvV1hINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEVGMi9CNjQ0MUVCNkQyQkQxMUU5OUExRDRCMURDNEY5QUUwMi9TY25wNHlKODFW clNtaUU4dXFGMGVGb1dYSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIUArxx8g4EOomAvJmc0HsXjP/VmjjcsmK/whHFisqMxQTM0ukdWU3 QyzOWM2ahCj4sdv5ZJXk40w7PwGOmk0NGvpvcuuOXFrCOsOyPSTiGo+CMJRgnUzR lzG246079q0aESqfUlyKUmLgX2z0M+WnaE3U6czA6ns/nd3JoaLmkyW6AIahzDSY KoDaQzA2bBvM2iRokIL2zsKQTrIj9vNsmb5P/P1FW0jiavPYz9JUSan6f5g3DLo6 C0yzWfGp0/Q30XK8URooBglP3zD47YhWLfPPZ6rxpdJUCa57xaeuS6kVJUKzJJx0 msBLKfb+el3hrL28IiDh2fmVatretW2x -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org