$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft File: Iu3562YIf9DpgXrnNsADnRiAiNU.mft (raw, json) Hash identifier: qxJ/Bv1B8b0ZrANZ16VQm38zB4c/CiXCLY17azIN4yg= Subject key identifier: FC:40:78:FF:63:17:A0:C1:8F:7C:A5:5C:55:54:A2:61:37:1A:AC:9F Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 Certificate issuer: /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Certificate serial: 03DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft Manifest number: 03B6 Signing time: Mon 25 Nov 2024 00:16:19 +0000 Manifest this update: Mon 25 Nov 2024 00:16:19 +0000 Manifest next update: Mon 02 Dec 2024 00:16:19 +0000 Files and hashes: 1: Iu3562YIf9DpgXrnNsADnRiAiNU.crl (hash: jAZYwPyTt6d0OD8LezGZ2mcFGuGEHwDPu06/gtCKHJY=) 2: 8276BFA60BB811EFB091FD1CC4F9AE02.roa (hash: Z+d2uMxSGOWngmP2yoKBXhQJG1Ag5+yYUkcWKu8ENZs=) 3: 642A8EA2887911ECAFCDDE1FC4F9AE02.roa (hash: biN9tdHvCrBXyCcQr8koJ0sIQQhBNypDbtvOi2obKUY=) 4: 15E884EAF73311ED8E92F45DC4F9AE02.roa (hash: 4QNmYEjYSfs+rPixjKW3E7Qc4YMtxxHvXpHxkfjKdio=) 5: 20519AFE346111EFB91EA738C4F9AE02.roa (hash: aygeQkP1fHUp6GkG7Gr3GPYW0xo6LhPZYhejgYQHNPs=) 6: E5AC554A897211EEA179DA5DC4F9AE02.roa (hash: mwOsBea1rWND0sI63PEdPpPZAV46iFo2K535J85/wXc=) 7: 818F58F0EAF411EC9A14E22EC4F9AE02.roa (hash: iCzvbPx14J1v6pFVMr+VNN7f2RXNHFDsAG0wVMP0Akk=) 8: EB0EA48C8AD411ECB9E15216C4F9AE02.roa (hash: MRVu+zCM+pxSOQQI/PbLEOb/v/ucoSnxhhMwjFh2cvg=) 9: BEF172F4BD1311EDAB02753EC4F9AE02.roa (hash: iNceeXcWd+IpQqeSg0WLOtTc+/9CtvbI3t/g9CgtLpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 990 (0x3de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5 Validity Not Before: Nov 25 00:16:19 2024 GMT Not After : Dec 2 00:16:19 2024 GMT Subject: CN=6743c1d3-c8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:9e:62:8f:01:6f:7f:d5:3e:22:94:ed:94: 4e:03:6b:4c:5a:86:ba:82:26:69:4a:35:f1:60:f0: e1:92:ff:ad:c3:28:a9:41:3c:9b:80:91:a7:60:97: 07:0b:57:0d:43:fa:ec:2b:62:46:77:21:d6:2a:92: 81:3b:6d:30:31:2b:e1:33:d7:49:93:3e:d6:db:e6: bd:63:24:4e:5b:53:0a:ee:70:72:bb:84:94:ba:76: b1:f4:c6:f0:5f:49:80:c0:23:f7:cb:46:7c:da:ad: 8a:3c:1f:28:15:c0:02:6e:53:79:1b:84:61:5d:0b: 73:27:0a:aa:00:4c:28:c8:ba:70:0c:f8:2d:30:11: 2e:a5:ae:94:55:ca:14:72:8e:62:91:50:43:20:9a: 36:9f:66:87:05:cb:f3:5c:c9:34:81:3b:eb:99:ff: 51:78:7d:25:cf:f9:89:38:4a:f1:07:83:05:29:3f: ff:d0:15:e3:c6:09:cd:66:76:11:90:21:00:97:cc: 14:50:b3:c8:f3:33:03:94:b5:40:4f:f4:ff:35:41: 7a:d3:2d:61:21:c5:c2:6f:81:14:35:c7:52:e9:a7: 24:c9:eb:d2:db:c3:6d:b4:af:8b:a3:a3:5f:37:80: 63:1a:f0:b0:93:b2:3e:8f:76:56:97:c1:55:89:ae: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:40:78:FF:63:17:A0:C1:8F:7C:A5:5C:55:54:A2:61:37:1A:AC:9F X509v3 Authority Key Identifier: keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:98:ad:db:bf:34:9c:94:96:3b:8a:da:95:2b:2a:6a:2f:ba: c8:d0:e5:04:76:42:2c:2e:3b:82:15:4d:be:82:92:7f:ac:f1: bb:00:c8:2c:9b:07:69:5a:50:43:0d:c6:c3:e4:ab:a9:71:8e: ac:87:e6:11:b8:04:9d:75:57:b3:13:16:61:7c:3b:01:b4:8d: cc:00:66:3d:a6:de:fa:14:c6:e4:7a:47:45:7e:3c:74:b5:73: 2a:a1:52:17:cb:fb:3c:1e:da:14:75:ac:fd:34:c6:55:95:4c: 90:d5:2f:2f:e0:7c:79:2e:7b:c0:2f:4a:73:e5:32:1e:aa:13: ad:cf:6c:2f:dc:b9:80:e6:eb:c4:51:2a:3e:d5:11:de:83:6a: ac:84:5f:89:10:4e:75:56:ce:ce:54:18:11:fd:65:d5:53:57: 28:6a:1c:e1:02:83:ae:62:11:f4:ee:1c:df:f3:f4:f5:78:80: 91:8a:0f:8d:52:26:7b:d8:d4:3c:c5:3b:6d:30:be:6d:6d:69: c0:91:3e:b7:47:c0:b7:fe:2e:70:5d:c3:22:f6:bf:83:8e:7f: 52:d1:63:5c:ef:a3:68:d3:76:f4:e1:bd:53:9b:92:8e:56:01: 75:c4:dd:38:bc:14:bd:10:1f:02:d8:ba:0e:43:d3:64:2e:15: f0:d1:4a:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE MTg4MDg4RDUwHhcNMjQxMTI1MDAxNjE5WhcNMjQxMjAyMDAxNjE5WjAYMRYwFAYD VQQDEw02NzQzYzFkMy1jOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPqeYo8Bb3/VPiKU7ZROA2tMWoa6giZpSjXxYPDhkv+twyipQTybgJGnYJcH C1cNQ/rsK2JGdyHWKpKBO20wMSvhM9dJkz7W2+a9YyROW1MK7nByu4SUunax9Mbw X0mAwCP3y0Z82q2KPB8oFcACblN5G4RhXQtzJwqqAEwoyLpwDPgtMBEupa6UVcoU co5ikVBDIJo2n2aHBcvzXMk0gTvrmf9ReH0lz/mJOErxB4MFKT//0BXjxgnNZnYR kCEAl8wUULPI8zMDlLVAT/T/NUF60y1hIcXCb4EUNcdS6ackyevS28NttK+Lo6Nf N4BjGvCwk7I+j3ZWl8FVia6MxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxAeP9j F6DBj3ylXFVUomE3GqyfMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkRCMS8zRkE2OTIwMDgzQzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5 RHBnWHJuTnNBRG5SaUFpTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMmK3bvzSclJY7itqVKypqL7rI0OUEdkIsLjuCFU2+gpJ/rPG7AMgs mwdpWlBDDcbD5KupcY6sh+YRuASddVezExZhfDsBtI3MAGY9pt76FMbkekdFfjx0 tXMqoVIXy/s8HtoUdaz9NMZVlUyQ1S8v4Hx5LnvAL0pz5TIeqhOtz2wv3LmA5uvE USo+1RHeg2qshF+JEE51Vs7OVBgR/WXVU1coahzhAoOuYhH07hzf8/T1eICRig+N UiZ72NQ8xTttML5tbWnAkT63R8C3/i5wXcMi9r+Djn9S0WNc76No03b04b1Tm5KO VgF1xN04vBS9EB8C2LoOQ9NkLhXw0Up0 -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:22 2024 by rpki-client on console-ams.rpki-client.org