$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft File: aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft (raw, json) Hash identifier: +aOUNGEd81tJnrC1ZGJ/hCggNXmSExmZyrP7D+o2bXY= Subject key identifier: 37:0E:3F:B7:F8:DB:CA:F8:7D:24:2D:66:D4:C1:67:0C:D0:37:FC:06 Authority key identifier: 68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 Certificate issuer: /CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft Manifest number: 34 Signing time: Thu 21 Nov 2024 05:38:52 +0000 Manifest this update: Thu 21 Nov 2024 05:38:52 +0000 Manifest next update: Thu 28 Nov 2024 05:38:52 +0000 Files and hashes: 1: aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl (hash: /IE8nS6JRluab0S1bxOCp1hNpO7uO70CTxSJaf01Tdc=) 2: 444375E25B9C11EFA181A044C4F9AE02.roa (hash: cZUk0GjwHyhCgvrA9p0spIEgaP2VdUy22G42gnbqnlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D4F/serialNumber=687741DE15CD883C10DDBC4FC3A2DCF5485E7DF3 Validity Not Before: Nov 21 05:38:52 2024 GMT Not After : Nov 28 05:38:52 2024 GMT Subject: CN=673ec76c-ae02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:b5:8f:d4:ed:99:bf:0c:41:58:75:4c:48: 1f:d4:dd:39:a0:19:ce:af:77:46:36:c9:dd:0e:7c: c7:71:9f:41:3a:0f:03:9f:8a:57:11:8c:0a:c6:a7: 6c:71:1a:bb:78:ab:89:d4:eb:e3:1c:27:89:6f:65: 56:4b:d3:f8:71:c8:44:ff:71:6b:84:7a:6b:ff:29: 3b:8e:2c:b8:9b:2f:4f:81:5f:af:da:4f:09:11:e2: cf:4c:87:1d:0a:c6:28:bf:0b:97:1e:d8:a7:08:9e: 24:8e:49:c1:e7:e0:a0:23:50:46:b3:7f:50:4f:91: 25:9f:c9:17:07:33:f9:cf:ec:f2:74:ef:f8:5d:e3: f1:39:57:de:f0:54:98:b5:09:1a:f7:c1:a0:ef:42: 7c:b6:ce:81:4c:2d:2c:bd:66:c2:55:4b:7f:f5:12: 6f:b2:cc:e6:14:dc:7f:76:da:47:66:ef:69:3a:9f: 28:16:87:da:6f:7c:81:b5:57:30:f0:0c:7a:02:fd: 8a:e2:1a:7d:c5:36:5d:be:a7:a2:60:87:2a:0c:db: 10:d7:b6:62:bc:38:50:d8:5e:ba:d1:26:63:b3:76: 12:28:5d:91:3c:ec:9c:1c:b3:48:f3:5a:61:72:ca: cc:b9:d7:32:1f:ab:ea:3c:91:b9:17:66:64:4b:85: 94:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0E:3F:B7:F8:DB:CA:F8:7D:24:2D:66:D4:C1:67:0C:D0:37:FC:06 X509v3 Authority Key Identifier: keyid:68:77:41:DE:15:CD:88:3C:10:DD:BC:4F:C3:A2:DC:F5:48:5E:7D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHdB3hXNiDwQ3bxPw6Lc9UheffM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D4F/0E3ACCFC5B9C11EF9B154944C4F9AE02/aHdB3hXNiDwQ3bxPw6Lc9UheffM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:21:73:e7:26:1a:86:be:48:c0:70:2b:23:9a:51:97:cf:18: 2e:6d:1a:b3:fc:f4:3b:be:b3:21:6a:bb:40:10:40:b3:e9:ac: 43:9b:27:14:58:48:64:9b:ef:48:58:11:3a:3f:e4:26:f8:66: 69:98:fd:52:fb:3b:5f:78:9c:4a:92:71:bf:ba:f3:c4:2e:ff: 63:a2:df:85:da:67:c6:b9:ea:1f:51:5a:7d:b2:94:a1:13:53: 4c:2e:a7:dd:cb:8b:87:06:89:a5:97:53:95:cc:e1:ab:70:56: e8:f5:7f:14:8a:cb:0c:c5:e6:e3:40:16:9d:ee:e5:81:2a:c0: 93:8b:fa:96:ae:22:6b:aa:cf:8d:6c:26:4d:4d:47:0f:0d:96: ee:52:bc:73:02:2f:26:f9:88:c0:a4:2f:6a:21:81:93:af:77: 81:99:db:ed:11:67:62:e3:7d:54:f2:5f:f2:71:07:0f:e8:84: 3e:86:b3:d0:17:7f:77:14:a8:ce:41:77:ee:19:a1:ed:2e:23: e6:b9:34:57:fd:c4:0e:5e:57:a1:aa:ad:4b:f0:be:f9:51:a7: 33:db:79:e8:e2:1c:b8:57:0d:a8:ae:d4:8c:62:ec:7e:58:85: b3:6e:59:15:77:cc:f4:6a:e2:c6:bb:37:21:25:27:3a:6d:ad: f2:9f:a4:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEQ0RjExMC8GA1UEBRMoNjg3NzQxREUxNUNEODgzQzEwRERCQzRGQzNBMkRDRjU0 ODVFN0RGMzAeFw0yNDExMjEwNTM4NTJaFw0yNDExMjgwNTM4NTJaMBgxFjAUBgNV BAMTDTY3M2VjNzZjLWFlMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClpbWP1O2ZvwxBWHVMSB/U3TmgGc6vd0Y2yd0OfMdxn0E6DwOfilcRjArGp2xx Grt4q4nU6+McJ4lvZVZL0/hxyET/cWuEemv/KTuOLLibL0+BX6/aTwkR4s9Mhx0K xii/C5ce2KcIniSOScHn4KAjUEazf1BPkSWfyRcHM/nP7PJ07/hd4/E5V97wVJi1 CRr3waDvQny2zoFMLSy9ZsJVS3/1Em+yzOYU3H922kdm72k6nygWh9pvfIG1VzDw DHoC/YriGn3FNl2+p6JghyoM2xDXtmK8OFDYXrrRJmOzdhIoXZE87Jwcs0jzWmFy ysy51zIfq+o8kbkXZmRLhZS3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNw4/t/jb yvh9JC1m1MFnDNA3/AYwHwYDVR0jBBgwFoAUaHdB3hXNiDwQ3bxPw6Lc9UheffMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RDRGLzBFM0FDQ0ZDNUI5 QzExRUY5QjE1NDk0NEM0RjlBRTAyL2FIZEIzaFhOaUR3UTNieFB3NkxjOVVoZWZm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUhkQjNoWE5pRHdRM2J4UHc2TGM5VWhlZmZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RDRGLzBFM0FDQ0ZDNUI5QzExRUY5QjE1NDk0NEM0RjlBRTAyL2FIZEIzaFhOaUR3 UTNieFB3NkxjOVVoZWZmTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEEhc+cmGoa+SMBwKyOaUZfPGC5tGrP89Du+syFqu0AQQLPprEObJxRY SGSb70hYETo/5Cb4ZmmY/VL7O194nEqScb+688Qu/2Oi34XaZ8a56h9RWn2ylKET U0wup93Li4cGiaWXU5XM4atwVuj1fxSKywzF5uNAFp3u5YEqwJOL+pauImuqz41s Jk1NRw8Nlu5SvHMCLyb5iMCkL2ohgZOvd4GZ2+0RZ2LjfVTyX/JxBw/ohD6Gs9AX f3cUqM5Bd+4Zoe0uI+a5NFf9xA5eV6GqrUvwvvlRpzPbeejiHLhXDaiu1Ixi7H5Y hbNuWRV3zPRq4sa7NyElJzptrfKfpEo= -----END CERTIFICATE-----Generated at Thu Nov 21 07:39:59 2024 by rpki-client on console-ams.rpki-client.org