$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: eTekirrvkvIS7L9X+IyuKsRLd/KJxryt20pxhlvIu3U= Subject key identifier: 95:2E:2B:2E:4F:5C:BF:63:85:0E:AB:FF:D7:02:92:FC:33:99:62:70 Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: 19 Signing time: Tue 22 Oct 2024 14:23:15 +0000 Manifest this update: Tue 22 Oct 2024 14:23:14 +0000 Manifest next update: Tue 29 Oct 2024 14:23:14 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: /DZcnGJ26doQwE2/kectjQtnOZIXNfEyjR5LDkv4lZo=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: gkEBBlb5hiB7NcbdGZU3eHKvEG+IJP6u0ZkY2XHXvHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 13:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Oct 22 14:23:14 2024 GMT Not After : Oct 29 14:23:14 2024 GMT Subject: CN=6717b552-00b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:67:ca:aa:47:b0:f8:c8:c5:78:fc:50:77:50: e9:5a:ee:19:83:f8:1d:7d:cb:3f:81:9a:39:8f:c3: fc:04:35:fc:aa:c3:87:64:68:69:83:f6:b9:19:55: 6a:36:9f:24:9b:22:da:98:1f:53:c9:6e:68:9c:97: ba:81:c8:cc:0a:62:36:f3:72:79:a3:a2:ad:b6:49: de:85:9f:e1:93:be:f6:b0:8b:16:00:a1:f3:11:48: 49:b7:5d:d5:89:cf:8c:cb:15:d7:8e:ac:a6:85:41: 65:04:49:83:47:4e:c1:b2:1d:dd:c0:19:63:0f:3f: 2a:20:3c:c1:8e:f7:27:da:9f:c9:80:4a:73:32:d6: 2b:d2:16:b4:b9:5e:1c:80:52:6c:b2:4c:c5:02:1d: 15:24:57:a7:f3:1a:b0:93:b1:f9:67:dd:b5:1b:52: 74:23:3c:0d:79:b4:ef:58:44:11:17:8e:4c:2f:97: ef:b0:01:23:64:d8:fa:92:e7:ab:6a:3a:cb:7a:67: 47:81:d7:b4:4e:ae:9f:cf:13:6c:56:27:b1:d8:ee: a6:69:f5:cb:cc:8c:d1:d1:90:25:7d:2d:f0:b8:94: 94:9b:23:d1:9d:9d:96:d3:d4:1f:c3:28:4b:7e:ce: 1e:01:68:66:02:d2:54:1d:59:31:e4:15:e0:95:aa: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2E:2B:2E:4F:5C:BF:63:85:0E:AB:FF:D7:02:92:FC:33:99:62:70 X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:63:7b:cd:cc:0c:2d:3d:1d:9d:92:39:fa:59:58:4c:9d:6c: a6:43:e6:29:9e:c5:72:e8:f6:ff:d0:43:a9:72:bc:f7:56:7c: e0:98:40:3e:62:89:45:01:f1:35:8d:e2:5e:f1:64:e6:e8:bb: b1:21:ee:a4:58:dd:b9:54:20:d6:02:04:71:f3:87:23:fd:39: 8a:6b:e3:21:d4:82:27:28:22:ad:1d:63:52:59:25:cf:28:af: e5:24:41:c2:b5:b7:56:e3:a7:c5:44:c9:25:04:db:cc:ec:66: ee:9f:fa:85:40:11:71:e3:14:c1:c4:7e:2e:75:78:7c:85:85: 8c:ad:ee:a7:a3:6d:6a:86:af:51:66:82:b3:69:8f:42:44:84: dc:a7:f8:c4:61:6f:f7:f7:d8:70:2a:b6:f3:59:b3:c7:ee:b9: f9:35:86:74:5d:83:69:5d:c1:4c:cf:93:1e:48:0c:25:e6:de: da:b6:0b:a7:a4:d6:51:85:a3:f3:f5:8d:88:9a:b0:7f:a7:c5: f2:a5:b0:74:a6:d9:ec:d4:41:04:f3:ea:62:7e:1e:82:a3:02: e6:f4:bb:17:dc:32:ea:36:f4:06:9c:cb:60:47:7f:19:ea:dd: 58:c4:42:f6:2f:21:ca:4e:de:10:3e:d2:a1:21:21:39:24:10: bd:b6:d0:61 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OTExQzExMC8GA1UEBRMoRjFDOTQyNjMyRkE2RkM3NzEwODE2MDg4RjBDQjhDMTMz NTI1MUNERDAeFw0yNDEwMjIxNDIzMTRaFw0yNDEwMjkxNDIzMTRaMBgxFjAUBgNV BAMTDTY3MTdiNTUyLTAwYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJZ8qqR7D4yMV4/FB3UOla7hmD+B19yz+BmjmPw/wENfyqw4dkaGmD9rkZVWo2 nySbItqYH1PJbmicl7qByMwKYjbzcnmjoq22Sd6Fn+GTvvawixYAofMRSEm3XdWJ z4zLFdeOrKaFQWUESYNHTsGyHd3AGWMPPyogPMGO9yfan8mASnMy1ivSFrS5XhyA UmyyTMUCHRUkV6fzGrCTsfln3bUbUnQjPA15tO9YRBEXjkwvl++wASNk2PqS56tq Ost6Z0eB17ROrp/PE2xWJ7HY7qZp9cvMjNHRkCV9LfC4lJSbI9GdnZbT1B/DKEt+ zh4BaGYC0lQdWTHkFeCVqjF9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlS4rLk9c v2OFDqv/1wKS/DOZYnAwHwYDVR0jBBgwFoAU8clCYy+m/HcQgWCI8MuMEzUlHN0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5MTFDLzgwN0RCQ0JDNkU0 MjExRUZCOTA3Nzk3REM0RjlBRTAyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhO MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGNsQ1l5LW1fSGNRZ1dDSThNdU1FelVsSE4wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 MTFDLzgwN0RCQ0JDNkU0MjExRUZCOTA3Nzk3REM0RjlBRTAyLzhjbENZeS1tX0hj UWdXQ0k4TXVNRXpVbEhOMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFtje83MDC09HZ2SOfpZWEydbKZD5imexXLo9v/QQ6lyvPdWfOCYQD5i iUUB8TWN4l7xZObou7Eh7qRY3blUINYCBHHzhyP9OYpr4yHUgicoIq0dY1JZJc8o r+UkQcK1t1bjp8VEySUE28zsZu6f+oVAEXHjFMHEfi51eHyFhYyt7qejbWqGr1Fm grNpj0JEhNyn+MRhb/f32HAqtvNZs8fuufk1hnRdg2ldwUzPkx5IDCXm3tq2C6ek 1lGFo/P1jYiasH+nxfKlsHSm2ezUQQTz6mJ+HoKjAub0uxfcMuo29Aacy2BHfxnq 3VjEQvYvIcpO3hA+0qEhITkkEL220GE= -----END CERTIFICATE-----Generated at Tue Oct 22 15:31:00 2024 by rpki-client on console-ams.rpki-client.org