$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft File: _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json) Hash identifier: RGEIRXwBCc0m1M+UW08X+x0Xa/9oXULTxE4go/HwlWw= Subject key identifier: 87:60:F6:0A:AD:D9:95:5F:D0:2D:06:49:9D:03:A4:37:DD:4F:7D:F5 Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft Manifest number: BB Signing time: Thu 21 Nov 2024 04:07:40 +0000 Manifest this update: Thu 21 Nov 2024 04:07:39 +0000 Manifest next update: Thu 28 Nov 2024 04:07:39 +0000 Files and hashes: 1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: 9ihCexByHF7WSVjcPy3N56aDsHBfOVkuluUJivcGfNw=) 2: BFA5084C8E9011EEAD56911CC4F9AE02.roa (hash: 49qG7BFVPNE9bNN/jvF/27Y+s2Ba+y3F+GFqB2uVXOE=) 3: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: 0Ob44GOJBXWRNVBDtlP4tdYlgSIbc4d/O98ayNaqbHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Validity Not Before: Nov 21 04:07:39 2024 GMT Not After : Nov 28 04:07:39 2024 GMT Subject: CN=673eb20b-bc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:63:f3:d5:69:b8:7a:2a:eb:04:f6:c6:3b: c2:4b:fc:b2:08:1e:14:39:b6:9c:cf:2d:3e:25:11: bd:1d:ac:a9:57:f1:5a:47:f7:61:b1:f7:3c:eb:19: ea:0b:ef:36:d0:16:00:02:73:0b:84:2b:25:01:af: 84:ce:6a:e8:f1:af:35:77:38:f8:d9:05:38:7c:37: f2:45:ae:b4:76:44:62:a4:b1:70:d6:9b:b1:26:40: 47:7d:67:d4:d7:3c:07:17:bd:f4:0d:51:1c:83:14: ab:82:c9:ae:4b:e2:d9:80:50:c0:0b:56:da:2f:a0: a8:01:9f:18:87:75:ec:df:8e:49:05:24:72:e8:3e: dd:c2:91:65:fc:ab:d0:02:c6:84:82:16:19:0d:7a: 01:95:3b:da:e1:ab:a5:0a:6d:83:ea:49:16:9a:f7: a9:50:6f:a1:6b:04:de:68:47:ba:d3:aa:4e:c1:6f: cc:12:4b:b9:4e:9f:5c:5c:19:e7:f1:ef:18:85:dd: cb:a6:2a:0b:dd:71:2c:ea:4c:ee:64:9a:c9:1c:cc: 17:82:dc:d9:76:a7:de:ef:0e:04:bd:de:69:d1:cf: d1:71:64:7a:8f:a3:d0:63:c4:c0:2a:36:6e:b8:45: c6:56:77:8b:00:83:14:1d:8d:f8:1a:01:9d:93:a2: 59:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:60:F6:0A:AD:D9:95:5F:D0:2D:06:49:9D:03:A4:37:DD:4F:7D:F5 X509v3 Authority Key Identifier: keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:cb:46:44:6d:3d:a3:0f:a4:5a:5d:9b:c7:23:1c:4d:a4:b8: 03:1a:73:d9:4c:31:ab:71:ed:82:96:22:33:7b:bc:e5:c9:5d: 5f:7c:b3:b8:f9:34:f8:c7:32:a2:06:aa:79:c6:f6:3c:9e:a1: 8a:cf:60:30:94:02:55:66:51:ad:41:1d:49:38:ec:3e:33:d8: 45:06:fa:3c:71:1d:5c:37:fc:de:cd:96:5f:13:76:ea:bc:04: ab:93:7e:40:b1:e3:55:57:4b:61:3a:e4:a5:88:8e:e6:70:1b: 90:20:09:c8:16:dd:46:69:9b:a6:5b:6d:34:86:2f:4d:80:42: e5:09:1a:2b:bd:f1:85:03:09:07:8d:ad:9a:a2:90:08:a3:cc: 69:6e:2f:49:2d:90:33:1a:a4:7b:9b:9e:a5:ad:9c:38:aa:2c: 22:83:e5:09:90:f3:38:03:50:d6:ea:3c:e6:dd:1f:de:93:f5: db:0c:6b:9a:01:fa:0b:17:12:c4:52:83:9a:4e:04:27:4e:41: d8:af:29:40:b1:52:68:b5:5e:90:09:6e:a3:8c:8c:0b:32:e8: db:5c:b7:6a:b8:11:5e:a6:4e:75:71:4e:cf:e2:6e:f7:5e:e0: ed:08:c5:03:a8:7e:bf:6c:ba:26:a0:cc:df:a9:7a:e7:2f:08: e7:21:2f:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3QzIxMTAvBgNVBAUTKEZGMkVERTk0RDMwN0JDMjM4OUE0QjczOTU5MkE2NTdG NzE2MUNDQTIwHhcNMjQxMTIxMDQwNzM5WhcNMjQxMTI4MDQwNzM5WjAYMRYwFAYD VQQDEw02NzNlYjIwYi1iYzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4Fj89VpuHoq6wT2xjvCS/yyCB4UObaczy0+JRG9HaypV/FaR/dhsfc86xnq C+820BYAAnMLhCslAa+Ezmro8a81dzj42QU4fDfyRa60dkRipLFw1puxJkBHfWfU 1zwHF730DVEcgxSrgsmuS+LZgFDAC1baL6CoAZ8Yh3Xs345JBSRy6D7dwpFl/KvQ AsaEghYZDXoBlTva4aulCm2D6kkWmvepUG+hawTeaEe606pOwW/MEku5Tp9cXBnn 8e8Yhd3LpioL3XEs6kzuZJrJHMwXgtzZdqfe7w4Evd5p0c/RcWR6j6PQY8TAKjZu uEXGVneLAIMUHY34GgGdk6JZcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdg9gqt 2ZVf0C0GSZ0DpDfdT331MB8GA1UdIwQYMBaAFP8u3pTTB7wjiaS3OVkqZX9xYcyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTdDMi83QUI4NTA4ODhF ODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZDT0pwTGM1V1NwbGYzRmh6 S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL195N2VsTk1IdkNPSnBMYzVXU3BsZjNGaHpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTdDMi83QUI4NTA4ODhFODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZD T0pwTGM1V1NwbGYzRmh6S0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfy0ZEbT2jD6RaXZvHIxxNpLgDGnPZTDGrce2CliIze7zlyV1ffLO4 +TT4xzKiBqp5xvY8nqGKz2AwlAJVZlGtQR1JOOw+M9hFBvo8cR1cN/zezZZfE3bq vASrk35AseNVV0thOuSliI7mcBuQIAnIFt1GaZumW200hi9NgELlCRorvfGFAwkH ja2aopAIo8xpbi9JLZAzGqR7m56lrZw4qiwig+UJkPM4A1DW6jzm3R/ek/XbDGua AfoLFxLEUoOaTgQnTkHYrylAsVJotV6QCW6jjIwLMujbXLdquBFepk51cU7P4m73 XuDtCMUDqH6/bLomoMzfqXrnLwjnIS+q -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:00 2024 by rpki-client on console-ams.rpki-client.org