$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft File: -swzUrzjgChT2_SwQFJc_B4VLmA.mft (raw, json) Hash identifier: yJ8SCfOVh7cEDljA1LbdQBaVjWdqyLFk5v2eIsb6/hs= Subject key identifier: 5C:AD:04:AB:BB:18:DB:26:C7:F2:9A:28:EC:03:38:17:F7:64:18:3B Authority key identifier: FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60 Certificate issuer: /CN=A911B22E/serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft Manifest number: 41 Signing time: Sun 03 Nov 2024 05:17:21 +0000 Manifest this update: Sun 03 Nov 2024 05:17:20 +0000 Manifest next update: Sun 10 Nov 2024 05:17:20 +0000 Files and hashes: 1: -swzUrzjgChT2_SwQFJc_B4VLmA.crl (hash: ZbbpsnBh7K10VF1/RUGUu14OCHcCDZCe8U3nvmxRQ08=) 2: 164D3C32379711EF9ECC714EC4F9AE02.roa (hash: MwAJLA+u3nsJdB5hxYAQtsiYv2wQXxIJZHkWx14cyEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B22E/serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60 Validity Not Before: Nov 3 05:17:20 2024 GMT Not After : Nov 10 05:17:20 2024 GMT Subject: CN=67270761-840a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:10:53:ef:cd:5d:db:f5:b5:21:91:cf:54: e3:98:ca:78:eb:8f:89:b8:3a:3e:a6:c9:e1:10:f0: dc:df:8e:22:bd:e7:84:11:89:a4:03:4e:46:fb:b4: a3:89:0b:b3:c8:82:c5:09:34:b4:01:ee:a7:08:74: 0d:02:55:6f:86:5f:ff:f6:d6:d3:51:3e:8d:d5:24: bb:43:bc:f7:95:b7:c0:cb:73:22:7e:f2:88:10:56: 5d:2f:a2:4a:84:05:d3:b6:d8:df:b2:d5:26:35:2e: 9f:9f:12:9b:8e:2b:f2:79:f2:d5:be:72:1e:0c:64: d9:b2:86:7b:06:b7:e5:d7:0e:93:db:b6:4b:25:f0: 89:0c:ca:6a:1f:b4:97:9c:67:bd:2c:ca:4b:e1:7d: c7:ae:97:e1:c8:4d:bc:83:db:e4:8d:73:7e:cb:f9: 77:e0:cc:1a:f7:a1:b8:6c:32:ea:b5:51:90:e4:b2: 94:65:10:3d:04:29:85:2a:e5:b9:9c:f4:2c:82:9e: 4e:41:58:49:c7:2d:f7:f5:c5:6b:f4:1a:25:07:44: ed:6c:63:99:14:6e:a0:5b:aa:e2:7d:d9:af:c1:94: 88:af:e0:8b:74:7d:e6:f3:92:20:52:ed:1a:14:ef: 72:b4:7c:87:cd:08:a5:ac:71:9f:82:fb:0d:41:63: bb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AD:04:AB:BB:18:DB:26:C7:F2:9A:28:EC:03:38:17:F7:64:18:3B X509v3 Authority Key Identifier: keyid:FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:22:2b:c7:53:95:a0:52:e3:8e:5a:b5:4a:33:8f:3c:e1:6a: 1f:1e:31:fe:f2:c7:3f:6e:e3:55:81:f6:85:0b:ca:ff:5a:a9: 20:17:dc:ce:7e:20:11:d4:74:e4:6e:56:6e:d9:a3:df:7f:10: a4:0d:95:5a:b3:99:c6:d1:af:f4:44:50:68:6a:16:fe:15:9e: 94:44:5a:dc:7c:f5:d3:e6:2a:c9:cb:90:78:6f:17:f7:be:0d: c3:d5:c0:ae:88:12:58:57:7c:97:da:93:0a:41:80:f5:ab:44: 7a:e6:34:94:cf:f4:3d:1c:26:1d:1c:fd:85:61:94:01:5f:a8: f6:2e:c3:bb:08:b6:e8:6f:95:47:d6:a3:69:db:f4:05:82:41: d5:b0:ff:f5:14:72:c3:53:07:dc:35:b9:ab:ce:75:16:5f:fd: 00:28:09:ae:c9:33:41:6e:c5:20:c5:10:24:b6:a1:c8:ed:69: 06:aa:9e:da:e1:c0:17:15:54:7d:28:81:eb:55:58:da:e1:97: 6d:97:f3:96:24:8d:6b:e2:59:7b:fb:f9:ec:0b:b8:f1:9e:c2: 8d:3e:ed:02:09:54:77:5e:fe:c6:3e:57:75:8c:58:d1:64:ef: 88:65:8c:9e:68:ce:9c:69:52:da:f4:de:f8:0e:77:95:3f:e9: 68:4b:76:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjIyRTExMC8GA1UEBRMoRkFDQzMzNTJCQ0UzODAyODUzREJGNEIwNDA1MjVDRkMx RTE1MkU2MDAeFw0yNDExMDMwNTE3MjBaFw0yNDExMTAwNTE3MjBaMBgxFjAUBgNV BAMTDTY3MjcwNzYxLTg0MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCIxBT781d2/W1IZHPVOOYynjrj4m4Oj6myeEQ8NzfjiK954QRiaQDTkb7tKOJ C7PIgsUJNLQB7qcIdA0CVW+GX//21tNRPo3VJLtDvPeVt8DLcyJ+8ogQVl0vokqE BdO22N+y1SY1Lp+fEpuOK/J58tW+ch4MZNmyhnsGt+XXDpPbtksl8IkMymoftJec Z70sykvhfceul+HITbyD2+SNc37L+XfgzBr3obhsMuq1UZDkspRlED0EKYUq5bmc 9CyCnk5BWEnHLff1xWv0GiUHRO1sY5kUbqBbquJ92a/BlIiv4It0febzkiBS7RoU 73K0fIfNCKWscZ+C+w1BY7uTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXK0Eq7sY 2ybH8poo7AM4F/dkGDswHwYDVR0jBBgwFoAU+swzUrzjgChT2/SwQFJc/B4VLmAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCMjJFLzhCRTEwMDg0Mzc5 NTExRUY4N0NGRDY0QkM0RjlBRTAyLy1zd3pVcnpqZ0NoVDJfU3dRRkpjX0I0Vkxt QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXN3elVyempnQ2hUMl9Td1FGSmNfQjRWTG1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC MjJFLzhCRTEwMDg0Mzc5NTExRUY4N0NGRDY0QkM0RjlBRTAyLy1zd3pVcnpqZ0No VDJfU3dRRkpjX0I0VkxtQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGUiK8dTlaBS445atUozjzzhah8eMf7yxz9u41WB9oULyv9aqSAX3M5+ IBHUdORuVm7Zo99/EKQNlVqzmcbRr/REUGhqFv4VnpREWtx89dPmKsnLkHhvF/e+ DcPVwK6IElhXfJfakwpBgPWrRHrmNJTP9D0cJh0c/YVhlAFfqPYuw7sItuhvlUfW o2nb9AWCQdWw//UUcsNTB9w1uavOdRZf/QAoCa7JM0FuxSDFECS2ocjtaQaqntrh wBcVVH0ogetVWNrhl22X85YkjWviWXv7+ewLuPGewo0+7QIJVHde/sY+V3WMWNFk 74hljJ5ozpxpUtr03vgOd5U/6WhLdh8= -----END CERTIFICATE-----Generated at Sun Nov 3 06:59:34 2024 by rpki-client on console-ams.rpki-client.org