$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft File: PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft (raw, json) Hash identifier: 35CIOOSKRgvMzE8smrZF1pOyptBRNzLbsVBxayd0zC4= Subject key identifier: 2D:3C:0C:06:B0:E3:C6:64:31:B6:28:2F:B6:87:DF:3B:DD:71:AD:F1 Authority key identifier: 3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D Certificate issuer: /CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft Manifest number: 060F Signing time: Wed 20 Nov 2024 22:12:54 +0000 Manifest this update: Wed 20 Nov 2024 22:12:54 +0000 Manifest next update: Wed 27 Nov 2024 22:12:54 +0000 Files and hashes: 1: PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl (hash: 8ZiV956FH1x+tasXU4WIAqaB9MSs8cu8vW/Ll1Xx6mM=) 2: 3A542BE0BC7511EBBB084D27C4F9AE02.roa (hash: DsJu31VmqRJ0VhuZIHzXvyh3HyPC4dntssT9G4PSpBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D Validity Not Before: Nov 20 22:12:54 2024 GMT Not After : Nov 27 22:12:54 2024 GMT Subject: CN=673e5ee6-a205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:70:54:da:30:15:1c:28:a1:dc:fb:78:11: 3c:85:8c:4b:be:b7:f2:9f:87:bf:60:48:a7:b4:70: ce:15:8e:f2:b8:48:d5:b8:ec:30:86:a0:2e:c0:a6: d9:dc:cf:c2:6a:57:2f:43:d2:ed:61:7e:98:7b:68: 95:7a:33:f3:50:fa:69:61:be:5d:56:51:37:a4:ad: 07:44:8d:a7:0c:ea:d0:ee:56:87:fb:a9:de:d0:cb: 4c:68:6f:98:48:aa:04:2e:a8:35:e3:37:b9:2c:e6: bf:2b:0a:a4:03:62:9a:05:13:43:a5:29:7a:7c:7a: bc:1b:62:ea:e4:65:e8:d5:7d:83:33:95:51:69:1a: 9e:4a:4e:b6:76:16:ac:54:7b:27:b5:d1:96:d6:7e: 8d:8c:f4:8e:e3:4c:07:d3:dd:ca:a9:ae:87:27:04: 1b:91:6b:fe:83:b5:86:95:5d:1c:03:cd:88:a2:d6: f1:f6:8d:b6:c3:83:07:b0:8e:4a:a8:75:cc:00:f4: 66:43:cc:d2:c2:22:5c:32:7b:d9:c9:03:93:0b:65: 25:84:0d:1c:e7:04:35:6f:bc:dc:0b:a7:b2:06:f1: 8b:36:ee:82:8e:ee:ca:6b:d3:d0:e8:7c:8a:a5:61: 86:71:b9:24:d6:7d:42:9f:3f:04:2c:d2:1b:2c:b2: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3C:0C:06:B0:E3:C6:64:31:B6:28:2F:B6:87:DF:3B:DD:71:AD:F1 X509v3 Authority Key Identifier: keyid:3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8c:e2:0b:55:01:6b:77:d3:ee:2c:cc:a5:a9:98:e9:28:82: 5b:50:62:b9:88:4d:25:5c:18:29:ee:6d:df:aa:89:4e:35:98: 03:b9:c0:65:8c:36:2d:9e:e1:03:6b:a6:62:a0:d8:3f:6b:65: f4:d3:f3:a8:af:be:b9:99:92:bb:b6:8d:89:77:f6:a0:2a:ec: 70:7b:1b:e4:a5:30:65:4d:c2:3d:a1:74:72:80:ff:5c:81:35: 83:9e:cf:8c:e4:f5:32:35:89:9b:90:44:9c:71:8c:93:c9:a9: 8f:09:45:da:6a:19:e8:94:9b:77:55:bd:af:78:a1:07:8b:67: b6:1e:07:37:4a:56:da:8d:d3:13:01:f4:38:d9:1f:ac:e9:3d: a0:e0:49:13:c0:e8:86:4d:93:04:cf:11:ba:40:81:b3:0c:0f: 94:6c:40:2b:0a:25:10:4e:8f:ba:33:1d:3a:43:70:f7:32:36: e9:f1:01:02:4e:4a:b4:58:53:60:6a:9a:9b:4e:dc:d4:15:4e: e8:cf:e8:c7:87:10:c1:ee:8e:f4:35:84:32:a6:30:b3:01:9b: 3b:7c:a2:12:ab:8c:0f:7b:46:29:a9:73:eb:ab:08:ab:90:c3: 17:34:5f:51:a6:00:00:61:9f:fc:31:2e:eb:18:21:2a:8b:ab: d0:8e:98:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDRkMxMTAvBgNVBAUTKDNEMjY1RTQwMTIzMTQzN0E5MTBFQzIxRkU0RUQ0RUUz QjEyNjlDOEQwHhcNMjQxMTIwMjIxMjU0WhcNMjQxMTI3MjIxMjU0WjAYMRYwFAYD VQQDEw02NzNlNWVlNi1hMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0pwVNowFRwoodz7eBE8hYxLvrfyn4e/YEintHDOFY7yuEjVuOwwhqAuwKbZ 3M/CalcvQ9LtYX6Ye2iVejPzUPppYb5dVlE3pK0HRI2nDOrQ7laH+6ne0MtMaG+Y SKoELqg14ze5LOa/KwqkA2KaBRNDpSl6fHq8G2Lq5GXo1X2DM5VRaRqeSk62dhas VHsntdGW1n6NjPSO40wH093Kqa6HJwQbkWv+g7WGlV0cA82Iotbx9o22w4MHsI5K qHXMAPRmQ8zSwiJcMnvZyQOTC2UlhA0c5wQ1b7zcC6eyBvGLNu6Cju7Ka9PQ6HyK pWGGcbkk1n1Cnz8ELNIbLLKkMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC08DAaw 48ZkMbYoL7aH3zvdca3xMB8GA1UdIwQYMBaAFD0mXkASMUN6kQ7CH+TtTuOxJpyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNGQy8wRUYzQjM4ODdE M0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEzcVJEc0lmNU8xTzQ3RW1u STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTWmVRQkl4UTNxUkRzSWY1TzFPNDdFbW5JMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNGQy8wRUYzQjM4ODdEM0UxMUVCOUVERjY4N0NDNEY5QUUwMi9QU1plUUJJeFEz cVJEc0lmNU8xTzQ3RW1uSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPjOILVQFrd9PuLMylqZjpKIJbUGK5iE0lXBgp7m3fqolONZgDucBl jDYtnuEDa6ZioNg/a2X00/Oor765mZK7to2Jd/agKuxwexvkpTBlTcI9oXRygP9c gTWDns+M5PUyNYmbkESccYyTyamPCUXaahnolJt3Vb2veKEHi2e2Hgc3SlbajdMT AfQ42R+s6T2g4EkTwOiGTZMEzxG6QIGzDA+UbEArCiUQTo+6Mx06Q3D3Mjbp8QEC Tkq0WFNgapqbTtzUFU7oz+jHhxDB7o70NYQypjCzAZs7fKISq4wPe0YpqXPrqwir kMMXNF9RpgAAYZ/8MS7rGCEqi6vQjpiR -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:36 2024 by rpki-client on console-ams.rpki-client.org