$ rpki-client -vvf rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft File: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft (raw, json) Hash identifier: LS/qkTGxVsmA7k6MLMLyGKwtIPO6N86+Fb+jhxQxL2s= Subject key identifier: 6A:49:14:7E:29:36:B4:FD:0D:99:A0:14:CC:F3:8F:6B:43:9B:20:B1 Authority key identifier: 4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 Certificate issuer: /CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Certificate serial: 2143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft Manifest number: 2125 Signing time: Fri 22 Nov 2024 15:55:33 +0000 Manifest this update: Fri 22 Nov 2024 15:55:32 +0000 Manifest next update: Fri 29 Nov 2024 15:55:32 +0000 Files and hashes: 1: S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl (hash: 0Dpp4AM9XYYNO1NjRPRzqvimE+6OGVLm4mQ8qOkNIUo=) 2: 05106CB4AFB011EA8972F65BC4F9AE02.roa (hash: I5qY7a+FG0zOuas6VCCFx42Zv0OdC5+ZvEyOCBVw1Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8515 (0x2143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912016A/serialNumber=4B58B0B06109946660C09FBC9699A643B7F42AE6 Validity Not Before: Nov 22 15:55:32 2024 GMT Not After : Nov 29 15:55:32 2024 GMT Subject: CN=6740a974-47f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:fd:e0:aa:ec:f5:74:0c:67:d0:1b:81:05: 02:0e:d0:93:2d:45:84:46:f6:68:70:df:c2:ee:0a: 91:3b:03:1e:93:9a:63:d4:dc:b5:ee:71:af:b0:4e: 14:68:99:06:0c:4d:ec:a2:b9:21:04:f1:0a:c8:7c: 2a:25:64:fa:99:e7:d1:55:3c:73:74:f3:76:86:56: 5e:55:15:8c:f8:47:30:58:d6:f7:ca:f1:8e:a3:09: fc:b8:38:e5:83:80:c7:84:ad:54:dc:e5:a8:ea:79: 59:c9:9a:0e:ba:3c:44:a1:a7:82:56:b4:fa:31:7b: 42:bd:e4:7a:0e:72:0f:00:74:71:ce:54:f0:a9:20: 0d:2c:fa:35:d3:b8:d8:38:d6:cb:d3:94:82:a6:dc: dd:c4:73:84:54:3f:03:5d:b5:73:16:45:09:79:71: 80:0a:3f:a3:5b:5c:cd:96:14:34:b4:13:62:a7:83: 3b:1a:19:4c:6d:be:de:2b:27:fb:93:8c:7f:75:03: b4:d7:1c:a3:c9:d1:7a:24:6c:03:5a:cb:b5:dc:6a: 7e:a2:a9:af:2d:36:af:6a:c8:15:d2:ff:ff:8f:3e: 4d:bd:9a:8e:01:8d:e3:c3:11:f4:39:7d:0c:ff:a6: ec:fc:4d:a7:41:3e:20:07:9a:18:eb:05:2a:43:34: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:49:14:7E:29:36:B4:FD:0D:99:A0:14:CC:F3:8F:6B:43:9B:20:B1 X509v3 Authority Key Identifier: keyid:4B:58:B0:B0:61:09:94:66:60:C0:9F:BC:96:99:A6:43:B7:F4:2A:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912016A/B083DD08DEB611E59E13B879C4F9AE02/S1iwsGEJlGZgwJ-8lpmmQ7f0KuY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:90:ec:39:10:c2:d0:67:68:40:0d:ea:41:b8:f3:b1:ef:59: 4d:74:12:9b:30:e3:17:22:c2:54:49:11:72:0e:26:26:a8:c8: 4b:b3:59:38:8b:a5:b2:37:69:23:e9:18:88:53:3c:62:84:d0: c4:b6:82:dc:52:2b:36:47:04:a5:c2:fd:9c:f2:b9:db:df:06: 8d:4a:82:fd:e7:3e:d2:ac:23:49:a0:da:3a:4b:02:e6:7d:bf: 6b:59:c8:36:ce:17:cd:20:64:59:e7:ef:f2:47:d5:f6:07:c1: 07:73:b9:1c:a2:d2:84:e4:3c:3e:54:aa:70:e1:dd:52:98:c4: 17:21:e0:ce:f2:bd:97:65:42:8f:b9:30:6d:59:69:3d:a9:fa: ec:cd:c6:7d:4b:7a:1f:25:39:94:2b:d2:e3:63:e9:1c:df:6f: dc:bb:2b:17:f0:8c:b6:a7:50:ee:3f:8a:0b:51:12:7e:b9:e0: 8a:ab:dd:80:d0:ee:31:89:4b:4a:bb:1b:59:36:55:38:c5:9e: 6d:38:20:f8:e0:3f:e0:f6:76:51:a9:91:b8:85:48:df:db:56: bd:58:d8:a8:30:5c:51:e1:69:b1:b8:89:1a:f4:f1:57:71:6e: 1f:61:7f:15:a1:f1:2b:e2:af:0c:98:04:de:4d:3f:f4:ac:4d: 4e:f1:c2:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxNkExMTAvBgNVBAUTKDRCNThCMEIwNjEwOTk0NjY2MEMwOUZCQzk2OTlBNjQz QjdGNDJBRTYwHhcNMjQxMTIyMTU1NTMyWhcNMjQxMTI5MTU1NTMyWjAYMRYwFAYD VQQDEw02NzQwYTk3NC00N2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2T94Krs9XQMZ9AbgQUCDtCTLUWERvZocN/C7gqROwMek5pj1Ny17nGvsE4U aJkGDE3sorkhBPEKyHwqJWT6mefRVTxzdPN2hlZeVRWM+EcwWNb3yvGOown8uDjl g4DHhK1U3OWo6nlZyZoOujxEoaeCVrT6MXtCveR6DnIPAHRxzlTwqSANLPo107jY ONbL05SCptzdxHOEVD8DXbVzFkUJeXGACj+jW1zNlhQ0tBNip4M7GhlMbb7eKyf7 k4x/dQO01xyjydF6JGwDWsu13Gp+oqmvLTavasgV0v//jz5NvZqOAY3jwxH0OX0M /6bs/E2nQT4gB5oY6wUqQzTDTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpJFH4p NrT9DZmgFMzzj2tDmyCxMB8GA1UdIwQYMBaAFEtYsLBhCZRmYMCfvJaZpkO39Crm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDE2QS9CMDgzREQwOERF QjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxHWmd3Si04bHBtbVE3ZjBL dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MxaXdzR0VKbEdaZ3dKLThscG1tUTdmMEt1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDE2QS9CMDgzREQwOERFQjYxMUU1OUUxM0I4NzlDNEY5QUUwMi9TMWl3c0dFSmxH Wmd3Si04bHBtbVE3ZjBLdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfkOw5EMLQZ2hADepBuPOx71lNdBKbMOMXIsJUSRFyDiYmqMhLs1k4 i6WyN2kj6RiIUzxihNDEtoLcUis2RwSlwv2c8rnb3waNSoL95z7SrCNJoNo6SwLm fb9rWcg2zhfNIGRZ5+/yR9X2B8EHc7kcotKE5Dw+VKpw4d1SmMQXIeDO8r2XZUKP uTBtWWk9qfrszcZ9S3ofJTmUK9LjY+kc32/cuysX8Iy2p1DuP4oLURJ+ueCKq92A 0O4xiUtKuxtZNlU4xZ5tOCD44D/g9nZRqZG4hUjf21a9WNioMFxR4WmxuIka9PFX cW4fYX8VofEr4q8MmATeTT/0rE1O8cKs -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:57 2024 by rpki-client on console-ams.rpki-client.org