$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json) Hash identifier: qxQNeN/Au4lNP7P+2+DFKdqY41OKuXaD2jD4iZuL4BI= Subject key identifier: 95:1E:BA:FD:A2:63:46:50:86:67:C0:4C:11:0B:C8:17:F7:47:9C:96 Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft Manifest number: B7 Signing time: Thu 21 Nov 2024 04:11:40 +0000 Manifest this update: Thu 21 Nov 2024 04:11:39 +0000 Manifest next update: Thu 28 Nov 2024 04:11:39 +0000 Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: 3ztqy5Te3p5oIhYY1TdJ58MaxJT7MUmej3bMJMwKsGE=) 2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: 51Cgnd7L929YsdYeHMQakHz8pXfhQg7XBbfSBPJ2XYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Validity Not Before: Nov 21 04:11:39 2024 GMT Not After : Nov 28 04:11:39 2024 GMT Subject: CN=673eb2fb-a0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ec:90:45:68:c3:2a:37:f3:1e:d3:1b:28:86: b5:cb:ce:cd:08:6f:5d:20:2a:4f:d9:c3:51:2d:be: a8:7d:43:c2:3a:e3:4b:c1:27:d8:a0:3b:92:05:46: 8d:4b:96:93:83:03:b4:cd:96:57:3a:35:83:fd:91: 6c:56:62:dc:09:db:c9:45:fa:f8:51:b2:34:43:b2: ae:e0:2f:52:b5:53:cf:64:3e:bd:45:0f:4f:e3:0a: 4c:1e:ca:d1:0a:02:f8:a8:02:9a:95:a9:19:60:08: 57:a0:e9:a4:ba:72:44:4c:80:d5:dd:96:57:ed:63: ec:f9:9a:a3:b4:87:fe:cc:6b:15:bc:10:fd:9e:6d: 62:9e:a4:cb:ce:16:4a:89:98:b0:70:74:f5:6a:eb: a2:56:8b:bd:13:0f:17:25:30:6d:f6:a4:79:5d:f4: bd:31:c6:74:b1:a1:85:53:ed:ff:a0:d9:6c:b3:21: 03:b0:6b:de:cf:9d:28:f0:b8:11:24:c4:3c:b9:18: 09:25:95:3b:d0:b5:d8:8a:09:d4:4e:b7:11:35:3e: fd:45:9e:a0:b3:cb:c8:84:8c:69:30:2b:c3:8c:c1: b2:a8:60:f0:7b:e5:c9:7b:eb:e0:11:70:51:d1:23: 9e:a5:8d:43:a2:66:1c:ee:30:24:24:67:eb:e0:bc: 3c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1E:BA:FD:A2:63:46:50:86:67:C0:4C:11:0B:C8:17:F7:47:9C:96 X509v3 Authority Key Identifier: keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:7e:a0:15:10:99:f7:03:06:01:ac:6e:3e:23:a3:22:24:d6: 80:d5:7c:90:75:51:ad:6e:a8:fe:4c:53:36:4d:b0:d0:36:50: 0d:10:3d:22:2a:fb:6b:d9:a4:8f:c9:75:96:ac:a6:19:ad:a3: fa:8d:95:6a:2c:fa:e9:2c:b2:26:13:45:a2:1b:d6:f5:83:c8: e3:53:58:2e:a2:7d:9f:74:5e:20:c8:2d:1f:f8:31:8c:f0:5b: 92:ef:f7:bb:2c:ba:0f:ba:a5:b4:18:83:cf:6c:80:20:b7:25: 25:fc:f3:a2:b8:49:25:63:1e:67:57:9d:64:a6:05:56:cc:c0: 8c:b4:20:c8:20:10:e7:d5:b6:33:ad:0d:fc:aa:0a:c2:c8:85: ca:f3:da:8d:b5:d7:99:37:d5:c2:9a:9e:8a:6c:d9:90:ba:6a: 58:42:1f:16:93:52:0d:b2:68:c3:01:56:9f:ad:57:88:ad:9b: dd:9f:0e:ea:dd:8d:06:3e:47:cc:cc:51:59:70:d1:24:47:99: 81:47:a0:62:b6:fd:8b:2e:5b:a8:e1:c6:c8:6c:6e:10:64:2f: 4e:cd:75:1d:6d:70:92:98:98:d9:9b:d9:fb:fa:fb:b6:e2:66: d1:1d:d4:ef:5f:54:ff:7f:7b:1f:e2:3b:50:a6:71:75:0c:18: d8:5d:54:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NkExMTAvBgNVBAUTKEYxOTM2MDQ2OTUxNDZFQkUxREJGNzNGREUwRUI2NjIx RkQ5RkI4RjkwHhcNMjQxMTIxMDQxMTM5WhcNMjQxMTI4MDQxMTM5WjAYMRYwFAYD VQQDEw02NzNlYjJmYi1hMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOyQRWjDKjfzHtMbKIa1y87NCG9dICpP2cNRLb6ofUPCOuNLwSfYoDuSBUaN S5aTgwO0zZZXOjWD/ZFsVmLcCdvJRfr4UbI0Q7Ku4C9StVPPZD69RQ9P4wpMHsrR CgL4qAKalakZYAhXoOmkunJETIDV3ZZX7WPs+ZqjtIf+zGsVvBD9nm1inqTLzhZK iZiwcHT1auuiVou9Ew8XJTBt9qR5XfS9McZ0saGFU+3/oNlssyEDsGvez50o8LgR JMQ8uRgJJZU70LXYignUTrcRNT79RZ6gs8vIhIxpMCvDjMGyqGDwe+XJe+vgEXBR 0SOepY1DomYc7jAkJGfr4Lw8WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUeuv2i Y0ZQhmfATBELyBf3R5yWMB8GA1UdIwQYMBaAFPGTYEaVFG6+Hb9z/eDrZiH9n7j5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk2QS9DNTk2NTlCMDkz NkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJyNGR2M1A5NE90bUlmMmZ1 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTmdScFVVYnI0ZHYzUDk0T3RtSWYyZnVQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk2QS9DNTk2NTlCMDkzNkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJy NGR2M1A5NE90bUlmMmZ1UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQfqAVEJn3AwYBrG4+I6MiJNaA1XyQdVGtbqj+TFM2TbDQNlANED0i Kvtr2aSPyXWWrKYZraP6jZVqLPrpLLImE0WiG9b1g8jjU1guon2fdF4gyC0f+DGM 8FuS7/e7LLoPuqW0GIPPbIAgtyUl/POiuEklYx5nV51kpgVWzMCMtCDIIBDn1bYz rQ38qgrCyIXK89qNtdeZN9XCmp6KbNmQumpYQh8Wk1INsmjDAVafrVeIrZvdnw7q 3Y0GPkfMzFFZcNEkR5mBR6Bitv2LLluo4cbIbG4QZC9OzXUdbXCSmJjZm9n7+vu2 4mbRHdTvX1T/f3sf4jtQpnF1DBjYXVRc -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:01 2024 by rpki-client on console-ams.rpki-client.org