$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json) Hash identifier: HdenZ7i6zDyM2KIobu8blMMdRwQA8bEQIj+YG0HkHoE= Subject key identifier: 0B:38:AD:C4:46:D1:E0:90:D3:7D:BA:84:79:03:59:E1:E2:BA:30:BA Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Certificate serial: 073C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft Manifest number: 0737 Signing time: Fri 22 Nov 2024 21:11:56 +0000 Manifest this update: Fri 22 Nov 2024 21:11:55 +0000 Manifest next update: Fri 29 Nov 2024 21:11:55 +0000 Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: BubaquD4QQNWpRJgBl83uISGwBxo8azBCFMLsX0PGmY=) 2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: sHP7c+MlTTHLdKKi6zJNHIBqxCcy6/U0BmbVd5RTe50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1852 (0x73c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Validity Not Before: Nov 22 21:11:55 2024 GMT Not After : Nov 29 21:11:55 2024 GMT Subject: CN=6740f39c-6978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:18:d0:8d:82:cf:f5:e5:fc:f1:be:3e:7c:25: e0:f4:cf:85:e9:ae:7e:02:91:71:01:f7:de:ad:66: e9:60:7a:bb:f6:b0:5b:4b:ec:a1:42:ee:08:91:28: 39:02:0d:d1:6f:d3:54:66:1a:04:12:61:8d:d4:a7: 89:67:60:1d:9e:c9:0c:5e:36:f8:92:cf:d6:e5:12: 9b:8a:5c:6a:1a:86:18:42:ee:ac:c5:dd:91:d9:5a: 34:6b:01:17:ca:0b:fd:0d:ba:c8:ef:46:a8:c9:5c: 1b:0e:00:82:08:a3:b6:75:2c:94:3e:17:16:f0:bf: c7:07:64:ce:b6:d9:3f:1f:f0:cd:9d:a9:3c:61:d1: 79:02:6a:23:15:d9:14:d3:92:85:9f:3e:1f:9e:d7: a8:59:8f:67:91:96:22:0c:1b:20:e3:88:be:ba:aa: c7:f1:05:59:29:57:e6:54:ab:e9:b6:fb:ac:1c:99: bf:2d:6e:ac:67:45:c6:94:d3:0a:e1:d3:ea:7a:70: 65:3f:f6:4b:1a:de:41:98:88:b3:b1:ad:c5:45:ee: 2b:0f:82:8f:1a:7a:ef:24:5b:2e:3a:84:60:44:bc: 5d:23:b8:57:a7:d6:96:8f:38:cd:95:b4:95:dd:ef: 3a:67:5a:ab:fa:fa:d7:e0:b8:c7:2e:4e:a9:c4:3f: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:38:AD:C4:46:D1:E0:90:D3:7D:BA:84:79:03:59:E1:E2:BA:30:BA X509v3 Authority Key Identifier: keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:d0:a6:aa:1c:20:94:db:21:d7:ec:c2:34:34:40:11:df:6d: 29:bf:ee:cc:2e:9b:18:f2:2b:4b:a7:1d:36:c2:75:f2:86:2a: ac:0e:56:c0:7e:05:3b:e0:8b:f8:b1:6a:c0:cf:51:c8:12:6a: 10:e0:0d:29:db:5e:09:2e:19:64:29:b5:2c:de:58:cc:e9:1e: 9a:7d:80:a3:cd:97:2a:9b:d4:c5:b3:99:63:11:57:2f:6a:f6: 60:40:5b:76:55:7c:81:03:7e:74:e0:4a:93:6d:48:5e:ff:46: cb:51:dc:cd:d7:7f:7d:70:5e:c4:cd:c7:6d:19:5b:bb:22:05: 6e:b8:54:af:d6:84:1d:e6:ec:55:f7:82:ba:1c:7b:81:90:c7: 7c:e2:40:65:a8:2f:b7:f3:68:7e:40:8e:db:06:b3:a6:75:93: e4:ce:14:10:09:71:6d:d8:37:64:d0:5d:2f:b4:1f:93:53:3d: c3:90:61:0f:bd:4f:9a:0f:3c:11:ba:5b:6a:8a:60:f0:41:9b: a2:20:f9:a0:56:df:08:e4:6c:64:32:c2:4f:66:55:6b:21:f3: f6:55:ac:a1:90:31:0d:04:a0:b5:4b:82:19:f1:9d:3d:b6:4e: b0:c9:60:61:db:08:b7:42:fe:f2:a4:44:e7:9a:62:16:13:4c: ad:68:5d:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEODkxMTAvBgNVBAUTKDNDRkU2RjNFQjFEODkyNzE1RTQxMzZFOUJBODU2Qjk4 RjY3MTQ3QjAwHhcNMjQxMTIyMjExMTU1WhcNMjQxMTI5MjExMTU1WjAYMRYwFAYD VQQDEw02NzQwZjM5Yy02OTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hjQjYLP9eX88b4+fCXg9M+F6a5+ApFxAfferWbpYHq79rBbS+yhQu4IkSg5 Ag3Rb9NUZhoEEmGN1KeJZ2AdnskMXjb4ks/W5RKbilxqGoYYQu6sxd2R2Vo0awEX ygv9DbrI70aoyVwbDgCCCKO2dSyUPhcW8L/HB2TOttk/H/DNnak8YdF5AmojFdkU 05KFnz4fnteoWY9nkZYiDBsg44i+uqrH8QVZKVfmVKvptvusHJm/LW6sZ0XGlNMK 4dPqenBlP/ZLGt5BmIizsa3FRe4rD4KPGnrvJFsuOoRgRLxdI7hXp9aWjzjNlbSV 3e86Z1qr+vrX4LjHLk6pxD+9KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAs4rcRG 0eCQ0326hHkDWeHiujC6MB8GA1UdIwQYMBaAFDz+bz6x2JJxXkE26bqFa5j2cUew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ4OS9DNkE0QTVFMjA4 NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtuRmVRVGJwdW9Wcm1QWnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQNXZQckhZa25GZVFUYnB1b1ZybVBaeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ4OS9DNkE0QTVFMjA4NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtu RmVRVGJwdW9Wcm1QWnhSN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl0KaqHCCU2yHX7MI0NEAR320pv+7MLpsY8itLpx02wnXyhiqsDlbA fgU74Iv4sWrAz1HIEmoQ4A0p214JLhlkKbUs3ljM6R6afYCjzZcqm9TFs5ljEVcv avZgQFt2VXyBA3504EqTbUhe/0bLUdzN1399cF7EzcdtGVu7IgVuuFSv1oQd5uxV 94K6HHuBkMd84kBlqC+382h+QI7bBrOmdZPkzhQQCXFt2Ddk0F0vtB+TUz3DkGEP vU+aDzwRultqimDwQZuiIPmgVt8I5GxkMsJPZlVrIfP2VayhkDENBKC1S4IZ8Z09 tk6wyWBh2wi3Qv7ypETnmmIWE0ytaF2v -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org