$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft File: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json) Hash identifier: 7NIZtOgzR0XIfjErHNPwiSW4y/FR/USUrzksQGEwfLQ= Subject key identifier: 14:9F:C8:3E:B0:F9:7A:B3:61:5A:69:5D:B1:87:C8:85:53:5C:85:A2 Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 Certificate issuer: /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Certificate serial: 071C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft Manifest number: 0715 Signing time: Fri 22 Nov 2024 15:58:58 +0000 Manifest this update: Fri 22 Nov 2024 15:58:57 +0000 Manifest next update: Fri 29 Nov 2024 15:58:57 +0000 Files and hashes: 1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: igqL12VKDW3CiPwNCduAG+q5wIB0bEdLXps+XlFJ/e4=) 2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: owavO0XDzj500YGpyqbmjhYipEKAfrWBHBWdBUgrtlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Validity Not Before: Nov 22 15:58:57 2024 GMT Not After : Nov 29 15:58:57 2024 GMT Subject: CN=6740aa42-5c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:3f:66:b2:5c:39:66:93:e5:39:05:fa:0f: 4d:a7:4f:ec:e7:54:7b:8e:be:c7:07:7a:1c:b9:da: 7b:a0:f0:d2:cc:09:fc:a3:37:84:c5:59:d5:41:c6: 63:9d:5a:2b:9a:28:3f:74:4b:21:2d:38:ee:6f:22: ec:55:fa:3d:78:e9:ac:b9:c9:fc:0c:74:6e:b8:2b: 1a:da:c7:4e:7e:a9:5e:8f:ce:e4:c9:7e:dd:31:8b: 9e:28:31:2d:21:93:bc:d1:6a:aa:bc:3a:2d:cd:ca: b2:b3:79:c4:ee:72:d2:cd:ed:87:96:df:84:9c:51: 29:0d:57:5c:a7:58:09:f4:29:69:e4:9e:48:ab:34: 64:92:f2:50:55:23:6b:bc:f2:87:fa:3c:ee:24:91: a9:5f:3d:d8:be:48:78:1f:1d:1d:c2:9b:33:15:35: 03:55:46:06:38:c4:77:d1:6c:32:71:18:fb:59:66: 6f:dd:79:45:a5:8f:7e:a0:63:96:5c:52:da:3c:bf: bf:f3:00:64:d9:e0:3c:84:72:05:ef:73:12:20:dd: a2:23:70:12:76:8b:6d:2e:40:c6:17:d2:66:e7:f8: 6d:c7:38:1d:48:49:3a:60:15:4b:6f:37:55:f3:87: f1:cf:ef:5a:60:48:b2:2f:36:00:5f:f7:bb:4b:bb: 71:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9F:C8:3E:B0:F9:7A:B3:61:5A:69:5D:B1:87:C8:85:53:5C:85:A2 X509v3 Authority Key Identifier: keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:3a:8f:73:9e:24:b6:7b:1f:3a:97:0b:61:45:ce:6b:e9:86: 56:ac:8f:a3:62:9a:bd:e2:0f:d6:6f:98:9b:d8:12:6d:ba:06: 6a:d7:9e:09:46:e0:24:43:f6:dd:aa:1b:ea:8a:04:8b:3f:ef: df:9f:4b:a4:bb:59:17:2f:b2:10:e9:97:1b:95:71:ab:07:fe: b4:26:6c:a0:4b:0b:84:25:ee:1e:c2:43:d6:4e:f7:e4:59:7c: 94:26:75:97:6e:11:bc:10:89:a4:ad:e2:72:96:3b:c8:20:e8: 5f:13:e7:63:94:ae:ed:58:97:c8:a7:8a:75:fb:44:95:a0:10: 0a:dc:2f:7c:1f:a6:3a:e3:d0:f7:b0:91:05:6f:23:05:9e:03: 8e:0e:cf:06:2a:05:8a:10:bf:c3:8d:e9:92:a8:c0:ea:56:51: f3:ca:18:cc:c8:26:b8:dc:37:62:2f:89:60:a8:68:86:11:99: d5:59:d5:ce:6b:fa:5f:64:53:f3:0a:04:f2:79:63:a4:a2:bc: 8c:14:12:3c:c7:f0:68:41:be:2b:fa:12:9d:6d:26:5c:7e:6e: 7d:f0:37:f0:fb:07:ce:55:9a:17:73:ce:f0:92:ff:15:34:9f: 8b:57:25:f8:80:71:7a:7e:c8:0a:b9:5c:d5:43:4b:4e:ae:f3: 03:5d:ff:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKEFGNEEzNTQ0Qzc0QjMxN0E3QzMyNkFGMEU4MzkzQ0I5 RDUyNjIwMzIwHhcNMjQxMTIyMTU1ODU3WhcNMjQxMTI5MTU1ODU3WjAYMRYwFAYD VQQDEw02NzQwYWE0Mi01YzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurg/ZrJcOWaT5TkF+g9Np0/s51R7jr7HB3ocudp7oPDSzAn8ozeExVnVQcZj nVormig/dEshLTjubyLsVfo9eOmsucn8DHRuuCsa2sdOfqlej87kyX7dMYueKDEt IZO80WqqvDotzcqys3nE7nLSze2Hlt+EnFEpDVdcp1gJ9Clp5J5IqzRkkvJQVSNr vPKH+jzuJJGpXz3Yvkh4Hx0dwpszFTUDVUYGOMR30WwycRj7WWZv3XlFpY9+oGOW XFLaPL+/8wBk2eA8hHIF73MSIN2iI3ASdottLkDGF9Jm5/htxzgdSEk6YBVLbzdV 84fxz+9aYEiyLzYAX/e7S7txUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSfyD6w +XqzYVppXbGHyIVTXIWiMB8GA1UdIwQYMBaAFK9KNUTHSzF6fDJq8Og5PLnVJiAy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi8wRTJFRjUzNDFB NkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1YcDhNbXJ3NkRrOHVkVW1J REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3IwbzFSTWRMTVhwOE1tcnc2RGs4dWRVbUlESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi8wRTJFRjUzNDFBNkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1Y cDhNbXJ3NkRrOHVkVW1JREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxOo9zniS2ex86lwthRc5r6YZWrI+jYpq94g/Wb5ib2BJtugZq154J RuAkQ/bdqhvqigSLP+/fn0uku1kXL7IQ6ZcblXGrB/60JmygSwuEJe4ewkPWTvfk WXyUJnWXbhG8EImkreJyljvIIOhfE+djlK7tWJfIp4p1+0SVoBAK3C98H6Y649D3 sJEFbyMFngOODs8GKgWKEL/DjemSqMDqVlHzyhjMyCa43DdiL4lgqGiGEZnVWdXO a/pfZFPzCgTyeWOkoryMFBI8x/BoQb4r+hKdbSZcfm598Dfw+wfOVZoXc87wkv8V NJ+LVyX4gHF6fsgKuVzVQ0tOrvMDXf/z -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:57 2024 by rpki-client on console-ams.rpki-client.org