$ rpki-client -vvf rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft File: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft (raw, json) Hash identifier: uthh4IS7XsK/OVkv9Vsn+sigR9pDG3hTPFL4Cg9DHqg= Subject key identifier: 22:4E:E8:EC:59:92:15:CE:F4:C5:B9:24:09:53:EE:9C:BA:55:34:1E Authority key identifier: 98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 Certificate issuer: /CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Certificate serial: 0333 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft Manifest number: 0330 Signing time: Sat 23 Nov 2024 00:39:54 +0000 Manifest this update: Sat 23 Nov 2024 00:39:53 +0000 Manifest next update: Sat 30 Nov 2024 00:39:53 +0000 Files and hashes: 1: mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl (hash: 6LQ/23qpigg2N+g5Mfuxgdu+6XN8VTJJO3HFoUI43zc=) 2: D83A3404EF0311EDA8B8C81EC4F9AE02.roa (hash: RNcRlm2wXA2LTmrbU4YLnCSJL/XH7jtpKjrey/Lilq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 819 (0x333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912654A/serialNumber=98145177CAC2F5BEE5D276745CED98984053EDA7 Validity Not Before: Nov 23 00:39:53 2024 GMT Not After : Nov 30 00:39:53 2024 GMT Subject: CN=67412459-6e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:a4:00:82:81:3d:26:9b:6b:d7:45:6c:b2: 07:22:64:46:e6:55:6a:23:ed:71:26:02:bd:92:65: 5b:39:96:a5:49:08:8b:7f:90:39:42:f1:a5:14:a4: 46:1c:60:ef:f3:70:17:b3:85:73:9d:ae:2c:54:20: d9:45:90:ef:91:05:72:ea:f4:98:70:82:3d:67:11: 47:71:fb:b4:82:d9:2c:0e:eb:97:f2:7b:4f:c9:8f: c2:29:dd:5d:1e:74:31:9c:51:41:e7:dc:0d:9e:ed: 19:44:08:a5:7d:d7:0f:5d:d0:f7:99:a8:4d:0d:41: 52:2c:17:74:5b:f8:81:ca:cb:61:d9:4d:f0:64:fb: 94:c0:f0:ab:6e:87:d2:63:fd:96:43:37:5f:7b:c0: aa:23:62:78:a0:a1:76:28:47:f6:e6:be:dd:bc:7b: 3b:1f:54:4e:e3:37:2e:ca:ba:e7:f8:1b:e7:83:39: 42:64:9a:e6:10:c8:13:36:c0:11:89:fe:6c:b5:aa: 3d:67:4c:bb:f1:06:f0:32:1f:d2:f4:0b:9b:20:33: af:97:05:da:8d:72:14:fb:22:17:ab:89:cc:30:ed: 6b:fe:8f:c1:46:7f:ff:f3:90:b5:47:21:0f:45:12: 50:dc:f2:e1:07:98:fb:96:f6:0c:e7:01:7d:13:dc: 78:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4E:E8:EC:59:92:15:CE:F4:C5:B9:24:09:53:EE:9C:BA:55:34:1E X509v3 Authority Key Identifier: keyid:98:14:51:77:CA:C2:F5:BE:E5:D2:76:74:5C:ED:98:98:40:53:ED:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912654A/FFB443789F0C11EC9A1AF70EC4F9AE02/mBRRd8rC9b7l0nZ0XO2YmEBT7ac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:9d:b8:1c:4a:d1:f2:1c:09:64:80:14:86:02:ab:26:dc:c3: 9c:4b:9e:6b:2b:96:30:1f:87:ea:56:e7:0e:7e:bf:d1:0b:d5: 65:87:78:2c:ad:77:59:5d:96:e9:84:5c:4f:82:56:d1:c7:ac: d2:e8:c0:b9:e1:a2:27:a3:7c:c6:af:9f:e8:74:12:6f:33:d8: 74:61:46:3b:d1:a3:fa:c0:44:cb:99:f6:64:17:f2:b3:bc:99: fc:0a:83:aa:61:06:25:2d:c4:09:19:1b:e3:42:38:9f:5a:99: 57:6d:49:f1:32:2f:b2:8d:00:ee:41:c5:3a:18:57:3c:21:3e: 1a:21:74:bd:22:00:91:60:85:73:c1:d6:17:b6:da:ae:1b:41: 6e:7f:ce:4d:41:d4:96:0e:96:af:6d:90:a7:c5:71:b7:25:5b: ff:05:86:ec:8d:c7:58:60:7c:5f:52:80:70:db:67:b8:f5:e7: c3:1d:c9:e1:61:8c:03:fd:45:9d:4b:32:ed:7a:b0:92:34:07: 38:25:d0:5e:12:85:c7:78:4b:29:41:d3:0f:09:54:0b:03:34: a7:5c:fd:44:b9:5e:89:51:89:4a:de:05:87:40:e4:cb:ec:de: ca:a1:da:5a:4d:2a:60:47:b4:d9:ed:08:44:3c:89:b1:51:9c: 02:1b:94:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY1NEExMTAvBgNVBAUTKDk4MTQ1MTc3Q0FDMkY1QkVFNUQyNzY3NDVDRUQ5ODk4 NDA1M0VEQTcwHhcNMjQxMTIzMDAzOTUzWhcNMjQxMTMwMDAzOTUzWjAYMRYwFAYD VQQDEw02NzQxMjQ1OS02ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUGkAIKBPSaba9dFbLIHImRG5lVqI+1xJgK9kmVbOZalSQiLf5A5QvGlFKRG HGDv83AXs4Vzna4sVCDZRZDvkQVy6vSYcII9ZxFHcfu0gtksDuuX8ntPyY/CKd1d HnQxnFFB59wNnu0ZRAilfdcPXdD3mahNDUFSLBd0W/iBysth2U3wZPuUwPCrbofS Y/2WQzdfe8CqI2J4oKF2KEf25r7dvHs7H1RO4zcuyrrn+BvngzlCZJrmEMgTNsAR if5stao9Z0y78QbwMh/S9AubIDOvlwXajXIU+yIXq4nMMO1r/o/BRn//85C1RyEP RRJQ3PLhB5j7lvYM5wF9E9x4tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJO6OxZ khXO9MW5JAlT7py6VTQeMB8GA1UdIwQYMBaAFJgUUXfKwvW+5dJ2dFztmJhAU+2n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjU0QS9GRkI0NDM3ODlG MEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzliN2wwblowWE8yWW1FQlQ3 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21CUlJkOHJDOWI3bDBuWjBYTzJZbUVCVDdhYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjU0QS9GRkI0NDM3ODlGMEMxMUVDOUExQUY3MEVDNEY5QUUwMi9tQlJSZDhyQzli N2wwblowWE8yWW1FQlQ3YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgnbgcStHyHAlkgBSGAqsm3MOcS55rK5YwH4fqVucOfr/RC9Vlh3gs rXdZXZbphFxPglbRx6zS6MC54aIno3zGr5/odBJvM9h0YUY70aP6wETLmfZkF/Kz vJn8CoOqYQYlLcQJGRvjQjifWplXbUnxMi+yjQDuQcU6GFc8IT4aIXS9IgCRYIVz wdYXttquG0Fuf85NQdSWDpavbZCnxXG3JVv/BYbsjcdYYHxfUoBw22e49efDHcnh YYwD/UWdSzLterCSNAc4JdBeEoXHeEspQdMPCVQLAzSnXP1EuV6JUYlK3gWHQOTL 7N7KodpaTSpgR7TZ7QhEPImxUZwCG5Ty -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:20 2024 by rpki-client on console-ams.rpki-client.org