$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: oAjyXy3/hfKuuWnKZ9VK0TkZFLRTZ+7IJ9H8tRQ1D3I= Subject key identifier: 5E:9C:E5:83:1A:F3:B4:B7:DD:43:2B:80:C3:10:50:12:A8:4C:F3:32 Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: B5 Signing time: Thu 21 Nov 2024 04:11:47 +0000 Manifest this update: Thu 21 Nov 2024 04:11:46 +0000 Manifest next update: Thu 28 Nov 2024 04:11:46 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: N4Rk2b0Zfeg5VyH4hd04MAM4DEVmzb47LmiFY7/US/Y=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: JewwegL8zF4TM37jWjT/0vufl48ueupuuJhXef1EC1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Nov 21 04:11:46 2024 GMT Not After : Nov 28 04:11:46 2024 GMT Subject: CN=673eb302-2af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ea:03:8f:bc:c4:7b:12:7f:82:d9:65:80:8f: 12:06:7b:8d:31:b6:c7:a8:97:64:0c:f4:8c:72:d0: 57:7d:cd:80:79:3e:ad:fe:cb:95:b3:77:e1:36:07: 95:f6:21:07:44:93:60:d1:33:35:5a:34:49:05:20: 3c:2d:2a:de:4d:78:79:d4:c6:77:0b:3f:00:e7:f9: 8b:76:6f:cb:91:4f:63:f8:e4:86:cf:46:30:f7:e2: 9a:67:24:4c:28:e9:73:96:75:df:80:72:d5:2a:99: f1:ce:be:1c:97:a6:82:b6:de:73:a5:27:b7:da:a9: fe:77:1f:3e:ea:d1:fa:3b:b2:f2:e1:9f:e2:31:bb: 42:0e:28:41:73:52:a6:b7:e4:06:6e:c0:3c:3e:b3: 74:05:ed:df:60:6a:e5:e1:6e:f1:2b:ab:c7:d8:ea: e3:e3:b1:13:8b:94:ae:aa:88:5f:09:af:90:1c:e4: 53:2b:4e:1c:a5:75:26:fa:00:e6:73:98:95:a1:6d: 66:c4:72:8f:b5:75:df:50:d5:c0:0f:bb:0a:8e:94: db:30:06:9e:cd:9f:1f:e3:e9:93:b4:6a:8e:33:e4: 74:88:1e:9b:79:b7:ae:f9:15:c3:b6:9e:44:56:8c: 89:9b:2d:e1:60:36:5c:67:c1:75:c6:66:37:fc:13: 6a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9C:E5:83:1A:F3:B4:B7:DD:43:2B:80:C3:10:50:12:A8:4C:F3:32 X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:7c:37:c7:05:96:bc:55:95:aa:87:70:5b:0a:71:62:a5:af: f4:68:2f:0a:66:11:65:4c:a7:3c:36:fd:71:e3:6d:84:56:e1: 0c:14:4f:24:c6:e7:d1:33:07:0d:a8:7b:31:1e:bb:2c:f3:d9: ac:ac:15:cf:3b:6c:93:15:dd:31:9d:a4:5c:54:8e:0d:8c:7f: b8:e2:f1:b0:f7:30:20:b2:54:5e:55:4f:39:96:ea:b1:4e:5a: 44:52:ed:57:66:5a:7f:74:aa:c5:07:70:2b:b7:6a:d7:31:3a: b2:57:c5:9f:c3:14:2f:ec:fe:8a:bc:25:c9:31:35:05:10:4e: 8a:de:6b:3f:c7:d4:c5:9f:ce:96:fa:a7:aa:d1:a8:09:7d:cb: 69:32:55:e3:24:09:86:3a:57:06:9d:ce:fc:04:94:40:49:54: 4a:a2:d6:c2:e7:df:d6:90:16:72:a8:cb:02:1c:40:c5:18:a2: eb:9f:48:da:48:e5:e0:81:3c:3b:6a:78:4c:03:27:b4:7e:e7: 67:72:bc:1b:1b:d5:68:cd:cb:cb:d8:eb:c8:9d:23:8a:ad:37: 0f:62:57:ae:25:4d:ec:29:97:dc:f4:38:65:f0:e7:67:bb:ec: ae:44:f0:57:f3:e2:4c:6f:66:d9:92:03:6a:e1:e5:33:04:5a: 52:e6:1e:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjQxMTIxMDQxMTQ2WhcNMjQxMTI4MDQxMTQ2WjAYMRYwFAYD VQQDEw02NzNlYjMwMi0yYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uoDj7zEexJ/gtllgI8SBnuNMbbHqJdkDPSMctBXfc2AeT6t/suVs3fhNgeV 9iEHRJNg0TM1WjRJBSA8LSreTXh51MZ3Cz8A5/mLdm/LkU9j+OSGz0Yw9+KaZyRM KOlzlnXfgHLVKpnxzr4cl6aCtt5zpSe32qn+dx8+6tH6O7Ly4Z/iMbtCDihBc1Km t+QGbsA8PrN0Be3fYGrl4W7xK6vH2Orj47ETi5SuqohfCa+QHORTK04cpXUm+gDm c5iVoW1mxHKPtXXfUNXAD7sKjpTbMAaezZ8f4+mTtGqOM+R0iB6bebeu+RXDtp5E VoyJmy3hYDZcZ8F1xmY3/BNq+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6c5YMa 87S33UMrgMMQUBKoTPMyMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIfDfHBZa8VZWqh3BbCnFipa/0aC8KZhFlTKc8Nv1x422EVuEMFE8k xufRMwcNqHsxHrss89msrBXPO2yTFd0xnaRcVI4NjH+44vGw9zAgslReVU85luqx TlpEUu1XZlp/dKrFB3Art2rXMTqyV8WfwxQv7P6KvCXJMTUFEE6K3ms/x9TFn86W +qeq0agJfctpMlXjJAmGOlcGnc78BJRASVRKotbC59/WkBZyqMsCHEDFGKLrn0ja SOXggTw7anhMAye0fudncrwbG9VozcvL2OvInSOKrTcPYleuJU3sKZfc9Dhl8Odn u+yuRPBX8+JMb2bZkgNq4eUzBFpS5h7Q -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:01 2024 by rpki-client on console-ams.rpki-client.org