$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: JXubEAH52wKcET1T6KIs8TGpRgIfLFGmx8fjGWE1Ta0= Subject key identifier: 02:12:F5:0A:0F:72:DE:4B:FE:8C:AE:48:03:15:DE:3B:29:B4:B2:DB Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: 19 Signing time: Wed 23 Oct 2024 00:06:30 +0000 Manifest this update: Wed 23 Oct 2024 00:06:29 +0000 Manifest next update: Wed 30 Oct 2024 00:06:29 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: ScqQirUhslyFSrXGxPBbwUcN4yp41hqBEo8QJ9RGzOw=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: ElsPU65e2hUeotUEY3QlpKwAlLHfqV+tvF4x0dtoq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 23:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Validity Not Before: Oct 23 00:06:29 2024 GMT Not After : Oct 30 00:06:29 2024 GMT Subject: CN=67183e06-35d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:d4:cb:05:dd:40:67:87:34:a6:3c:e7:50: 0e:62:4f:16:a2:a9:67:cc:e0:04:8e:67:02:1d:9f: 9a:42:f3:d0:2d:3e:4c:17:d3:70:12:6a:e7:f8:83: 4b:32:f5:12:5e:28:8d:15:5f:8d:9f:b7:a0:06:70: 72:82:90:d2:69:9f:53:b0:9c:26:c9:3f:d8:92:46: 51:26:69:85:6a:56:5d:4c:8b:5a:1f:25:c2:f9:a9: 89:d8:fd:61:07:8e:b1:ca:a9:c6:a2:f9:7f:3e:b1: 87:fa:31:58:bf:79:d9:64:de:ca:4a:f6:f4:31:7f: 8c:d3:92:98:92:6b:08:9a:8a:e9:52:82:7e:ef:3d: f2:6b:b5:7a:37:42:27:4e:e2:f6:a0:ef:03:e0:6d: 9d:c6:ca:40:69:a5:bd:ab:39:4b:e2:9b:ed:b0:20: 6a:25:05:25:df:3f:cb:c0:c9:5f:55:8e:b9:9e:3f: 13:0d:55:3f:26:44:0c:5c:36:25:ae:42:c7:4d:c6: 3f:98:59:2d:fa:69:65:03:98:9d:1f:e7:c2:8a:ba: e7:b5:73:c9:1f:26:db:a9:42:a0:69:d7:68:0c:b3: c1:5d:57:ff:00:2d:56:10:60:29:1d:6d:4a:76:41: 89:8d:b5:b4:4b:ef:d4:3d:4c:e3:62:f7:f4:35:78: ad:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:12:F5:0A:0F:72:DE:4B:FE:8C:AE:48:03:15:DE:3B:29:B4:B2:DB X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:dc:dd:48:c5:b8:67:7f:54:a6:5a:0d:62:6d:0e:b1:9f:2a: 9b:36:4a:d5:ed:6a:6a:63:04:14:35:52:67:0f:60:89:f3:f0: 99:32:cf:ac:97:30:7b:72:9d:87:cd:a1:fa:8e:07:ff:65:76: 4a:a7:c5:00:3f:a7:4c:e4:3c:99:f9:1b:b9:cd:7d:03:74:18: 51:5a:ee:ca:b6:bd:b9:06:6e:5f:16:8b:b4:ac:da:89:c4:7d: 11:4d:56:1a:bf:ba:8a:0f:1c:e1:55:26:29:17:a6:32:e3:35: c4:d4:46:f5:17:69:c3:89:b3:77:f4:f1:77:13:77:c7:20:e4: f4:b3:df:4d:54:ea:94:49:18:5e:a8:d5:3c:d6:64:88:e6:e4: 4c:61:48:d0:82:9e:d7:92:a2:30:a8:0d:97:2e:6d:ba:13:46: 36:5c:7a:d4:b8:ce:b2:ac:ab:a0:8d:a8:5e:2a:56:f5:6e:3d: 13:5c:10:b5:a8:68:23:e2:9a:50:96:12:01:b1:8e:3b:26:1d: 72:17:67:c3:6b:45:84:59:41:33:88:94:6f:76:ad:db:58:d1: c6:50:cc:1a:e9:8b:c1:de:79:40:50:23:4b:91:88:7c:b0:aa: 25:bd:65:b4:1d:2a:6f:f1:3c:c1:e5:a9:21:7a:e5:dc:1e:22: 78:e6:47:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTNCRTExMC8GA1UEBRMoNEIyQzc3QkMyREY0M0M3Mjg0RDAxRTQ1QjEyREIzQkRG MDA5MTZEMTAeFw0yNDEwMjMwMDA2MjlaFw0yNDEwMzAwMDA2MjlaMBgxFjAUBgNV BAMTDTY3MTgzZTA2LTM1ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYI9TLBd1AZ4c0pjznUA5iTxaiqWfM4ASOZwIdn5pC89AtPkwX03ASauf4g0sy 9RJeKI0VX42ft6AGcHKCkNJpn1OwnCbJP9iSRlEmaYVqVl1Mi1ofJcL5qYnY/WEH jrHKqcai+X8+sYf6MVi/edlk3spK9vQxf4zTkpiSawiaiulSgn7vPfJrtXo3QidO 4vag7wPgbZ3GykBppb2rOUvim+2wIGolBSXfP8vAyV9VjrmePxMNVT8mRAxcNiWu QsdNxj+YWS36aWUDmJ0f58KKuue1c8kfJtupQqBp12gMs8FdV/8ALVYQYCkdbUp2 QYmNtbRL79Q9TONi9/Q1eK23AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAhL1Cg9y 3kv+jK5IAxXeOym0stswHwYDVR0jBBgwFoAUSyx3vC30PHKE0B5FsS2zvfAJFtEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBM0JFLzY3OEUxNkIwNkZD RTExRUY4OUJCNEM1RUM0RjlBRTAyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU3l4M3ZDMzBQSEtFMEI1RnNTMnp2ZkFKRnRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB M0JFLzY3OEUxNkIwNkZDRTExRUY4OUJCNEM1RUM0RjlBRTAyL1N5eDN2QzMwUEhL RTBCNUZzUzJ6dmZBSkZ0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANbc3UjFuGd/VKZaDWJtDrGfKps2StXtampjBBQ1UmcPYInz8Jkyz6yX MHtynYfNofqOB/9ldkqnxQA/p0zkPJn5G7nNfQN0GFFa7sq2vbkGbl8Wi7Ss2onE fRFNVhq/uooPHOFVJikXpjLjNcTURvUXacOJs3f08XcTd8cg5PSz301U6pRJGF6o 1TzWZIjm5ExhSNCCnteSojCoDZcubboTRjZcetS4zrKsq6CNqF4qVvVuPRNcELWo aCPimlCWEgGxjjsmHXIXZ8NrRYRZQTOIlG92rdtY0cZQzBrpi8HeeUBQI0uRiHyw qiW9ZbQdKm/xPMHlqSF65dweInjmRxg= -----END CERTIFICATE-----Generated at Wed Oct 23 02:15:44 2024 by rpki-client on console-ams.rpki-client.org