$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft File: Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json) Hash identifier: eoyhUOExSTWbUBOeft3r/+yUM5pfA6fqNihHlZCYYt8= Subject key identifier: 14:12:96:48:D7:FC:E8:C2:C3:20:C9:00:34:38:E9:84:1C:9C:B2:93 Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 Certificate issuer: /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft Manifest number: 28 Signing time: Wed 20 Nov 2024 23:41:13 +0000 Manifest this update: Wed 20 Nov 2024 23:41:13 +0000 Manifest next update: Wed 27 Nov 2024 23:41:13 +0000 Files and hashes: 1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: 2y7B9sFJHWMeDeZAKBXHXpHF+ZuJzmAfoHXB59M/dGc=) 2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: ElsPU65e2hUeotUEY3QlpKwAlLHfqV+tvF4x0dtoq3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1 Validity Not Before: Nov 20 23:41:13 2024 GMT Not After : Nov 27 23:41:13 2024 GMT Subject: CN=673e7399-4da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:21:ad:3a:23:de:43:b7:5b:b7:e1:7c:62:0d: 69:53:03:24:6d:dd:de:ac:32:d5:a5:d9:22:c8:4a: b6:39:57:0b:e5:cc:7f:1a:72:ca:8b:a4:f4:67:99: f6:0b:ce:22:93:72:aa:a9:8d:1d:89:c8:de:7d:bc: 8e:11:fa:6b:aa:f6:14:66:04:bb:81:f7:f1:80:c5: 57:82:44:c4:99:87:1e:96:19:9e:ee:76:a6:2e:21: 8e:65:42:62:0a:8f:15:48:90:68:01:24:39:0f:f9: b2:6a:ed:f4:65:bd:2a:37:5e:7b:dc:8b:44:f5:7a: 25:0a:b9:7c:5b:33:fa:5d:00:40:4d:23:9b:c2:1f: 55:ee:e1:88:9b:d0:ca:88:15:2e:29:22:bd:5c:36: 4c:4b:b3:89:bc:25:b4:94:81:51:8e:c3:e8:6e:04: 6e:62:5a:ce:13:07:0b:be:85:a7:28:24:03:0f:eb: 24:ce:e7:ab:c0:f2:28:64:6d:56:f3:8e:c6:d7:6d: 14:b1:a1:12:25:73:94:d8:9f:c0:1c:e3:e5:82:df: df:d4:ed:85:54:dc:df:ef:6c:15:67:87:a5:11:19: e8:cb:74:81:ae:aa:4e:97:ae:50:7a:ec:56:a6:32: f8:9c:45:e8:89:42:e3:3b:0e:91:0e:9c:7b:84:72: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:12:96:48:D7:FC:E8:C2:C3:20:C9:00:34:38:E9:84:1C:9C:B2:93 X509v3 Authority Key Identifier: keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:42:59:7c:06:aa:0e:53:13:ba:d6:6d:01:cb:d4:35:55:46: d4:67:d9:98:b0:28:24:ee:76:96:93:c2:a2:73:eb:18:15:f5: 02:63:c6:07:b8:c2:0d:9e:9c:80:89:42:dc:42:ed:23:ed:3a: 88:f4:9d:c7:a8:eb:3f:4c:b4:7f:e6:0f:65:cf:64:49:f3:2d: 2f:27:05:2c:08:5b:28:1b:fb:90:c1:ce:dd:c2:42:e2:42:0e: 2f:ce:fd:89:78:ce:11:95:ee:35:b9:7f:39:9f:07:be:a9:c8: e5:b6:5a:eb:3f:9f:4c:44:a3:8d:22:b0:ba:a9:48:c0:f3:e2: ff:40:9e:02:82:6a:dc:06:6f:20:e2:ad:16:04:b8:a4:f2:e9: f4:66:ea:a3:49:b9:c9:2f:d3:20:45:d0:ab:b5:02:6a:e3:75: 5d:5b:67:7f:ea:f2:55:84:8d:5c:15:93:28:a1:3b:bc:85:57: 11:42:8f:09:06:84:3d:de:e8:df:b5:7b:1d:40:f4:e8:cb:3a: ec:38:27:1d:e9:96:77:c1:14:c8:cf:c3:1f:55:f6:60:b2:34: f8:ca:d9:91:f1:9a:b2:25:d5:4d:e2:1f:14:68:67:aa:9b:fa: 75:4b:f7:2d:12:9c:f9:54:e2:6a:9c:8b:ea:de:7d:f2:18:3b: a6:ff:a7:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTNCRTExMC8GA1UEBRMoNEIyQzc3QkMyREY0M0M3Mjg0RDAxRTQ1QjEyREIzQkRG MDA5MTZEMTAeFw0yNDExMjAyMzQxMTNaFw0yNDExMjcyMzQxMTNaMBgxFjAUBgNV BAMTDTY3M2U3Mzk5LTRkYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClIa06I95Dt1u34XxiDWlTAyRt3d6sMtWl2SLISrY5VwvlzH8acsqLpPRnmfYL ziKTcqqpjR2JyN59vI4R+muq9hRmBLuB9/GAxVeCRMSZhx6WGZ7udqYuIY5lQmIK jxVIkGgBJDkP+bJq7fRlvSo3Xnvci0T1eiUKuXxbM/pdAEBNI5vCH1Xu4Yib0MqI FS4pIr1cNkxLs4m8JbSUgVGOw+huBG5iWs4TBwu+hacoJAMP6yTO56vA8ihkbVbz jsbXbRSxoRIlc5TYn8Ac4+WC39/U7YVU3N/vbBVnh6URGejLdIGuqk6XrlB67Fam MvicReiJQuM7DpEOnHuEckQrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFBKWSNf8 6MLDIMkANDjphBycspMwHwYDVR0jBBgwFoAUSyx3vC30PHKE0B5FsS2zvfAJFtEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBM0JFLzY3OEUxNkIwNkZD RTExRUY4OUJCNEM1RUM0RjlBRTAyL1N5eDN2QzMwUEhLRTBCNUZzUzJ6dmZBSkZ0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU3l4M3ZDMzBQSEtFMEI1RnNTMnp2ZkFKRnRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB M0JFLzY3OEUxNkIwNkZDRTExRUY4OUJCNEM1RUM0RjlBRTAyL1N5eDN2QzMwUEhL RTBCNUZzUzJ6dmZBSkZ0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM5CWXwGqg5TE7rWbQHL1DVVRtRn2ZiwKCTudpaTwqJz6xgV9QJjxge4 wg2enICJQtxC7SPtOoj0nceo6z9MtH/mD2XPZEnzLS8nBSwIWygb+5DBzt3CQuJC Di/O/Yl4zhGV7jW5fzmfB76pyOW2Wus/n0xEo40isLqpSMDz4v9AngKCatwGbyDi rRYEuKTy6fRm6qNJuckv0yBF0Ku1AmrjdV1bZ3/q8lWEjVwVkyihO7yFVxFCjwkG hD3e6N+1ex1A9OjLOuw4Jx3plnfBFMjPwx9V9mCyNPjK2ZHxmrIl1U3iHxRoZ6qb +nVL9y0SnPlU4mqci+reffIYO6b/p1w= -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:56 2024 by rpki-client on console-ams.rpki-client.org