$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft File: 1cNfp3myIZlgnD6gpTHFoNMyrQE.mft (raw, json) Hash identifier: K/cxqoP4qyPlPvxlbajiPAI9HPe+GsERyHfoT7cwLxM= Subject key identifier: 34:6D:57:E5:3F:9E:B6:AD:1E:AF:69:CC:B0:BD:16:94:C0:CF:0E:7C Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft Manifest number: 0128 Signing time: Sat 23 Nov 2024 02:52:28 +0000 Manifest this update: Sat 23 Nov 2024 02:52:27 +0000 Manifest next update: Sat 30 Nov 2024 02:52:27 +0000 Files and hashes: 1: 1cNfp3myIZlgnD6gpTHFoNMyrQE.crl (hash: 2L5S5/zC2/OVmHNkJj3f52gjoJgMRZp1QaDmUxaKjdc=) 2: 4D962E8AE65111ED90E5833EC4F9AE02.roa (hash: ctjc71wAW5BRUT+1ls1Hu0t5x5bimXokT3F+g8PGCEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01 Validity Not Before: Nov 23 02:52:27 2024 GMT Not After : Nov 30 02:52:27 2024 GMT Subject: CN=6741436b-c60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:66:a0:f1:8e:13:b6:0b:8b:78:47:e5:47:ba: f3:f1:6a:cc:fc:14:9a:13:58:e4:1f:ea:86:af:72: cd:a4:a0:63:be:5e:3c:bb:89:f8:59:6d:e6:0c:12: b3:2e:26:76:39:e8:d8:fe:ab:b2:39:f7:c1:00:98: f0:3d:00:b5:b2:aa:93:51:3b:5d:3a:9b:36:51:20: 63:a8:b7:35:a2:ea:93:fe:45:29:96:e9:47:f3:72: 4a:6f:ce:4d:76:39:fb:ef:85:a7:46:98:53:f2:6f: d3:de:b7:a9:ad:3d:65:43:76:a5:cf:d7:9d:9c:38: d0:be:11:10:3d:d4:99:cd:da:7a:30:15:24:c9:7d: 00:c6:b3:01:d5:d4:b1:c4:8e:28:ba:6c:88:aa:c3: 38:04:ae:7f:7d:d4:0f:37:b8:52:dd:b5:c7:cb:5b: 0a:4d:8e:2b:e0:50:48:1a:3b:0d:9c:2e:b7:62:19: d1:30:0f:34:ae:55:9c:83:eb:2d:ab:ea:00:2c:92: 8a:d3:4d:10:db:aa:72:5c:7a:fd:6f:73:af:f0:44: b7:4e:e7:eb:1e:dc:18:5f:9b:c1:f7:49:2d:fc:88: d4:04:52:6a:ae:87:34:d5:93:e3:4d:bc:39:05:69: 24:7a:3e:f4:79:b3:55:4e:2f:80:f2:49:91:ab:65: 0f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6D:57:E5:3F:9E:B6:AD:1E:AF:69:CC:B0:BD:16:94:C0:CF:0E:7C X509v3 Authority Key Identifier: keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:af:e6:c2:9c:ec:db:13:f5:92:29:81:bd:da:de:03:57:47: 38:1c:ca:c3:b8:6d:63:81:bb:ed:89:e6:a7:7e:af:23:fb:ec: f2:ff:ad:1c:b3:4f:9b:4e:d0:fa:18:f1:7e:b7:2d:0a:66:c5: 18:b4:42:ba:5a:06:a6:42:75:cc:2e:25:05:f3:b6:d6:3f:a2: 72:c6:2f:dc:9a:cc:3b:5c:b9:5f:49:8f:f0:11:7c:dc:ce:4d: ca:4e:b5:13:91:5f:59:db:c0:f8:59:75:08:54:e2:5f:fe:0a: ed:67:cc:d8:80:43:c4:e9:3f:6f:61:46:68:44:d2:e7:6a:05: d4:60:3f:c0:b8:84:4e:e8:9b:e1:b5:e4:57:1d:42:6c:f5:6b: dc:93:5c:4f:b3:cd:3e:1c:29:c3:d2:79:70:b7:fe:1f:e7:08: 56:30:11:01:5b:0b:f2:83:e3:42:3a:48:d0:6a:bf:a8:18:d3: 97:ef:2f:3c:f4:a7:ae:96:4f:69:33:f9:05:ca:a1:d9:b9:09: 04:d1:19:bc:16:51:c1:63:78:ad:44:31:1d:07:ac:64:56:11: 8c:d4:a1:73:ad:56:fd:68:af:5a:99:56:8f:2f:72:9e:4a:9a: a9:1b:f0:9c:bf:c1:c1:2f:60:42:2d:18:10:f7:6d:53:18:65: be:8d:86:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE4QkMxMTAvBgNVBAUTKEQ1QzM1RkE3NzlCMjIxOTk2MDlDM0VBMEE1MzFDNUEw RDMzMkFEMDEwHhcNMjQxMTIzMDI1MjI3WhcNMjQxMTMwMDI1MjI3WjAYMRYwFAYD VQQDEw02NzQxNDM2Yi1jNjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymag8Y4TtguLeEflR7rz8WrM/BSaE1jkH+qGr3LNpKBjvl48u4n4WW3mDBKz LiZ2OejY/quyOffBAJjwPQC1sqqTUTtdOps2USBjqLc1ouqT/kUplulH83JKb85N djn774WnRphT8m/T3reprT1lQ3alz9ednDjQvhEQPdSZzdp6MBUkyX0AxrMB1dSx xI4oumyIqsM4BK5/fdQPN7hS3bXHy1sKTY4r4FBIGjsNnC63YhnRMA80rlWcg+st q+oALJKK000Q26pyXHr9b3Ov8ES3TufrHtwYX5vB90kt/IjUBFJqroc01ZPjTbw5 BWkkej70ebNVTi+A8kmRq2UPewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRtV+U/ nratHq9pzLC9FpTAzw58MB8GA1UdIwQYMBaAFNXDX6d5siGZYJw+oKUxxaDTMq0B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQThCQy8wNTRBNEM1MEU2 NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUlabGduRDZncFRIRm9OTXly UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjTmZwM215SVpsZ25ENmdwVEhGb05NeXJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QThCQy8wNTRBNEM1MEU2NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUla bGduRDZncFRIRm9OTXlyUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCr+bCnOzbE/WSKYG92t4DV0c4HMrDuG1jgbvtieanfq8j++zy/60c s0+bTtD6GPF+ty0KZsUYtEK6WgamQnXMLiUF87bWP6Jyxi/cmsw7XLlfSY/wEXzc zk3KTrUTkV9Z28D4WXUIVOJf/grtZ8zYgEPE6T9vYUZoRNLnagXUYD/AuIRO6Jvh teRXHUJs9Wvck1xPs80+HCnD0nlwt/4f5whWMBEBWwvyg+NCOkjQar+oGNOX7y88 9Keulk9pM/kFyqHZuQkE0Rm8FlHBY3itRDEdB6xkVhGM1KFzrVb9aK9amVaPL3Ke SpqpG/Ccv8HBL2BCLRgQ921TGGW+jYbl -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:36 2024 by rpki-client on console-ams.rpki-client.org