$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft File: xNdQnlMs4vbky06OXDwia6MVTm8.mft (raw, json) Hash identifier: 7YgUNtXBe1noNZhos0h14dRs/CvSCJckKesIohwdz78= Subject key identifier: 33:84:14:BC:75:3D:A6:96:C3:1E:42:A3:F7:E0:C6:BB:19:48:40:D8 Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 1037 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft Manifest number: 1020 Signing time: Fri 22 Nov 2024 17:23:45 +0000 Manifest this update: Fri 22 Nov 2024 17:23:45 +0000 Manifest next update: Fri 29 Nov 2024 17:23:45 +0000 Files and hashes: 1: xNdQnlMs4vbky06OXDwia6MVTm8.crl (hash: QJTXrwbppT4IERnZda2RLqLhvvAQkcoS5HWFcW7hRqc=) 2: 21151EF0A8C411EC8F560C42C4F9AE02.roa (hash: o4IiEMeA6RrIyI4EIGSr0hvBNlyD3kRf/X6yW/XL/pk=) 3: 1803FFC65E5F11EBBE37FA4CC4F9AE02.roa (hash: gqFP1IUKKDRvNeAUOIr33aKVzsawxI23lvIfLsK890s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4151 (0x1037) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Validity Not Before: Nov 22 17:23:45 2024 GMT Not After : Nov 29 17:23:45 2024 GMT Subject: CN=6740be21-e29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:e0:e4:0c:61:00:e8:58:07:55:4c:24:43: a1:74:0f:9a:4e:6c:e7:d1:b0:1c:11:48:41:e1:f3: 08:2a:c1:ba:4b:4b:0a:d9:70:79:e6:cf:b8:72:50: f9:41:e1:a1:95:16:d4:02:c6:0e:2b:d4:ff:c9:22: cf:dd:ec:66:f6:39:66:05:1a:a4:0a:81:bc:07:40: a1:55:c2:a2:22:3d:f7:33:cc:5d:75:2c:c3:3a:c4: 32:13:e7:67:ed:5d:39:68:fe:5d:c5:bf:27:96:06: 44:e4:26:a3:b0:1f:5f:e2:1b:b1:80:de:8e:9f:c9: ae:a0:09:b4:a4:4a:c6:b0:6b:2c:14:df:b7:ef:6d: e6:8c:1b:b7:0d:34:51:68:f4:81:3b:15:53:d3:39: a8:cf:62:92:55:cb:a8:d2:7c:69:5c:23:ea:ab:18: 36:c0:0d:36:12:57:64:2d:d8:cc:5d:70:4a:c0:32: 52:51:96:7f:42:b7:20:8f:43:a3:44:24:09:e1:89: d6:84:f3:05:46:01:72:e8:25:28:c3:ea:70:5c:bc: a6:35:5d:03:f5:8c:35:e2:a5:b9:e6:79:5c:03:5c: eb:a5:79:7f:f4:01:0a:5a:4a:00:2f:0b:66:17:c5: db:e6:cb:91:f2:20:e4:47:f8:af:a0:e1:8a:9b:b5: 14:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:84:14:BC:75:3D:A6:96:C3:1E:42:A3:F7:E0:C6:BB:19:48:40:D8 X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:48:e0:9d:bc:01:54:75:8c:08:6f:d5:07:87:5a:23:e2:89: 8c:57:e2:eb:68:94:a7:e1:f2:40:f4:72:0f:be:d4:ff:d8:68: 8e:52:fa:bf:7f:7b:ba:b1:ac:00:5d:f9:74:e1:98:ac:b1:15: 3b:d1:8a:2d:9a:ff:ea:52:ab:ad:62:44:1e:e2:0c:46:a7:b8: de:8d:b9:7f:fa:85:03:0a:48:66:78:e6:7f:65:c3:f7:fe:1e: d1:78:45:ac:a2:5b:20:9f:19:ab:36:38:d5:08:a5:88:21:c9: 65:e0:5e:e1:d2:21:5e:f6:94:45:3d:53:66:17:7f:2b:00:8a: 72:7b:0c:71:24:09:3d:e2:20:ae:3d:0d:fc:87:d5:ed:c2:de: fb:49:d3:4a:c4:c0:b9:b4:f2:d4:4f:f8:83:b5:cb:2d:a6:d2: b2:17:5f:e6:d5:85:98:57:c0:46:50:6f:91:2d:7f:5d:4e:bb: f4:c0:b9:7b:db:f8:5e:1b:44:11:8b:d7:c8:c2:41:8c:48:25: 4f:3f:99:52:87:96:51:31:e5:d4:68:10:cf:6e:25:89:8c:57: 37:e8:56:05:b9:4f:d1:7f:74:c1:97:db:8a:8a:a7:d3:49:13: 8c:4a:d3:ea:35:98:5f:b5:b0:42:bb:39:fd:e0:0e:68:69:01: 41:a3:9e:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjQxMTIyMTcyMzQ1WhcNMjQxMTI5MTcyMzQ1WjAYMRYwFAYD VQQDEw02NzQwYmUyMS1lMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaPg5AxhAOhYB1VMJEOhdA+aTmzn0bAcEUhB4fMIKsG6S0sK2XB55s+4clD5 QeGhlRbUAsYOK9T/ySLP3exm9jlmBRqkCoG8B0ChVcKiIj33M8xddSzDOsQyE+dn 7V05aP5dxb8nlgZE5CajsB9f4huxgN6On8muoAm0pErGsGssFN+3723mjBu3DTRR aPSBOxVT0zmoz2KSVcuo0nxpXCPqqxg2wA02EldkLdjMXXBKwDJSUZZ/Qrcgj0Oj RCQJ4YnWhPMFRgFy6CUow+pwXLymNV0D9Yw14qW55nlcA1zrpXl/9AEKWkoALwtm F8Xb5suR8iDkR/ivoOGKm7UURwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOEFLx1 PaaWwx5Co/fgxrsZSEDYMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUYwQi9CNTk0MTlEMjMyRUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2 Ymt5MDZPWER3aWE2TVZUbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcSOCdvAFUdYwIb9UHh1oj4omMV+LraJSn4fJA9HIPvtT/2GiOUvq/ f3u6sawAXfl04ZissRU70Yotmv/qUqutYkQe4gxGp7jejbl/+oUDCkhmeOZ/ZcP3 /h7ReEWsolsgnxmrNjjVCKWIIcll4F7h0iFe9pRFPVNmF38rAIpyewxxJAk94iCu PQ38h9Xtwt77SdNKxMC5tPLUT/iDtcstptKyF1/m1YWYV8BGUG+RLX9dTrv0wLl7 2/heG0QRi9fIwkGMSCVPP5lSh5ZRMeXUaBDPbiWJjFc36FYFuU/Rf3TBl9uKiqfT SROMStPqNZhftbBCuzn94A5oaQFBo54S -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org