$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: IjLXX6pLYtuS3NLAZa/hlq9pcKRNc6+Ixj9RpLBwSlI= Subject key identifier: 34:29:63:A3:1B:36:77:AB:97:9D:7C:85:4E:CD:E6:46:8A:05:9A:16 Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0CDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0CB3 Signing time: Fri 22 Nov 2024 18:07:18 +0000 Manifest this update: Fri 22 Nov 2024 18:07:17 +0000 Manifest next update: Fri 29 Nov 2024 18:07:17 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: lFTlOr49Ce6bpRQe3JzxCY0NrK2t9PiyVL8+Pwl0dMs=) 2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: A4wiyM/5CX+HjeauDWX5MJSi1mH5qSYyNxKMD2GNQBc=) 3: 36046172FD7211EEA5E7465CC4F9AE02.roa (hash: qV9LIbjy2xv3z8fy3D2rRFIHziDC/B8IOhZ3j9oyiYA=) 4: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: YTfqj0KVbSB00HahXV06LNdDd9ce6J4nqMrP5jqKRm4=) 5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: hFx3+x64ihawPhs2M5pI5ALUI/A0yfu143JmKs9BUpY=) 6: 338E008C33DD11EAB6057973C4F9AE02.roa (hash: 7+ZLULjVqPCfadW/ubEy902j24oY/POwRPTnqDmUr9w=) 7: F68834A47B9811EC94EE077EC4F9AE02.roa (hash: rzu6L1NwbZGhkLaL23D8LkOxWzX3X64ZAWtZmpPCDmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3294 (0xcde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Nov 22 18:07:17 2024 GMT Not After : Nov 29 18:07:17 2024 GMT Subject: CN=6740c855-7fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dd:03:0b:e2:51:a8:da:cc:7a:4c:48:5c:d3: 26:88:f2:9a:98:52:b7:0f:0a:0f:30:f9:38:4b:7d: b1:fc:25:6e:6c:3b:b6:71:2c:0f:5c:fc:5d:ca:43: e9:17:cf:7e:df:e1:15:a4:9e:47:cd:a9:bd:13:33: 5c:83:5c:91:97:42:e2:86:08:0b:e9:46:4a:b0:cc: ce:56:20:c5:c7:7b:06:68:ce:e3:74:e2:21:62:92: 87:73:b7:bb:10:ca:0b:7b:99:66:76:fe:cc:8c:db: 18:bf:94:9f:ff:9b:52:bc:d6:d7:82:05:fc:be:69: 88:38:a6:10:b8:70:ca:45:a2:6d:cd:ad:57:67:25: 5d:d2:a3:69:d4:6c:0c:2d:b3:3e:84:af:5e:5d:14: 78:9e:50:c3:f0:dc:23:67:b3:56:f3:42:71:7f:82: 9a:24:ad:4a:25:66:3f:51:a5:d4:0e:37:d2:bd:07: 62:1b:88:73:c8:e4:86:c6:2a:8f:a8:01:09:7d:38: ea:f7:86:c7:2a:05:e9:28:1d:e5:7e:e5:80:e7:44: 76:1a:fb:ac:57:e8:27:12:09:93:e8:94:ba:17:4a: 5f:7c:33:fa:34:4e:9b:09:93:e0:78:1e:c0:06:c9: 70:78:c2:25:e3:51:29:fe:cb:71:72:82:17:68:93: 4e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:29:63:A3:1B:36:77:AB:97:9D:7C:85:4E:CD:E6:46:8A:05:9A:16 X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ea:3b:06:1c:46:30:d5:24:6c:a4:d2:7f:42:65:b9:57:dd: e7:dd:76:3a:7d:a5:9b:a4:9f:6f:f8:4d:83:2a:6f:df:59:61: 8e:01:73:44:58:7d:99:37:d3:18:ef:42:40:76:32:92:d1:98: 93:f7:a1:1d:f0:17:df:b3:b7:2d:12:97:d6:53:1d:22:a5:7d: 63:5f:74:11:db:3b:0d:5a:b5:2c:f1:52:cf:9d:c1:b6:62:87: ff:fe:76:24:fd:37:ee:b4:48:94:ee:bd:d2:6b:e2:88:08:a7: 78:f7:c6:c2:61:6b:33:2a:f8:b6:a2:51:8c:83:d5:e3:d3:8c: 2e:8a:71:77:d3:fc:8d:76:d9:36:35:4c:80:56:f4:d3:d0:ee: 78:ad:7d:e9:76:34:c2:7d:8e:91:26:6e:3c:35:62:ce:6f:d2: 1e:82:1c:93:32:57:31:13:fa:e2:db:6b:c0:54:c8:ec:1e:dd: c3:2e:8b:ae:d0:c1:2c:ba:ec:95:ab:45:0a:ef:84:c6:f9:f0: 5a:8c:b7:64:f4:65:d4:57:1e:02:cf:b2:65:d8:e8:68:7d:82: d1:33:e3:82:e0:a6:96:ec:82:34:1a:18:f6:29:57:f4:e8:7c: 42:1c:a1:28:0c:25:3d:d4:f0:4d:39:fe:d0:11:64:42:82:33: 3e:27:1a:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjQxMTIyMTgwNzE3WhcNMjQxMTI5MTgwNzE3WjAYMRYwFAYD VQQDEw02NzQwYzg1NS03ZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA290DC+JRqNrMekxIXNMmiPKamFK3DwoPMPk4S32x/CVubDu2cSwPXPxdykPp F89+3+EVpJ5Hzam9EzNcg1yRl0LihggL6UZKsMzOViDFx3sGaM7jdOIhYpKHc7e7 EMoLe5lmdv7MjNsYv5Sf/5tSvNbXggX8vmmIOKYQuHDKRaJtza1XZyVd0qNp1GwM LbM+hK9eXRR4nlDD8NwjZ7NW80Jxf4KaJK1KJWY/UaXUDjfSvQdiG4hzyOSGxiqP qAEJfTjq94bHKgXpKB3lfuWA50R2GvusV+gnEgmT6JS6F0pffDP6NE6bCZPgeB7A BslweMIl41Ep/stxcoIXaJNOzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQpY6Mb Nnerl518hU7N5kaKBZoWMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi6jsGHEYw1SRspNJ/QmW5V93n3XY6faWbpJ9v+E2DKm/fWWGOAXNE WH2ZN9MY70JAdjKS0ZiT96Ed8Bffs7ctEpfWUx0ipX1jX3QR2zsNWrUs8VLPncG2 Yof//nYk/TfutEiU7r3Sa+KICKd498bCYWszKvi2olGMg9Xj04wuinF30/yNdtk2 NUyAVvTT0O54rX3pdjTCfY6RJm48NWLOb9IeghyTMlcxE/ri22vAVMjsHt3DLouu 0MEsuuyVq0UK74TG+fBajLdk9GXUVx4Cz7Jl2OhofYLRM+OC4KaW7II0Ghj2KVf0 6HxCHKEoDCU91PBNOf7QEWRCgjM+Jxo0 -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org