$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: PM4yu97B3ZSBrVdiu4CwGTTL6KmgZNCC97eohW1bDWw= Subject key identifier: B8:7E:59:09:7C:E9:A3:EA:BF:EB:C6:B0:19:F6:37:E3:95:9A:C8:01 Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0DBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0DB2 Signing time: Fri 22 Nov 2024 17:50:37 +0000 Manifest this update: Fri 22 Nov 2024 17:50:36 +0000 Manifest next update: Fri 29 Nov 2024 17:50:36 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: KwfGuo8nz5rXcUhrmkSoyTEnGVR/CYfBESirjyXpDLU=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: 041/+q2U6C3NS+0FvYUDZgs9ujhQmOXumHp5fUehTOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3514 (0xdba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Nov 22 17:50:36 2024 GMT Not After : Nov 29 17:50:36 2024 GMT Subject: CN=6740c46d-f73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:31:0e:db:2a:a7:da:81:ca:88:5e:f1:89:ad: 97:8b:a1:ed:65:f4:c6:5b:0b:a5:a2:ba:ac:ab:98: ae:c1:bf:a6:c5:c8:d6:fb:6c:30:97:45:e4:66:d3: 65:f9:6e:0c:aa:d7:3f:33:ce:c3:a6:b7:86:33:3b: c7:82:5e:38:91:57:b4:7f:64:a9:e0:fe:3b:b6:0b: e5:26:7a:f5:a0:70:64:f2:e5:f9:73:1c:ab:32:f0: 99:5f:a0:80:79:96:40:05:5a:8b:65:75:f9:1b:43: 0c:71:d2:67:76:14:2e:82:15:1e:14:02:59:b2:b0: f2:53:25:59:88:d8:4b:23:5f:c9:54:29:fe:b0:9b: 79:ed:92:36:47:ba:38:e1:17:e1:8c:a3:39:dd:1b: 4e:7a:7c:99:1d:81:49:c8:2e:26:9f:c3:43:e9:38: e4:66:7c:8e:8e:25:d3:db:a4:c8:e1:7e:c9:d6:8a: f3:6e:ca:e5:b1:86:83:e9:97:ad:f4:23:29:15:da: fb:7c:e3:7b:88:7c:2a:b2:d3:5c:67:16:f7:ae:9e: 2c:67:f0:65:3f:f4:c9:95:2c:1e:3e:5e:12:56:24: d7:fe:12:ba:cf:50:fa:48:65:eb:88:35:46:91:1c: ff:a4:58:00:26:e0:e5:99:73:29:8a:eb:be:32:d0: 92:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7E:59:09:7C:E9:A3:EA:BF:EB:C6:B0:19:F6:37:E3:95:9A:C8:01 X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:eb:fa:78:25:21:7c:f1:4f:56:9b:c1:0d:8d:3e:4a:7d:3a: 55:a9:af:89:50:03:0a:9a:b5:99:e5:e2:e1:61:9b:d9:37:2e: c5:3b:66:1a:7c:3f:e4:75:dc:93:ab:8b:4f:71:16:00:a0:08: 30:62:d9:5d:21:a1:4d:d9:09:22:08:a1:e9:e1:3b:fc:a1:2a: 22:20:9e:a5:f5:80:41:11:97:ad:80:27:d9:a8:cf:97:bf:02: 92:31:3c:3f:91:3e:aa:34:32:7b:ac:42:47:26:9b:2b:45:5e: 8b:e5:d2:fc:7d:73:1b:4d:37:8b:39:66:5b:85:3b:8b:19:e2: fb:8e:50:32:9c:6a:27:8e:cb:e5:ea:7d:5b:5e:9d:0f:ea:c4: 73:16:dd:95:da:00:f7:ad:8c:9d:87:6f:30:51:5f:f8:67:89: e8:de:f7:f4:7c:a9:66:19:62:51:f9:43:45:a2:21:98:6b:1d: ef:4d:61:ce:36:98:7f:a6:f4:fa:a8:91:6e:32:4b:3d:c3:ab: 9c:91:ad:b7:aa:60:dd:52:41:99:c7:a1:e6:7d:11:9d:a2:67: 1d:a0:df:d4:32:f4:9a:07:2d:67:72:f2:a1:5a:91:ef:9f:af: 42:60:68:d2:df:33:cb:96:b8:0a:9a:3e:59:ec:0e:e5:12:b7: 8c:89:35:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjQxMTIyMTc1MDM2WhcNMjQxMTI5MTc1MDM2WjAYMRYwFAYD VQQDEw02NzQwYzQ2ZC1mNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTEO2yqn2oHKiF7xia2Xi6HtZfTGWwulorqsq5iuwb+mxcjW+2wwl0XkZtNl +W4Mqtc/M87DpreGMzvHgl44kVe0f2Sp4P47tgvlJnr1oHBk8uX5cxyrMvCZX6CA eZZABVqLZXX5G0MMcdJndhQughUeFAJZsrDyUyVZiNhLI1/JVCn+sJt57ZI2R7o4 4RfhjKM53RtOenyZHYFJyC4mn8ND6TjkZnyOjiXT26TI4X7J1orzbsrlsYaD6Zet 9CMpFdr7fON7iHwqstNcZxb3rp4sZ/BlP/TJlSwePl4SViTX/hK6z1D6SGXriDVG kRz/pFgAJuDlmXMpiuu+MtCS8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh+WQl8 6aPqv+vGsBn2N+OVmsgBMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA26/p4JSF88U9Wm8ENjT5KfTpVqa+JUAMKmrWZ5eLhYZvZNy7FO2Ya fD/kddyTq4tPcRYAoAgwYtldIaFN2QkiCKHp4Tv8oSoiIJ6l9YBBEZetgCfZqM+X vwKSMTw/kT6qNDJ7rEJHJpsrRV6L5dL8fXMbTTeLOWZbhTuLGeL7jlAynGonjsvl 6n1bXp0P6sRzFt2V2gD3rYydh28wUV/4Z4no3vf0fKlmGWJR+UNFoiGYax3vTWHO Nph/pvT6qJFuMks9w6ucka23qmDdUkGZx6HmfRGdomcdoN/UMvSaBy1ncvKhWpHv n69CYGjS3zPLlrgKmj5Z7A7lEreMiTUA -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:58 2024 by rpki-client on console-ams.rpki-client.org