$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft File: 1r894WRB7X2HUG3gnk3V1jjgumk.mft (raw, json) Hash identifier: eMyFhdZ8/VWoFylc7RU/OoPAhvBm6YV7Erln6QyKcYs= Subject key identifier: 86:87:C0:98:89:21:FA:45:51:41:F1:14:33:3C:07:8F:17:7E:B0:FB Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 Certificate issuer: /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft Manifest number: 5D Signing time: Sun 03 Nov 2024 05:19:43 +0000 Manifest this update: Sun 03 Nov 2024 05:19:43 +0000 Manifest next update: Sun 10 Nov 2024 05:19:43 +0000 Files and hashes: 1: 1r894WRB7X2HUG3gnk3V1jjgumk.crl (hash: kTaZ5RbVn9tzp3JhYk1jR9N5tC4P9mseQu4QwCA9KnE=) 2: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (hash: m4oglPoB38SyEKwPfAbQcyjAIp/BCnugPm3RoOXoqoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Validity Not Before: Nov 3 05:19:43 2024 GMT Not After : Nov 10 05:19:43 2024 GMT Subject: CN=672707ef-f024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:1c:e5:aa:bc:d6:fb:ad:dd:36:2b:9d:fe: 2e:72:38:2b:a5:52:62:8c:0d:9c:87:5f:a5:4b:01: 73:7b:96:cd:4b:ab:0b:ab:4d:8e:07:70:e5:e2:5d: fe:a9:13:13:70:25:bc:87:bb:7c:8b:71:9d:df:5e: 04:36:3c:38:e5:20:97:9d:16:6b:0a:7f:36:4d:03: bb:83:d0:16:59:91:f0:ca:30:de:21:42:41:67:cb: d2:37:c9:2e:4b:9c:d0:c7:11:f6:6d:40:f0:b4:f2: a9:87:b2:94:7d:11:ec:f4:9b:5d:8c:e6:5d:d2:2f: 65:a5:a9:b2:8e:76:7a:96:0f:89:be:5b:65:26:1c: 8a:89:62:3d:a4:4d:b2:e5:41:f1:b2:a5:46:43:86: 90:c2:34:ec:43:2a:b9:62:23:ab:e6:df:3d:68:a3: 63:fc:6e:16:f4:50:0c:26:56:ad:ff:84:46:f7:39: ed:8f:f9:fb:30:ff:b1:74:57:1b:c6:0f:32:d1:a2: b3:fb:c9:ee:f3:67:75:a1:2f:15:9d:14:c8:6a:50: f9:70:a8:ee:ca:50:48:fd:88:de:21:0a:bc:16:8a: 8e:f2:91:f5:90:42:23:5f:86:95:41:69:11:35:70: be:b5:8b:78:1d:8e:cf:a2:29:cc:e9:b8:63:43:27: de:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:87:C0:98:89:21:FA:45:51:41:F1:14:33:3C:07:8F:17:7E:B0:FB X509v3 Authority Key Identifier: keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:25:ad:68:ab:5d:10:81:f3:0c:38:28:32:6f:53:20:ed:d7: 15:17:a6:be:99:9e:5c:3b:e3:51:d8:c3:30:1c:af:68:ac:06: 38:4d:6c:2a:d1:54:21:09:9f:6b:b5:d6:40:97:95:0a:6c:4b: b9:79:d7:53:5c:59:20:32:35:7e:11:28:2c:88:c7:8c:cc:44: 73:26:18:ad:a5:25:2a:d1:1e:6b:7b:fd:94:14:3a:a9:8d:93: 9f:af:30:c2:0e:10:2e:ac:ff:c2:8d:75:73:c5:bd:42:6c:20: 03:8c:ad:69:17:d1:6c:4a:01:b9:c2:0c:a8:08:76:98:53:a1: cc:c4:fd:cd:12:0c:9e:89:bc:3e:34:f2:55:d3:4c:37:f7:33: 53:82:a5:f7:6d:47:dd:27:17:52:69:44:1c:aa:71:f8:15:41: 71:22:cd:48:21:ec:8d:7e:87:84:0d:bd:45:70:e3:09:92:69: 17:08:19:e7:e8:9f:8b:a9:41:73:58:86:d9:97:22:7c:01:3c: 81:ae:73:49:3b:70:93:d7:b6:f9:51:66:e5:32:81:d9:0c:0e: 4d:c9:77:5f:39:2d:db:9b:7b:19:59:4a:f4:b4:55:93:e0:ba: 7a:a2:46:99:b5:00:67:f4:ce:31:9b:f6:a5:f6:72:63:75:b3: 59:67:ea:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjE5MDExMC8GA1UEBRMoRDZCRjNERTE2NDQxRUQ3RDg3NTA2REUwOUU0REQ1RDYz OEUwQkE2OTAeFw0yNDExMDMwNTE5NDNaFw0yNDExMTAwNTE5NDNaMBgxFjAUBgNV BAMTDTY3MjcwN2VmLWYwMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2ThzlqrzW+63dNiud/i5yOCulUmKMDZyHX6VLAXN7ls1LqwurTY4HcOXiXf6p ExNwJbyHu3yLcZ3fXgQ2PDjlIJedFmsKfzZNA7uD0BZZkfDKMN4hQkFny9I3yS5L nNDHEfZtQPC08qmHspR9Eez0m12M5l3SL2WlqbKOdnqWD4m+W2UmHIqJYj2kTbLl QfGypUZDhpDCNOxDKrliI6vm3z1oo2P8bhb0UAwmVq3/hEb3Oe2P+fsw/7F0VxvG DzLRorP7ye7zZ3WhLxWdFMhqUPlwqO7KUEj9iN4hCrwWio7ykfWQQiNfhpVBaRE1 cL61i3gdjs+iKczpuGNDJ955AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhofAmIkh +kVRQfEUMzwHjxd+sPswHwYDVR0jBBgwFoAU1r894WRB7X2HUG3gnk3V1jjgumkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMTkwLzU3QjQwNTk0M0E4 NDExRUZBNTczMTU4NEM0RjlBRTAyLzFyODk0V1JCN1gySFVHM2duazNWMWpqZ3Vt ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMXI4OTRXUkI3WDJIVUczZ25rM1YxampndW1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MTkwLzU3QjQwNTk0M0E4NDExRUZBNTczMTU4NEM0RjlBRTAyLzFyODk0V1JCN1gy SFVHM2duazNWMWpqZ3Vtay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC0lrWirXRCB8ww4KDJvUyDt1xUXpr6Znlw741HYwzAcr2isBjhNbCrR VCEJn2u11kCXlQpsS7l511NcWSAyNX4RKCyIx4zMRHMmGK2lJSrRHmt7/ZQUOqmN k5+vMMIOEC6s/8KNdXPFvUJsIAOMrWkX0WxKAbnCDKgIdphToczE/c0SDJ6JvD40 8lXTTDf3M1OCpfdtR90nF1JpRByqcfgVQXEizUgh7I1+h4QNvUVw4wmSaRcIGefo n4upQXNYhtmXInwBPIGuc0k7cJPXtvlRZuUygdkMDk3Jd185LdubexlZSvS0VZPg unqiRpm1AGf0zjGb9qX2cmN1s1ln6jI= -----END CERTIFICATE-----Generated at Sun Nov 3 06:59:35 2024 by rpki-client on console-ams.rpki-client.org