$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft File: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json) Hash identifier: fX2BlsAlMzTyrjB8NugPy/8PkMqfks8UPE/DaI4gLK4= Subject key identifier: 58:6B:87:D4:03:F4:6B:29:65:F3:6B:E3:16:EF:7A:96:E2:88:72:D4 Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51 Certificate issuer: /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft Manifest number: 0205 Signing time: Sat 23 Nov 2024 01:35:25 +0000 Manifest this update: Sat 23 Nov 2024 01:35:24 +0000 Manifest next update: Sat 30 Nov 2024 01:35:24 +0000 Files and hashes: 1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: FH3on8Fm2X+oK6snCsbayRYz9OWmZ2I0pdWjYB9NVDo=) 2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: rj0KTjzf+DtNN3R81snVNcDYp+a1rWXY0u8rHIUHCk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451 Validity Not Before: Nov 23 01:35:24 2024 GMT Not After : Nov 30 01:35:24 2024 GMT Subject: CN=6741315d-d0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:d6:aa:a2:73:5d:92:4d:21:a3:43:3a:56: 71:79:43:e6:c2:d3:72:f4:05:d8:7a:bd:28:3b:09: 04:19:27:bd:2f:1a:17:f4:54:b5:c2:4f:a0:b2:2e: 64:95:42:9e:4e:34:76:87:03:5a:69:c9:43:6a:e7: 23:77:f6:d6:06:5a:5f:89:c6:98:b4:a3:e3:9c:24: eb:e0:cc:f9:f1:39:73:47:38:c1:08:67:9d:03:25: 90:6a:50:29:c1:ec:fd:3e:0d:82:ab:9d:7b:0c:2b: d3:1f:81:ab:04:7c:15:59:4e:3d:8a:4a:fe:b2:00: a6:24:44:ad:ea:d4:fa:8c:4d:34:4b:19:e9:16:6d: a7:fd:d5:ce:5d:0f:5a:7e:4e:71:ba:ee:d4:fc:08: d5:ca:5f:31:7f:10:ef:3e:22:0f:ce:61:04:cd:09: 00:88:29:1a:79:ea:2c:cb:c3:a8:2f:ee:8e:f6:40: c8:6e:b9:1d:69:14:9e:eb:50:40:e3:58:98:19:78: 83:64:d8:e6:46:65:20:c5:75:30:c5:ce:3e:11:c3: 9a:b6:90:88:2a:d4:7d:90:4f:be:78:c2:dc:d5:be: 00:d6:2e:d4:57:6f:a8:22:bd:17:ac:66:de:b3:68: b5:98:69:ac:d6:41:80:b6:28:a2:12:aa:3d:3e:54: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6B:87:D4:03:F4:6B:29:65:F3:6B:E3:16:EF:7A:96:E2:88:72:D4 X509v3 Authority Key Identifier: keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:fb:16:a2:42:45:cc:a0:37:47:59:a9:b4:30:08:ab:16:a2: 14:6b:5e:ca:d5:45:96:2b:40:28:89:f7:78:f4:3d:11:95:bd: 01:a9:95:98:ed:57:80:67:f4:da:5e:83:a4:74:a4:45:41:f1: df:58:13:5d:bb:bb:7d:de:e5:8b:30:8b:fe:09:3d:6a:57:d0: a8:17:c9:1d:ef:07:54:59:70:04:88:dc:ee:64:7f:46:7c:68: 0c:f0:44:03:bb:85:f4:5d:7b:d1:b1:ed:09:4f:01:44:3a:fd: e0:9d:d5:0a:12:e1:20:a0:75:3c:89:25:2b:ba:96:5d:8d:f9: 90:1d:a9:5e:0a:cb:7e:74:39:9c:41:98:ad:7b:10:e2:a4:e7: 36:19:29:dc:3a:7b:34:f0:3b:85:96:13:a1:13:dd:9e:0d:3b: a0:41:e6:59:44:c2:6b:62:42:9a:ec:4e:31:60:25:91:ac:63: 31:c2:fd:1e:13:c4:dc:83:fb:97:c1:66:b4:e6:5a:81:06:ec: ff:c9:42:8b:16:51:90:04:97:7d:2f:83:9f:53:e7:da:db:a1: 6f:f5:52:77:7c:2a:4e:e5:89:38:42:14:c6:76:86:10:63:aa: 35:de:11:6c:53:31:22:a1:73:50:d2:eb:94:d6:45:e5:a9:f8: 9e:bf:d2:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZGNkYxMTAvBgNVBAUTKEZCMTFBMkQ4MzY4QzE1MDIxQTVCRjMxMkY1MUQ0NENF NThGRDQ0NTEwHhcNMjQxMTIzMDEzNTI0WhcNMjQxMTMwMDEzNTI0WjAYMRYwFAYD VQQDEw02NzQxMzE1ZC1kMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfLWqqJzXZJNIaNDOlZxeUPmwtNy9AXYer0oOwkEGSe9LxoX9FS1wk+gsi5k lUKeTjR2hwNaaclDaucjd/bWBlpficaYtKPjnCTr4Mz58TlzRzjBCGedAyWQalAp wez9Pg2Cq517DCvTH4GrBHwVWU49ikr+sgCmJESt6tT6jE00SxnpFm2n/dXOXQ9a fk5xuu7U/AjVyl8xfxDvPiIPzmEEzQkAiCkaeeosy8OoL+6O9kDIbrkdaRSe61BA 41iYGXiDZNjmRmUgxXUwxc4+EcOatpCIKtR9kE++eMLc1b4A1i7UV2+oIr0XrGbe s2i1mGms1kGAtiiiEqo9PlRJGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhrh9QD 9GspZfNr4xbvepbiiHLUMB8GA1UdIwQYMBaAFPsRotg2jBUCGlvzEvUdRM5Y/URR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkY2Ri8xMkUyNTE3QzE0 NkMxMUVEQjdDNDBBMjNDNEY5QUUwMi8teEdpMkRhTUZRSWFXX01TOVIxRXpsajlS RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14R2kyRGFNRlFJYVdfTVM5UjFFemxqOVJGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkY2Ri8xMkUyNTE3QzE0NkMxMUVEQjdDNDBBMjNDNEY5QUUwMi8teEdpMkRhTUZR SWFXX01TOVIxRXpsajlSRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD+xaiQkXMoDdHWam0MAirFqIUa17K1UWWK0Aoifd49D0Rlb0BqZWY 7VeAZ/TaXoOkdKRFQfHfWBNdu7t93uWLMIv+CT1qV9CoF8kd7wdUWXAEiNzuZH9G fGgM8EQDu4X0XXvRse0JTwFEOv3gndUKEuEgoHU8iSUrupZdjfmQHaleCst+dDmc QZitexDipOc2GSncOns08DuFlhOhE92eDTugQeZZRMJrYkKa7E4xYCWRrGMxwv0e E8Tcg/uXwWa05lqBBuz/yUKLFlGQBJd9L4OfU+fa26Fv9VJ3fCpO5Yk4QhTGdoYQ Y6o13hFsUzEioXNQ0uuU1kXlqfiev9JK -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org