$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft File: ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft (raw, json) Hash identifier: 4yFg5NO3f3/5eFzzR5SjH6BjAJahDzRQCdI290QJHRk= Subject key identifier: 84:CE:8E:11:33:21:69:49:0D:4A:99:65:3D:7A:51:66:60:29:0E:8E Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Certificate serial: 05E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft Manifest number: 05C8 Signing time: Fri 22 Nov 2024 22:43:27 +0000 Manifest this update: Fri 22 Nov 2024 22:43:27 +0000 Manifest next update: Fri 29 Nov 2024 22:43:27 +0000 Files and hashes: 1: ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl (hash: dvui8uEQax0QnardYkGNgEpctRFz4wkq2gSmDB6ZpXI=) 2: 4E76D152B51411ECB8632A19C4F9AE02.roa (hash: pGGWpfbiPGn8WwMdciT4D6WLiykl+fuXJ55aOtSS40w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1509 (0x5e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6 Validity Not Before: Nov 22 22:43:27 2024 GMT Not After : Nov 29 22:43:27 2024 GMT Subject: CN=6741090f-7248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:23:45:8a:88:8c:f9:62:76:04:bd:92:55: bd:85:35:8a:28:b8:49:b4:3f:60:28:5d:58:f0:4c: 63:44:3f:0e:03:ec:0e:c4:12:55:02:1c:60:96:c7: 8b:0e:5a:3c:27:84:3e:5d:fe:ac:20:e2:29:de:c7: 12:cb:22:59:15:35:ec:c8:36:5d:84:37:44:37:9c: 27:b5:a2:d5:5e:9a:39:ba:4a:89:b3:cc:1c:21:f3: 09:09:8b:ca:59:44:e9:96:d3:ea:53:86:e4:6c:1a: 31:da:58:f1:8e:f6:d4:45:7d:4e:7d:15:50:42:14: 5c:63:54:38:f0:82:39:bc:a1:93:f2:02:9c:9c:f7: 18:60:9c:13:de:49:47:d3:c3:44:27:46:95:6b:20: bd:fd:94:ba:db:f5:59:ff:c7:ad:10:22:ca:82:8c: 9f:85:8c:41:12:d7:38:cf:81:fc:11:e0:80:47:95: e6:4d:64:7b:e2:e4:a7:c0:23:a2:34:bf:70:a7:f7: 2e:ef:f7:39:40:5b:29:b8:e6:b3:c4:2c:97:bf:4b: a5:c6:a3:87:bf:bc:e5:a5:a5:9d:86:a0:0c:17:f2: b2:fd:c7:40:80:0e:cf:39:13:2a:55:ca:6b:34:d8: f6:da:fc:20:b3:11:90:68:52:8d:b2:97:24:f5:dc: 6d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CE:8E:11:33:21:69:49:0D:4A:99:65:3D:7A:51:66:60:29:0E:8E X509v3 Authority Key Identifier: keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:39:78:79:7f:bc:5e:67:39:21:ae:ab:22:0f:1a:c0:d9:2d: 0a:a6:18:22:93:a5:b6:0d:d5:da:ee:86:b4:25:c9:66:1f:ae: 88:13:25:09:f0:f9:38:d8:03:fd:27:d3:70:26:a6:45:b3:46: 98:a4:b9:ec:b8:ba:17:f0:36:d0:cb:75:c4:8e:fe:d2:61:20: 35:2f:25:c8:c1:1f:37:bb:a8:0c:f9:9d:a0:8d:b9:36:4c:11: fb:4c:c9:eb:df:61:c8:84:6d:1f:8f:11:7d:77:9e:05:67:ff: 4c:71:9e:d3:3f:24:80:85:63:7c:57:c9:a9:d0:0d:63:da:4a: e2:39:57:de:95:13:44:69:6e:25:e7:9e:41:8a:b1:0c:97:cd: 94:e2:6b:73:1a:d5:eb:03:72:a3:00:af:53:42:57:8d:41:eb: c9:7a:8c:65:c8:e7:7f:d4:66:2c:0b:11:15:22:06:39:ec:0b: 3d:cf:6b:35:3c:cb:85:fa:d0:f7:59:86:98:ea:21:17:16:f4: 00:0a:87:fd:0b:ea:b0:b1:d0:ba:32:88:e7:1e:61:79:95:c0: 8d:9a:3d:09:84:e5:68:ef:47:fc:a4:b0:6f:d7:5f:d8:73:11: 2f:30:76:82:c4:ae:e2:4a:6c:41:d2:d4:8e:fe:2e:62:2f:ba: 47:aa:00:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEwNjcxMTAvBgNVBAUTKEIyQzQ3QzJFM0Q0RkM3RURDOTlBRTIwRTQ2QjE3NEIx MEEwMzc1RjYwHhcNMjQxMTIyMjI0MzI3WhcNMjQxMTI5MjI0MzI3WjAYMRYwFAYD VQQDEw02NzQxMDkwZi03MjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/AjRYqIjPlidgS9klW9hTWKKLhJtD9gKF1Y8ExjRD8OA+wOxBJVAhxglseL Dlo8J4Q+Xf6sIOIp3scSyyJZFTXsyDZdhDdEN5wntaLVXpo5ukqJs8wcIfMJCYvK WUTpltPqU4bkbBox2ljxjvbURX1OfRVQQhRcY1Q48II5vKGT8gKcnPcYYJwT3klH 08NEJ0aVayC9/ZS62/VZ/8etECLKgoyfhYxBEtc4z4H8EeCAR5XmTWR74uSnwCOi NL9wp/cu7/c5QFspuOazxCyXv0ulxqOHv7zlpaWdhqAMF/Ky/cdAgA7PORMqVcpr NNj22vwgsxGQaFKNspck9dxtjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITOjhEz IWlJDUqZZT16UWZgKQ6OMB8GA1UdIwQYMBaAFLLEfC49T8ftyZriDkaxdLEKA3X2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTA2Ny84REQwMEY1NkE2 QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgtM0ptdUlPUnJGMHNRb0Rk ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NzUjhMajFQeC0zSm11SU9SckYwc1FvRGRmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTA2Ny84REQwMEY1NkE2QUQxMUVCODI3RkMxMUNDNEY5QUUwMi9zc1I4TGoxUHgt M0ptdUlPUnJGMHNRb0RkZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCROXh5f7xeZzkhrqsiDxrA2S0Kphgik6W2DdXa7oa0JclmH66IEyUJ 8Pk42AP9J9NwJqZFs0aYpLnsuLoX8DbQy3XEjv7SYSA1LyXIwR83u6gM+Z2gjbk2 TBH7TMnr32HIhG0fjxF9d54FZ/9McZ7TPySAhWN8V8mp0A1j2kriOVfelRNEaW4l 555BirEMl82U4mtzGtXrA3KjAK9TQleNQevJeoxlyOd/1GYsCxEVIgY57As9z2s1 PMuF+tD3WYaY6iEXFvQACof9C+qwsdC6MojnHmF5lcCNmj0JhOVo70f8pLBv11/Y cxEvMHaCxK7iSmxB0tSO/i5iL7pHqgBd -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:37 2024 by rpki-client on console-ams.rpki-client.org