$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json) Hash identifier: BkF+kxul+qZakv8yf++DWSfUP0j9CLo2arlBCJjvAsA= Subject key identifier: F0:BD:79:92:E5:D5:34:DE:0C:7B:F4:E6:31:98:3B:81:7D:7E:43:98 Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft Manifest number: 0C Signing time: Wed 23 Oct 2024 06:49:53 +0000 Manifest this update: Wed 23 Oct 2024 06:49:53 +0000 Manifest next update: Wed 30 Oct 2024 06:49:53 +0000 Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: HAi4AcBZ5oqLLvfabFBmpa9H7MI+40HNow+cr4Y7Fiw=) 2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Validity Not Before: Oct 23 06:49:53 2024 GMT Not After : Oct 30 06:49:53 2024 GMT Subject: CN=67189c91-bc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f3:b5:e1:ca:74:93:a9:67:79:9f:f4:ae:61: fa:9c:e4:be:0c:56:e4:ce:ba:62:d9:13:5c:2d:8a: 99:eb:8e:8c:df:10:dc:49:2e:ba:84:c9:fe:50:c1: 0a:08:6f:49:59:7b:57:74:67:1c:7f:b5:c9:bf:99: 9f:90:01:24:12:d3:e6:b7:8d:bc:88:5c:29:f7:eb: 9a:b8:ee:08:a4:4a:06:c4:e9:bf:3d:08:8d:f5:cc: 6b:b2:1f:fb:80:cc:11:bc:1f:fa:87:68:31:c5:29: 6e:42:b4:62:dc:50:6a:23:3c:e0:a2:5c:b2:cb:c1: 52:06:d1:cf:ed:a7:49:84:63:a8:61:d7:5d:3c:64: 30:b1:eb:04:7b:2f:9e:c9:09:71:3f:2f:61:6c:a1: 28:cf:38:0d:dc:f9:ad:22:ae:aa:bf:28:92:79:d8: c8:3b:93:d5:f9:fd:be:d1:24:8a:74:bb:fb:7a:6e: 56:e0:59:58:e5:53:ce:09:65:d3:82:27:aa:65:f3: f2:1b:2a:60:f5:c3:2f:a6:54:5f:79:43:73:c3:0e: 04:65:a2:51:8d:76:da:85:3e:cf:79:b2:b1:3f:39: 43:de:0b:d7:dd:2d:1f:79:b8:93:4c:1f:ee:27:1f: b5:ca:4c:df:9a:80:3a:06:46:fb:69:22:0d:31:df: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BD:79:92:E5:D5:34:DE:0C:7B:F4:E6:31:98:3B:81:7D:7E:43:98 X509v3 Authority Key Identifier: keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:00:1d:91:03:d8:a1:c2:0a:3c:93:8a:c5:e4:97:ba:63:f3: 98:ea:1f:11:76:c6:e7:7b:df:bc:d2:64:7a:c3:bb:40:6a:8e: 60:ac:c4:ab:90:7f:be:bb:1f:10:f4:a2:e0:68:5b:49:09:d5: a3:48:8e:5f:d8:a8:38:29:96:87:ac:a4:9f:9b:0d:ed:57:33: c9:99:22:53:17:7d:cc:d6:b0:c4:ae:a9:92:c4:84:e0:36:f5: af:6b:29:e1:59:48:e1:95:ff:c0:63:97:7f:fe:7a:1e:6e:b7: 60:32:e7:bd:ce:36:c8:dd:bd:b7:ee:b3:8c:58:fe:92:27:2f: 46:93:5f:87:21:78:9c:60:28:52:82:35:32:0c:d0:7d:a0:a5: 6c:5d:02:db:c0:dd:dc:e6:9a:bf:ea:f8:08:a8:a5:22:04:23: 3b:43:d7:79:4c:f1:2c:77:d2:19:ee:d7:fb:ca:20:99:eb:9d: f3:67:f2:59:bb:7d:de:0b:b2:48:a6:52:6c:2a:79:b8:43:a6: 3d:2e:ad:1d:6a:66:8c:a1:b6:fe:d7:3e:23:c3:3e:a7:44:45: bd:d7:b5:b7:f8:51:61:73:9c:ce:2a:35:e6:d1:77:33:8e:38: 02:ee:e2:fd:37:0f:5d:07:94:60:23:e7:18:45:6a:55:71:d4: ea:67:50:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTIwQTExMC8GA1UEBRMoODlENzc5QzUwRjE0RUQxMUZDNUFEQjg0MDM3ODkyQjI2 MEI5OTVFNjAeFw0yNDEwMjMwNjQ5NTNaFw0yNDEwMzAwNjQ5NTNaMBgxFjAUBgNV BAMTDTY3MTg5YzkxLWJjMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW87XhynSTqWd5n/SuYfqc5L4MVuTOumLZE1wtipnrjozfENxJLrqEyf5QwQoI b0lZe1d0Zxx/tcm/mZ+QASQS0+a3jbyIXCn365q47gikSgbE6b89CI31zGuyH/uA zBG8H/qHaDHFKW5CtGLcUGojPOCiXLLLwVIG0c/tp0mEY6hh1108ZDCx6wR7L57J CXE/L2FsoSjPOA3c+a0irqq/KJJ52Mg7k9X5/b7RJIp0u/t6blbgWVjlU84JZdOC J6pl8/IbKmD1wy+mVF95Q3PDDgRlolGNdtqFPs95srE/OUPeC9fdLR95uJNMH+4n H7XKTN+agDoGRvtpIg0x3x7jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8L15kuXV NN4Me/TmMZg7gX1+Q5gwHwYDVR0jBBgwFoAUidd5xQ8U7RH8WtuEA3iSsmC5leYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMjBBLzgyOUE3NEE4ODZG MzExRUZCRTAyNTM2QkM0RjlBRTAyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxl WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWRkNXhROFU3Ukg4V3R1RUEzaVNzbUM1bGVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MjBBLzgyOUE3NEE4ODZGMzExRUZCRTAyNTM2QkM0RjlBRTAyL2lkZDV4UThVN1JI OFd0dUVBM2lTc21DNWxlWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJoAHZED2KHCCjyTisXkl7pj85jqHxF2xud737zSZHrDu0BqjmCsxKuQ f767HxD0ouBoW0kJ1aNIjl/YqDgploespJ+bDe1XM8mZIlMXfczWsMSuqZLEhOA2 9a9rKeFZSOGV/8Bjl3/+eh5ut2Ay573ONsjdvbfus4xY/pInL0aTX4cheJxgKFKC NTIM0H2gpWxdAtvA3dzmmr/q+AiopSIEIztD13lM8Sx30hnu1/vKIJnrnfNn8lm7 fd4LskimUmwqebhDpj0urR1qZoyhtv7XPiPDPqdERb3Xtbf4UWFznM4qNebRdzOO OALu4v03D10HlGAj5xhFalVx1OpnUMg= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:48 2024 by rpki-client on console-ams.rpki-client.org