$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json) Hash identifier: iPI8hGRGg+eGgg9EV8tG94P7BuQ+aBqjOaRItjLZRZQ= Subject key identifier: 0F:1D:73:44:08:53:24:0B:15:AC:A2:40:99:B9:BF:C3:7B:DD:38:5C Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft Manifest number: 24 Signing time: Thu 21 Nov 2024 06:01:32 +0000 Manifest this update: Thu 21 Nov 2024 06:01:31 +0000 Manifest next update: Thu 28 Nov 2024 06:01:31 +0000 Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: uFBRsG+ZgOvaUWdSlVGsIPOxMBGQcc6v16ryv6Eeg9c=) 2: 8FDE887E870311EF9138602FC4F9AE02.roa (hash: W0l9fs0T4x84rNQMrO5Y6xdjZAeEJaqMpnS2kjtsEjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Validity Not Before: Nov 21 06:01:31 2024 GMT Not After : Nov 28 06:01:31 2024 GMT Subject: CN=673eccbc-dfdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:06:4f:05:33:3a:62:da:44:f0:fe:c7:10: 07:26:c2:a9:cb:1b:66:b1:df:c5:f9:6b:2e:71:c1: ff:9c:e4:25:99:db:6b:00:e1:64:ab:5c:71:91:62: 3c:f2:f8:7e:e1:e4:3e:1b:d1:55:b8:39:4d:0e:fc: 69:b8:2d:b7:13:ae:17:29:a9:48:bc:94:59:0d:3a: 8d:5b:41:46:ad:e1:d1:bd:f8:ca:22:ea:5e:52:24: 57:13:e9:5e:b8:64:86:30:c9:bd:3f:70:f0:0c:a3: a4:c1:6b:2b:bb:e8:c7:0d:83:77:82:9d:d7:e1:08: 9f:de:80:1c:61:b2:b8:32:13:b1:36:fc:cd:63:f6: 46:d7:6c:fd:b9:d3:68:e4:8e:47:0e:97:7d:3f:5d: 69:c2:23:4c:ee:c1:06:15:f0:e0:46:c4:62:b9:62: 8b:11:09:28:6e:29:71:f8:ac:bd:33:1e:b8:c3:be: bc:c4:f5:1b:d9:1d:07:5b:2e:f4:ab:15:65:dd:cc: 2b:2e:c1:26:cc:18:14:62:c2:a7:91:1d:f3:1d:8b: 2f:a0:a8:c5:1a:84:fe:ab:fe:37:b7:eb:c2:05:21: 21:4f:f5:e3:9c:ce:ea:09:52:50:6d:bc:ef:88:f7: fb:a4:7c:fb:a3:e1:21:00:8a:40:e3:33:e3:74:b8: fd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1D:73:44:08:53:24:0B:15:AC:A2:40:99:B9:BF:C3:7B:DD:38:5C X509v3 Authority Key Identifier: keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:7b:2d:51:1d:9c:42:b4:fe:c9:59:a4:18:72:d9:ef:10:6b: 5e:7f:ae:1d:1d:71:87:97:ea:20:9a:92:e8:92:22:7b:45:5d: 46:a5:27:f2:22:e9:b8:d0:1c:0b:50:e7:45:14:a5:8c:20:58: a4:dd:49:cb:a5:c4:1e:72:d5:fc:bb:ae:00:df:7e:83:2a:1e: 04:43:3e:38:94:a4:e2:7b:01:bc:ab:b9:9f:ac:50:88:96:ae: f8:60:75:a1:3d:61:e9:b0:86:f5:82:ab:ca:30:22:e4:cb:ff: e6:19:84:ce:82:93:ee:da:27:bd:8f:cb:0f:6a:85:08:ab:68: 37:f4:59:1a:cd:b3:4d:b8:16:96:9e:2c:df:cb:aa:40:bf:0e: 42:31:12:98:1a:2f:8f:a2:7b:68:9a:3d:9e:38:a5:a3:09:8b: 92:a1:db:01:bc:ff:2c:42:c2:36:18:aa:29:10:29:a4:36:dc: 82:13:45:e6:82:c7:39:8d:9f:fa:16:2c:20:46:05:ab:28:ea: e2:88:c4:a3:2d:4d:30:a9:50:12:36:64:f9:01:c7:b9:f6:57: 18:0a:f3:2e:fb:a0:68:8a:6b:73:2b:f1:e2:58:1d:27:23:e5: 10:00:c3:2c:0a:20:4b:6c:81:7a:ae:79:d8:20:b7:45:30:6c: a1:51:6c:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTIwQTExMC8GA1UEBRMoNkMyQzdDMTQyODlFNkJCNUI3Mjc1QjFBQTZCRkRGQTAy MjdCOTA4NjAeFw0yNDExMjEwNjAxMzFaFw0yNDExMjgwNjAxMzFaMBgxFjAUBgNV BAMTDTY3M2VjY2JjLWRmZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9ygZPBTM6YtpE8P7HEAcmwqnLG2ax38X5ay5xwf+c5CWZ22sA4WSrXHGRYjzy +H7h5D4b0VW4OU0O/Gm4LbcTrhcpqUi8lFkNOo1bQUat4dG9+Moi6l5SJFcT6V64 ZIYwyb0/cPAMo6TBayu76McNg3eCndfhCJ/egBxhsrgyE7E2/M1j9kbXbP2502jk jkcOl30/XWnCI0zuwQYV8OBGxGK5YosRCShuKXH4rL0zHrjDvrzE9RvZHQdbLvSr FWXdzCsuwSbMGBRiwqeRHfMdiy+gqMUahP6r/je368IFISFP9eOczuoJUlBtvO+I 9/ukfPuj4SEAikDjM+N0uP2hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDx1zRAhT JAsVrKJAmbm/w3vdOFwwHwYDVR0jBBgwFoAUbCx8FCiea7W3J1sapr/foCJ7kIYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMjBBL0RBRjgxQzQ0ODZG OTExRUZCMDk2NTEwQ0M0RjlBRTAyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYkN4OEZDaWVhN1czSjFzYXByX2ZvQ0o3a0lZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MjBBL0RBRjgxQzQ0ODZGOTExRUZCMDk2NTEwQ0M0RjlBRTAyL2JDeDhGQ2llYTdX M0oxc2Fwcl9mb0NKN2tJWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGh7LVEdnEK0/slZpBhy2e8Qa15/rh0dcYeX6iCakuiSIntFXUalJ/Ii 6bjQHAtQ50UUpYwgWKTdSculxB5y1fy7rgDffoMqHgRDPjiUpOJ7AbyruZ+sUIiW rvhgdaE9YemwhvWCq8owIuTL/+YZhM6Ck+7aJ72Pyw9qhQiraDf0WRrNs024Fpae LN/LqkC/DkIxEpgaL4+ie2iaPZ44paMJi5Kh2wG8/yxCwjYYqikQKaQ23IITReaC xzmNn/oWLCBGBaso6uKIxKMtTTCpUBI2ZPkBx7n2VxgK8y77oGiKa3Mr8eJYHScj 5RAAwywKIEtsgXquedggt0UwbKFRbBs= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:01 2024 by rpki-client on console-ams.rpki-client.org