$ rpki-client -vvf rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft File: ExIqzTjgGRaZhizKfvJHdjDVcOk.mft (raw, json) Hash identifier: Uvn4d6KIJaREjjrMft3mG3xAtoGbg4N5yTdwP9QrsyI= Subject key identifier: 0D:B2:97:1D:C1:A5:A4:55:A4:F3:4B:DC:60:72:24:5A:FB:95:EF:10 Authority key identifier: 13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 Certificate issuer: /CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Certificate serial: 0566 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft Manifest number: 0561 Signing time: Fri 22 Nov 2024 22:56:22 +0000 Manifest this update: Fri 22 Nov 2024 22:56:21 +0000 Manifest next update: Fri 29 Nov 2024 22:56:21 +0000 Files and hashes: 1: ExIqzTjgGRaZhizKfvJHdjDVcOk.crl (hash: bC8iFHzck6Lvr2HMLtSKqparO1SVR5pOcAz+dMzqPDk=) 2: DCAC0B64C22011EB9C4C3B31C4F9AE02.roa (hash: aRYWCiFCI9e+UhsWF2EXBC5D+N3vZVlnQx//tGzToMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1382 (0x566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137C94/serialNumber=13122ACD38E0191699862CCA7EF2477630D570E9 Validity Not Before: Nov 22 22:56:21 2024 GMT Not After : Nov 29 22:56:21 2024 GMT Subject: CN=67410c16-77d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a1:86:0f:4f:b7:32:6b:d9:00:4d:e8:39:4c: b4:38:cd:3e:98:ac:2f:66:5c:bd:3c:b4:15:19:e6: 72:c4:02:19:49:76:fa:2b:b4:c9:04:fa:9e:78:1c: 00:de:9e:e7:a4:12:98:dd:4b:93:e4:26:df:c5:00: 94:57:b1:85:94:f1:97:f4:8a:54:6e:b9:8e:46:83: 9a:32:8d:b8:11:0b:65:87:94:3e:9b:4e:8a:5e:d8: 7b:0f:48:94:0e:fc:61:40:b2:1e:b7:ee:c1:6e:e6: 9f:35:8d:6d:24:cf:2f:25:65:08:25:5b:2b:3e:f7: ad:fb:a5:b5:48:e1:a4:34:5e:9a:47:c5:20:e5:15: 1b:03:33:96:57:fe:bf:93:d5:1e:78:9f:49:d9:46: b3:5a:34:ba:8b:52:0f:10:aa:a5:98:9c:04:4f:71: fa:60:f4:d7:07:cc:75:a8:97:b1:7a:d8:4d:ad:84: 5e:22:c3:d3:cb:f3:61:4e:0a:27:20:5f:29:4a:c7: b1:00:92:ea:dd:cc:cb:fd:c7:6b:62:93:51:ff:62: 66:53:e3:9a:67:90:0d:84:ad:c2:a7:ac:3b:19:c9: 2c:bd:f6:ad:ec:cb:82:92:a3:e5:ad:af:d5:ee:4e: 7e:48:1f:c3:ad:50:b3:43:c5:15:52:cc:15:4e:8d: ad:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B2:97:1D:C1:A5:A4:55:A4:F3:4B:DC:60:72:24:5A:FB:95:EF:10 X509v3 Authority Key Identifier: keyid:13:12:2A:CD:38:E0:19:16:99:86:2C:CA:7E:F2:47:76:30:D5:70:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExIqzTjgGRaZhizKfvJHdjDVcOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137C94/BD0FD35CC21C11EBA51EC229C4F9AE02/ExIqzTjgGRaZhizKfvJHdjDVcOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:6a:e7:35:11:57:98:77:61:59:92:9d:46:53:6b:41:78:a8: b7:6a:56:a3:e6:ba:7e:1a:b8:f6:41:c2:a9:93:8f:59:0d:82: 60:98:86:80:14:01:64:05:b4:f1:42:ca:6d:66:8b:da:72:9c: c5:ee:31:6a:1e:c1:99:a3:22:09:68:40:1f:03:a7:28:c2:6f: 83:92:37:9e:8f:08:d5:70:46:ed:77:e5:46:7c:07:26:90:83: df:08:52:7b:01:2f:3a:c5:38:e7:12:6b:7c:67:51:1d:2c:da: c5:e6:8c:d8:ee:bf:5d:a7:a1:21:e5:fb:e0:4c:19:22:0a:55: d1:de:57:00:24:37:ec:41:d7:4e:41:a7:41:4d:cf:7a:dd:ef: d5:1b:e7:bd:18:26:72:9b:a0:de:8c:e4:6a:7a:d1:b2:4a:e3: 13:a1:74:6c:5c:35:0c:2e:c6:f1:b9:32:74:f0:f2:66:75:4e: 79:e9:7b:cf:7a:86:62:ff:94:06:8d:14:bb:b2:bc:a4:9e:e5: d5:42:7e:01:e1:f1:c7:bf:09:17:1a:ff:28:a2:9d:7e:af:2f: 81:f0:e3:37:a6:ad:13:6b:18:50:c0:11:f2:66:f7:4e:68:77: 17:3e:c0:b3:dc:7b:28:0f:94:a7:90:f7:88:bd:91:c6:32:3c: 52:aa:3f:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdDOTQxMTAvBgNVBAUTKDEzMTIyQUNEMzhFMDE5MTY5OTg2MkNDQTdFRjI0Nzc2 MzBENTcwRTkwHhcNMjQxMTIyMjI1NjIxWhcNMjQxMTI5MjI1NjIxWjAYMRYwFAYD VQQDEw02NzQxMGMxNi03N2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KGGD0+3MmvZAE3oOUy0OM0+mKwvZly9PLQVGeZyxAIZSXb6K7TJBPqeeBwA 3p7npBKY3UuT5CbfxQCUV7GFlPGX9IpUbrmORoOaMo24EQtlh5Q+m06KXth7D0iU DvxhQLIet+7BbuafNY1tJM8vJWUIJVsrPvet+6W1SOGkNF6aR8Ug5RUbAzOWV/6/ k9UeeJ9J2UazWjS6i1IPEKqlmJwET3H6YPTXB8x1qJexethNrYReIsPTy/NhTgon IF8pSsexAJLq3czL/cdrYpNR/2JmU+OaZ5ANhK3Cp6w7Gcksvfat7MuCkqPlra/V 7k5+SB/DrVCzQ8UVUswVTo2tuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2ylx3B paRVpPNL3GByJFr7le8QMB8GA1UdIwQYMBaAFBMSKs044BkWmYYsyn7yR3Yw1XDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0M5NC9CRDBGRDM1Q0My MUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dSYVpoaXpLZnZKSGRqRFZj T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4SXF6VGpnR1JhWmhpektmdkpIZGpEVmNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0M5NC9CRDBGRDM1Q0MyMUMxMUVCQTUxRUMyMjlDNEY5QUUwMi9FeElxelRqZ0dS YVpoaXpLZnZKSGRqRFZjT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZauc1EVeYd2FZkp1GU2tBeKi3alaj5rp+Grj2QcKpk49ZDYJgmIaA FAFkBbTxQsptZovacpzF7jFqHsGZoyIJaEAfA6cowm+DkjeejwjVcEbtd+VGfAcm kIPfCFJ7AS86xTjnEmt8Z1EdLNrF5ozY7r9dp6Eh5fvgTBkiClXR3lcAJDfsQddO QadBTc963e/VG+e9GCZym6DejORqetGySuMToXRsXDUMLsbxuTJ08PJmdU556XvP eoZi/5QGjRS7sryknuXVQn4B4fHHvwkXGv8oop1+ry+B8OM3pq0TaxhQwBHyZvdO aHcXPsCz3HsoD5SnkPeIvZHGMjxSqj+q -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:37 2024 by rpki-client on console-ams.rpki-client.org