$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft File: 1fF0__36EIu7L4fnPG6d1RCNOp8.mft (raw, json) Hash identifier: hr2y+UGYE7VmjuDy4koRai13+73hN50ZN9zx2KCud2c= Subject key identifier: F4:3D:CD:9D:9E:8D:F3:03:9A:6C:B2:71:43:59:04:35:6D:D7:E8:CD Authority key identifier: D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F Certificate issuer: /CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft Manifest number: 01EF Signing time: Thu 21 Nov 2024 01:39:57 +0000 Manifest this update: Thu 21 Nov 2024 01:39:56 +0000 Manifest next update: Thu 28 Nov 2024 01:39:56 +0000 Files and hashes: 1: 1fF0__36EIu7L4fnPG6d1RCNOp8.crl (hash: u5nnjbp54TAqlhY0BAxV4u5RaIZw9kHrTRPqGXt51dw=) 2: C605A7A01CF911EDBAE62F45C4F9AE02.roa (hash: dkCYBmAm0OsNXUn60urmLpPiFKakWVNsJOBeAK9VAVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5BD/serialNumber=D5F174FFFDFA108BBB2F87E73C6E9DD5108D3A9F Validity Not Before: Nov 21 01:39:56 2024 GMT Not After : Nov 28 01:39:56 2024 GMT Subject: CN=673e8f6c-f06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:f9:a7:96:66:79:af:bb:58:29:9c:62:ea: af:97:06:f4:d3:49:bf:7c:b1:2d:e1:e9:64:ef:1f: d3:21:59:d9:8e:7f:b2:ba:cf:83:ba:0f:95:20:dd: 5a:43:18:48:68:67:d0:35:1a:7a:3d:f7:9d:00:4e: 15:73:b5:24:5e:43:9f:c9:cf:b3:d6:e1:58:c9:33: 34:84:e6:3c:8f:cb:1f:56:07:9d:b6:36:4e:ca:39: d5:a0:d9:7d:6c:1f:9e:05:c8:ff:83:38:b1:af:c1: 99:f2:77:44:71:65:e3:57:a4:d8:54:83:3d:21:fe: af:d5:3a:10:26:4d:fe:36:a0:8a:c3:0e:bc:07:cd: 04:13:cc:93:41:b7:f3:3d:7e:ce:75:6a:b1:17:97: 51:7e:23:2e:85:c5:19:4a:2e:e6:4b:60:ef:49:b8: 58:70:67:8b:d9:36:75:3a:bb:6e:c5:b0:ee:a7:7c: 11:2d:ca:9a:d7:71:0a:ee:ed:bc:9b:79:b9:05:0c: 04:f4:f6:bf:83:ab:6e:2b:49:2f:8c:f9:ab:cf:81: 27:43:38:f0:f6:9c:8b:bb:d5:70:81:4a:ae:d2:98: 61:d7:d8:bb:f3:13:62:0f:fe:f6:b1:df:3b:7b:ad: d6:4a:ab:bf:ff:0e:44:ae:50:82:61:2b:6f:0b:e3: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3D:CD:9D:9E:8D:F3:03:9A:6C:B2:71:43:59:04:35:6D:D7:E8:CD X509v3 Authority Key Identifier: keyid:D5:F1:74:FF:FD:FA:10:8B:BB:2F:87:E7:3C:6E:9D:D5:10:8D:3A:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1fF0__36EIu7L4fnPG6d1RCNOp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/4B2B393E1CF711EDA00FD343C4F9AE02/1fF0__36EIu7L4fnPG6d1RCNOp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:71:40:6c:86:13:e2:1c:c2:80:ae:ab:ca:e4:98:b8:8b:05: 7e:b6:1d:45:b3:45:19:35:2c:c4:3f:0f:36:2f:38:c1:16:13: 32:fd:81:ab:79:3d:8b:61:62:d8:33:9c:fa:8d:b3:00:f6:c7: 67:92:89:1b:10:7c:88:91:c2:6b:c0:95:15:38:71:c8:dd:d2: 38:54:79:c2:7f:23:24:e0:cf:23:62:91:46:87:2f:68:f5:c0: cd:a0:e8:b6:9d:64:b7:ad:ae:62:c2:90:84:21:38:36:9c:ed: 24:91:e7:b3:4b:5c:5e:48:cb:17:cf:05:be:f7:d3:49:29:19: fd:6d:e5:03:7c:57:f5:73:4f:7b:a7:04:4b:b9:16:17:12:29: 64:ba:94:52:db:71:d5:63:f8:a6:e6:f9:80:5d:46:d6:b1:fc: f4:1d:c7:de:84:c0:73:42:7f:ab:a2:fc:0c:59:a1:11:a7:fd: 14:04:76:b9:7b:ee:3b:7a:97:c2:a4:55:58:68:66:63:54:27: a7:6e:39:35:9d:41:12:15:38:fa:82:86:15:2b:10:c7:85:2f: d5:6c:25:76:3e:2c:ef:08:c2:14:ba:da:90:1b:67:29:28:96: dd:f2:9b:86:01:97:02:e5:ad:a3:8c:eb:23:eb:d2:2e:6c:3e: 5a:16:35:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E1QkQxMTAvBgNVBAUTKEQ1RjE3NEZGRkRGQTEwOEJCQjJGODdFNzNDNkU5REQ1 MTA4RDNBOUYwHhcNMjQxMTIxMDEzOTU2WhcNMjQxMTI4MDEzOTU2WjAYMRYwFAYD VQQDEw02NzNlOGY2Yy1mMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoET5p5Zmea+7WCmcYuqvlwb000m/fLEt4elk7x/TIVnZjn+yus+Dug+VIN1a QxhIaGfQNRp6PfedAE4Vc7UkXkOfyc+z1uFYyTM0hOY8j8sfVgedtjZOyjnVoNl9 bB+eBcj/gzixr8GZ8ndEcWXjV6TYVIM9If6v1ToQJk3+NqCKww68B80EE8yTQbfz PX7OdWqxF5dRfiMuhcUZSi7mS2DvSbhYcGeL2TZ1OrtuxbDup3wRLcqa13EK7u28 m3m5BQwE9Pa/g6tuK0kvjPmrz4EnQzjw9pyLu9VwgUqu0phh19i78xNiD/72sd87 e63WSqu//w5ErlCCYStvC+ND0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQ9zZ2e jfMDmmyycUNZBDVt1+jNMB8GA1UdIwQYMBaAFNXxdP/9+hCLuy+H5zxundUQjTqf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC80QjJCMzkzRTFD RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJdTdMNGZuUEc2ZDFSQ05P cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFmRjBfXzM2RUl1N0w0Zm5QRzZkMVJDTk9wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTVCRC80QjJCMzkzRTFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi8xZkYwX18zNkVJ dTdMNGZuUEc2ZDFSQ05PcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCcUBshhPiHMKArqvK5Ji4iwV+th1Fs0UZNSzEPw82LzjBFhMy/YGr eT2LYWLYM5z6jbMA9sdnkokbEHyIkcJrwJUVOHHI3dI4VHnCfyMk4M8jYpFGhy9o 9cDNoOi2nWS3ra5iwpCEITg2nO0kkeezS1xeSMsXzwW+99NJKRn9beUDfFf1c097 pwRLuRYXEilkupRS23HVY/im5vmAXUbWsfz0HcfehMBzQn+rovwMWaERp/0UBHa5 e+47epfCpFVYaGZjVCenbjk1nUESFTj6goYVKxDHhS/VbCV2PizvCMIUutqQG2cp KJbd8puGAZcC5a2jjOsj69IubD5aFjVe -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:34 2024 by rpki-client on console-ams.rpki-client.org