$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json) Hash identifier: rHAn6TAMoY6qJbjbU14elXPrKEBkOAyhPB8c9v1yuPE= Subject key identifier: C7:24:CA:FB:87:7A:2F:6B:55:77:C3:ED:EF:0C:67:00:35:74:E7:D7 Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft Manifest number: 0138 Signing time: Thu 21 Nov 2024 02:47:33 +0000 Manifest this update: Thu 21 Nov 2024 02:47:33 +0000 Manifest next update: Thu 28 Nov 2024 02:47:33 +0000 Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: akgL811F7mV7s/Ce1FCVSjytSxeRm6zF1zkWLQHGhPA=) 2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: no5JHEwzoUf5nvkFpy4aPPlAbOxQ45tBYTX5GqKN34s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Validity Not Before: Nov 21 02:47:33 2024 GMT Not After : Nov 28 02:47:33 2024 GMT Subject: CN=673e9f45-9a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:b6:23:aa:d0:42:64:52:57:7f:e3:00:a0: 30:53:2a:79:77:b9:0f:77:be:7e:b6:3b:77:c2:bc: 36:95:0a:f5:7b:73:83:40:da:85:ce:22:50:77:8b: 5d:62:40:3b:b4:76:8e:7d:5c:fa:f3:bf:db:07:d3: 58:5f:33:af:46:44:e3:4f:69:a1:a6:f5:81:7b:90: 0c:58:6d:e5:60:8a:58:d0:a1:71:ea:18:1a:9d:4d: 5e:9f:ce:62:5f:95:d0:47:a2:9d:38:f6:42:f5:cd: f0:77:b8:8c:13:c3:2f:ee:ab:59:79:b5:42:8d:5a: 87:6c:9b:2d:c0:62:40:fc:8c:d6:9c:35:5c:ba:42: ec:c7:b7:87:4c:20:c4:92:05:cf:b5:01:1e:c9:5d: 18:d1:4a:29:ad:20:97:e4:cd:e8:ea:fa:95:dc:d4: 91:d7:e0:f8:50:a1:ce:6d:67:18:08:fe:0f:d0:d5: a6:3a:7f:71:91:aa:9c:39:6b:11:06:c6:27:2d:31: fd:e9:49:02:a7:84:b6:ca:69:71:65:a5:82:2b:79: 3b:1c:29:ba:a3:fb:5c:12:0d:c7:b8:ec:db:dd:19: 21:5f:43:fe:9e:e3:41:ca:59:d4:31:fc:4e:15:c0: b4:ca:34:f2:08:0c:b4:5f:91:78:d1:f6:62:be:21: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:24:CA:FB:87:7A:2F:6B:55:77:C3:ED:EF:0C:67:00:35:74:E7:D7 X509v3 Authority Key Identifier: keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ff:d0:cf:99:b7:2b:3e:5f:22:e0:70:e4:e4:92:18:f1:f0: 3d:e6:8e:b3:b3:7f:44:96:f6:22:b4:4d:dc:ae:88:89:57:d6: 6a:3b:a5:7d:52:3d:cf:cd:c6:f5:70:b1:c5:07:e1:ab:76:83: 1c:7a:4e:ea:d6:d0:8e:bb:9f:2d:02:64:08:64:e9:0a:be:64: 90:06:a5:ac:57:11:4c:02:96:b4:5f:05:81:5b:87:96:b2:80: 9d:ff:c9:e0:3c:79:15:32:eb:a7:a6:f4:ab:e5:85:b1:3d:a7: 8d:aa:ef:bb:7d:1e:cf:d7:80:95:c3:a7:f5:f1:a2:48:78:b1: 68:58:7c:b8:fb:e9:f9:9b:cd:37:c2:74:d0:3b:a1:54:68:84: 9c:e7:5e:2f:62:6b:41:4d:26:a5:72:a4:42:be:f1:4d:c2:b1: 6d:b3:de:fe:8b:f9:04:c5:87:0a:49:d5:c2:9d:77:5e:9d:ee: c8:3f:dc:74:d7:c8:1f:49:8a:09:b6:96:b9:63:f0:f3:59:9e: 57:7e:c4:fa:c4:d2:7e:52:2f:26:66:6b:80:4e:d4:48:61:c3: 25:5e:15:58:3e:a8:5b:5c:c3:eb:51:95:99:a6:a3:66:37:46: c1:99:8a:a7:0d:12:44:cd:cd:41:f5:70:49:d6:2f:96:a9:5f: 4b:57:71:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1 NkQ1MDA3NDEwHhcNMjQxMTIxMDI0NzMzWhcNMjQxMTI4MDI0NzMzWjAYMRYwFAYD VQQDEw02NzNlOWY0NS05YTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFa2I6rQQmRSV3/jAKAwUyp5d7kPd75+tjt3wrw2lQr1e3ODQNqFziJQd4td YkA7tHaOfVz687/bB9NYXzOvRkTjT2mhpvWBe5AMWG3lYIpY0KFx6hganU1en85i X5XQR6KdOPZC9c3wd7iME8Mv7qtZebVCjVqHbJstwGJA/IzWnDVcukLsx7eHTCDE kgXPtQEeyV0Y0UoprSCX5M3o6vqV3NSR1+D4UKHObWcYCP4P0NWmOn9xkaqcOWsR BsYnLTH96UkCp4S2ymlxZaWCK3k7HCm6o/tcEg3HuOzb3RkhX0P+nuNBylnUMfxO FcC0yjTyCAy0X5F40fZiviEwOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMckyvuH ei9rVXfD7e8MZwA1dOfXMB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNENi80NkVDMURFNENFQTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZv QVIyaXhvSkoxOEpXMVFCMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL/9DPmbcrPl8i4HDk5JIY8fA95o6zs39ElvYitE3croiJV9ZqO6V9 Uj3Pzcb1cLHFB+GrdoMcek7q1tCOu58tAmQIZOkKvmSQBqWsVxFMApa0XwWBW4eW soCd/8ngPHkVMuunpvSr5YWxPaeNqu+7fR7P14CVw6f18aJIeLFoWHy4++n5m803 wnTQO6FUaISc514vYmtBTSalcqRCvvFNwrFts97+i/kExYcKSdXCnXdene7IP9x0 18gfSYoJtpa5Y/DzWZ5XfsT6xNJ+Ui8mZmuATtRIYcMlXhVYPqhbXMPrUZWZpqNm N0bBmYqnDRJEzc1B9XBJ1i+WqV9LV3FO -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:04 2024 by rpki-client on console-ams.rpki-client.org