$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft File: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft (raw, json) Hash identifier: niyAf+Jq+VSZqZ2T4HC+gylMFK75kFlya3ZV9klTnXo= Subject key identifier: 98:3A:79:3C:BA:B7:0F:D0:F4:9C:1A:16:EC:51:09:D5:82:EC:78:3C Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B Certificate issuer: /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft Manifest number: 048F Signing time: Fri 22 Nov 2024 23:39:42 +0000 Manifest this update: Fri 22 Nov 2024 23:39:42 +0000 Manifest next update: Fri 29 Nov 2024 23:39:42 +0000 Files and hashes: 1: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl (hash: 6MLD3yg+m3hZAejmkIYIRgIH+rjPBkL1g0xPcJz88eg=) 2: 47660D4A488F11EFB89B763FC4F9AE02.roa (hash: eI4UCoJeEzevXuPhkPqjuDi0BdhKf8YS6t00eoAv4wY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B Validity Not Before: Nov 22 23:39:42 2024 GMT Not After : Nov 29 23:39:42 2024 GMT Subject: CN=6741163e-706d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7a:c3:ec:3b:0b:a1:63:50:ca:8f:e9:c3:13: a2:a7:ae:f3:c5:95:e1:6a:de:7f:1f:f3:09:02:ea: ca:b5:da:c4:ea:c4:73:ce:4d:1e:5f:be:3e:3a:3c: 68:0d:fe:b3:fd:f7:89:20:4d:95:a7:74:1d:c9:18: a5:0b:0b:ea:db:eb:4e:82:9e:8a:bb:aa:41:08:f4: b7:21:77:c6:a4:d1:69:f1:b3:70:07:ea:cd:d4:5d: e6:5b:ee:bf:2a:5c:cb:63:57:fd:ea:db:f5:20:18: ef:98:e5:3a:cf:9a:dc:03:c9:7a:b3:de:73:c2:50: c4:a3:ce:0a:9e:c4:17:bb:e3:f0:3e:80:80:02:7a: 32:ce:e3:d7:a6:b8:3e:46:52:00:79:b9:5c:e2:6a: 1b:96:9f:39:7b:c0:40:71:14:6d:3c:21:77:f9:5a: ef:3c:72:d5:d7:ff:d9:e2:a1:bf:fb:50:5c:88:e0: 14:da:42:66:38:62:d1:8d:76:ff:0d:ad:e1:d8:a6: 6f:b9:97:d8:e5:58:21:a8:c5:54:81:52:a1:2d:6e: 97:85:52:59:00:ef:b9:e9:2d:ae:d7:00:80:06:88: ad:9d:ac:4d:79:9f:cd:1b:05:48:5f:7f:82:6c:f1: 1c:8d:79:bd:3d:1a:87:f8:5b:e0:c0:fc:d1:27:cf: 41:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3A:79:3C:BA:B7:0F:D0:F4:9C:1A:16:EC:51:09:D5:82:EC:78:3C X509v3 Authority Key Identifier: keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8e:d9:33:25:50:f6:bc:d4:a3:91:1b:48:c6:ae:70:5f:97: 03:dd:81:d1:30:b9:87:32:c5:1a:2b:5a:cc:b2:f7:3e:40:89: f6:76:ae:a7:43:b5:90:70:3e:d8:17:d3:7f:07:25:cf:95:25: 04:4e:97:32:69:22:eb:bf:f0:45:68:d8:9e:8e:20:c5:0e:3b: d2:5e:8a:a7:bd:c6:b0:8c:1d:33:26:5c:9c:7a:74:26:c4:84: 20:fd:6f:f4:27:15:0c:d8:35:07:82:d2:5a:82:b3:78:77:08: 65:d5:7c:b1:c5:21:5b:b7:dd:28:b6:db:d9:03:48:31:96:10: ea:df:b7:a5:42:c4:4f:b2:ab:38:91:47:ea:51:56:2b:20:5a: df:28:7d:5c:5e:16:f8:3f:e0:fa:b0:83:52:0d:dd:17:d3:72: a1:d7:57:b2:2f:f4:3d:90:67:45:d7:0d:bd:e6:29:83:7d:63: 95:ac:f0:e6:17:66:49:b5:e2:84:01:d2:e1:d7:3e:99:fa:f1: bb:d5:72:31:8a:e0:c2:3a:e4:2c:30:85:7e:19:69:be:2d:77: 7f:fd:bb:fa:42:d6:dc:0e:bc:37:ae:08:f3:2f:1b:0c:9f:c9: 1f:83:f0:49:4b:66:4b:93:22:4d:f4:4d:68:dd:0a:9c:4d:13: 86:dc:e5:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwQzYxMTAvBgNVBAUTKDAwMzM0QjhGMjE4RkE1MjUzMzk4ODZDOEZCQzk0MDkz Qzg4RUQ1N0IwHhcNMjQxMTIyMjMzOTQyWhcNMjQxMTI5MjMzOTQyWjAYMRYwFAYD VQQDEw02NzQxMTYzZS03MDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XrD7DsLoWNQyo/pwxOip67zxZXhat5/H/MJAurKtdrE6sRzzk0eX74+Ojxo Df6z/feJIE2Vp3QdyRilCwvq2+tOgp6Ku6pBCPS3IXfGpNFp8bNwB+rN1F3mW+6/ KlzLY1f96tv1IBjvmOU6z5rcA8l6s95zwlDEo84KnsQXu+PwPoCAAnoyzuPXprg+ RlIAeblc4moblp85e8BAcRRtPCF3+VrvPHLV1//Z4qG/+1BciOAU2kJmOGLRjXb/ Da3h2KZvuZfY5VghqMVUgVKhLW6XhVJZAO+56S2u1wCABoitnaxNeZ/NGwVIX3+C bPEcjXm9PRqH+FvgwPzRJ89BlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJg6eTy6 tw/Q9JwaFuxRCdWC7Hg8MB8GA1UdIwQYMBaAFAAzS48hj6UlM5iGyPvJQJPIjtV7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzBDNi8xODNGODRBRTIz NEIxMUVDQjhBMkRFN0VDNEY5QUUwMi9BRE5ManlHUHBTVXptSWJJLThsQWs4aU8x WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FETkxqeUdQcFNVem1JYkktOGxBazhpTzFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzBDNi8xODNGODRBRTIzNEIxMUVDQjhBMkRFN0VDNEY5QUUwMi9BRE5ManlHUHBT VXptSWJJLThsQWs4aU8xWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8jtkzJVD2vNSjkRtIxq5wX5cD3YHRMLmHMsUaK1rMsvc+QIn2dq6n Q7WQcD7YF9N/ByXPlSUETpcyaSLrv/BFaNiejiDFDjvSXoqnvcawjB0zJlycenQm xIQg/W/0JxUM2DUHgtJagrN4dwhl1XyxxSFbt90ottvZA0gxlhDq37elQsRPsqs4 kUfqUVYrIFrfKH1cXhb4P+D6sINSDd0X03Kh11eyL/Q9kGdF1w295imDfWOVrPDm F2ZJteKEAdLh1z6Z+vG71XIxiuDCOuQsMIV+GWm+LXd//bv6QtbcDrw3rgjzLxsM n8kfg/BJS2ZLkyJN9E1o3QqcTROG3OXH -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org