$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft File: bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft (raw, json) Hash identifier: ErR3tYI2epIa/T9T4sEoDDYa1p/cmuiswuOu+zHlw2k= Subject key identifier: 28:D0:D1:E5:10:3C:93:A6:FF:EA:10:13:93:9D:E1:E1:CA:88:57:D6 Authority key identifier: 6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 Certificate issuer: /CN=A913DF8A/serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft Manifest number: 77 Signing time: Sat 23 Nov 2024 04:46:50 +0000 Manifest this update: Sat 23 Nov 2024 04:46:50 +0000 Manifest next update: Sat 30 Nov 2024 04:46:50 +0000 Files and hashes: 1: bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl (hash: H/5Km/USjiejq5Cvb0Qn4isdvbog+upgJRlIGHy7vpI=) 2: EC873B66F37911EEA9FCAF6BC4F9AE02.roa (hash: rsabR21jqtcvoz4XthX1FqvEg0esDGA7DmhhfFQxiEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF8A/serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Validity Not Before: Nov 23 04:46:50 2024 GMT Not After : Nov 30 04:46:50 2024 GMT Subject: CN=67415e3a-f3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:b6:81:6b:dc:85:56:af:22:cd:5f:3e:c7: 5e:15:50:c5:f2:76:2c:bd:98:8d:88:d3:af:0c:c1: ab:23:be:2e:f6:bb:1c:53:cb:4d:fb:36:50:85:1f: 11:b1:70:bd:d3:37:5f:ce:50:87:60:70:82:bb:43: 4c:8f:b4:f2:16:b0:e2:50:d2:2a:29:13:29:11:d9: fd:ea:55:f8:93:1f:9c:97:df:e3:ac:48:d7:bd:cc: 80:de:e0:ba:9a:55:35:77:fd:86:fc:95:72:d4:d8: a5:d1:05:a5:ec:75:67:74:b7:85:27:e4:98:7f:0b: af:8c:7f:30:ab:8e:80:10:0c:90:30:eb:82:09:c8: 45:0e:96:91:80:5d:e8:e2:70:4f:94:fe:87:02:53: c3:ad:05:b4:e6:53:8f:de:3a:9e:d5:27:90:85:75: 42:7c:d5:f9:44:21:df:07:12:e1:1a:2d:94:ba:9a: cf:23:a5:17:7a:1a:3c:e7:bc:2d:7a:26:d0:34:9a: 60:a0:27:60:46:58:c9:dc:65:9e:3b:67:e9:59:70: 23:9b:f5:89:77:9d:ec:f2:ce:32:87:e2:ba:57:3a: 8c:98:a8:3b:3c:96:d4:bc:3a:04:26:cf:d3:cc:2f: 3b:3a:47:e0:f9:08:2c:c6:09:58:92:b5:d6:92:92: 1a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D0:D1:E5:10:3C:93:A6:FF:EA:10:13:93:9D:E1:E1:CA:88:57:D6 X509v3 Authority Key Identifier: keyid:6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:13:a5:d5:3c:a6:ed:db:e2:3e:67:2e:a7:4a:15:8c:ac:f6: 8a:f0:9d:b8:47:64:6e:fe:61:e9:2b:52:bf:58:f4:bd:02:55: 5e:97:8b:3a:76:98:7b:96:89:59:5d:42:cd:d5:96:61:38:29: c5:44:15:15:a6:38:75:78:c6:05:e2:8e:75:6e:d1:79:b8:b1: 0b:87:4c:6b:87:0e:3e:9a:e6:f2:c1:e1:96:2b:f8:f9:02:f3: 42:24:07:2f:a1:3a:dd:d5:d4:2c:d9:ca:dd:67:ee:48:20:ad: 36:cc:f4:23:c5:3e:44:2f:fd:f5:90:2e:e5:47:45:eb:e6:b0: bb:cb:c1:87:62:92:5f:59:37:f3:b5:f4:d1:0d:f5:08:11:b1: 37:d9:6c:ab:9a:37:b3:1d:3f:49:89:77:e8:15:8e:2b:38:74: b8:1a:38:79:d9:cc:85:7b:8c:20:0e:e3:b7:db:f7:96:8d:29: cb:e6:03:8c:3c:58:89:70:fa:cd:d1:57:75:f2:3b:07:6c:ca: bc:91:f3:18:8a:8d:31:5d:b2:b9:05:f4:d3:08:64:c4:77:11: 46:3e:83:27:1c:3a:65:ee:15:43:06:d6:57:e1:d4:9f:26:01: c4:ad:14:3d:3e:58:5a:4a:1e:65:e6:55:b2:bc:52:30:c4:31: d6:9f:ee:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REY4QTExMC8GA1UEBRMoNkM4REZBMDQzQzIyQjhBMjdFQUI2MDQ3MEFGNDA2NjAy NEE2ODQ0MDAeFw0yNDExMjMwNDQ2NTBaFw0yNDExMzAwNDQ2NTBaMBgxFjAUBgNV BAMTDTY3NDE1ZTNhLWYzYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLXraBa9yFVq8izV8+x14VUMXydiy9mI2I068Mwasjvi72uxxTy037NlCFHxGx cL3TN1/OUIdgcIK7Q0yPtPIWsOJQ0iopEykR2f3qVfiTH5yX3+OsSNe9zIDe4Lqa VTV3/Yb8lXLU2KXRBaXsdWd0t4Un5Jh/C6+MfzCrjoAQDJAw64IJyEUOlpGAXeji cE+U/ocCU8OtBbTmU4/eOp7VJ5CFdUJ81flEId8HEuEaLZS6ms8jpRd6GjznvC16 JtA0mmCgJ2BGWMncZZ47Z+lZcCOb9Yl3nezyzjKH4rpXOoyYqDs8ltS8OgQmz9PM Lzs6R+D5CCzGCViStdaSkhpTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKNDR5RA8 k6b/6hATk53h4cqIV9YwHwYDVR0jBBgwFoAUbI36BDwiuKJ+q2BHCvQGYCSmhEAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERjhBLzhGMDExQzZFRjM3 OTExRUVCN0U5REM2QUM0RjlBRTAyL2JJMzZCRHdpdUtKLXEyQkhDdlFHWUNTbWhF QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkkzNkJEd2l1S0otcTJCSEN2UUdZQ1NtaEVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE RjhBLzhGMDExQzZFRjM3OTExRUVCN0U5REM2QUM0RjlBRTAyL2JJMzZCRHdpdUtK LXEyQkhDdlFHWUNTbWhFQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEYTpdU8pu3b4j5nLqdKFYys9orwnbhHZG7+YekrUr9Y9L0CVV6Xizp2 mHuWiVldQs3VlmE4KcVEFRWmOHV4xgXijnVu0Xm4sQuHTGuHDj6a5vLB4ZYr+PkC 80IkBy+hOt3V1CzZyt1n7kggrTbM9CPFPkQv/fWQLuVHRevmsLvLwYdikl9ZN/O1 9NEN9QgRsTfZbKuaN7MdP0mJd+gVjis4dLgaOHnZzIV7jCAO47fb95aNKcvmA4w8 WIlw+s3RV3XyOwdsyryR8xiKjTFdsrkF9NMIZMR3EUY+gyccOmXuFUMG1lfh1J8m AcStFD0+WFpKHmXmVbK8UjDEMdaf7jU= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org