$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft File: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft (raw, json) Hash identifier: BZGsRZWEfX5I+S474qFsW/8cByBptMwB869ho93dkjM= Subject key identifier: 9E:9E:8D:CB:74:77:71:E4:01:90:46:4F:45:C3:13:A9:B7:C6:2C:28 Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 Certificate issuer: /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Certificate serial: 03E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft Manifest number: 03D2 Signing time: Sat 23 Nov 2024 00:12:34 +0000 Manifest this update: Sat 23 Nov 2024 00:12:34 +0000 Manifest next update: Sat 30 Nov 2024 00:12:34 +0000 Files and hashes: 1: 8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl (hash: JahSH10FDaE043rleBkZQkE9cDNxbojVIXlZcIRPCaE=) 2: 98ADC3467FBF11ECBBD2EE30C4F9AE02.roa (hash: Edg5XyMaTvECsxqM+UFLgy72ZaVY+YpYeTfeKOCN8u8=) 3: 7125C7DE611411ECBF66B385C4F9AE02.roa (hash: fQeMexksrWbmj3MqUO1/5SrQnRCI+pFaupppGDL+jic=) 4: 6DE5D7943FA311EDABCBBA25C4F9AE02.roa (hash: jCTMSC495WwQhM5z8iRSIfB2DjssKAElJteIhJkck/0=) 5: 6EDD05143FA311EDABCBBA25C4F9AE02.roa (hash: Nm/cRRrO2uQJv8phlqklMp2F9GdX6uQm98o0lVLX9FY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1 Validity Not Before: Nov 23 00:12:34 2024 GMT Not After : Nov 30 00:12:34 2024 GMT Subject: CN=67411df2-3860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:db:6a:45:6d:d4:60:a9:d2:d8:c9:f6:49:0b: 74:40:c7:54:aa:43:63:11:12:03:40:0b:60:eb:ca: 5f:93:8d:c8:68:76:42:82:d2:10:de:2a:91:ba:a8: 7f:dc:19:0d:5c:e7:86:0d:d5:0d:cf:d6:ea:d5:25: 2c:a3:81:f5:d9:f5:cb:df:98:73:25:0f:19:fb:fe: 5f:05:e0:d4:b2:f5:14:d5:65:f1:a5:b5:e8:c4:7e: ed:19:19:4b:0b:ae:6f:d8:17:a7:64:f0:71:1e:24: c5:77:9b:a7:40:99:96:6b:36:1c:0d:76:f7:1f:fe: 5d:10:9d:cb:d0:01:a0:5c:1d:e4:dc:a8:91:5d:b5: 11:07:6b:e9:ea:66:4a:f5:25:71:6d:a9:9c:d3:72: 6e:e9:c4:a4:34:f3:2b:3f:3c:55:a8:cd:6c:ee:09: 4a:95:65:9b:90:3a:88:9b:05:89:74:a1:86:03:14: a1:8c:3c:bd:c8:b8:89:bd:68:77:3f:98:4d:29:d0: 13:f4:16:76:64:10:c7:ae:19:aa:1e:42:78:9d:a2: 9c:99:14:1e:59:b2:0c:5f:3e:02:c5:89:e8:84:93: 2c:1a:5f:63:4e:4c:8f:aa:f4:fe:59:29:67:ec:d0: 75:37:0d:f4:6c:10:8a:1a:5b:39:ee:82:37:85:91: 1a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9E:8D:CB:74:77:71:E4:01:90:46:4F:45:C3:13:A9:B7:C6:2C:28 X509v3 Authority Key Identifier: keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:c7:39:33:c7:20:92:ea:f4:07:a9:15:50:a7:df:9e:7b:44: b1:e3:3a:bd:47:18:61:44:b8:2b:37:c0:5b:54:a5:f5:78:08: a4:33:00:2c:ea:92:be:57:33:01:06:91:ab:1c:ee:b3:c4:01: 5f:35:02:5a:e6:17:27:85:11:71:3c:59:21:42:2d:5b:e7:00: 8b:0a:e2:a3:33:b6:cf:93:c5:31:cc:13:10:03:2d:6f:37:b9: 8a:e7:c4:4e:88:9e:f5:84:3e:89:66:30:b9:6a:f6:4b:0a:b3: 24:08:34:52:91:3b:43:b3:80:93:a6:f9:a4:33:c6:6c:fb:7f: bd:5d:3a:ac:c8:09:60:65:06:e9:d8:b8:ea:48:ff:05:75:0e: 55:c9:76:e0:ed:61:70:05:a9:d7:51:30:3c:89:36:10:d7:87: 20:88:0c:9d:0f:d3:5f:7c:e7:74:68:c0:7c:74:9e:5e:2f:9d: 16:2d:4b:9f:c2:95:c5:b6:ea:51:4b:e4:39:cf:f6:f2:ed:98: 1e:17:75:e7:43:50:2e:99:22:75:52:62:f0:28:ec:09:8b:af: 9c:1a:66:e6:ac:8a:a9:d7:49:b2:85:29:96:f9:c6:50:9c:04: 09:11:ec:85:d3:13:70:99:7c:e9:84:1e:8b:f7:d0:d6:a9:8f: e3:7a:44:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD QUZDMEI4QjEwHhcNMjQxMTIzMDAxMjM0WhcNMjQxMTMwMDAxMjM0WjAYMRYwFAYD VQQDEw02NzQxMWRmMi0zODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ttqRW3UYKnS2Mn2SQt0QMdUqkNjERIDQAtg68pfk43IaHZCgtIQ3iqRuqh/ 3BkNXOeGDdUNz9bq1SUso4H12fXL35hzJQ8Z+/5fBeDUsvUU1WXxpbXoxH7tGRlL C65v2BenZPBxHiTFd5unQJmWazYcDXb3H/5dEJ3L0AGgXB3k3KiRXbURB2vp6mZK 9SVxbamc03Ju6cSkNPMrPzxVqM1s7glKlWWbkDqImwWJdKGGAxShjDy9yLiJvWh3 P5hNKdAT9BZ2ZBDHrhmqHkJ4naKcmRQeWbIMXz4CxYnohJMsGl9jTkyPqvT+WSln 7NB1Nw30bBCKGls57oI3hZEavQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6ejct0 d3HkAZBGT0XDE6m3xiwoMB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1 TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEJENC80ODY1QkQ0ODYxMTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZ RjItWjU3eWE2cGpLX0F1TEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgxzkzxyCS6vQHqRVQp9+ee0Sx4zq9RxhhRLgrN8BbVKX1eAikMwAs 6pK+VzMBBpGrHO6zxAFfNQJa5hcnhRFxPFkhQi1b5wCLCuKjM7bPk8UxzBMQAy1v N7mK58ROiJ71hD6JZjC5avZLCrMkCDRSkTtDs4CTpvmkM8Zs+3+9XTqsyAlgZQbp 2LjqSP8FdQ5VyXbg7WFwBanXUTA8iTYQ14cgiAydD9NffOd0aMB8dJ5eL50WLUuf wpXFtupRS+Q5z/by7ZgeF3XnQ1AumSJ1UmLwKOwJi6+cGmbmrIqp10myhSmW+cZQ nAQJEeyF0xNwmXzphB6L99DWqY/jekRd -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org