$ rpki-client -vvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft File: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json) Hash identifier: CZUzOR3zD/7hTzOHH79d6O8X8T2loelZJ6GBT97dIQ4= Subject key identifier: 0B:07:47:F2:01:84:1C:2A:D2:2B:7A:1B:A6:7E:32:8E:8F:9F:F6:5C Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E Certificate issuer: /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft Manifest number: 014D Signing time: Sat 23 Nov 2024 02:30:01 +0000 Manifest this update: Sat 23 Nov 2024 02:30:00 +0000 Manifest next update: Sat 30 Nov 2024 02:30:00 +0000 Files and hashes: 1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: elziQv2ygvU8EXZPjgA8snEZyIMmz2M8GC75HsS7qT4=) 2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: 8i6c3KX1azuyqBz1zng1wW9VBIHPVACW3fjSe4k+Kng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E Validity Not Before: Nov 23 02:30:00 2024 GMT Not After : Nov 30 02:30:00 2024 GMT Subject: CN=67413e29-c9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:32:32:c1:10:4c:34:1c:6b:21:c6:79:df:6c: 63:1e:7e:d5:82:6c:af:bc:72:ca:ce:e6:45:96:52: 3f:eb:bb:75:74:e5:85:b6:04:3c:05:f6:43:06:71: 17:5d:44:f9:ef:0d:03:9a:78:e3:4a:06:39:c6:8f: 50:69:30:24:18:7a:f8:08:7d:fd:50:b4:b7:ef:5c: 6e:06:10:f5:22:ae:9b:5c:dd:3a:fd:1c:8c:be:11: 5b:dc:b0:2a:41:e0:8e:5d:9c:9f:9b:bc:3b:4a:33: 21:4e:e6:7a:cc:1b:87:77:a2:39:9d:04:53:7b:46: e7:e0:bd:bb:aa:ba:88:00:32:46:ba:e5:57:9e:e6: f4:85:2d:7d:5c:16:32:79:cf:14:42:e2:31:ed:9d: e2:74:0e:4f:da:1e:ed:60:c3:6a:fc:b1:06:74:0b: a5:0d:39:21:93:ee:72:58:d4:3f:eb:e3:b7:8a:54: 7a:70:d5:e6:02:43:33:56:4a:dc:7e:8b:e8:f3:5c: 0b:ad:3d:b9:a8:67:c8:a3:c6:c7:d4:6b:4c:60:50: 5a:5c:58:e5:3a:15:a7:b3:94:1c:f0:bb:cf:d0:a8: 57:6f:cd:d3:c0:a0:53:16:2d:e6:bb:a5:e6:14:35: a2:da:d8:5c:30:2e:7f:1d:7b:bd:9f:29:a5:a9:35: 4c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:07:47:F2:01:84:1C:2A:D2:2B:7A:1B:A6:7E:32:8E:8F:9F:F6:5C X509v3 Authority Key Identifier: keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:1c:7a:34:54:6f:4b:2c:ee:0b:97:7e:a4:f2:d6:59:0c:52: 71:ea:d8:bc:cb:39:d2:cf:13:44:1a:39:49:53:f5:ca:2e:ee: ac:b6:c5:c1:7a:6d:1f:d6:ed:dd:12:2e:a3:30:51:53:71:69: 6c:9f:33:0a:03:40:76:6f:4c:13:ba:97:c9:c9:13:e3:ed:19: 06:1c:1d:bc:23:50:2d:ac:9e:58:b0:9e:a7:5e:32:b1:79:ec: e5:fb:4f:9c:46:e6:8a:cf:a8:64:de:4c:10:9c:72:4f:45:43: cf:1f:9e:77:58:3f:9e:18:fb:02:82:ee:1f:33:2e:76:31:6d: b3:f5:57:81:92:8d:ea:88:c3:a2:c7:b1:78:8c:19:38:03:dd: 48:78:9e:39:49:7a:cf:d6:56:49:9d:07:ed:62:e5:87:bb:b5: ea:55:42:a0:dc:69:82:84:e6:bd:2d:3a:6b:9b:a6:f1:cd:b5: 15:6f:d5:ff:60:22:66:08:db:0c:01:76:fc:af:5c:28:39:4c: e9:6f:5a:0e:ba:1d:8d:c0:8f:95:1b:25:87:5d:1a:8c:da:cf: 81:71:98:c1:54:73:9f:37:c2:e4:2a:a5:f2:f5:8d:89:19:8a: 67:d6:d9:be:29:4f:3d:50:dd:0e:f0:cf:ba:73:2b:92:3c:d1: 99:43:6b:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIwOTExMTAvBgNVBAUTKEUwODgxM0JEMTg4Q0RDMkFCRjUwMThERTZGRTM3RjQ0 Mzc0NzIwOEUwHhcNMjQxMTIzMDIzMDAwWhcNMjQxMTMwMDIzMDAwWjAYMRYwFAYD VQQDEw02NzQxM2UyOS1jOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4zIywRBMNBxrIcZ532xjHn7VgmyvvHLKzuZFllI/67t1dOWFtgQ8BfZDBnEX XUT57w0DmnjjSgY5xo9QaTAkGHr4CH39ULS371xuBhD1Iq6bXN06/RyMvhFb3LAq QeCOXZyfm7w7SjMhTuZ6zBuHd6I5nQRTe0bn4L27qrqIADJGuuVXnub0hS19XBYy ec8UQuIx7Z3idA5P2h7tYMNq/LEGdAulDTkhk+5yWNQ/6+O3ilR6cNXmAkMzVkrc fovo81wLrT25qGfIo8bH1GtMYFBaXFjlOhWns5Qc8LvP0KhXb83TwKBTFi3mu6Xm FDWi2thcMC5/HXu9nymlqTVMKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsHR/IB hBwq0it6G6Z+Mo6Pn/ZcMB8GA1UdIwQYMBaAFOCIE70YjNwqv1AY3m/jf0Q3RyCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjA5MS9BQkM0RDQ0NEFC NTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTNDcV9VQmplYi1OX1JEZEhJ STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJZ1R2UmlNM0NxX1VCamViLU5fUkRkSElJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjA5MS9BQkM0RDQ0NEFCNTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTND cV9VQmplYi1OX1JEZEhJSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxHHo0VG9LLO4Ll36k8tZZDFJx6ti8yznSzxNEGjlJU/XKLu6stsXB em0f1u3dEi6jMFFTcWlsnzMKA0B2b0wTupfJyRPj7RkGHB28I1AtrJ5YsJ6nXjKx eezl+0+cRuaKz6hk3kwQnHJPRUPPH553WD+eGPsCgu4fMy52MW2z9VeBko3qiMOi x7F4jBk4A91IeJ45SXrP1lZJnQftYuWHu7XqVUKg3GmChOa9LTprm6bxzbUVb9X/ YCJmCNsMAXb8r1woOUzpb1oOuh2NwI+VGyWHXRqM2s+BcZjBVHOfN8LkKqXy9Y2J GYpn1tm+KU89UN0O8M+6cyuSPNGZQ2t9 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org