$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: h4RZIoTR6QzGc20qYJgESvIBLfWi/tRJblPKL06L3h0= Subject key identifier: 9B:7B:AD:F6:2A:03:2A:95:6B:40:1B:93:72:19:BB:47:F8:9F:FE:C8 Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 079A Signing time: Fri 22 Nov 2024 20:49:25 +0000 Manifest this update: Fri 22 Nov 2024 20:49:25 +0000 Manifest next update: Fri 29 Nov 2024 20:49:25 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: GLAg6M++0qN7QrdmgLfTgWABy8cW2GX42lPTTjeRbwI=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: +rpoh0Qao0hx4C7zavudqQAZxQBcoSI/kspTucCxRSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Validity Not Before: Nov 22 20:49:25 2024 GMT Not After : Nov 29 20:49:25 2024 GMT Subject: CN=6740ee55-8cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:12:23:df:ed:af:68:12:1f:33:83:c5:26: 49:2c:3e:c7:e3:ac:d9:58:f2:ee:03:d0:c3:af:f7: 25:89:34:5e:a5:bb:d5:60:31:ad:d8:e2:f5:cc:61: 1b:9c:c4:1d:2e:44:25:d7:6a:99:11:b3:cc:2d:f9: 65:7f:84:06:a9:94:cf:13:27:f0:db:0e:5c:96:25: 86:ef:8a:43:71:b0:75:a4:30:e9:48:52:3d:2c:fc: bd:2e:f2:bc:65:2a:28:fb:52:ba:47:c0:54:6b:b0: 9c:13:a0:dd:50:e5:80:71:e0:c8:bc:06:e6:4f:de: df:b3:b3:77:ad:b6:91:69:b8:2f:e9:48:8d:b6:7a: 2e:8d:92:fc:e6:5f:d5:77:3b:01:fc:43:e1:2d:85: 4a:14:50:9c:5e:0b:ae:66:f2:df:00:4a:50:1e:96: e1:51:9c:ae:f5:96:c6:77:73:dc:3d:59:2e:de:fd: 0c:ed:7c:4b:b9:a6:17:f5:0d:d8:c5:d2:6b:a0:bf: 84:82:11:6c:06:92:41:91:e1:09:1e:42:2a:67:0d: fd:1f:d0:f6:be:d3:00:21:4c:4c:f6:33:62:f6:b6: 26:2b:72:81:e8:fb:b9:e8:ae:d9:5e:29:18:98:3e: ec:d4:67:23:f8:6f:c5:d8:95:44:dc:c6:7e:64:7c: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7B:AD:F6:2A:03:2A:95:6B:40:1B:93:72:19:BB:47:F8:9F:FE:C8 X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9c:b0:82:e4:e6:18:ab:e2:8d:02:82:81:a1:2c:49:13:11: 69:b0:e7:51:fd:c7:ef:32:a3:09:2b:e0:fd:9d:b1:ed:7c:3c: 7b:3a:b7:98:e8:46:3b:8e:96:40:d1:a5:f6:6c:1b:eb:be:72: b4:53:dd:d5:4f:65:6d:43:73:aa:df:bb:8d:29:e4:53:25:18: cb:5c:c8:d5:f5:9b:f0:c9:2d:a2:f3:dd:e4:79:c1:b9:58:06: 62:6f:22:f3:27:9e:fc:31:bd:4b:0e:0c:86:35:bc:fc:ef:85: 44:97:b4:d4:98:dc:ce:05:db:7d:3b:e2:fc:18:b1:54:b1:00: 19:99:12:f3:35:4c:47:9b:af:7e:6a:a8:56:4f:df:d5:de:39: 88:b5:17:9d:a2:bb:e4:97:fb:25:9b:a8:12:0f:71:86:6c:fe: 33:ff:06:c6:1f:d5:ef:f0:d4:e4:82:3d:1a:3d:bb:3b:bb:45: ff:1c:6e:51:22:66:6d:89:8f:e9:c8:09:98:6a:f7:ef:6a:77: 1f:32:39:d1:27:0a:13:9c:4d:ae:c8:87:b5:db:79:c9:3e:54: 62:74:23:63:a7:9a:71:e3:6e:5d:66:d7:5b:a0:48:6e:f0:d2: e0:55:de:45:ff:58:f0:cd:f5:f8:43:2d:e9:05:a9:59:15:5f: 68:d4:dd:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjQxMTIyMjA0OTI1WhcNMjQxMTI5MjA0OTI1WjAYMRYwFAYD VQQDEw02NzQwZWU1NS04Y2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueISI9/tr2gSHzODxSZJLD7H46zZWPLuA9DDr/cliTRepbvVYDGt2OL1zGEb nMQdLkQl12qZEbPMLfllf4QGqZTPEyfw2w5cliWG74pDcbB1pDDpSFI9LPy9LvK8 ZSoo+1K6R8BUa7CcE6DdUOWAceDIvAbmT97fs7N3rbaRabgv6UiNtnoujZL85l/V dzsB/EPhLYVKFFCcXguuZvLfAEpQHpbhUZyu9ZbGd3PcPVku3v0M7XxLuaYX9Q3Y xdJroL+EghFsBpJBkeEJHkIqZw39H9D2vtMAIUxM9jNi9rYmK3KB6Pu56K7ZXikY mD7s1Gcj+G/F2JVE3MZ+ZHwGewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJt7rfYq AyqVa0Abk3IZu0f4n/7IMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPnLCC5OYYq+KNAoKBoSxJExFpsOdR/cfvMqMJK+D9nbHtfDx7OreY 6EY7jpZA0aX2bBvrvnK0U93VT2VtQ3Oq37uNKeRTJRjLXMjV9ZvwyS2i893kecG5 WAZibyLzJ578Mb1LDgyGNbz874VEl7TUmNzOBdt9O+L8GLFUsQAZmRLzNUxHm69+ aqhWT9/V3jmItRedorvkl/slm6gSD3GGbP4z/wbGH9Xv8NTkgj0aPbs7u0X/HG5R ImZtiY/pyAmYavfvancfMjnRJwoTnE2uyIe123nJPlRidCNjp5px425dZtdboEhu 8NLgVd5F/1jwzfX4Qy3pBalZFV9o1N1e -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:25 2024 by rpki-client on console-ams.rpki-client.org