$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft File: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft (raw, json) Hash identifier: 7VF/cJkUNKh4IzrbkJXVC5OdrXmrHLTGRBv3S04V/Oc= Subject key identifier: CE:51:82:2F:B6:B3:60:B3:C5:F1:6C:B0:52:C5:06:E8:48:3E:54:87 Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft Manifest number: 0108 Signing time: Sat 23 Nov 2024 03:19:00 +0000 Manifest this update: Sat 23 Nov 2024 03:18:59 +0000 Manifest next update: Sat 30 Nov 2024 03:18:59 +0000 Files and hashes: 1: SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl (hash: YZverEv7XlQxSh8NGDaNTNNfpj1q5tJeMwQsorpF5Ek=) 2: 0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (hash: Aa0S8NhZ6avRIqzViExX6WxTYLzcutfhF3IU+SlYafs=) 3: 2B68155C2C9D11EEB080623AC4F9AE02.roa (hash: /Vh/4JY8xCIY7gjrvacdvkrn99MfimK7KiFPU0rc0TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135 Validity Not Before: Nov 23 03:18:59 2024 GMT Not After : Nov 30 03:18:59 2024 GMT Subject: CN=674149a4-005d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:c9:9f:41:c6:f8:6b:ef:b0:0d:43:91:fa: 4d:a0:e7:21:09:76:ea:09:60:6c:4c:66:3a:61:62: 9f:49:f4:b5:0f:e7:2b:cf:10:e8:b4:65:30:0e:cb: 90:6d:1e:07:a5:48:a1:97:55:32:7a:0f:2f:bb:d5: 1d:1e:00:d6:c0:62:5e:97:2b:f4:0d:53:04:bc:0b: 5f:29:73:df:d2:87:62:46:67:75:ed:eb:55:13:4d: 9f:58:83:d3:92:04:7c:fe:2a:d3:c6:2e:c2:95:cc: 5d:35:e0:65:f8:84:11:a8:9a:d2:9f:f2:35:39:b8: f6:28:1a:81:c8:42:c0:5f:89:22:04:a8:e0:39:4d: af:85:66:29:be:bd:c0:5e:86:48:79:df:ce:cc:71: 07:74:15:57:bf:71:88:d6:8e:0f:15:97:70:96:ce: 43:a3:a3:e0:81:23:ba:61:6d:d1:3b:c1:fd:5d:e5: be:ca:57:6f:6a:85:1a:ef:e0:ce:99:65:0e:8d:fc: c6:d1:22:75:21:7c:b1:05:fa:ab:3d:64:11:34:a3: f8:0a:e0:69:b0:ad:e0:98:d1:07:fb:db:20:da:99: 3a:a8:8c:2f:9d:78:e2:e1:e4:f8:30:22:15:11:93: f7:2d:e4:fb:fa:1d:6e:d8:a8:de:0a:8c:b0:bd:c8: f1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:51:82:2F:B6:B3:60:B3:C5:F1:6C:B0:52:C5:06:E8:48:3E:54:87 X509v3 Authority Key Identifier: keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:7a:72:77:92:91:d5:1c:73:41:98:dd:41:e8:c0:19:d9:44: c0:d8:78:ba:de:b9:fc:94:be:5c:5e:2c:e8:16:f8:5e:d1:53: 7a:be:62:45:20:3c:28:44:f5:12:1b:19:5e:ed:8c:46:2f:5f: 06:76:ee:aa:ba:3a:6c:c9:ab:51:05:f3:f5:fe:15:24:35:c4: 83:d7:ab:62:09:27:62:f2:a8:da:fd:7d:00:86:a6:f7:0b:95: 91:ef:1b:e2:05:08:55:a7:80:48:71:d4:79:95:cf:89:21:10: 42:a5:1f:a9:8f:42:90:67:6c:71:e7:d6:b6:a1:cb:55:57:4b: 79:08:e2:db:34:a7:0a:f5:2c:02:d5:b7:42:0a:f9:e5:97:01: 77:a6:64:0f:91:ba:23:b3:cd:4f:dd:71:1a:5d:bd:6d:50:18: 2a:fe:c6:94:4f:b8:01:14:2e:d0:21:23:ce:59:85:37:9f:67: c2:cc:fb:4a:20:ba:ec:f1:7c:c4:96:ab:45:d4:0e:87:06:3e: 6b:50:f8:69:ea:ea:9a:3b:e8:d0:44:37:10:34:1a:80:25:3b: b6:24:61:52:dc:74:01:b7:da:06:4d:97:53:f0:51:16:05:47: 56:3e:75:bd:c8:f6:02:eb:c3:a5:d3:08:55:12:3f:a6:76:53: e3:98:c4:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM4NDgxMTAvBgNVBAUTKDQ4MkQzRTcwMEVFNUYxQTRBREE3NTE2RjJFNTY3ODM0 RTcxMEQxMzUwHhcNMjQxMTIzMDMxODU5WhcNMjQxMTMwMDMxODU5WjAYMRYwFAYD VQQDEw02NzQxNDlhNC0wMDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPHJn0HG+GvvsA1DkfpNoOchCXbqCWBsTGY6YWKfSfS1D+crzxDotGUwDsuQ bR4HpUihl1Uyeg8vu9UdHgDWwGJelyv0DVMEvAtfKXPf0odiRmd17etVE02fWIPT kgR8/irTxi7ClcxdNeBl+IQRqJrSn/I1Obj2KBqByELAX4kiBKjgOU2vhWYpvr3A XoZIed/OzHEHdBVXv3GI1o4PFZdwls5Do6PggSO6YW3RO8H9XeW+yldvaoUa7+DO mWUOjfzG0SJ1IXyxBfqrPWQRNKP4CuBpsK3gmNEH+9sg2pk6qIwvnXji4eT4MCIV EZP3LeT7+h1u2KjeCoywvcjxDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5Rgi+2 s2CzxfFssFLFBuhIPlSHMB8GA1UdIwQYMBaAFEgtPnAO5fGkradRby5WeDTnENE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzg0OC8xNjE4REI3NDJC QjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhhU3RwMUZ2TGxaNE5PY1Ew VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi9TQzAtY0E3bDhh U3RwMUZ2TGxaNE5PY1EwVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWenJ3kpHVHHNBmN1B6MAZ2UTA2Hi63rn8lL5cXizoFvhe0VN6vmJF IDwoRPUSGxle7YxGL18Gdu6qujpsyatRBfP1/hUkNcSD16tiCSdi8qja/X0Ahqb3 C5WR7xviBQhVp4BIcdR5lc+JIRBCpR+pj0KQZ2xx59a2octVV0t5COLbNKcK9SwC 1bdCCvnllwF3pmQPkbojs81P3XEaXb1tUBgq/saUT7gBFC7QISPOWYU3n2fCzPtK ILrs8XzElqtF1A6HBj5rUPhp6uqaO+jQRDcQNBqAJTu2JGFS3HQBt9oGTZdT8FEW BUdWPnW9yPYC68Ol0whVEj+mdlPjmMTC -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:06 2024 by rpki-client on console-ams.rpki-client.org