$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft File: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft (raw, json) Hash identifier: geYD9AnXMFfQl9lkPlTDs806NoGVbDpV3JRyiWJjo3Q= Subject key identifier: B0:46:3E:45:46:76:B8:41:09:15:3C:90:48:9D:E7:48:74:B6:50:46 Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 Certificate issuer: /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Certificate serial: 0BEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft Manifest number: 0BE4 Signing time: Fri 22 Nov 2024 18:23:29 +0000 Manifest this update: Fri 22 Nov 2024 18:23:28 +0000 Manifest next update: Fri 29 Nov 2024 18:23:28 +0000 Files and hashes: 1: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl (hash: RC04G8Sc9o4hhXpi1k5EAFAtBm6gKqc56dw1pYKVt8E=) 2: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (hash: ++efN2YnvlpaiN/cGnRcdVoz/L09sx0IMn5rgvBIJi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3050 (0xbea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Validity Not Before: Nov 22 18:23:28 2024 GMT Not After : Nov 29 18:23:28 2024 GMT Subject: CN=6740cc21-3aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:e0:f2:2d:27:0c:13:2a:f9:30:39:5d:36: 44:d8:c8:2e:26:e3:33:76:68:5d:72:f3:86:41:29: 27:89:80:73:9a:41:02:b4:8c:1a:10:fb:e7:37:2a: 64:24:03:68:a4:01:43:2e:be:43:7d:12:cc:37:d7: 5a:1c:fc:ed:c6:a4:6c:b1:a7:ad:27:6a:13:74:ef: 3c:b3:2a:3c:83:a4:f8:5a:09:13:fd:e3:ba:be:4a: b7:e0:57:69:96:51:26:77:20:61:d8:20:53:b6:0a: e2:00:28:61:22:81:b8:5b:4c:76:15:7c:ff:fa:e3: de:87:3f:3b:ce:c2:90:8a:41:2d:95:af:2c:1c:cd: a0:b7:67:ca:10:eb:79:40:fd:d6:e4:5f:4f:07:5a: 2a:d4:c0:24:f3:d7:8e:d2:08:8f:26:e0:e4:c0:1d: 04:83:8f:a4:45:bf:98:37:7d:8f:4b:eb:6b:2d:22: 6e:3a:e3:5f:35:77:1c:05:6e:79:44:3c:b1:73:9d: be:1e:c2:eb:63:cb:57:f8:1e:7f:b1:4d:67:06:ab: fe:15:26:63:86:7a:f1:43:ad:d9:c7:fa:3d:f0:37: c9:b9:19:ec:f2:21:e4:0b:5e:9b:9c:51:5b:e7:69: 8d:63:ea:47:46:c4:57:10:4d:5c:f6:38:3c:a1:8d: 1a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:46:3E:45:46:76:B8:41:09:15:3C:90:48:9D:E7:48:74:B6:50:46 X509v3 Authority Key Identifier: keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:da:f7:22:a5:1d:89:fa:d9:3d:3c:32:db:3a:35:de:37:c7: cc:e2:b5:71:02:ae:34:7e:50:09:ba:db:38:50:67:3b:d2:7e: a5:7f:bf:6d:28:2f:25:e3:8b:e7:df:e3:4c:7f:17:a3:84:54: af:fb:46:49:57:c8:a4:8d:bf:0d:7c:84:7d:33:90:b6:bd:a7: 01:10:34:c5:4b:51:68:a2:74:9b:5e:aa:6a:9d:97:7e:83:47: 42:16:ca:d6:bd:48:51:24:73:eb:8d:56:31:d1:54:0c:ae:d4: a0:d3:22:d5:63:18:97:09:64:73:61:55:10:fc:48:a5:5d:47: ac:fc:aa:ea:bc:6a:3b:4f:24:4c:75:94:12:1e:08:9a:de:f8: 14:3d:77:aa:93:e1:56:72:32:1f:8d:2f:ed:6f:e0:a3:9f:54: 81:b5:01:ba:0f:06:9e:d5:b4:12:7a:41:f3:ef:01:81:4f:87: 45:c3:2e:4d:40:9b:78:59:0e:f1:f4:54:99:32:35:7d:5c:d6: 4b:83:be:24:c9:7e:81:cb:47:48:28:ca:ef:0b:3c:00:c8:04: 9c:cc:a0:b9:24:bb:e8:b6:3a:fb:06:ef:0b:da:9d:60:c1:c0: 4a:58:0f:03:83:a7:4f:06:ce:0f:81:96:fb:b5:77:c8:95:9d: 15:58:d8:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBMDIxMTAvBgNVBAUTKEYwNzI4RUVEMkQ0RjhGRkQ4Q0ZFNUY4N0Y2MUJFQzA0 MzQ1MTQxMjkwHhcNMjQxMTIyMTgyMzI4WhcNMjQxMTI5MTgyMzI4WjAYMRYwFAYD VQQDEw02NzQwY2MyMS0zYWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPjg8i0nDBMq+TA5XTZE2MguJuMzdmhdcvOGQSkniYBzmkECtIwaEPvnNypk JANopAFDLr5DfRLMN9daHPztxqRssaetJ2oTdO88syo8g6T4WgkT/eO6vkq34Fdp llEmdyBh2CBTtgriAChhIoG4W0x2FXz/+uPehz87zsKQikEtla8sHM2gt2fKEOt5 QP3W5F9PB1oq1MAk89eO0giPJuDkwB0Eg4+kRb+YN32PS+trLSJuOuNfNXccBW55 RDyxc52+HsLrY8tX+B5/sU1nBqv+FSZjhnrxQ63Zx/o98DfJuRns8iHkC16bnFFb 52mNY+pHRsRXEE1c9jg8oY0alwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBGPkVG drhBCRU8kEid50h0tlBGMB8GA1UdIwQYMBaAFPByju0tT4/9jP5fh/Yb7AQ0UUEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkEwMi84RENFRTlGQzA0 NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpfMk1fbC1IOWh2c0JEUlJR U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIS083UzFQal8yTV9sLUg5aHZzQkRSUlFTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkEwMi84RENFRTlGQzA0NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpf Mk1fbC1IOWh2c0JEUlJRU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA2vcipR2J+tk9PDLbOjXeN8fM4rVxAq40flAJuts4UGc70n6lf79t KC8l44vn3+NMfxejhFSv+0ZJV8ikjb8NfIR9M5C2vacBEDTFS1FoonSbXqpqnZd+ g0dCFsrWvUhRJHPrjVYx0VQMrtSg0yLVYxiXCWRzYVUQ/EilXUes/KrqvGo7TyRM dZQSHgia3vgUPXeqk+FWcjIfjS/tb+Cjn1SBtQG6Dwae1bQSekHz7wGBT4dFwy5N QJt4WQ7x9FSZMjV9XNZLg74kyX6By0dIKMrvCzwAyASczKC5JLvotjr7Bu8L2p1g wcBKWA8Dg6dPBs4PgZb7tXfIlZ0VWNip -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org