$ rpki-client -vvf rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft File: 8_70YqTY4vf6BzWmq2Re5WNdqPI.mft (raw, json) Hash identifier: wLMqVGj39cQoUl+opVTnKToCbF2nlJ5RpA04covlNNU= Subject key identifier: B8:3D:03:42:6B:96:6C:06:58:8D:22:FD:00:DA:A8:45:B6:D3:5F:C5 Authority key identifier: F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 Certificate issuer: /CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Certificate serial: 349A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft Manifest number: 343B Signing time: Fri 22 Nov 2024 14:19:14 +0000 Manifest this update: Fri 22 Nov 2024 14:19:13 +0000 Manifest next update: Fri 29 Nov 2024 14:19:13 +0000 Files and hashes: 1: 8_70YqTY4vf6BzWmq2Re5WNdqPI.crl (hash: KO/YXaMVlnLmpu9S4P00O9iCwAnSQykuqW7tcS/Sd80=) 2: D80ABAE0B0F811E595E0F761C4F9AE02.roa (hash: c22mNO/5Hdkx8PFMzFu3jsnlkAhn1ItEIOY2vepnAxw=) 3: DCA7C1ECB0F811E595E0F761C4F9AE02.roa (hash: 4DCzMrS23y6D/kybetlk2S0srHOzdeBvs5HMeNPfJ5E=) 4: DB386CDAB0F811E595E0F761C4F9AE02.roa (hash: 5+0P2oMrZxwSpuHlRVHY+lcirmBZELX1piLb/+FKwgs=) 5: DE0EF67CB0F811E595E0F761C4F9AE02.roa (hash: gJW+TAeBH6/09GAAcj5GBSbWEG1hRAtGAZaYFpZwTIU=) 6: D96D4614B0F811E595E0F761C4F9AE02.roa (hash: E3U3F8lmAlNXbZSa6yPrVPMaCU4q4mH/ZxI+07ugJOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13466 (0x349a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91474C3/serialNumber=F3FEF462A4D8E2F7FA0735A6AB645EE5635DA8F2 Validity Not Before: Nov 22 14:19:13 2024 GMT Not After : Nov 29 14:19:13 2024 GMT Subject: CN=674092e1-2f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:38:ed:02:4a:dd:9e:9e:15:79:7c:f7:0f: 3f:8a:0c:e0:30:8e:bd:c3:3a:14:e6:9c:4a:75:e6: d5:6e:3b:87:c8:af:a4:99:ef:aa:9c:54:15:9e:a2: 25:8b:7e:bf:c4:7a:f1:aa:f1:73:56:b0:1b:22:b0: 47:14:81:b1:1f:7a:ef:de:b4:81:e8:84:4d:81:5d: 00:4d:4a:2a:89:5a:c3:5d:da:fa:e8:4e:6a:7c:fc: 04:80:5e:a9:42:76:42:1e:67:26:70:a7:17:a4:48: 6d:98:3a:55:59:b9:98:10:27:ca:9c:df:82:91:48: 66:b9:df:6d:07:01:04:46:a4:b8:97:e6:85:b8:37: 8f:e3:12:8b:fe:68:2f:e7:80:8e:96:40:b0:38:ef: 06:d3:43:6e:02:15:19:c7:ca:ee:13:28:16:e2:8e: 32:a6:f6:15:da:a7:4c:43:3f:b6:fa:1a:f7:e7:7c: 3c:d6:5c:12:4b:f5:3a:e6:65:4a:f6:c2:98:c0:81: c7:a0:2a:40:4b:47:2b:ca:5b:65:41:15:b3:b3:bc: c3:9a:ec:f6:3a:b7:43:c2:a9:ba:d1:da:84:30:28: 9c:07:a6:b4:fa:51:b4:fb:d8:02:d2:aa:45:c7:2f: 3d:5c:71:d0:ba:10:3b:1b:96:11:63:5f:49:48:14: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3D:03:42:6B:96:6C:06:58:8D:22:FD:00:DA:A8:45:B6:D3:5F:C5 X509v3 Authority Key Identifier: keyid:F3:FE:F4:62:A4:D8:E2:F7:FA:07:35:A6:AB:64:5E:E5:63:5D:A8:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_70YqTY4vf6BzWmq2Re5WNdqPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91474C3/6F8B52A01D7011E2BC11DAB408B02CD2/8_70YqTY4vf6BzWmq2Re5WNdqPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f3:d6:34:a3:65:01:ca:75:88:cd:5c:e8:4b:c0:ac:cf:8c: b5:f6:b3:33:2a:19:f1:b8:67:96:06:ef:7b:ac:77:4d:b5:b6: 2d:0a:b9:82:ae:2e:65:6b:23:92:6b:2a:a6:1b:43:75:0c:f7: 03:76:e8:86:58:08:c7:37:db:61:70:69:92:cd:fb:f6:37:cf: 3c:fe:91:62:31:94:4d:ec:61:58:1c:10:88:6b:97:24:9b:b5: 47:d4:78:ab:47:4a:1b:37:3b:a0:80:b6:f2:f8:5b:fb:3c:27: ad:3c:10:df:f0:da:13:5f:ad:42:3d:41:f3:de:52:8f:5c:6f: a2:71:25:55:66:53:04:e5:6e:8d:c2:75:a4:44:a6:54:56:8c: ef:5f:79:de:62:c0:f2:e6:69:10:7a:01:56:8f:53:6b:15:a6: 2c:33:6e:b2:30:4a:7e:65:4a:48:44:43:0c:22:f5:33:83:56: 05:09:de:30:26:0b:05:a5:2b:40:a8:08:bb:29:38:50:33:a6: 63:ad:89:cd:0a:ca:8c:f6:4b:9d:31:72:bc:21:c4:a4:42:71: 0d:c2:f2:9e:73:1c:70:d0:df:d8:ae:87:36:ce:a9:a8:e6:40: db:0d:79:27:eb:47:2c:1f:06:34:76:c1:71:3a:a6:40:c3:29: ce:4c:db:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc0QzMxMTAvBgNVBAUTKEYzRkVGNDYyQTREOEUyRjdGQTA3MzVBNkFCNjQ1RUU1 NjM1REE4RjIwHhcNMjQxMTIyMTQxOTEzWhcNMjQxMTI5MTQxOTEzWjAYMRYwFAYD VQQDEw02NzQwOTJlMS0yZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFU47QJK3Z6eFXl89w8/igzgMI69wzoU5pxKdebVbjuHyK+kme+qnFQVnqIl i36/xHrxqvFzVrAbIrBHFIGxH3rv3rSB6IRNgV0ATUoqiVrDXdr66E5qfPwEgF6p QnZCHmcmcKcXpEhtmDpVWbmYECfKnN+CkUhmud9tBwEERqS4l+aFuDeP4xKL/mgv 54COlkCwOO8G00NuAhUZx8ruEygW4o4ypvYV2qdMQz+2+hr353w81lwSS/U65mVK 9sKYwIHHoCpAS0cryltlQRWzs7zDmuz2OrdDwqm60dqEMCicB6a0+lG0+9gC0qpF xy89XHHQuhA7G5YRY19JSBR/nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLg9A0Jr lmwGWI0i/QDaqEW201/FMB8GA1UdIwQYMBaAFPP+9GKk2OL3+gc1pqtkXuVjXajy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzRDMy82RjhCNTJBMDFE NzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2ZjZCeldtcTJSZTVXTmRx UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfNzBZcVRZNHZmNkJ6V21xMlJlNVdOZHFQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzRDMy82RjhCNTJBMDFENzAxMUUyQkMxMURBQjQwOEIwMkNEMi84XzcwWXFUWTR2 ZjZCeldtcTJSZTVXTmRxUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa89Y0o2UBynWIzVzoS8Csz4y19rMzKhnxuGeWBu97rHdNtbYtCrmC ri5layOSayqmG0N1DPcDduiGWAjHN9thcGmSzfv2N888/pFiMZRN7GFYHBCIa5ck m7VH1HirR0obNzuggLby+Fv7PCetPBDf8NoTX61CPUHz3lKPXG+icSVVZlME5W6N wnWkRKZUVozvX3neYsDy5mkQegFWj1NrFaYsM26yMEp+ZUpIREMMIvUzg1YFCd4w JgsFpStAqAi7KThQM6ZjrYnNCsqM9kudMXK8IcSkQnENwvKecxxw0N/Yroc2zqmo 5kDbDXkn60csHwY0dsFxOqZAwynOTNvc -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:18 2024 by rpki-client on console-ams.rpki-client.org