$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft File: f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft (raw, json) Hash identifier: tw4WHKrxzqOWrHVQ3KnApHB86avDntGrYZAoQx13nEo= Subject key identifier: 64:DD:DB:0D:E2:88:2C:72:3F:0C:A4:BE:AE:FB:8E:B1:12:B9:78:E8 Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 081B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft Manifest number: 07F2 Signing time: Wed 20 Nov 2024 14:45:39 +0000 Manifest this update: Wed 20 Nov 2024 14:45:39 +0000 Manifest next update: Wed 27 Nov 2024 14:45:39 +0000 Files and hashes: 1: f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl (hash: tHNlebY8//NF0zJtFWzMRoWLexiUoZ0hyEdNkh8zhLs=) 2: 664604CCD8E211ED913C4684C4F9AE02.roa (hash: bF+cQvGTN6hj6Su+AW4ebeZcP3ajFMubLlVPlkZn8CY=) 3: 5503948C15E911EF8907C019C4F9AE02.roa (hash: 1zIOpT0S9BchJsru9YPGTgoXOc6cow2l1dk/lHONP0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2075 (0x81b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Nov 20 14:45:39 2024 GMT Not After : Nov 27 14:45:39 2024 GMT Subject: CN=673df613-1cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:05:83:3e:7d:29:0c:7b:3f:1b:14:b0:67:84: 3e:a5:ea:5e:c1:cd:2d:f1:31:26:32:93:20:01:69: 09:6d:e0:16:a2:cb:34:f0:cc:b8:80:45:4c:07:f2: 8d:ea:67:06:2f:aa:33:59:d7:ca:dc:c1:e2:61:2d: d9:36:38:13:77:d3:97:c5:e7:0e:b7:fe:10:7d:c5: 3f:e9:31:b0:96:88:b3:2e:e7:9e:b8:86:e1:29:a4: d5:bc:3c:f2:87:e4:7e:3b:4c:c3:18:d5:4d:39:23: fc:fa:1a:08:e5:f3:83:8e:14:61:68:a1:b9:a0:7b: 2c:d9:ba:d6:78:3d:43:cf:f8:93:96:57:cb:d8:b4: bf:51:85:2f:5d:b3:2a:03:13:4d:f1:6b:d6:80:fa: 39:f6:88:60:f0:fd:6e:be:27:b3:44:87:ea:db:63: ca:b4:e9:2f:75:b7:90:da:bc:ed:c0:7d:2b:7c:93: db:f5:26:97:f0:e5:82:45:a7:1e:2a:33:9f:fd:77: a0:bf:1f:44:e3:e1:ff:34:30:16:bb:3c:1c:f5:f6: 2f:86:6e:97:56:00:3b:56:63:38:9d:79:7c:e0:19: d1:39:53:28:2f:21:23:b7:ef:00:b6:19:a9:34:22: 13:94:2f:1f:7f:26:cb:29:10:de:65:a4:2b:41:70: 4f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DD:DB:0D:E2:88:2C:72:3F:0C:A4:BE:AE:FB:8E:B1:12:B9:78:E8 X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:d1:80:2a:db:2e:93:d5:d3:8f:6c:a9:5c:4e:f4:76:dc:55: 79:16:4a:ab:09:73:c6:72:d5:93:dd:6a:7d:ab:e9:6f:de:3f: a4:45:05:ac:ec:e9:46:b3:35:fa:cb:8e:23:0e:ba:9c:ca:97: ce:24:03:f8:11:ff:26:aa:c3:70:3d:df:19:89:2d:4e:ee:d9: 1d:fc:26:d8:90:d6:e1:13:72:4f:fc:64:3e:5e:f2:4d:70:7d: f8:34:ff:f2:63:ba:1e:22:63:96:5b:19:1a:e4:84:b2:70:9c: c1:4c:98:ee:a8:b5:0d:ff:1e:c5:31:dd:33:d5:31:d2:38:15: 80:be:ed:42:04:8a:37:74:ba:a2:c9:43:13:83:e7:b1:46:01: ac:01:b8:ca:e4:45:ee:e0:b0:8d:2d:c0:e6:21:48:f5:16:c0: 7d:10:b4:cc:ff:ad:71:fc:af:49:29:55:75:26:75:ce:fc:cd: aa:86:6f:25:a1:3b:16:4b:f5:3b:00:5f:50:be:4f:91:58:e7: 42:db:5a:94:9d:4c:97:42:6b:7e:07:8f:eb:1e:ff:23:58:12: cf:5e:b1:40:3b:9e:de:8e:fd:7f:4a:0e:2b:13:2b:c3:10:16: 6d:4e:13:83:15:64:e9:5f:99:6d:0a:27:97:0b:40:01:6e:03: b4:67:11:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjQxMTIwMTQ0NTM5WhcNMjQxMTI3MTQ0NTM5WjAYMRYwFAYD VQQDEw02NzNkZjYxMy0xY2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gWDPn0pDHs/GxSwZ4Q+pepewc0t8TEmMpMgAWkJbeAWoss08My4gEVMB/KN 6mcGL6ozWdfK3MHiYS3ZNjgTd9OXxecOt/4QfcU/6TGwloizLueeuIbhKaTVvDzy h+R+O0zDGNVNOSP8+hoI5fODjhRhaKG5oHss2brWeD1Dz/iTllfL2LS/UYUvXbMq AxNN8WvWgPo59ohg8P1uviezRIfq22PKtOkvdbeQ2rztwH0rfJPb9SaX8OWCRace KjOf/Xegvx9E4+H/NDAWuzwc9fYvhm6XVgA7VmM4nXl84BnROVMoLyEjt+8Athmp NCITlC8ffybLKRDeZaQrQXBPowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTd2w3i iCxyPwykvq77jrESuXjoMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEM3Qi81QkZDRkY4Q0Q2MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BO VnR3a29LY05WX21wUXQwYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDL0YAq2y6T1dOPbKlcTvR23FV5FkqrCXPGctWT3Wp9q+lv3j+kRQWs 7OlGszX6y44jDrqcypfOJAP4Ef8mqsNwPd8ZiS1O7tkd/CbYkNbhE3JP/GQ+XvJN cH34NP/yY7oeImOWWxka5ISycJzBTJjuqLUN/x7FMd0z1THSOBWAvu1CBIo3dLqi yUMTg+exRgGsAbjK5EXu4LCNLcDmIUj1FsB9ELTM/61x/K9JKVV1JnXO/M2qhm8l oTsWS/U7AF9Qvk+RWOdC21qUnUyXQmt+B4/rHv8jWBLPXrFAO57ejv1/Sg4rEyvD EBZtThODFWTpX5ltCieXC0ABbgO0ZxHR -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:07 2024 by rpki-client on console-ams.rpki-client.org