$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft File: AAs7T4iVfN1tN9_2ExONb1SoW3k.mft (raw, json) Hash identifier: rlQzFHGCvvFhmwImC1+1eyEV8Sp2dflQbCld722Rvjk= Subject key identifier: D7:5B:0C:BF:32:B5:39:1B:ED:B2:8D:E8:6F:3D:DD:90:08:D5:44:0C Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 Certificate issuer: /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Certificate serial: 064C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft Manifest number: 0640 Signing time: Fri 22 Nov 2024 22:04:00 +0000 Manifest this update: Fri 22 Nov 2024 22:03:59 +0000 Manifest next update: Fri 29 Nov 2024 22:03:59 +0000 Files and hashes: 1: AAs7T4iVfN1tN9_2ExONb1SoW3k.crl (hash: p+xhOfINrsFBuwElAW9kZM7jaociIaOmF4yadIYMyG4=) 2: A1F2E73A19D511EF85D48428C4F9AE02.roa (hash: bUEFcWWEthH2dGpW3Xt9iTlsxlX2KvsaSYzX/E7H+u0=) 3: 9BCBA2EA6D6511EB80F7684BC4F9AE02.roa (hash: fNsbv4N3JzHNbFquq5S7j59gDujh4p1pSaR5Q8JvdKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79 Validity Not Before: Nov 22 22:03:59 2024 GMT Not After : Nov 29 22:03:59 2024 GMT Subject: CN=6740ffd0-d4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:e6:5d:75:7c:06:25:28:9b:3b:43:81:6c: fa:d8:0f:8f:92:13:21:8f:d2:83:fe:15:3a:b3:74: 57:fb:84:dd:2e:7f:be:1c:71:c3:ab:84:c6:f3:b7: 79:fd:e7:d3:5a:7b:62:91:50:0e:33:2b:7d:a6:d5: 44:7d:d1:61:bd:67:86:ef:c3:e8:39:e4:1a:84:a8: 3f:6c:35:99:12:8b:8a:08:e9:3d:ce:08:70:29:05: 0c:29:8e:bb:26:2e:67:d4:22:15:5c:dc:b0:c7:fa: 5f:63:c1:12:d1:6a:da:85:9d:60:ef:94:7e:86:2f: e9:9e:a8:4b:6e:dd:66:91:67:2d:e0:c3:2c:f9:b4: 80:33:4e:84:8f:df:5c:ca:a7:67:be:c9:3f:e7:29: 9f:ff:44:4a:26:0b:4e:0d:f8:a1:66:24:6c:76:1f: c2:6e:f1:0e:cd:59:10:45:cb:64:31:ff:f8:d8:92: 83:78:da:3d:26:08:72:1a:2b:c0:ba:dd:ca:55:b9: 65:05:13:bd:23:c2:e6:39:3e:6d:af:90:30:1d:be: db:d6:e2:c6:19:c1:b6:5f:05:29:2d:dc:5d:32:21: 2d:6e:e3:47:4e:96:ab:c2:e5:c6:6c:8e:cf:1c:f2: cb:a0:08:21:6b:14:90:06:77:60:ee:c1:06:91:69: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5B:0C:BF:32:B5:39:1B:ED:B2:8D:E8:6F:3D:DD:90:08:D5:44:0C X509v3 Authority Key Identifier: keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:bc:c3:da:d9:48:79:78:92:74:aa:b1:42:88:c9:37:41:58: 6a:6d:85:82:61:4a:ca:08:c8:30:02:84:0f:60:87:18:62:7a: 07:2b:c6:27:a7:95:8d:84:6b:27:9d:db:0d:c4:af:31:5a:63: 62:65:3b:d9:86:af:8e:02:f6:20:0e:eb:9a:29:68:e6:cc:18: eb:31:23:a8:ef:01:69:84:e7:b0:6f:3c:66:ed:3b:af:08:5a: 87:65:c8:61:b0:4a:56:e9:e4:28:c5:5a:e1:3a:d1:6c:ad:de: 08:cf:67:7d:4e:4b:10:48:5d:26:8f:b6:ed:15:4f:7e:7d:82: 5e:5d:10:e2:9a:9b:90:6b:29:c3:76:f1:bd:d7:cd:f0:f8:d8: 5b:ff:26:10:df:e8:8b:4f:ec:85:25:8c:54:e6:d2:24:d0:a1: 76:cb:65:51:33:29:f6:6e:4d:83:e1:0d:c9:29:ab:ef:01:8a: c1:12:08:49:38:4e:a6:3c:7e:1e:2e:e2:40:f8:d8:f6:af:5a: e3:cc:24:bc:9a:fa:10:f9:35:0f:bd:a3:4d:11:87:64:b1:a8: 77:ef:1d:cb:27:f7:52:c3:20:d6:01:91:27:3b:88:1a:f2:bc: 12:2c:90:22:34:06:e6:3c:74:9c:fb:26:51:a3:a2:a9:0b:ff: 26:16:d8:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGNDgxMTAvBgNVBAUTKDAwMEIzQjRGODg5NTdDREQ2RDM3REZGNjEzMTM4RDZG NTRBODVCNzkwHhcNMjQxMTIyMjIwMzU5WhcNMjQxMTI5MjIwMzU5WjAYMRYwFAYD VQQDEw02NzQwZmZkMC1kNGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYLmXXV8BiUomztDgWz62A+PkhMhj9KD/hU6s3RX+4TdLn++HHHDq4TG87d5 /efTWntikVAOMyt9ptVEfdFhvWeG78PoOeQahKg/bDWZEouKCOk9zghwKQUMKY67 Ji5n1CIVXNywx/pfY8ES0WrahZ1g75R+hi/pnqhLbt1mkWct4MMs+bSAM06Ej99c yqdnvsk/5ymf/0RKJgtODfihZiRsdh/CbvEOzVkQRctkMf/42JKDeNo9JghyGivA ut3KVbllBRO9I8LmOT5tr5AwHb7b1uLGGcG2XwUpLdxdMiEtbuNHTparwuXGbI7P HPLLoAghaxSQBndg7sEGkWkEdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdbDL8y tTkb7bKN6G893ZAI1UQMMB8GA1UdIwQYMBaAFAALO0+IlXzdbTff9hMTjW9UqFt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUY0OC9EOUVGOTlDMDZE NjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZOMXROOV8yRXhPTmIxU29X M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FBczdUNGlWZk4xdE45XzJFeE9OYjFTb1czay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUY0OC9EOUVGOTlDMDZENjMxMUVCOURGODE5NDlDNEY5QUUwMi9BQXM3VDRpVmZO MXROOV8yRXhPTmIxU29XM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvvMPa2Uh5eJJ0qrFCiMk3QVhqbYWCYUrKCMgwAoQPYIcYYnoHK8Yn p5WNhGsnndsNxK8xWmNiZTvZhq+OAvYgDuuaKWjmzBjrMSOo7wFphOewbzxm7Tuv CFqHZchhsEpW6eQoxVrhOtFsrd4Iz2d9TksQSF0mj7btFU9+fYJeXRDimpuQaynD dvG9183w+Nhb/yYQ3+iLT+yFJYxU5tIk0KF2y2VRMyn2bk2D4Q3JKavvAYrBEghJ OE6mPH4eLuJA+Nj2r1rjzCS8mvoQ+TUPvaNNEYdksah37x3LJ/dSwyDWAZEnO4ga 8rwSLJAiNAbmPHSc+yZRo6KpC/8mFtjT -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:25 2024 by rpki-client on console-fra.rpki-client.org