$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft File: snrsU_-6svW1vAy0fAhwbVBTMhA.mft (raw, json) Hash identifier: VPhsR4s1H5rsbAlSU09ltv2GP7JFGQFdJldSQxZG2Dk= Subject key identifier: 70:4E:C1:D1:DB:93:32:29:3F:1E:E6:60:30:FB:6F:98:A2:75:F4:B9 Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10 Certificate issuer: /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210 Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft Manifest number: 047F Signing time: Fri 22 Nov 2024 23:37:36 +0000 Manifest this update: Fri 22 Nov 2024 23:37:35 +0000 Manifest next update: Fri 29 Nov 2024 23:37:35 +0000 Files and hashes: 1: snrsU_-6svW1vAy0fAhwbVBTMhA.crl (hash: nhTL3HWPFpaRuWHgWAVjPZ/mrr3EMgpgZVHK6d7W4BY=) 2: 793A891A1EA111ECA967444FC4F9AE02.roa (hash: TuwY0bH/I8eBppDazNaeZzaGUKdY+8ax5yn8wmQ1iv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210 Validity Not Before: Nov 22 23:37:35 2024 GMT Not After : Nov 29 23:37:35 2024 GMT Subject: CN=674115c0-bf2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:56:80:a1:cf:fd:f8:49:b2:07:b9:da:38:ef: c2:24:86:52:4a:cc:3c:f2:4a:17:f7:c8:ab:bb:88: 96:3b:b4:c7:4b:b1:18:6b:7b:f4:c5:1b:4c:9c:95: a5:37:d7:ed:24:96:9b:3c:bd:77:e1:cd:5a:1c:31: 70:bc:b8:70:fb:41:5d:b6:b2:d0:a2:cd:f4:98:c2: 5f:22:15:41:ac:0d:00:a5:bd:83:32:56:ae:3e:c6: c6:5b:4c:76:a2:bd:82:51:83:47:c2:c3:db:39:dd: dc:cd:67:5b:ba:f6:b3:7c:df:1b:1a:82:f1:4a:bd: e2:ff:ce:3d:ff:41:b9:48:01:0c:33:78:37:a8:0b: 11:af:a2:bc:a4:a8:02:36:9f:99:60:5c:cc:c3:f1: b5:e0:4a:0f:62:31:2d:44:75:28:28:d5:79:69:12: e7:ce:0a:cd:5b:30:be:39:05:2c:9b:8d:53:4b:d3: a3:c3:9e:1e:51:36:11:4a:c3:f4:d3:08:6a:d8:ba: ed:35:7d:00:f7:b9:c7:cc:d1:33:24:96:df:eb:24: 52:65:62:5c:7d:37:0f:85:f3:e4:02:2a:c0:af:07: 0f:1f:8b:e0:bb:68:40:bb:b5:97:43:ab:f0:26:8b: 6d:e4:72:4b:ca:9e:8e:46:35:02:9c:77:55:a6:80: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4E:C1:D1:DB:93:32:29:3F:1E:E6:60:30:FB:6F:98:A2:75:F4:B9 X509v3 Authority Key Identifier: keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:f9:e3:b5:12:4a:d3:a8:5a:c7:71:fb:74:95:06:51:c9:78: 6b:b4:79:18:8c:2e:e0:9d:15:b7:41:0a:42:e9:87:bf:e0:b2: 9e:09:ae:29:89:7d:20:4d:3d:85:e4:d1:23:62:e6:2d:54:00: 5e:1c:61:66:95:2b:5c:79:7c:4f:76:4e:61:76:bb:5e:98:56: c0:d7:25:ba:e9:05:52:4d:d1:88:6a:15:b9:3a:85:ad:7b:98: 76:db:c7:09:95:88:ec:14:ba:b1:2c:c0:2a:f5:19:ed:80:9d: 21:30:7b:27:3e:35:3d:7b:8d:02:67:52:a4:f1:cf:4e:89:04: e8:54:2d:d0:6d:e3:09:be:5a:40:39:f9:18:8f:80:34:f6:7e: 98:b9:50:33:ac:ce:73:22:fa:a7:99:82:2a:d5:4e:08:0b:4e: 8e:3d:b8:af:85:e0:5c:b6:ce:c8:17:e0:27:07:3d:80:a9:1f: 0e:bb:a5:1f:d0:26:36:e7:95:a9:43:70:ef:9c:14:f6:11:33: 81:e3:ef:c5:ea:cf:52:d1:db:c0:59:47:fd:6f:1a:25:1b:57: a5:a0:77:19:6c:c2:72:14:f8:98:b3:3f:88:14:e6:cd:b7:16: 3b:4c:c9:d3:8d:70:0b:2f:64:31:2e:ff:95:2d:79:7b:7a:56: 7c:47:9b:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE3RDYxMTAvBgNVBAUTKEIyN0FFQzUzRkZCQUIyRjVCNUJDMENCNDdDMDg3MDZE NTA1MzMyMTAwHhcNMjQxMTIyMjMzNzM1WhcNMjQxMTI5MjMzNzM1WjAYMRYwFAYD VQQDEw02NzQxMTVjMC1iZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VaAoc/9+EmyB7naOO/CJIZSSsw88koX98iru4iWO7THS7EYa3v0xRtMnJWl N9ftJJabPL134c1aHDFwvLhw+0FdtrLQos30mMJfIhVBrA0Apb2DMlauPsbGW0x2 or2CUYNHwsPbOd3czWdbuvazfN8bGoLxSr3i/849/0G5SAEMM3g3qAsRr6K8pKgC Np+ZYFzMw/G14EoPYjEtRHUoKNV5aRLnzgrNWzC+OQUsm41TS9Ojw54eUTYRSsP0 0whq2LrtNX0A97nHzNEzJJbf6yRSZWJcfTcPhfPkAirArwcPH4vgu2hAu7WXQ6vw Jott5HJLyp6ORjUCnHdVpoDG8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBOwdHb kzIpPx7mYDD7b5iidfS5MB8GA1UdIwQYMBaAFLJ67FP/urL1tbwMtHwIcG1QUzIQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTdENi9ERDhFNTcyNDFF OUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2VzF2QXkwZkFod2JWQlRN aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NucnNVXy02c3ZXMXZBeTBmQWh3YlZCVE1oQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTdENi9ERDhFNTcyNDFFOUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2 VzF2QXkwZkFod2JWQlRNaEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4+eO1EkrTqFrHcft0lQZRyXhrtHkYjC7gnRW3QQpC6Ye/4LKeCa4p iX0gTT2F5NEjYuYtVABeHGFmlStceXxPdk5hdrtemFbA1yW66QVSTdGIahW5OoWt e5h228cJlYjsFLqxLMAq9RntgJ0hMHsnPjU9e40CZ1Kk8c9OiQToVC3QbeMJvlpA OfkYj4A09n6YuVAzrM5zIvqnmYIq1U4IC06OPbivheBcts7IF+AnBz2AqR8Ou6Uf 0CY255WpQ3DvnBT2ETOB4+/F6s9S0dvAWUf9bxolG1eloHcZbMJyFPiYsz+IFObN txY7TMnTjXALL2QxLv+VLXl7elZ8R5tL -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org