$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft File: SfkoK_Tch_fBI-WHPLql59aZMkg.mft (raw, json) Hash identifier: An9WhsBIlST8O2bWi5jHgl1yfnSFSVbVLLgHjfJ6TpU= Subject key identifier: BF:B3:43:5A:CB:F6:D2:E4:53:3A:2F:4D:1C:3A:64:67:BF:D4:44:9A Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 Certificate issuer: /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft Manifest number: 01C6 Signing time: Sat 23 Nov 2024 01:45:55 +0000 Manifest this update: Sat 23 Nov 2024 01:45:54 +0000 Manifest next update: Sat 30 Nov 2024 01:45:54 +0000 Files and hashes: 1: SfkoK_Tch_fBI-WHPLql59aZMkg.crl (hash: IgPZXP1hgV+LooweVPzoej/fjz9p811K6CLbG3lSbj8=) 2: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (hash: 98vVrHrPunOhqyUNT9wqul+NkLuBnWOfghiKhqlLWSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Validity Not Before: Nov 23 01:45:54 2024 GMT Not After : Nov 30 01:45:54 2024 GMT Subject: CN=674133d3-c71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:b6:78:42:c5:4e:bd:97:c9:38:4e:c6:55: a0:5a:10:6f:43:5e:1f:09:84:3e:0a:64:85:9e:99: d2:1e:0d:04:fe:04:a4:06:91:b7:fa:51:a0:49:48: 05:93:72:78:49:fd:11:e8:21:6a:e4:1a:c9:53:4e: 50:45:86:57:aa:46:87:85:eb:42:24:06:9a:42:a9: 2d:62:d7:22:f3:c6:e9:6e:e2:da:fe:5b:e2:78:00: 90:b1:ba:07:b4:fe:99:ff:f5:79:5b:4d:b1:6e:c1: 26:33:a9:e8:4b:57:8a:4f:f0:03:72:5e:72:59:9a: 0b:0a:41:9b:f3:8a:77:a8:c9:1e:a8:3a:b7:01:ae: f5:bd:b5:80:51:0b:c4:60:ed:a6:17:fc:5d:3c:0f: 57:80:ee:e5:75:5a:70:cf:a8:54:b8:de:43:fb:1a: 8d:e7:54:22:11:56:cf:23:23:be:3e:82:04:de:32: fa:b4:90:f8:8c:3e:aa:37:a1:b7:4c:c8:a5:0e:82: 42:07:d1:7c:8c:ce:5f:8c:dc:d4:3a:3a:2c:66:17: bc:64:35:ce:59:d6:b4:7f:4b:82:79:2f:30:14:ef: 92:fa:a6:9f:61:4c:8b:9e:d3:45:6b:0f:45:5b:cd: eb:68:b9:14:ea:5c:b0:54:74:0a:df:9e:3e:22:6d: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B3:43:5A:CB:F6:D2:E4:53:3A:2F:4D:1C:3A:64:67:BF:D4:44:9A X509v3 Authority Key Identifier: keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1d:a2:af:ef:36:c2:41:93:cc:29:79:84:0a:97:8d:b8:ca: 9b:63:0c:55:15:00:ea:3c:43:3d:ca:73:91:06:d3:ef:4b:37: a3:37:2c:11:07:84:eb:87:8d:2c:b9:97:93:9a:48:5b:d5:e2: 66:1e:a4:a6:31:6d:05:db:7b:e8:3f:34:1e:b8:58:36:d4:f3: da:26:a3:4b:bd:68:7d:1c:d9:3c:d8:e6:58:bf:47:86:e0:ee: cf:39:d9:ae:7c:5d:23:3c:2e:3f:16:3d:10:eb:cd:e5:c7:0f: 73:1b:93:f7:85:6c:28:28:fa:ab:70:35:2d:b8:82:65:35:8f: 5e:4a:ff:59:26:18:4c:49:d1:22:13:bd:48:22:1c:0c:1b:16: dd:fd:87:c2:4b:0b:49:b7:98:de:70:8a:b2:62:07:92:07:03: 3f:a7:53:de:c8:79:4e:d5:14:5d:15:da:c3:40:85:2b:a1:54: ad:5d:cc:81:3e:e6:a5:5a:6d:23:17:5a:94:1c:e9:9e:34:d3: 92:46:36:a4:4f:a5:67:ec:fe:ff:24:84:31:fa:5c:5f:07:ed: b7:e3:3c:e7:2b:e4:c3:e0:aa:5a:88:ac:d8:d3:d1:75:37:fa: a0:a2:4b:21:16:07:a2:8b:fc:a5:15:5a:ee:74:c6:64:da:a4: da:9e:13:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQxNjcxMTAvBgNVBAUTKDQ5RjkyODJCRjREQzg3RjdDMTIzRTU4NzNDQkFBNUU3 RDY5OTMyNDgwHhcNMjQxMTIzMDE0NTU0WhcNMjQxMTMwMDE0NTU0WjAYMRYwFAYD VQQDEw02NzQxMzNkMy1jNzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLy2eELFTr2XyThOxlWgWhBvQ14fCYQ+CmSFnpnSHg0E/gSkBpG3+lGgSUgF k3J4Sf0R6CFq5BrJU05QRYZXqkaHhetCJAaaQqktYtci88bpbuLa/lvieACQsboH tP6Z//V5W02xbsEmM6noS1eKT/ADcl5yWZoLCkGb84p3qMkeqDq3Aa71vbWAUQvE YO2mF/xdPA9XgO7ldVpwz6hUuN5D+xqN51QiEVbPIyO+PoIE3jL6tJD4jD6qN6G3 TMilDoJCB9F8jM5fjNzUOjosZhe8ZDXOWda0f0uCeS8wFO+S+qafYUyLntNFaw9F W83raLkU6lywVHQK354+Im0TRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+zQ1rL 9tLkUzovTRw6ZGe/1ESaMB8GA1UdIwQYMBaAFEn5KCv03If3wSPlhzy6pefWmTJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDE2Ny81RDVDNDJGMjJG MUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hfZkJJLVdIUExxbDU5YVpN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nma29LX1RjaF9mQkktV0hQTHFsNTlhWk1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDE2Ny81RDVDNDJGMjJGMUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hf ZkJJLVdIUExxbDU5YVpNa2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuHaKv7zbCQZPMKXmECpeNuMqbYwxVFQDqPEM9ynORBtPvSzejNywR B4Trh40suZeTmkhb1eJmHqSmMW0F23voPzQeuFg21PPaJqNLvWh9HNk82OZYv0eG 4O7POdmufF0jPC4/Fj0Q683lxw9zG5P3hWwoKPqrcDUtuIJlNY9eSv9ZJhhMSdEi E71IIhwMGxbd/YfCSwtJt5jecIqyYgeSBwM/p1PeyHlO1RRdFdrDQIUroVStXcyB PualWm0jF1qUHOmeNNOSRjakT6Vn7P7/JIQx+lxfB+234zznK+TD4KpaiKzY09F1 N/qgokshFgeii/ylFVrudMZk2qTanhNW -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org