$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json) Hash identifier: LgntalDrJgJD+m1KAKyNXOwzYNNTC1L1ZelOGTb9qtI= Subject key identifier: 49:B3:59:A8:3C:82:F6:AB:DA:48:FD:0B:A6:4E:FD:59:83:27:04:C3 Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft Manifest number: 02C3 Signing time: Wed 20 Nov 2024 16:21:56 +0000 Manifest this update: Wed 20 Nov 2024 16:21:56 +0000 Manifest next update: Wed 27 Nov 2024 16:21:56 +0000 Files and hashes: 1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: 1PA90dHi9aNYVY8TP8Sht3PNNQ9yLoYlzvmBg0jeehU=) 2: B3997DB4F3A311EC8804FE09C4F9AE02.roa (hash: a42gSvTBLjoG87MaWUeUPIbEWoVD8JcwRDmWOtwQhiw=) 3: E2392F5C55A811EFAFC5A33FC4F9AE02.roa (hash: 2hJdGIM/CmGHjDo8JpZdWsWXLXNE94J7sd1ySAnfqTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5 Validity Not Before: Nov 20 16:21:56 2024 GMT Not After : Nov 27 16:21:56 2024 GMT Subject: CN=673e0ca4-8330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:a1:b0:e4:06:82:c1:91:83:06:51:36:25: 7e:16:f4:ce:71:ad:0e:0b:08:a1:c1:c6:c5:c0:d4: d1:29:27:f4:e5:1f:7a:65:8e:4c:a2:44:c3:eb:9b: 19:e5:43:16:39:a0:98:96:d9:9d:fe:92:7f:c4:01: b0:7e:52:34:08:6c:04:1d:13:06:00:f3:8b:f8:88: 13:4d:4f:ee:67:45:66:ed:e0:9b:a1:e3:ac:ce:5a: f6:72:c9:be:54:37:51:a9:bd:4a:69:39:01:11:b7: f3:d5:63:b5:ce:f5:64:10:96:21:df:a7:3c:a1:f0: 29:08:f9:de:a9:e9:cb:e8:ee:42:2e:29:89:f1:18: ad:88:cf:60:e5:54:94:d8:c6:19:2e:a3:53:d1:9b: fc:4a:77:f9:64:67:a9:e9:2c:7b:7b:ba:48:d7:b0: 1d:a9:cb:6a:49:24:8f:fd:c7:7c:03:58:4c:8d:fd: bd:f2:0c:14:cb:17:56:15:9a:e2:69:5d:92:41:c9: a5:04:37:6d:29:4f:bd:90:a0:32:8b:57:e0:65:0f: d4:99:8f:3c:2b:86:2b:73:e9:1d:a0:52:a1:5b:ce: 10:66:35:4f:05:d9:63:0c:d8:72:c4:9a:17:b3:c1: 2f:b8:21:f1:66:86:19:83:56:be:d8:55:6c:84:e5: 7e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B3:59:A8:3C:82:F6:AB:DA:48:FD:0B:A6:4E:FD:59:83:27:04:C3 X509v3 Authority Key Identifier: keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:27:41:cb:24:db:fd:bd:d7:32:d3:45:0d:05:54:26:60:33: f9:ce:40:15:b9:63:e4:ea:6b:4b:f1:9b:d4:e3:7d:e0:8d:2d: e6:5c:43:1b:68:14:af:6d:03:a1:31:9a:84:8e:a6:55:cc:4b: ce:54:5b:dd:7a:16:95:ef:04:4d:a8:9e:80:61:62:50:54:7f: 3c:f4:25:84:1e:bd:7c:88:92:88:9e:35:77:f0:2b:fd:df:b5: 67:44:16:a0:ac:70:a7:4b:6d:0d:1a:a8:4e:33:84:b1:a6:96: a9:f6:c7:bd:0c:f7:b5:70:f2:1b:19:69:4d:fc:4f:57:01:d1: ad:f6:57:07:aa:84:96:6b:6b:42:ff:f7:e7:ee:d0:b2:75:1a: 59:ee:3e:57:06:cf:00:69:71:0f:95:3c:f8:30:f3:d5:d8:59: b1:c1:2b:36:99:5d:73:41:35:d5:fa:3c:91:9a:3e:4f:a9:d7: 66:9f:14:93:46:86:8e:41:31:a3:84:12:08:ae:d7:c0:26:4a: e7:76:3d:3f:82:42:15:e6:0f:45:1e:e1:94:54:16:ca:7e:04: 26:c7:f9:13:67:f4:af:eb:ec:ab:2f:93:84:50:a9:ee:13:b2: 31:14:75:ae:c9:48:1a:f6:4f:c0:a5:53:7a:66:d1:86:82:71: 95:d1:49:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKEQ3Q0I2RDFERENGOTM0QTFGNTlFNEZGRTQ5ODJGMEI0 QzUyQzM1RjUwHhcNMjQxMTIwMTYyMTU2WhcNMjQxMTI3MTYyMTU2WjAYMRYwFAYD VQQDEw02NzNlMGNhNC04MzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5ahsOQGgsGRgwZRNiV+FvTOca0OCwihwcbFwNTRKSf05R96ZY5MokTD65sZ 5UMWOaCYltmd/pJ/xAGwflI0CGwEHRMGAPOL+IgTTU/uZ0Vm7eCboeOszlr2csm+ VDdRqb1KaTkBEbfz1WO1zvVkEJYh36c8ofApCPneqenL6O5CLimJ8RitiM9g5VSU 2MYZLqNT0Zv8Snf5ZGep6Sx7e7pI17AdqctqSSSP/cd8A1hMjf298gwUyxdWFZri aV2SQcmlBDdtKU+9kKAyi1fgZQ/UmY88K4Yrc+kdoFKhW84QZjVPBdljDNhyxJoX s8EvuCHxZoYZg1a+2FVshOV+UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmzWag8 gvar2kj9C6ZO/VmDJwTDMB8GA1UdIwQYMBaAFNfLbR3c+TSh9Z5P/kmC8LTFLDX1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC83MkI1RjI5MkQy N0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5LSDFua18tU1lMd3RNVXNO ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzE4dHRIZHo1TktIMW5rXy1TWUx3dE1Vc05mVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC83MkI1RjI5MkQyN0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5L SDFua18tU1lMd3RNVXNOZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbJ0HLJNv9vdcy00UNBVQmYDP5zkAVuWPk6mtL8ZvU433gjS3mXEMb aBSvbQOhMZqEjqZVzEvOVFvdehaV7wRNqJ6AYWJQVH889CWEHr18iJKInjV38Cv9 37VnRBagrHCnS20NGqhOM4Sxppap9se9DPe1cPIbGWlN/E9XAdGt9lcHqoSWa2tC //fn7tCydRpZ7j5XBs8AaXEPlTz4MPPV2FmxwSs2mV1zQTXV+jyRmj5PqddmnxST RoaOQTGjhBIIrtfAJkrndj0/gkIV5g9FHuGUVBbKfgQmx/kTZ/Sv6+yrL5OEUKnu E7IxFHWuyUga9k/ApVN6ZtGGgnGV0Ukm -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:17 2024 by rpki-client on console-ams.rpki-client.org