$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft File: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json) Hash identifier: zpS4qyCcK8k3lNqlfLQ3mIXtgtbQ+UC5ulJemMiBlr0= Subject key identifier: 3C:21:F8:A0:B1:71:1D:D7:EB:C3:8F:AA:3E:A1:23:10:A8:7E:40:64 Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33 Certificate issuer: /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233 Certificate serial: 0D9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft Manifest number: 0D87 Signing time: Fri 22 Nov 2024 17:53:57 +0000 Manifest this update: Fri 22 Nov 2024 17:53:57 +0000 Manifest next update: Fri 29 Nov 2024 17:53:57 +0000 Files and hashes: 1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: rUkIoNfpXgUfrFb5WIpxl1zxuPbb5OZV/i7SmNGj+7I=) 2: 2077E380EBDF11EBB7533A15C4F9AE02.roa (hash: jmduHrEVx2jA5+v8I02I29sAUSxm3Fng3EnV4y1cIS0=) 3: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: QoxSmZFkmxLXEXsdlg7AEo5bS3bmundbYECPlf6m84c=) 4: EA0E36083C3311EE8B808E55C4F9AE02.roa (hash: LZDAiQsOKeiD+R2CnsfcyiBMBIzfOs3eZv46xJYDJ3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3484 (0xd9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233 Validity Not Before: Nov 22 17:53:57 2024 GMT Not After : Nov 29 17:53:57 2024 GMT Subject: CN=6740c535-b875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:47:94:1f:5b:e3:d3:3c:93:b9:24:ea:37: 7c:58:fe:f7:62:be:61:ca:34:1b:2b:05:75:03:a9: eb:0b:07:66:52:46:12:49:d7:60:2e:56:bd:53:02: 32:39:37:be:9b:3b:f5:86:c7:96:9a:9a:08:51:59: 17:63:63:cc:b7:93:f1:3d:70:1d:b0:18:1b:08:f5: e4:aa:b4:1e:06:84:c8:27:2f:b3:f7:cf:7b:26:ea: dc:ad:40:15:49:f0:ef:30:60:f2:55:59:bb:3e:96: c0:40:48:14:81:09:37:8a:9a:c0:ec:da:ea:1f:52: 13:6a:72:db:05:2e:ab:e6:87:68:9b:55:91:dc:18: 18:d5:f0:39:75:8d:1e:4f:d1:7b:6d:fb:99:bd:14: e9:cf:49:7b:1c:33:a9:be:69:46:d0:4e:5f:35:a3: 86:81:2f:f0:53:f3:b1:63:19:c0:e2:ae:6e:1a:69: 41:d8:f6:5b:b6:e2:ab:4f:0b:09:05:2f:bb:d9:91: ae:8a:6c:fd:0a:bd:e6:af:59:1e:df:79:df:8a:83: 7a:fd:dd:29:4b:67:ba:b1:49:58:04:4e:28:e7:2b: fb:3b:a7:ec:01:01:aa:be:e3:f5:50:ec:d3:4e:75: 42:95:6e:be:ab:d1:2c:8f:15:42:64:10:82:f4:c2: d0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:21:F8:A0:B1:71:1D:D7:EB:C3:8F:AA:3E:A1:23:10:A8:7E:40:64 X509v3 Authority Key Identifier: keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:62:23:40:9b:be:a5:b2:aa:98:fe:60:8b:b0:d0:03:4d:7d: 7a:d8:4b:88:98:cd:45:ba:59:99:eb:76:d9:c2:52:d1:9e:c1: 2b:92:0c:b8:3a:fa:c5:95:9f:4e:72:f5:f8:20:d7:99:e6:ab: 28:13:80:31:be:8e:30:e6:b4:1f:44:7a:77:03:e7:a8:e8:8c: 68:d1:94:d2:13:8d:67:bf:26:5a:ee:40:60:e5:31:98:10:68: cc:5b:06:70:f8:d3:26:87:97:29:7b:02:44:fb:84:ad:2e:9c: 98:5a:90:bd:a1:1c:0c:cd:b8:39:d3:36:6c:71:22:fb:93:b2: c3:b6:f9:3a:a8:fa:37:d0:be:72:b4:82:2d:ac:be:be:ac:7f: 08:bb:ec:2b:d1:87:17:f9:4e:a6:d0:5b:09:9f:39:9d:4c:24: 07:e8:da:46:0b:2a:c1:d4:da:6a:81:75:84:15:ef:0c:cf:c3: c5:e7:fa:ee:d1:7c:4e:7a:4d:bc:21:69:c5:2c:ff:16:be:39: 26:9e:6a:4a:3b:21:27:db:99:26:05:2f:c8:d0:38:9a:da:e2: d1:19:08:e2:cc:d9:9c:3a:ce:56:73:13:80:cd:0b:2f:c5:b0: 6f:e9:79:da:51:af:47:01:d7:bb:50:f6:6f:6e:19:02:3f:23: 4b:1f:af:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFRDMxMTAvBgNVBAUTKDY5OUY1MUE5RDlFMTQ1NkQxNjAxQkU4M0Q4Qjk0QUQ1 OUE0MzgyMzMwHhcNMjQxMTIyMTc1MzU3WhcNMjQxMTI5MTc1MzU3WjAYMRYwFAYD VQQDEw02NzQwYzUzNS1iODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtBHlB9b49M8k7kk6jd8WP73Yr5hyjQbKwV1A6nrCwdmUkYSSddgLla9UwIy OTe+mzv1hseWmpoIUVkXY2PMt5PxPXAdsBgbCPXkqrQeBoTIJy+z9897JurcrUAV SfDvMGDyVVm7PpbAQEgUgQk3iprA7NrqH1ITanLbBS6r5odom1WR3BgY1fA5dY0e T9F7bfuZvRTpz0l7HDOpvmlG0E5fNaOGgS/wU/OxYxnA4q5uGmlB2PZbtuKrTwsJ BS+72ZGuimz9Cr3mr1ke33nfioN6/d0pS2e6sUlYBE4o5yv7O6fsAQGqvuP1UOzT TnVClW6+q9EsjxVCZBCC9MLQoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwh+KCx cR3X68OPqj6hIxCofkBkMB8GA1UdIwQYMBaAFGmfUanZ4UVtFgG+g9i5StWaQ4Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkVEMy9GODU4NEY3Q0Iz OEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJXMFdBYjZEMkxsSzFacERn ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaOVJxZG5oUlcwV0FiNkQyTGxLMVpwRGdqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkVEMy9GODU4NEY3Q0IzOEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJX MFdBYjZEMkxsSzFacERnak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARYiNAm76lsqqY/mCLsNADTX162EuImM1FulmZ63bZwlLRnsErkgy4 OvrFlZ9OcvX4INeZ5qsoE4Axvo4w5rQfRHp3A+eo6Ixo0ZTSE41nvyZa7kBg5TGY EGjMWwZw+NMmh5cpewJE+4StLpyYWpC9oRwMzbg50zZscSL7k7LDtvk6qPo30L5y tIItrL6+rH8Iu+wr0YcX+U6m0FsJnzmdTCQH6NpGCyrB1NpqgXWEFe8Mz8PF5/ru 0XxOek28IWnFLP8WvjkmnmpKOyEn25kmBS/I0Dia2uLRGQjizNmcOs5WcxOAzQsv xbBv6XnaUa9HAde7UPZvbhkCPyNLH6+m -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:02 2024 by rpki-client on console-ams.rpki-client.org