$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: HvjyztCNdmhD2vabRp8TYHxgqTl9HuNuCYr6mqyZCpQ= Subject key identifier: 73:0F:20:D6:39:B6:51:68:18:12:6F:35:18:80:85:96:31:5A:BD:DD Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0C64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0C49 Signing time: Fri 22 Nov 2024 18:13:00 +0000 Manifest this update: Fri 22 Nov 2024 18:12:59 +0000 Manifest next update: Fri 29 Nov 2024 18:12:59 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: wffR6ZGQecTRA+ViZZs1ZWKgrtY3HUNAM9a9POVgrDU=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: deD58Mq8q6NtgDApD9PQKblyJ8paeLDH7pnimAn97yk=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: lJUGsid+q5Tbb8CevBMe/tVeDQTPxzcpikP5JaRu0mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Nov 22 18:12:59 2024 GMT Not After : Nov 29 18:12:59 2024 GMT Subject: CN=6740c9ab-b70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:18:0c:44:0f:75:af:48:12:aa:8a:35:60: c5:da:04:11:76:fb:ea:b3:4f:19:5d:04:5c:6e:5e: a5:22:bc:b3:14:dc:aa:aa:d8:59:b2:30:a4:98:67: 91:f7:a1:41:1a:74:62:23:d0:31:e6:91:e1:de:aa: 94:3f:d5:a0:74:94:2b:c6:d6:dd:e0:b6:25:ed:e4: 72:b6:a8:94:eb:e1:ef:21:e3:bb:5c:b6:a8:65:23: 3e:53:62:03:e7:1f:fe:e6:1d:a8:2b:ca:86:44:9c: c6:05:11:0a:f4:72:b9:e9:f0:95:ca:2d:ed:61:28: d2:9c:cb:2b:9a:a5:aa:64:ad:a8:a3:08:85:4b:9a: ea:b2:c6:44:1e:03:a5:b5:cb:f5:8b:df:44:c4:ca: 38:e3:67:9d:f8:65:80:f5:1e:32:01:74:40:ee:92: 5b:ac:62:01:04:38:00:40:cd:94:c2:75:31:52:e4: ec:46:78:ea:8e:43:19:e9:be:1f:ad:4d:0e:ed:d1: d0:70:68:97:4d:8a:63:d1:5d:20:f7:f4:18:14:63: 6b:b4:0c:b8:1a:60:40:43:01:03:88:f5:a7:86:ea: 5f:1b:f5:20:bd:80:3e:72:93:aa:82:d1:dc:eb:cc: d7:39:94:7c:ef:0d:73:4d:dd:a2:85:1b:59:c7:49: 34:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0F:20:D6:39:B6:51:68:18:12:6F:35:18:80:85:96:31:5A:BD:DD X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:de:7b:be:53:c1:f0:a0:48:b0:f2:f8:9c:d2:46:a9:e9:06: 74:88:f2:15:1b:07:11:2c:d1:61:17:7e:81:81:b6:d7:44:12: d1:a5:d5:4f:77:89:34:3a:dc:fd:1a:41:41:c6:3c:c1:16:52: 8e:2e:2a:5b:34:2c:1d:82:3a:57:20:23:8d:cc:8b:ec:1f:2d: 91:a5:a8:c7:95:0e:77:d4:af:0e:b3:73:b9:22:f0:07:6d:21: 98:e8:a9:ad:61:2a:ca:0a:03:6e:12:d1:9c:21:07:bb:a1:2a: 74:88:22:f1:1c:73:9f:a1:cb:0c:c8:a0:0f:5c:05:0e:3d:89: ff:bc:a6:9c:4f:ac:13:88:f7:32:1b:00:cd:48:ed:f1:dc:4f: 62:8f:0b:3a:f0:41:24:e6:b4:02:4c:37:e4:06:80:d2:b5:6e: d4:01:e1:7a:da:f5:88:e0:0e:08:5c:4d:5f:05:35:33:cb:2f: 52:9f:6f:37:87:ae:5f:69:36:93:da:1a:db:98:cc:79:2b:7a: c2:fc:6e:cb:5a:e7:db:7d:93:e3:80:58:09:a1:62:75:c7:46: dc:3b:44:8b:00:3b:6f:23:40:27:43:b4:09:59:4a:08:6d:8a: 78:29:9a:68:64:b9:f9:b4:6e:e1:36:71:68:23:40:3c:8f:f3: 49:a1:73:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjQxMTIyMTgxMjU5WhcNMjQxMTI5MTgxMjU5WjAYMRYwFAYD VQQDEw02NzQwYzlhYi1iNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJgYDEQPda9IEqqKNWDF2gQRdvvqs08ZXQRcbl6lIryzFNyqqthZsjCkmGeR 96FBGnRiI9Ax5pHh3qqUP9WgdJQrxtbd4LYl7eRytqiU6+HvIeO7XLaoZSM+U2ID 5x/+5h2oK8qGRJzGBREK9HK56fCVyi3tYSjSnMsrmqWqZK2oowiFS5rqssZEHgOl tcv1i99ExMo442ed+GWA9R4yAXRA7pJbrGIBBDgAQM2UwnUxUuTsRnjqjkMZ6b4f rU0O7dHQcGiXTYpj0V0g9/QYFGNrtAy4GmBAQwEDiPWnhupfG/UgvYA+cpOqgtHc 68zXOZR87w1zTd2ihRtZx0k0fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMPINY5 tlFoGBJvNRiAhZYxWr3dMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw3nu+U8HwoEiw8vic0kap6QZ0iPIVGwcRLNFhF36BgbbXRBLRpdVP d4k0Otz9GkFBxjzBFlKOLipbNCwdgjpXICONzIvsHy2RpajHlQ531K8Os3O5IvAH bSGY6KmtYSrKCgNuEtGcIQe7oSp0iCLxHHOfocsMyKAPXAUOPYn/vKacT6wTiPcy GwDNSO3x3E9ijws68EEk5rQCTDfkBoDStW7UAeF62vWI4A4IXE1fBTUzyy9Sn283 h65faTaT2hrbmMx5K3rC/G7LWufbfZPjgFgJoWJ1x0bcO0SLADtvI0AnQ7QJWUoI bYp4KZpoZLn5tG7hNnFoI0A8j/NJoXNC -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:02 2024 by rpki-client on console-ams.rpki-client.org