$ rpki-client -vvf rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft File: aw5C2IWeCxzeVBV6y412BK0_8bM.mft (raw, json) Hash identifier: DFneV5Ku6DXBwSIrdcU8ixlV/qWhnW2xLHV5n3sI//0= Subject key identifier: 4A:11:27:3B:AE:17:CE:42:5B:CB:32:FF:6F:A7:84:A1:C2:FE:46:C1 Authority key identifier: 6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3 Certificate issuer: /CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3 Certificate serial: 3517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft Manifest number: 34B2 Signing time: Fri 22 Nov 2024 14:21:17 +0000 Manifest this update: Fri 22 Nov 2024 14:21:16 +0000 Manifest next update: Fri 29 Nov 2024 14:21:16 +0000 Files and hashes: 1: aw5C2IWeCxzeVBV6y412BK0_8bM.crl (hash: /DxrD5FQexPdjg52MA5wRe1ZhmxsYvA+KbCuk81z9eE=) 2: 4265BD864D5811EF98470D6DC4F9AE02.roa (hash: DI0whxBE0VRYz5yAE2OsMixzXg5yBtVwc2go7LOY180=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13591 (0x3517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153457/serialNumber=6B0E42D8859E0B1CDE54157ACB8D7604AD3FF1B3 Validity Not Before: Nov 22 14:21:16 2024 GMT Not After : Nov 29 14:21:16 2024 GMT Subject: CN=6740935c-cb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8e:49:b2:94:9f:c8:29:07:a0:92:13:da:aa: c7:3a:1a:0d:79:ae:18:48:65:7d:37:2a:c8:fc:d9: 2b:1a:49:fb:ed:cb:c7:b8:45:b3:7d:a6:c6:58:58: a9:8c:e4:be:74:7a:e0:d3:79:11:c2:89:e9:66:47: 1e:30:ea:13:ad:99:59:09:33:97:75:45:7a:2e:24: 73:b4:ac:b5:45:c0:f3:9f:37:0d:1f:b5:e2:9c:67: c4:63:e7:75:b2:87:1b:72:3a:17:76:1f:2f:7e:8b: 2f:e1:e7:cf:41:78:df:4d:8a:a5:de:a8:9d:97:e8: 42:af:3d:f0:8f:1e:9a:62:01:7e:26:d3:58:2d:4e: ea:92:61:7e:d0:b4:53:61:d9:b5:ac:82:76:af:9b: 9f:5e:0b:53:e4:1a:2a:64:69:07:31:e9:27:45:87: 30:1c:2a:88:c0:92:0b:63:bf:92:bb:02:5b:a8:eb: 17:25:fa:27:a7:d5:b7:6f:a1:49:bb:e2:c6:41:2f: 15:4c:d6:64:eb:94:6c:ab:03:e6:5a:92:8e:b4:27: 96:2f:5a:d5:9d:7b:f6:80:d9:6d:98:a8:47:d1:65: b5:5a:94:a3:34:27:2b:f9:5d:d1:22:4d:b6:0e:69: 9c:8a:61:cc:0e:d5:b5:16:37:79:a5:95:52:78:34: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:11:27:3B:AE:17:CE:42:5B:CB:32:FF:6F:A7:84:A1:C2:FE:46:C1 X509v3 Authority Key Identifier: keyid:6B:0E:42:D8:85:9E:0B:1C:DE:54:15:7A:CB:8D:76:04:AD:3F:F1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aw5C2IWeCxzeVBV6y412BK0_8bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153457/4C1A034C1D7B11E2BE3DA6C808B02CD2/aw5C2IWeCxzeVBV6y412BK0_8bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:08:84:19:0d:5e:0f:9a:d5:cb:d3:4d:1e:85:3d:a5:34:1d: c7:14:48:71:b7:57:8c:72:90:c4:85:e0:2f:04:9e:15:42:6b: 5d:1f:1b:c1:9c:95:85:3a:fb:df:64:e3:b1:96:cd:0e:4c:e8: fa:e2:91:53:c9:4f:6c:a6:aa:10:b4:11:7e:ea:bb:0f:40:62: eb:5c:94:9e:99:f9:6d:88:7a:69:77:d5:75:d7:c0:b3:36:ce: 03:e9:79:23:81:0b:f4:e5:40:b2:58:e1:d5:7e:f3:0f:6f:c2: 8e:ad:d4:cc:3b:10:34:f7:f5:cf:21:77:c9:0c:55:53:0f:01: bc:bf:f6:79:12:35:d6:06:f8:12:5b:69:3f:e0:a6:a2:4d:50: 89:51:32:39:a5:69:6d:0b:01:2f:fc:60:56:58:34:5b:a4:0f: 14:40:36:de:5c:e8:99:f9:c1:ef:45:ce:74:b8:47:82:88:3c: d1:a4:52:b3:85:6d:af:bd:37:6b:fa:d1:66:e2:fa:c3:2f:d9: 95:68:a4:81:12:92:38:62:c2:63:5d:58:89:86:a4:08:c0:f5: 61:f9:da:3c:e6:d0:65:7e:05:7a:dd:5c:9c:84:62:a7:21:b5: bc:76:e1:51:97:82:00:49:88:1a:7d:d5:e9:62:1e:28:a1:91: 0e:9a:b1:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0NTcxMTAvBgNVBAUTKDZCMEU0MkQ4ODU5RTBCMUNERTU0MTU3QUNCOEQ3NjA0 QUQzRkYxQjMwHhcNMjQxMTIyMTQyMTE2WhcNMjQxMTI5MTQyMTE2WjAYMRYwFAYD VQQDEw02NzQwOTM1Yy1jYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4I5JspSfyCkHoJIT2qrHOhoNea4YSGV9NyrI/NkrGkn77cvHuEWzfabGWFip jOS+dHrg03kRwonpZkceMOoTrZlZCTOXdUV6LiRztKy1RcDznzcNH7XinGfEY+d1 socbcjoXdh8vfosv4efPQXjfTYql3qidl+hCrz3wjx6aYgF+JtNYLU7qkmF+0LRT Ydm1rIJ2r5ufXgtT5BoqZGkHMeknRYcwHCqIwJILY7+SuwJbqOsXJfonp9W3b6FJ u+LGQS8VTNZk65RsqwPmWpKOtCeWL1rVnXv2gNltmKhH0WW1WpSjNCcr+V3RIk22 DmmcimHMDtW1Fjd5pZVSeDSxYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoRJzuu F85CW8sy/2+nhKHC/kbBMB8GA1UdIwQYMBaAFGsOQtiFngsc3lQVesuNdgStP/Gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQ1Ny80QzFBMDM0QzFE N0IxMUUyQkUzREE2QzgwOEIwMkNEMi9hdzVDMklXZUN4emVWQlY2eTQxMkJLMF84 Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3NUMySVdlQ3h6ZVZCVjZ5NDEyQkswXzhiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQ1Ny80QzFBMDM0QzFEN0IxMUUyQkUzREE2QzgwOEIwMkNEMi9hdzVDMklXZUN4 emVWQlY2eTQxMkJLMF84Yk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoCIQZDV4PmtXL000ehT2lNB3HFEhxt1eMcpDEheAvBJ4VQmtdHxvB nJWFOvvfZOOxls0OTOj64pFTyU9spqoQtBF+6rsPQGLrXJSemfltiHppd9V118Cz Ns4D6XkjgQv05UCyWOHVfvMPb8KOrdTMOxA09/XPIXfJDFVTDwG8v/Z5EjXWBvgS W2k/4KaiTVCJUTI5pWltCwEv/GBWWDRbpA8UQDbeXOiZ+cHvRc50uEeCiDzRpFKz hW2vvTdr+tFm4vrDL9mVaKSBEpI4YsJjXViJhqQIwPVh+do85tBlfgV63VychGKn IbW8duFRl4IASYgafdXpYh4ooZEOmrFo -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:19 2024 by rpki-client on console-ams.rpki-client.org