$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json) Hash identifier: weFWv4CAMAVZNcjSKWuRktzAC8liYEfBfAJMgKDq1X8= Subject key identifier: F3:9E:44:DB:12:93:0A:5D:0A:8E:1E:CF:15:93:45:54:2D:C9:DC:4C Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0AAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft Manifest number: 0AA7 Signing time: Fri 22 Nov 2024 19:15:40 +0000 Manifest this update: Fri 22 Nov 2024 19:15:39 +0000 Manifest next update: Fri 29 Nov 2024 19:15:39 +0000 Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: YWCgj+Yynvz1OBblet+Qh5YnUhmxdLboLB1cF1hIju0=) 2: 741645EE422211EA937BB919C4F9AE02.roa (hash: 8YuWdPTvmVpFT/yetaaM7w5QRsz3AizZsFr+KRCuk8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2733 (0xaad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: Nov 22 19:15:39 2024 GMT Not After : Nov 29 19:15:39 2024 GMT Subject: CN=6740d85b-2b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:a4:2e:3b:f8:12:a6:c5:79:e8:86:22:77: 88:e4:2f:82:75:90:7f:d3:90:cc:fa:a6:22:7b:f0: e6:d8:9d:4d:cb:e0:6f:1e:24:2b:51:88:b2:0f:5c: 93:3d:ba:9e:20:dc:8d:ce:2c:b7:09:e0:52:33:5e: f3:c3:ed:f2:95:a9:13:5c:bf:a6:43:08:0d:bb:0a: 7d:b7:a0:68:8f:44:6c:0a:7f:05:d3:29:33:4e:57: a8:1c:a2:75:f2:92:df:bf:30:d4:f2:ba:dd:1d:e5: 3d:f5:61:78:80:fa:8c:c8:2e:05:9f:3e:87:2e:24: ef:82:f7:b9:f6:f5:76:71:d9:54:17:ba:69:08:82: 3b:ae:d5:3a:4b:52:09:d6:aa:c8:f5:34:41:be:67: 20:c0:f0:a2:22:04:0f:23:91:3a:75:e4:65:3d:63: 4a:77:b6:f2:12:ae:9d:be:92:93:cd:ff:71:9c:0f: 8e:75:cc:ef:44:21:85:16:88:7f:ac:7b:33:17:10: ca:8e:c2:ae:9c:49:86:cb:31:a1:bb:63:4a:c4:2e: 7f:aa:21:a1:02:4a:ca:3e:c5:15:6f:72:60:41:4e: 7f:1a:8b:a1:c6:2e:33:b7:0f:9f:2d:85:6f:1e:fc: 96:2f:d4:32:82:30:f9:24:c0:aa:43:39:d5:d0:13: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9E:44:DB:12:93:0A:5D:0A:8E:1E:CF:15:93:45:54:2D:C9:DC:4C X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:df:aa:e9:29:65:a4:61:a6:7c:c5:33:c8:eb:95:3a:65:91: ec:58:95:e5:b0:b1:e0:38:d8:d5:72:28:2f:a0:6b:59:d8:c7: 58:24:aa:53:f0:59:d6:a3:e7:21:0e:f5:c9:9a:92:b6:d0:ca: 9d:9b:84:c6:22:02:03:85:f3:e5:cc:23:87:71:11:07:36:32: 61:c5:08:10:67:e5:07:db:eb:e7:12:9d:a7:5e:71:c8:65:84: 06:4d:2e:de:b5:42:a1:09:56:4d:0b:3e:9d:7f:4c:52:9c:95: 55:97:f7:e0:c3:f8:32:c1:50:c4:07:1d:a4:b0:30:7d:0d:25: 66:1a:bf:2f:14:ce:c6:03:8e:49:50:ee:85:f3:56:22:25:a1: 08:81:c0:2d:b5:70:e2:e4:56:08:40:a5:26:49:3c:f0:72:5d: 20:99:43:e1:28:5f:46:8a:4c:9b:16:61:42:3d:e8:0e:30:1e: b1:2a:67:18:54:4f:a8:8d:be:c8:5c:cf:1d:58:39:e6:79:a4: bc:57:f1:78:58:09:d9:05:46:5a:9a:eb:a4:09:7a:4c:17:56: 01:bf:8b:14:f4:ee:ce:df:c9:17:93:5a:78:f2:4e:fb:aa:ee: c6:55:91:e8:0b:46:93:86:ee:78:21:e0:fa:7d:6d:60:4c:b8: df:d4:fc:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjQxMTIyMTkxNTM5WhcNMjQxMTI5MTkxNTM5WjAYMRYwFAYD VQQDEw02NzQwZDg1Yi0yYjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdWkLjv4EqbFeeiGIneI5C+CdZB/05DM+qYie/Dm2J1Ny+BvHiQrUYiyD1yT PbqeINyNziy3CeBSM17zw+3ylakTXL+mQwgNuwp9t6Boj0RsCn8F0ykzTleoHKJ1 8pLfvzDU8rrdHeU99WF4gPqMyC4Fnz6HLiTvgve59vV2cdlUF7ppCII7rtU6S1IJ 1qrI9TRBvmcgwPCiIgQPI5E6deRlPWNKd7byEq6dvpKTzf9xnA+OdczvRCGFFoh/ rHszFxDKjsKunEmGyzGhu2NKxC5/qiGhAkrKPsUVb3JgQU5/Gouhxi4ztw+fLYVv HvyWL9QygjD5JMCqQznV0BMIWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOeRNsS kwpdCo4ezxWTRVQtydxMMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0 RkdIM2pxaG5MeU56aFhNVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV36rpKWWkYaZ8xTPI65U6ZZHsWJXlsLHgONjVcigvoGtZ2MdYJKpT 8FnWo+chDvXJmpK20Mqdm4TGIgIDhfPlzCOHcREHNjJhxQgQZ+UH2+vnEp2nXnHI ZYQGTS7etUKhCVZNCz6df0xSnJVVl/fgw/gywVDEBx2ksDB9DSVmGr8vFM7GA45J UO6F81YiJaEIgcAttXDi5FYIQKUmSTzwcl0gmUPhKF9GikybFmFCPegOMB6xKmcY VE+ojb7IXM8dWDnmeaS8V/F4WAnZBUZamuukCXpMF1YBv4sU9O7O38kXk1p48k77 qu7GVZHoC0aThu54IeD6fW1gTLjf1PxH -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:27 2024 by rpki-client on console-ams.rpki-client.org