$ rpki-client -vvf rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft File: m0YBtrC3j7j-njkzSoG1pd1ZVik.mft (raw, json) Hash identifier: 8X8FFjJcB8pyJrt71g+gbNiflTnetxOnWbW9O+2t2cQ= Subject key identifier: 78:9E:A9:53:8E:8A:E1:8A:9D:B0:11:C4:72:65:7C:98:9D:E3:E1:26 Authority key identifier: 9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 Certificate issuer: /CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Certificate serial: 077E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft Manifest number: 0758 Signing time: Wed 20 Nov 2024 21:02:19 +0000 Manifest this update: Wed 20 Nov 2024 21:02:19 +0000 Manifest next update: Wed 27 Nov 2024 21:02:19 +0000 Files and hashes: 1: m0YBtrC3j7j-njkzSoG1pd1ZVik.crl (hash: bIqg3/mlIaWO6PPn1kO8d6QJKHfvzew7pTk+YBqOwK0=) 2: 1F88812AAD5311EBA93CEB69C4F9AE02.roa (hash: JxqBCjBT9K2ryaUj1ZqNSpK/pt6W0FIjzbMts6xP/O4=) 3: 1F046D5EAD5311EBA93CEB69C4F9AE02.roa (hash: QsOZtg7wgKPEMzZpQNjN0cwc1dkJJaHe5vPoUHzDi2E=) 4: 2B67707C449911EC873EEE33C4F9AE02.roa (hash: dfHP081F3AjgTxtk/Kol9IWl1ohuGadWFkcTnhyHleE=) 5: 1E69B82CAD5311EBA93CEB69C4F9AE02.roa (hash: BiwvJd+dCFyWKlGsVpLMc1ZbpjUFsliw37pP+lj/D+c=) 6: 202D8382AD5311EBA93CEB69C4F9AE02.roa (hash: 9CVFCRxGd96rDHgxt1WsX71RS0A2IwtDONeOpXumo3o=) 7: F4DFF910CB0311EC817AED0BC4F9AE02.roa (hash: 3EaaIhegA520f9Jq9jn6VCkgAQsJfc5446BLnaSLsuo=) 8: 1DC10D94AD5311EBA93CEB69C4F9AE02.roa (hash: lLU3brsFcJmxfza+HPsqiH2/FCfohQp/aB2RU3YA2bQ=) 9: 20BC506CAD5311EBA93CEB69C4F9AE02.roa (hash: FAebLgMlFuIn+Jv3/Kno5dJ1sOWIko5p1IcZ8bmbDwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1918 (0x77e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157BF7/serialNumber=9B4601B6B0B78FB8FE9E39334A81B5A5DD595629 Validity Not Before: Nov 20 21:02:19 2024 GMT Not After : Nov 27 21:02:19 2024 GMT Subject: CN=673e4e5b-9d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:14:3b:0e:06:65:1c:85:03:ce:04:79:6e: df:d7:0d:cc:6c:07:fc:0a:20:75:f4:69:71:37:f8: 87:e8:37:ff:9c:a5:52:6e:76:1d:b7:26:36:b7:08: b9:cb:8e:fc:26:3b:76:0e:0f:f4:27:1b:55:9d:2b: 97:82:df:3d:80:a7:12:b8:4c:43:3f:c1:83:9e:60: 38:42:d4:4e:81:fe:50:b7:57:6d:47:66:cf:4a:13: 40:6a:12:fb:00:79:40:27:88:5a:20:77:41:de:79: 3d:6b:74:48:69:5e:8a:1a:8b:53:19:a5:96:0b:16: 23:5d:79:c2:fe:bf:5d:de:9c:11:f0:69:3b:7a:e7: 41:b5:6b:15:f7:b8:34:e6:68:1e:52:3c:fd:97:3a: f0:75:51:a1:cd:d1:2b:c7:87:ff:ff:1c:c1:e2:fc: 1a:ac:bc:14:ed:d2:14:d5:d1:a9:27:8e:c2:95:a4: 01:20:0b:ee:56:03:04:5d:86:92:3d:25:40:67:07: 24:bc:6a:57:9c:1d:29:e6:5e:50:3c:bf:75:21:ec: 4c:82:b4:84:71:b9:fb:e3:79:18:44:40:28:20:4c: 63:80:51:3f:52:39:1e:e7:07:5a:49:61:89:02:ef: 7b:bc:46:36:a0:fa:a6:c8:e6:ea:21:82:09:22:0b: 24:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9E:A9:53:8E:8A:E1:8A:9D:B0:11:C4:72:65:7C:98:9D:E3:E1:26 X509v3 Authority Key Identifier: keyid:9B:46:01:B6:B0:B7:8F:B8:FE:9E:39:33:4A:81:B5:A5:DD:59:56:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0YBtrC3j7j-njkzSoG1pd1ZVik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157BF7/AD2AC72EFBEA11EAA0AC331AC4F9AE02/m0YBtrC3j7j-njkzSoG1pd1ZVik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:11:6e:d6:19:ad:89:0d:05:0f:46:00:8e:c6:21:7d:a8:5b: 98:0f:27:aa:21:30:9b:8a:98:b7:c9:94:cb:f2:5a:4b:dd:4e: 0c:9b:11:5c:f7:78:c4:23:ad:40:87:8c:92:0d:01:16:c3:e5: f1:96:ad:a4:26:59:50:2b:90:36:49:e3:3e:78:03:1a:40:f1: ed:0f:9b:11:e4:32:b2:78:19:43:5b:11:b6:a0:01:1f:2f:f1: 25:7b:f7:53:6e:79:01:56:cd:dc:59:5e:4e:07:53:1f:03:ba: 17:b4:75:30:c1:54:a5:76:58:eb:24:dc:d3:b3:fc:5e:f7:cc: 35:0e:93:67:18:c9:79:e8:ac:8b:1d:2a:4b:63:ff:1c:38:84: 26:ec:1a:0c:fb:16:20:b8:83:d7:18:90:75:79:22:93:b0:1f: e8:b2:6c:6a:52:f5:91:5c:99:b4:02:9a:df:54:30:e9:de:35: bd:06:eb:d5:b9:3a:e8:8c:dc:25:ce:a1:2d:83:a3:4c:2f:ee: df:78:30:e8:78:8c:de:dc:ee:d0:29:5c:89:a5:d0:74:37:7c: 03:be:e5:8d:d7:fd:aa:ab:28:5b:f0:e9:6b:71:dd:f7:b8:9f: 08:77:ad:a2:23:38:20:72:1c:d7:d5:a3:9f:e0:55:45:69:83: 8e:6e:26:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCRjcxMTAvBgNVBAUTKDlCNDYwMUI2QjBCNzhGQjhGRTlFMzkzMzRBODFCNUE1 REQ1OTU2MjkwHhcNMjQxMTIwMjEwMjE5WhcNMjQxMTI3MjEwMjE5WjAYMRYwFAYD VQQDEw02NzNlNGU1Yi05ZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0YUOw4GZRyFA84EeW7f1w3MbAf8CiB19GlxN/iH6Df/nKVSbnYdtyY2twi5 y478Jjt2Dg/0JxtVnSuXgt89gKcSuExDP8GDnmA4QtROgf5Qt1dtR2bPShNAahL7 AHlAJ4haIHdB3nk9a3RIaV6KGotTGaWWCxYjXXnC/r9d3pwR8Gk7eudBtWsV97g0 5mgeUjz9lzrwdVGhzdErx4f//xzB4vwarLwU7dIU1dGpJ47ClaQBIAvuVgMEXYaS PSVAZwckvGpXnB0p5l5QPL91IexMgrSEcbn743kYREAoIExjgFE/Ujke5wdaSWGJ Au97vEY2oPqmyObqIYIJIgskRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHieqVOO iuGKnbARxHJlfJid4+EmMB8GA1UdIwQYMBaAFJtGAbawt4+4/p45M0qBtaXdWVYp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0JGNy9BRDJBQzcyRUZC RUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3ai1uamt6U29HMXBkMVpW aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20wWUJ0ckMzajdqLW5qa3pTb0cxcGQxWlZpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0JGNy9BRDJBQzcyRUZCRUExMUVBQTBBQzMzMUFDNEY5QUUwMi9tMFlCdHJDM2o3 ai1uamt6U29HMXBkMVpWaWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKEW7WGa2JDQUPRgCOxiF9qFuYDyeqITCbipi3yZTL8lpL3U4MmxFc 93jEI61Ah4ySDQEWw+Xxlq2kJllQK5A2SeM+eAMaQPHtD5sR5DKyeBlDWxG2oAEf L/Ele/dTbnkBVs3cWV5OB1MfA7oXtHUwwVSldljrJNzTs/xe98w1DpNnGMl56KyL HSpLY/8cOIQm7BoM+xYguIPXGJB1eSKTsB/osmxqUvWRXJm0AprfVDDp3jW9BuvV uTrojNwlzqEtg6NML+7feDDoeIze3O7QKVyJpdB0N3wDvuWN1/2qqyhb8Olrcd33 uJ8Id62iIzggchzX1aOf4FVFaYOObiYh -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:39 2024 by rpki-client on console-fra.rpki-client.org