$ rpki-client -vvf rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft File: d6E036eiOU7SRHU58T_kqNHgVsk.mft (raw, json) Hash identifier: 4bULTkoizI+vAfPvPtHq7bLalEbGlBuDYrOK6O/XwSw= Subject key identifier: A0:95:7D:6B:66:10:03:E3:AF:D9:F1:D8:6F:FC:24:A7:F6:CF:BA:BC Authority key identifier: 77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9 Certificate issuer: /CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9 Certificate serial: 09F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft Manifest number: 09EF Signing time: Fri 22 Nov 2024 19:38:28 +0000 Manifest this update: Fri 22 Nov 2024 19:38:28 +0000 Manifest next update: Fri 29 Nov 2024 19:38:28 +0000 Files and hashes: 1: d6E036eiOU7SRHU58T_kqNHgVsk.crl (hash: jJG+u7fpfywDAnpjL/NdJIhaIFUs2LREUA0ln/Bq3gA=) 2: 4B2AAC20660211EA83A76342C4F9AE02.roa (hash: wcas8hwm2SsOezrjKRuYetaNuSdRzjiKwQDbaDpGAJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2548 (0x9f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9 Validity Not Before: Nov 22 19:38:28 2024 GMT Not After : Nov 29 19:38:28 2024 GMT Subject: CN=6740ddb4-3204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ac:58:90:69:b7:8b:82:97:bc:73:b3:af:ac: a1:df:86:ab:d1:53:12:72:d4:f3:42:e2:1b:6a:7d: 07:4e:63:05:3f:9f:c8:3d:df:18:ab:d2:3c:f7:21: 0c:64:18:4d:1d:c6:29:e8:04:0d:8f:78:21:28:21: 40:a5:a6:90:96:a4:32:62:dc:0f:31:14:24:47:ec: 75:e8:72:e2:b1:d0:5d:07:34:3e:9f:d7:0f:a1:a5: 0d:47:2e:b3:b6:9d:f8:53:c6:7d:92:b2:11:cd:9d: d8:08:69:cf:80:7f:db:ee:a6:99:99:b8:3d:8a:bc: 18:ee:60:93:21:49:5b:a7:38:7c:2c:28:6e:8c:a1: c1:d1:b0:ce:7f:a1:cc:a7:e3:cb:cb:dd:56:a8:40: e9:51:79:ca:2e:8d:04:f7:d3:e4:41:95:e2:9b:29: 24:6c:e9:2b:d7:d9:20:24:bc:7a:77:d2:92:31:19: 70:c3:c9:b4:9e:98:79:35:3f:df:fa:cc:bb:38:5f: 68:48:66:4d:9f:0e:0a:6b:4e:f3:c8:e9:b6:6f:f2: 0f:bd:36:7a:73:cd:e6:a8:60:d7:50:91:0e:44:82: a7:7b:ab:66:b3:f1:5b:9d:01:69:99:bb:2f:bd:c1: b0:b6:f9:1f:db:42:e0:7c:f5:3e:ca:3e:0b:10:b4: 6e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:95:7D:6B:66:10:03:E3:AF:D9:F1:D8:6F:FC:24:A7:F6:CF:BA:BC X509v3 Authority Key Identifier: keyid:77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:77:e3:85:11:46:d4:82:96:48:12:c4:4e:2d:bf:ae:92:7f: 45:99:8e:b6:14:1b:16:29:cc:e6:43:d6:b6:89:34:71:f5:7b: 3e:6a:a7:72:39:07:be:ad:e2:c5:03:18:fe:0f:ff:3d:11:b3: 77:16:cc:8f:e6:1a:b8:bc:33:34:8a:63:b9:29:96:d8:05:eb: 72:9f:3c:bd:4c:d0:d5:3b:a7:00:e9:a0:f4:71:00:ab:e5:7d: 89:12:1b:13:65:70:01:8b:0e:11:63:d7:96:77:17:c4:1d:a2: 0e:82:a1:06:1e:29:bf:ab:0b:2e:b8:dd:1f:06:c4:3d:e9:f0: 2a:6c:be:42:c8:eb:74:26:4d:94:83:81:74:c1:2d:36:3b:11: 8c:8f:dd:4f:d2:bf:fa:33:09:30:b9:a1:c3:13:c9:23:fa:c9: a5:f7:1c:6d:f2:47:f0:c8:76:4c:bb:21:e4:3b:f6:f4:f7:64: 0c:25:7d:e6:ec:66:24:a5:1f:cf:a8:22:3b:f5:4c:0c:f7:18: dd:27:42:d1:d9:8f:e4:30:5a:a2:cf:18:16:ec:ac:02:5c:4b: 61:0e:39:7e:42:ec:76:37:06:cd:c4:06:8c:5f:66:52:ff:0c: 6f:db:0b:1a:2a:5c:92:de:da:91:d9:81:67:db:8e:a1:79:9e: 59:63:e8:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MjExMTAvBgNVBAUTKDc3QTEzNERGQTdBMjM5NEVEMjQ0NzUzOUYxM0ZFNEE4 RDFFMDU2QzkwHhcNMjQxMTIyMTkzODI4WhcNMjQxMTI5MTkzODI4WjAYMRYwFAYD VQQDEw02NzQwZGRiNC0zMjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46xYkGm3i4KXvHOzr6yh34ar0VMSctTzQuIban0HTmMFP5/IPd8Yq9I89yEM ZBhNHcYp6AQNj3ghKCFApaaQlqQyYtwPMRQkR+x16HLisdBdBzQ+n9cPoaUNRy6z tp34U8Z9krIRzZ3YCGnPgH/b7qaZmbg9irwY7mCTIUlbpzh8LChujKHB0bDOf6HM p+PLy91WqEDpUXnKLo0E99PkQZXimykkbOkr19kgJLx6d9KSMRlww8m0nph5NT/f +sy7OF9oSGZNnw4Ka07zyOm2b/IPvTZ6c83mqGDXUJEORIKne6tms/FbnQFpmbsv vcGwtvkf20LgfPU+yj4LELRugQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCVfWtm EAPjr9nx2G/8JKf2z7q8MB8GA1UdIwQYMBaAFHehNN+nojlO0kR1OfE/5KjR4FbJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgyMS8yMzlCRkM2NDY2 MDExMUVBQkVFQTA3NDFDNEY5QUUwMi9kNkUwMzZlaU9VN1NSSFU1OFRfa3FOSGdW c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2RTAzNmVpT1U3U1JIVTU4VF9rcU5IZ1Zzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTgyMS8yMzlCRkM2NDY2MDExMUVBQkVFQTA3NDFDNEY5QUUwMi9kNkUwMzZlaU9V N1NSSFU1OFRfa3FOSGdWc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUd+OFEUbUgpZIEsROLb+ukn9FmY62FBsWKczmQ9a2iTRx9Xs+aqdy OQe+reLFAxj+D/89EbN3FsyP5hq4vDM0imO5KZbYBetynzy9TNDVO6cA6aD0cQCr 5X2JEhsTZXABiw4RY9eWdxfEHaIOgqEGHim/qwsuuN0fBsQ96fAqbL5CyOt0Jk2U g4F0wS02OxGMj91P0r/6MwkwuaHDE8kj+sml9xxt8kfwyHZMuyHkO/b092QMJX3m 7GYkpR/PqCI79UwM9xjdJ0LR2Y/kMFqizxgW7KwCXEthDjl+Qux2NwbNxAaMX2ZS /wxv2wsaKlyS3tqR2YFn246heZ5ZY+jx -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:28 2024 by rpki-client on console-ams.rpki-client.org