$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft File: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json) Hash identifier: uoZzFJERYJWzmyu0eaw+N7syP/rDwRaqAqWc2t5vi8M= Subject key identifier: A9:1D:C9:19:D5:00:D8:50:B2:92:EB:5B:0F:B0:7E:7E:38:29:2E:0F Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F Certificate issuer: /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Certificate serial: 0D19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft Manifest number: 0D10 Signing time: Fri 22 Nov 2024 17:58:56 +0000 Manifest this update: Fri 22 Nov 2024 17:58:55 +0000 Manifest next update: Fri 29 Nov 2024 17:58:55 +0000 Files and hashes: 1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: laGG1wdW9NRAfYeFFli35HuwIeOWMbqQ5+rVu6g2d6o=) 2: 83157C50385711EB86284653C4F9AE02.roa (hash: RP2ttD5D5uXKftKTc9Uy3WvFvGaHxDRyE1UTWMKFpHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F Validity Not Before: Nov 22 17:58:55 2024 GMT Not After : Nov 29 17:58:55 2024 GMT Subject: CN=6740c65f-e1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:20:af:ec:74:01:34:f3:b7:69:6c:b3:4b: 0a:80:28:c3:71:b7:96:84:64:cc:34:17:9e:38:d5: 24:2f:a4:31:d2:82:6f:97:1b:3e:d8:0a:3a:a4:5c: 05:a5:33:8e:7f:9f:bb:b7:44:33:a2:4c:df:7c:ef: 83:a7:c4:6e:3b:b9:ae:a1:57:16:92:9d:e2:e0:04: b0:9d:d6:4f:46:44:e4:f3:d7:f2:e3:db:29:e4:1d: 61:a7:86:e8:28:24:ee:eb:ef:b7:36:0c:31:4e:60: 01:97:4d:b6:16:20:bc:a2:e5:ff:1c:7f:f2:69:55: 67:ab:0e:78:d5:5f:da:01:96:3f:8c:87:da:e8:42: 7b:09:2f:04:fe:b4:f7:b4:94:a8:16:0a:9c:84:72: 83:91:d1:d3:99:9d:4f:f8:6e:54:35:8c:57:73:e4: a0:be:50:f5:ac:fe:57:0f:54:67:83:3a:c4:26:00: 75:71:62:cc:31:7d:47:d6:f6:9c:35:49:01:18:6a: 35:de:ef:13:00:50:4a:38:6b:db:93:34:0f:33:08: 9d:60:8d:8c:3e:bb:f5:76:07:57:a1:c3:6d:df:57: 55:a2:02:e6:9c:18:4b:e7:e9:7c:26:9a:60:71:c5: f4:fe:40:ef:0e:04:39:76:41:fb:37:98:a7:50:35: 57:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1D:C9:19:D5:00:D8:50:B2:92:EB:5B:0F:B0:7E:7E:38:29:2E:0F X509v3 Authority Key Identifier: keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:7d:dc:15:fe:3c:ec:8b:2e:f0:43:36:d7:36:fa:92:55:3b: 68:35:1e:17:28:57:18:41:9d:e8:a7:35:07:1d:8f:8a:66:07: cc:4c:b2:f1:ad:40:96:26:44:f2:75:d4:ff:32:b7:ce:d4:7a: 66:64:73:66:44:08:75:51:32:4f:6d:b1:ea:8b:aa:2b:28:9f: e3:30:06:4e:a8:48:67:3a:37:db:12:a6:6b:5d:97:58:e3:a9: 7d:6f:99:c7:e1:06:b4:4a:a8:ad:6c:46:59:9a:8e:74:9d:3c: 77:34:c3:e9:ff:04:12:c3:30:5e:8f:a8:29:33:ed:a5:e2:cf: b3:49:dc:46:dd:ec:ee:98:5b:b6:8e:d8:74:c7:8e:f2:6f:be: d2:e7:0f:43:a5:60:53:b3:88:86:f8:6e:31:32:be:31:36:d9: 0e:73:0b:59:4a:1f:38:c3:8d:17:2e:63:9f:25:78:06:2c:ca: d7:08:ce:74:c3:90:8c:f3:c5:0c:51:b9:7b:85:16:3c:1b:24: 05:26:f4:6d:d9:d8:52:4c:43:16:30:29:88:b3:9b:2d:d1:4f: 4b:22:40:86:91:a9:a9:2c:86:3d:d0:b0:8d:2f:7f:0e:73:9f: 99:5d:21:ac:96:fa:fa:96:d7:2d:f9:ec:e7:b9:cf:87:7e:3a: c9:b1:a6:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzNjExMTAvBgNVBAUTKEUwQjlBMkU5OTM5RDU1OEYxOEJFNjIxNzVDOTVENzY4 RDI0NUQzMUYwHhcNMjQxMTIyMTc1ODU1WhcNMjQxMTI5MTc1ODU1WjAYMRYwFAYD VQQDEw02NzQwYzY1Zi1lMWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PYgr+x0ATTzt2lss0sKgCjDcbeWhGTMNBeeONUkL6Qx0oJvlxs+2Ao6pFwF pTOOf5+7t0QzokzffO+Dp8RuO7muoVcWkp3i4ASwndZPRkTk89fy49sp5B1hp4bo KCTu6++3NgwxTmABl022FiC8ouX/HH/yaVVnqw541V/aAZY/jIfa6EJ7CS8E/rT3 tJSoFgqchHKDkdHTmZ1P+G5UNYxXc+SgvlD1rP5XD1RngzrEJgB1cWLMMX1H1vac NUkBGGo13u8TAFBKOGvbkzQPMwidYI2MPrv1dgdXocNt31dVogLmnBhL5+l8Jppg ccX0/kDvDgQ5dkH7N5inUDVXawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkdyRnV ANhQspLrWw+wfn44KS4PMB8GA1UdIwQYMBaAFOC5oumTnVWPGL5iF1yV12jSRdMf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM2MS83QzhEODAwQUNB MzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZOFl2bUlYWEpYWGFOSkYw eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMbWk2Wk9kVlk4WXZtSVhYSlhYYU5KRjB4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjM2MS83QzhEODAwQUNBMzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZ OFl2bUlYWEpYWGFOSkYweDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQfdwV/jzsiy7wQzbXNvqSVTtoNR4XKFcYQZ3opzUHHY+KZgfMTLLx rUCWJkTyddT/MrfO1HpmZHNmRAh1UTJPbbHqi6orKJ/jMAZOqEhnOjfbEqZrXZdY 46l9b5nH4Qa0SqitbEZZmo50nTx3NMPp/wQSwzBej6gpM+2l4s+zSdxG3ezumFu2 jth0x47yb77S5w9DpWBTs4iG+G4xMr4xNtkOcwtZSh84w40XLmOfJXgGLMrXCM50 w5CM88UMUbl7hRY8GyQFJvRt2dhSTEMWMCmIs5st0U9LIkCGkampLIY90LCNL38O c5+ZXSGslvr6ltct+eznuc+HfjrJsaYx -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org