$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft File: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json) Hash identifier: 9BVVDCzEuYPlvbrr++YC/PJ+HcQT49UQBEVASUMw9lE= Subject key identifier: 1A:42:1E:EE:A9:71:E3:D2:F5:09:E3:84:8D:D3:75:B2:7B:CB:8D:B6 Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Certificate serial: 1125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft Manifest number: 111C Signing time: Fri 22 Nov 2024 17:16:30 +0000 Manifest this update: Fri 22 Nov 2024 17:16:30 +0000 Manifest next update: Fri 29 Nov 2024 17:16:30 +0000 Files and hashes: 1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: X4QLwljaKvzV+dWtGUjX6WMG5uxHsYg1KvnibZajy8g=) 2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: GyMFJG7vpXHHpv3BwX4n2XQfqCBxAhnBsVULLZ+wmKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4389 (0x1125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Validity Not Before: Nov 22 17:16:30 2024 GMT Not After : Nov 29 17:16:30 2024 GMT Subject: CN=6740bc6e-cbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:39:e5:ff:db:45:1c:52:08:7e:3e:0f:08: 82:3b:8b:97:c2:b2:d1:ca:61:3e:09:4e:e7:1a:0c: 24:5d:55:38:bd:83:1c:04:76:cd:50:e9:1d:2b:f7: 06:2a:64:06:2c:bf:d0:4d:e3:1a:80:e5:9d:98:73: b1:14:01:a0:3d:74:91:4c:a1:2f:dd:12:0b:fa:4b: 94:d8:42:a4:67:c2:69:aa:1b:0c:4f:47:c4:26:b3: 2e:30:64:21:78:0b:0b:bc:9d:93:2f:54:d3:20:be: ce:1c:d2:03:53:31:15:d1:57:fb:81:b0:76:db:48: d5:a4:18:b2:fe:75:92:4d:4f:27:17:4f:93:80:cc: 1e:93:4d:76:20:d9:9f:67:ae:5c:d1:2c:93:3d:ce: ac:5c:bd:ea:f6:16:3d:cf:65:a5:47:b7:fa:63:66: ab:1d:0a:14:06:b3:46:44:c0:e0:9c:4c:f4:93:95: 4e:bd:fa:4f:6f:97:85:e4:d5:fe:e2:df:c2:8c:53: 2a:2f:3f:68:f7:78:c4:f3:80:56:9c:fc:c0:35:14: ae:5b:29:3f:eb:40:39:a3:35:e3:8b:ed:4b:67:64: ce:5e:64:a8:eb:22:b6:d1:20:fc:47:e8:16:3a:c2: 60:00:5f:ac:f0:f3:1c:7a:72:b5:d0:43:57:bf:49: 71:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:42:1E:EE:A9:71:E3:D2:F5:09:E3:84:8D:D3:75:B2:7B:CB:8D:B6 X509v3 Authority Key Identifier: keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:ac:29:c5:62:cd:9d:52:29:bf:11:60:61:44:69:18:4c:0d: 65:d7:18:94:b8:8d:ea:cf:04:9a:ea:36:0e:0a:20:f7:5c:00: 0e:0c:7d:6a:16:d0:b2:b4:8a:7f:96:d7:1e:54:05:af:1e:03: 59:b0:bb:3c:7d:05:a9:bd:22:7b:2d:db:49:dc:b1:b9:05:99: 8e:b4:90:7b:69:1f:50:f0:26:88:cf:cf:8e:a0:11:26:85:3c: 76:67:b5:e7:f4:bc:f9:37:43:58:84:09:6b:d5:18:33:e1:c8: d0:de:d8:8e:39:41:3c:91:01:9c:fc:45:3c:a9:82:c6:f1:39: f2:26:e7:74:81:fa:72:29:f0:34:c7:15:a0:1b:a3:13:14:4c: 23:67:96:e8:11:15:c5:8e:96:97:7b:a0:7f:6f:57:b2:6d:fd: 65:a1:30:53:e3:c1:09:60:d3:64:5d:93:2d:8a:1a:79:a2:3a: 70:1a:04:8e:de:93:27:64:63:39:a1:45:80:8f:a6:63:23:d7: 48:ba:ea:f6:b3:35:fd:a0:c0:57:94:cf:f4:97:f7:91:ca:14: 84:5d:c2:cc:69:9b:d6:b0:60:77:1f:9b:54:89:07:94:e0:b1: e5:3d:22:14:c0:7c:ea:56:af:51:d9:23:80:6a:2d:1d:7c:2e: ac:4c:f1:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICESUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxRjIxMTAvBgNVBAUTKDA3NTMyQ0Y2RDJCQzRDQTlEOTI3RjMwN0QwRTZCODI4 NzdEOEVFNEQwHhcNMjQxMTIyMTcxNjMwWhcNMjQxMTI5MTcxNjMwWjAYMRYwFAYD VQQDEw02NzQwYmM2ZS1jYmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAza855f/bRRxSCH4+DwiCO4uXwrLRymE+CU7nGgwkXVU4vYMcBHbNUOkdK/cG KmQGLL/QTeMagOWdmHOxFAGgPXSRTKEv3RIL+kuU2EKkZ8JpqhsMT0fEJrMuMGQh eAsLvJ2TL1TTIL7OHNIDUzEV0Vf7gbB220jVpBiy/nWSTU8nF0+TgMwek012INmf Z65c0SyTPc6sXL3q9hY9z2WlR7f6Y2arHQoUBrNGRMDgnEz0k5VOvfpPb5eF5NX+ 4t/CjFMqLz9o93jE84BWnPzANRSuWyk/60A5ozXji+1LZ2TOXmSo6yK20SD8R+gW OsJgAF+s8PMcenK10ENXv0lxAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpCHu6p cePS9QnjhI3TdbJ7y422MB8GA1UdIwQYMBaAFAdTLPbSvEyp2SfzB9DmuCh32O5N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFGMi9BRjMyMUQzQ0ZF N0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRLblpKX01IME9hNEtIZlk3 azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IxTXM5dEs4VEtuWkpfTUgwT2E0S0hmWTdrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDFGMi9BRjMyMUQzQ0ZFN0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRL blpKX01IME9hNEtIZlk3azAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6rCnFYs2dUim/EWBhRGkYTA1l1xiUuI3qzwSa6jYOCiD3XAAODH1q FtCytIp/ltceVAWvHgNZsLs8fQWpvSJ7LdtJ3LG5BZmOtJB7aR9Q8CaIz8+OoBEm hTx2Z7Xn9Lz5N0NYhAlr1Rgz4cjQ3tiOOUE8kQGc/EU8qYLG8TnyJud0gfpyKfA0 xxWgG6MTFEwjZ5boERXFjpaXe6B/b1eybf1loTBT48EJYNNkXZMtihp5ojpwGgSO 3pMnZGM5oUWAj6ZjI9dIuur2szX9oMBXlM/0l/eRyhSEXcLMaZvWsGB3H5tUiQeU 4LHlPSIUwHzqVq9R2SOAai0dfC6sTPEY -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org