$ rpki-client -vvf rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft File: a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft (raw, json) Hash identifier: 5wFZr++Mc1+eTMyi+exCkxWH3alDpPJfzApn205RLL4= Subject key identifier: C9:B0:2F:77:4B:10:C3:2E:B5:49:CC:61:59:5D:6B:0C:52:56:99:94 Authority key identifier: 6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D Certificate issuer: /CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Certificate serial: 04E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft Manifest number: 04DF Signing time: Fri 22 Nov 2024 23:17:14 +0000 Manifest this update: Fri 22 Nov 2024 23:17:13 +0000 Manifest next update: Fri 29 Nov 2024 23:17:13 +0000 Files and hashes: 1: a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl (hash: 89LcKew7n43EYTm5WHZbADlYjYK1NCQoHiaFCsnvGp8=) 2: B2CB84D4F3E211EB9512E219C4F9AE02.roa (hash: AKQYRTBp1uq5xNSQ+35Oq/CNR0101RtjFiouleUDl3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1251 (0x4e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164655/serialNumber=6BD145ECE42AE4FD82AD67CFD1A4059A9EAB3A6D Validity Not Before: Nov 22 23:17:13 2024 GMT Not After : Nov 29 23:17:13 2024 GMT Subject: CN=674110fa-3b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:c6:95:42:6f:1b:bd:b2:f5:4b:2a:2b:18: 82:cc:e3:5c:d0:1d:83:86:fc:cb:f7:c8:e8:51:c6: 34:77:8d:b5:a2:e9:39:72:85:db:a7:34:01:81:37: 77:65:f8:15:44:3e:94:b4:ab:c6:2a:50:7c:b0:2f: d4:8c:21:10:fe:bd:50:ed:0d:7d:95:6f:53:73:b0: 2f:43:49:bf:c5:54:eb:5d:09:29:cb:99:ce:d0:65: 98:d4:e9:22:57:62:2f:3a:68:c3:6f:41:c8:37:30: fb:1e:b3:a8:98:ee:a2:59:44:56:61:7f:52:3f:7a: d9:fe:21:65:47:5d:83:0c:1b:64:9d:70:3a:d3:a9: da:02:0e:9d:f4:45:b1:e8:e1:36:a6:11:c9:e5:9d: d2:4e:ff:75:e0:0a:bc:8d:c8:24:ca:a9:de:bf:cf: cf:1c:98:46:1e:5e:8e:63:ad:6f:df:86:4f:71:e9: 78:c9:87:40:d3:a8:0f:af:25:83:fe:26:60:d3:42: f9:1a:d3:04:38:2d:8f:a9:d6:d1:66:4a:db:da:8f: f3:33:db:e9:3a:5b:6a:ea:94:34:de:89:b8:f2:e7: fd:1b:e2:59:bf:6e:16:f4:a1:78:07:81:29:65:e7: 78:f2:f1:07:ad:7d:98:eb:74:f9:35:9f:0d:8c:a3: 54:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B0:2F:77:4B:10:C3:2E:B5:49:CC:61:59:5D:6B:0C:52:56:99:94 X509v3 Authority Key Identifier: keyid:6B:D1:45:EC:E4:2A:E4:FD:82:AD:67:CF:D1:A4:05:9A:9E:AB:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9FF7OQq5P2CrWfP0aQFmp6rOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164655/D8BB849AF3DE11EB9E5EC06EC4F9AE02/a9FF7OQq5P2CrWfP0aQFmp6rOm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:05:8d:7b:cd:b9:c4:dd:1e:50:80:63:8c:4c:a8:ca:47:06: 2d:c7:22:32:cf:c5:6e:b3:4a:d4:68:fe:41:10:cd:8c:a3:c7: a4:62:2b:93:8e:99:80:cb:91:de:4c:6a:e9:ea:d1:29:61:ff: 54:60:a7:e9:73:be:01:6b:29:58:e7:bc:b9:b1:b2:7a:47:5e: cb:b1:13:41:09:1a:4a:49:2e:7f:26:57:dd:b7:55:42:17:03: 2b:58:fc:24:ec:5e:74:d8:40:87:bd:de:b0:e7:e7:dd:f6:d3: 06:71:43:d9:9f:0f:ca:63:d6:5e:8c:3b:b0:4a:ec:51:66:66: 2c:f1:ac:e0:36:3a:f1:1b:ab:d4:6f:26:02:cc:d1:7d:75:ec: 9a:19:23:de:18:0f:96:d1:04:41:7f:1f:6f:2d:34:09:27:ee: 17:b5:7f:19:95:53:27:9d:a9:f4:32:a4:de:b6:4a:c0:0e:d8: 5a:49:2b:80:2a:54:8e:b3:95:ff:65:3b:d4:f0:ca:77:4f:6c: f3:b1:c1:30:57:22:5b:ab:ba:66:e2:b2:64:9c:3f:ab:f9:a5: 34:e6:f8:34:80:fb:d1:94:dc:b8:ed:6d:9d:b2:9a:f6:7a:94: cb:9e:3a:57:54:52:83:18:c6:ea:b5:d0:02:c6:60:f9:e7:95: 0f:85:78:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NTUxMTAvBgNVBAUTKDZCRDE0NUVDRTQyQUU0RkQ4MkFENjdDRkQxQTQwNTlB OUVBQjNBNkQwHhcNMjQxMTIyMjMxNzEzWhcNMjQxMTI5MjMxNzEzWjAYMRYwFAYD VQQDEw02NzQxMTBmYS0zYjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreTGlUJvG72y9UsqKxiCzONc0B2DhvzL98joUcY0d421ouk5coXbpzQBgTd3 ZfgVRD6UtKvGKlB8sC/UjCEQ/r1Q7Q19lW9Tc7AvQ0m/xVTrXQkpy5nO0GWY1Oki V2IvOmjDb0HINzD7HrOomO6iWURWYX9SP3rZ/iFlR12DDBtknXA606naAg6d9EWx 6OE2phHJ5Z3STv914Aq8jcgkyqnev8/PHJhGHl6OY61v34ZPcel4yYdA06gPryWD /iZg00L5GtMEOC2PqdbRZkrb2o/zM9vpOltq6pQ03om48uf9G+JZv24W9KF4B4Ep Zed48vEHrX2Y63T5NZ8NjKNU+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmwL3dL EMMutUnMYVldawxSVpmUMB8GA1UdIwQYMBaAFGvRRezkKuT9gq1nz9GkBZqeqzpt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY1NS9EOEJCODQ5QUYz REUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQMkNyV2ZQMGFRRm1wNnJP bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5RkY3T1FxNVAyQ3JXZlAwYVFGbXA2ck9tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY1NS9EOEJCODQ5QUYzREUxMUVCOUU1RUMwNkVDNEY5QUUwMi9hOUZGN09RcTVQ MkNyV2ZQMGFRRm1wNnJPbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACBY17zbnE3R5QgGOMTKjKRwYtxyIyz8Vus0rUaP5BEM2Mo8ekYiuT jpmAy5HeTGrp6tEpYf9UYKfpc74BaylY57y5sbJ6R17LsRNBCRpKSS5/Jlfdt1VC FwMrWPwk7F502ECHvd6w5+fd9tMGcUPZnw/KY9ZejDuwSuxRZmYs8azgNjrxG6vU byYCzNF9deyaGSPeGA+W0QRBfx9vLTQJJ+4XtX8ZlVMnnan0MqTetkrADthaSSuA KlSOs5X/ZTvU8Mp3T2zzscEwVyJbq7pm4rJknD+r+aU05vg0gPvRlNy47W2dspr2 epTLnjpXVFKDGMbqtdACxmD555UPhXgP -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org