$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft File: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json) Hash identifier: R4n7ZWz48bt2Ng/4JycaU0lve5OxH7uMcXlQpT/eIFg= Subject key identifier: F2:74:1F:20:3F:A7:6E:10:B5:3F:44:12:68:7B:E4:61:A9:BC:DB:79 Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft Manifest number: 68 Signing time: Thu 21 Nov 2024 05:02:30 +0000 Manifest this update: Thu 21 Nov 2024 05:02:30 +0000 Manifest next update: Thu 28 Nov 2024 05:02:30 +0000 Files and hashes: 1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: wHh1PlAGT5d+qeBTVUzyDjZIVqxfCyrxc2OMH72O2tU=) 2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: XJ6Cl0k/r34t0UIzqumXdg3IJ/QU+9th/mHz4X1ySQs=) 3: EC82D1D00C0A11EF86081F2FC4F9AE02.roa (hash: /1qMdbu2VC9jieePRc6g2z78HH9wc3bqvzcmrwLCwgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Validity Not Before: Nov 21 05:02:30 2024 GMT Not After : Nov 28 05:02:30 2024 GMT Subject: CN=673ebee6-bfa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:d2:02:f7:d8:75:c0:e6:56:0d:4e:03:1b: 13:01:77:e2:26:58:4a:95:5e:f3:88:d9:a2:21:30: 6b:be:89:84:ab:7a:9d:74:e5:b2:0a:13:d9:55:6b: 6d:d9:d7:0f:2a:a0:9b:1c:1c:8a:10:36:9e:c4:81: 8c:1c:2e:ce:72:cd:19:70:8a:da:75:f3:b3:b8:12: 17:e5:bd:99:3d:d9:ea:2c:af:dc:1f:7d:e1:55:db: 95:8f:68:89:98:90:9c:d9:bd:76:1b:c3:db:12:44: 1b:48:48:1d:b0:43:b8:86:96:2e:76:32:fd:0d:e3: 53:21:a5:d9:93:77:67:a2:10:b0:ec:cf:df:c0:ee: 6d:dd:68:fc:65:bf:de:ba:a0:00:40:c7:14:9d:cc: 72:21:0c:39:98:53:04:e3:ea:76:fa:0c:57:65:1d: 13:50:9e:7e:cf:96:92:ff:2f:b6:48:7f:c4:9c:c3: 09:c8:86:b1:22:fa:11:6d:cb:e9:20:4e:01:f4:4d: f6:a7:a7:18:3a:8c:02:18:bb:bf:b7:a4:81:f5:70: 23:a1:83:13:37:fc:d3:2f:dc:47:62:0a:ac:c1:bc: 25:15:27:e0:6a:d2:a5:d4:91:21:de:f2:d2:60:27: 19:70:f8:40:27:f7:a7:c5:6e:2c:76:ae:24:19:63: 81:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:74:1F:20:3F:A7:6E:10:B5:3F:44:12:68:7B:E4:61:A9:BC:DB:79 X509v3 Authority Key Identifier: keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ca:b1:75:69:06:78:31:04:6c:42:91:a3:a5:02:20:5e:ad: 28:05:2e:eb:95:20:07:8a:d0:1b:2c:6c:2f:ad:96:ff:48:8d: d1:d4:fc:80:3d:a3:35:5a:cb:a5:fa:50:8f:43:2d:47:02:8a: dc:a7:4b:67:ec:0d:05:bf:23:2b:74:08:b8:1b:83:39:0d:d9: 10:6c:d3:44:57:c6:5e:a0:b2:aa:a9:68:41:65:21:ae:19:9a: 1c:61:3a:23:aa:56:90:2f:21:82:0b:68:0a:c6:a3:cd:57:0f: ef:6c:39:81:cf:19:b0:8a:15:8d:74:96:94:07:f6:c0:00:39: 06:95:a9:35:37:cc:df:e4:72:26:e9:3b:d3:74:36:1b:44:46: d3:68:d4:26:39:b3:4f:9d:4c:5c:d9:90:2f:7e:c4:da:65:c1: f0:8a:01:ac:a5:3e:96:8a:99:41:93:ae:12:a6:3d:b1:53:c0: af:3d:14:a8:5e:a5:74:b8:83:d6:d9:07:10:3b:e4:f4:e3:db: 8f:f4:4a:31:26:d4:95:78:03:a1:36:87:6f:9a:29:9f:1e:d1: 0b:5c:68:a8:ec:c8:31:ee:53:6e:57:dd:ec:c1:44:a1:84:a3: b2:01:65:e7:44:51:2b:4c:9d:97:3f:46:27:87:1c:a3:b9:5e: 3c:15:7f:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NEY2QzExMC8GA1UEBRMoRDlDREMwODk0ODJBNjc0OUI1MjAwNTFDMEYzODVGNjJE RThDQjQ5MzAeFw0yNDExMjEwNTAyMzBaFw0yNDExMjgwNTAyMzBaMBgxFjAUBgNV BAMTDTY3M2ViZWU2LWJmYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCm9IC99h1wOZWDU4DGxMBd+ImWEqVXvOI2aIhMGu+iYSrep105bIKE9lVa23Z 1w8qoJscHIoQNp7EgYwcLs5yzRlwitp187O4EhflvZk92eosr9wffeFV25WPaImY kJzZvXYbw9sSRBtISB2wQ7iGli52Mv0N41MhpdmTd2eiELDsz9/A7m3daPxlv966 oABAxxSdzHIhDDmYUwTj6nb6DFdlHRNQnn7PlpL/L7ZIf8ScwwnIhrEi+hFty+kg TgH0Tfanpxg6jAIYu7+3pIH1cCOhgxM3/NMv3EdiCqzBvCUVJ+Bq0qXUkSHe8tJg Jxlw+EAn96fFbix2riQZY4H7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8nQfID+n bhC1P0QSaHvkYam823kwHwYDVR0jBBgwFoAU2c3AiUgqZ0m1IAUcDzhfYt6MtJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0RjZDL0I4ODIzNzI4MEMw OTExRUY5QkQ5MTMyQ0M0RjlBRTAyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRK TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmMzQWlVZ3FaMG0xSUFVY0R6aGZZdDZNdEpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY0 RjZDL0I4ODIzNzI4MEMwOTExRUY5QkQ5MTMyQ0M0RjlBRTAyLzJjM0FpVWdxWjBt MUlBVWNEemhmWXQ2TXRKTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAfKsXVpBngxBGxCkaOlAiBerSgFLuuVIAeK0BssbC+tlv9IjdHU/IA9 ozVay6X6UI9DLUcCitynS2fsDQW/Iyt0CLgbgzkN2RBs00RXxl6gsqqpaEFlIa4Z mhxhOiOqVpAvIYILaArGo81XD+9sOYHPGbCKFY10lpQH9sAAOQaVqTU3zN/kcibp O9N0NhtERtNo1CY5s0+dTFzZkC9+xNplwfCKAaylPpaKmUGTrhKmPbFTwK89FKhe pXS4g9bZBxA75PTj24/0SjEm1JV4A6E2h2+aKZ8e0QtcaKjsyDHuU25X3ezBRKGE o7IBZedEUStMnZc/RieHHKO5XjwVf6Q= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org