$ rpki-client -vvf rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft File: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft (raw, json) Hash identifier: gyif5/FcMeTEpbi1WiFJekJkmdqgKigM8pX+zzQorN4= Subject key identifier: 06:47:6D:DE:40:D9:49:2D:F5:2A:EE:A9:C3:FE:00:5B:58:CB:42:75 Authority key identifier: 93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 Certificate issuer: /CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Certificate serial: 0734 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft Manifest number: 072E Signing time: Wed 20 Nov 2024 21:13:41 +0000 Manifest this update: Wed 20 Nov 2024 21:13:40 +0000 Manifest next update: Wed 27 Nov 2024 21:13:40 +0000 Files and hashes: 1: k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl (hash: GciRfdaLLtYqroM3H59yQGFBleLZ7VvixcWsCFUXVk8=) 2: 2FF4108A0C3911EB828BDC25C4F9AE02.roa (hash: V4JUuTRtv40XYY/VZRfInArQdDKfffORyJnUaqVGJBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1844 (0x734) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164FD2/serialNumber=9378691D5A83CC026B8D1F232806008371BEDC04 Validity Not Before: Nov 20 21:13:40 2024 GMT Not After : Nov 27 21:13:40 2024 GMT Subject: CN=673e5104-c176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:57:23:7a:6b:13:2a:0e:8e:2a:e7:8f:76: 28:51:5c:e0:79:dd:03:21:91:47:c8:6e:a4:9e:21: cc:74:d0:7b:d1:dc:95:bd:32:26:77:f2:ea:87:20: 06:f0:73:ca:e6:a0:82:41:1c:17:1e:1f:d7:1f:3b: 62:8c:92:ce:16:57:af:df:ca:96:37:2a:41:2c:76: 9b:2a:95:89:50:dc:7a:57:d7:af:cd:cd:22:06:14: 6c:49:47:9b:a7:a7:77:49:ea:d8:c1:ad:55:86:ac: 82:85:d7:5e:ce:15:2f:19:46:ba:8d:be:06:43:39: 50:0b:c5:46:7a:68:e2:c2:d4:8c:bd:57:f3:09:c2: b6:c3:74:fc:4a:3a:cc:ed:75:01:14:a4:51:00:62: 5e:4e:46:a1:12:20:eb:67:9c:0c:82:1e:ad:f8:33: a1:f7:77:38:bd:e5:be:57:dd:a7:39:b2:a9:20:95: 29:4c:fc:7c:dc:ed:d7:b1:a8:53:f1:55:b0:b4:5d: c0:e1:1c:13:17:96:44:d3:b1:a0:da:ce:a5:03:dd: 57:75:01:5b:64:8c:fe:c3:ec:2e:f3:1d:ad:b4:ea: 30:51:55:e7:4d:eb:55:3d:3b:18:ac:5d:42:2f:00: 24:e5:23:e9:76:86:25:1a:14:b7:0c:07:6f:02:08: e9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:47:6D:DE:40:D9:49:2D:F5:2A:EE:A9:C3:FE:00:5B:58:CB:42:75 X509v3 Authority Key Identifier: keyid:93:78:69:1D:5A:83:CC:02:6B:8D:1F:23:28:06:00:83:71:BE:DC:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164FD2/B94B4F7C0C3611EB85233121C4F9AE02/k3hpHVqDzAJrjR8jKAYAg3G-3AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:9e:0e:80:eb:44:a0:9e:b9:80:53:cb:34:82:c0:bc:39:c2: 72:21:ca:b8:14:e3:62:96:8a:14:d2:e3:77:89:c7:73:e9:59: c1:34:b9:e2:03:6a:6f:82:ec:2e:ed:7b:8e:11:63:e8:9a:bb: 30:62:1b:a6:19:10:d4:80:39:99:4d:de:fd:ed:af:5e:db:85: b8:30:c7:36:4d:f6:63:56:c2:96:a3:4e:b9:43:8f:94:39:06: d6:10:ce:2e:24:83:da:26:66:c5:58:32:eb:c1:4e:d5:e9:3a: f6:55:b3:2c:e3:83:bd:4e:c2:a2:92:6b:bb:cd:36:72:ae:37: e7:70:2a:10:4f:f8:4d:2e:a4:64:7f:59:66:92:c8:3a:b6:63: c3:b0:58:78:4d:8c:89:b5:86:ea:a4:43:9e:a2:2e:64:e1:9a: dd:e0:96:6b:54:4f:06:59:24:d5:cb:fa:72:d4:3f:3d:25:60: f1:2f:e8:f9:5e:b1:ef:31:2d:bc:fc:38:4e:0d:69:21:e0:0f: b1:c7:1f:fe:79:fc:77:38:4e:b1:35:10:67:be:b2:7b:c9:e4: b4:37:3b:52:fb:e8:3f:aa:8e:d1:1f:f6:03:0a:d2:85:79:b2: 18:0f:38:2e:c6:8d:ef:de:e9:e5:b0:00:f6:1a:53:d4:7b:89: db:a1:00:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGRDIxMTAvBgNVBAUTKDkzNzg2OTFENUE4M0NDMDI2QjhEMUYyMzI4MDYwMDgz NzFCRURDMDQwHhcNMjQxMTIwMjExMzQwWhcNMjQxMTI3MjExMzQwWjAYMRYwFAYD VQQDEw02NzNlNTEwNC1jMTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo69XI3prEyoOjirnj3YoUVzged0DIZFHyG6kniHMdNB70dyVvTImd/LqhyAG 8HPK5qCCQRwXHh/XHztijJLOFlev38qWNypBLHabKpWJUNx6V9evzc0iBhRsSUeb p6d3SerYwa1VhqyChddezhUvGUa6jb4GQzlQC8VGemjiwtSMvVfzCcK2w3T8SjrM 7XUBFKRRAGJeTkahEiDrZ5wMgh6t+DOh93c4veW+V92nObKpIJUpTPx83O3XsahT 8VWwtF3A4RwTF5ZE07Gg2s6lA91XdQFbZIz+w+wu8x2ttOowUVXnTetVPTsYrF1C LwAk5SPpdoYlGhS3DAdvAgjpfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZHbd5A 2Ukt9SruqcP+AFtYy0J1MB8GA1UdIwQYMBaAFJN4aR1ag8wCa40fIygGAINxvtwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEZEMi9COTRCNEY3QzBD MzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpBSnJqUjhqS0FZQWczRy0z QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szaHBIVnFEekFKcmpSOGpLQVlBZzNHLTNBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEZEMi9COTRCNEY3QzBDMzYxMUVCODUyMzMxMjFDNEY5QUUwMi9rM2hwSFZxRHpB SnJqUjhqS0FZQWczRy0zQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlng6A60SgnrmAU8s0gsC8OcJyIcq4FONilooU0uN3icdz6VnBNLni A2pvguwu7XuOEWPomrswYhumGRDUgDmZTd797a9e24W4MMc2TfZjVsKWo065Q4+U OQbWEM4uJIPaJmbFWDLrwU7V6Tr2VbMs44O9TsKikmu7zTZyrjfncCoQT/hNLqRk f1lmksg6tmPDsFh4TYyJtYbqpEOeoi5k4Zrd4JZrVE8GWSTVy/py1D89JWDxL+j5 XrHvMS28/DhODWkh4A+xxx/+efx3OE6xNRBnvrJ7yeS0NztS++g/qo7RH/YDCtKF ebIYDzguxo3v3unlsAD2GlPUe4nboQAq -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:42 2024 by rpki-client on console-ams.rpki-client.org