$ rpki-client -vvf rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft File: p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft (raw, json) Hash identifier: 0dJxQS2zyk1/Q2PXNuoTyzsd/JTNbd0gbIol6/09MHs= Subject key identifier: 35:46:D1:AD:2C:7E:9D:83:4D:54:33:C9:28:5A:F2:B0:F2:18:65:8A Authority key identifier: A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 Certificate issuer: /CN=A9165297/serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Certificate serial: 0D9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft Manifest number: 0D94 Signing time: Fri 22 Nov 2024 17:53:21 +0000 Manifest this update: Fri 22 Nov 2024 17:53:21 +0000 Manifest next update: Fri 29 Nov 2024 17:53:21 +0000 Files and hashes: 1: p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl (hash: 0wfRP4QdzN3LGGgaKlaZ61m/zFuiPSg2eXDgiBW8qeU=) 2: 457A00A8AF7A11E9AFF10782C4F9AE02.roa (hash: mx4Am+cBFSXiPddaACrFcI512PsDACEUWWDSLjunmeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3484 (0xd9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165297/serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Validity Not Before: Nov 22 17:53:21 2024 GMT Not After : Nov 29 17:53:21 2024 GMT Subject: CN=6740c511-f4bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:6a:5d:fe:33:9e:e0:a6:0b:6a:61:8f:d6: 45:17:28:03:63:ef:1a:db:8b:1f:aa:60:96:c0:07: 18:c5:df:30:eb:c9:ed:63:24:e0:0d:e8:c6:46:e2: e3:97:7b:5e:c8:f4:99:1c:08:d4:5f:2a:9e:16:b1: e9:5a:a0:7c:77:8f:6a:ae:12:61:37:9d:d4:ed:c9: 98:a2:96:d3:c3:87:a8:9c:3e:98:a3:87:e8:93:de: 87:4d:3d:47:42:8c:55:22:e0:5a:17:fb:29:77:58: 05:b0:c5:a4:cf:dc:ac:8f:ba:b4:76:7c:53:d8:0b: fd:37:bc:be:26:2b:07:cd:99:da:0e:33:88:f2:f7: de:82:d8:d4:bc:b3:3f:ff:4f:8d:33:50:95:60:5e: d5:40:27:06:43:9f:b0:64:2a:1c:e7:ee:4c:d4:a6: 6d:e5:ea:5e:03:dc:aa:89:4f:7a:cd:85:75:50:06: 6d:9b:10:ed:ae:eb:52:93:8c:eb:07:4b:5e:f5:84: 2b:a2:df:bf:e0:6a:c6:d2:95:5b:a3:e3:4c:22:df: 0b:fe:6c:eb:48:6d:a4:e3:96:28:87:64:01:38:7b: fc:33:89:72:29:ec:5d:df:cb:ad:01:8f:c9:1a:d4: 46:16:77:52:e0:1d:8f:88:71:26:91:26:96:6d:08: 41:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:46:D1:AD:2C:7E:9D:83:4D:54:33:C9:28:5A:F2:B0:F2:18:65:8A X509v3 Authority Key Identifier: keyid:A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c2:6a:f9:1c:54:86:cd:a7:a3:3d:3d:0d:2c:30:72:3d:8b: 00:51:88:32:2f:a9:ae:3b:7d:6b:26:a1:7c:22:69:ee:9f:f6: 38:11:13:28:e4:ee:be:39:49:ad:87:38:30:a8:7a:84:f0:c7: 97:b9:5e:09:d8:c5:17:6e:39:40:c6:ec:0e:05:9f:31:f4:fc: 80:93:27:1f:b3:be:48:0c:bb:13:f9:42:59:58:19:92:81:e4: c9:0c:e0:6d:bd:7f:c4:f8:78:05:31:71:6a:f1:08:ce:ff:b6: 62:bd:e3:bd:cb:80:a6:c4:79:75:6c:32:a0:ec:d6:ee:46:2f: 0f:43:cc:88:be:a1:8f:ed:fc:e3:15:1f:9a:22:73:6b:c6:b0: d9:6f:d0:21:06:fa:cc:b7:82:f5:1d:e8:e4:40:ae:93:4c:e5: 00:1b:77:c1:aa:b9:a5:34:db:cd:06:33:4a:11:4d:b2:15:8d: d7:c8:18:1c:af:96:7b:41:63:6b:3d:84:d9:2a:de:7c:9a:18: 4d:8b:81:02:c5:c7:e3:30:6d:02:2b:d1:22:c9:8b:a0:e1:be: 47:1c:da:b0:21:e9:8e:13:f4:4f:64:58:49:d0:d6:49:26:8d: b9:e9:09:a6:97:96:23:b1:15:e5:b3:f9:c7:4c:27:8b:aa:de: 57:98:27:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyOTcxMTAvBgNVBAUTKEE3Rjg4MkMwQUNDOEYwRDhGMURCMzYxQ0Q0MEIxMjYw NkIwQzY4QzYwHhcNMjQxMTIyMTc1MzIxWhcNMjQxMTI5MTc1MzIxWjAYMRYwFAYD VQQDEw02NzQwYzUxMS1mNGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHlqXf4znuCmC2phj9ZFFygDY+8a24sfqmCWwAcYxd8w68ntYyTgDejGRuLj l3teyPSZHAjUXyqeFrHpWqB8d49qrhJhN53U7cmYopbTw4eonD6Yo4fok96HTT1H QoxVIuBaF/spd1gFsMWkz9ysj7q0dnxT2Av9N7y+JisHzZnaDjOI8vfegtjUvLM/ /0+NM1CVYF7VQCcGQ5+wZCoc5+5M1KZt5epeA9yqiU96zYV1UAZtmxDtrutSk4zr B0te9YQrot+/4GrG0pVbo+NMIt8L/mzrSG2k45Yoh2QBOHv8M4lyKexd38utAY/J GtRGFndS4B2PiHEmkSaWbQhBBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVG0a0s fp2DTVQzySha8rDyGGWKMB8GA1UdIwQYMBaAFKf4gsCsyPDY8ds2HNQLEmBrDGjG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTI5Ny80MzAxRkRCRUFG NkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThOangyelljMUFzU1lHc01h TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfaUN3S3pJOE5qeDJ6WWMxQXNTWUdzTWFNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTI5Ny80MzAxRkRCRUFGNkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThO angyelljMUFzU1lHc01hTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfwmr5HFSGzaejPT0NLDByPYsAUYgyL6muO31rJqF8Imnun/Y4ERMo 5O6+OUmthzgwqHqE8MeXuV4J2MUXbjlAxuwOBZ8x9PyAkycfs75IDLsT+UJZWBmS geTJDOBtvX/E+HgFMXFq8QjO/7ZiveO9y4CmxHl1bDKg7NbuRi8PQ8yIvqGP7fzj FR+aInNrxrDZb9AhBvrMt4L1HejkQK6TTOUAG3fBqrmlNNvNBjNKEU2yFY3XyBgc r5Z7QWNrPYTZKt58mhhNi4ECxcfjMG0CK9EiyYug4b5HHNqwIemOE/RPZFhJ0NZJ Jo256Qmml5YjsRXls/nHTCeLqt5XmCe1 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org