$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: ibYFuOlATXhouzBhSvcQVgqy1cEXd1y8jBsL3x3Yu1c= Subject key identifier: 51:42:77:B7:2B:56:62:54:A7:C3:FB:1D:44:4F:CD:B3:68:C5:3A:E5 Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: 013D Signing time: Thu 21 Nov 2024 02:41:28 +0000 Manifest this update: Thu 21 Nov 2024 02:41:27 +0000 Manifest next update: Thu 28 Nov 2024 02:41:27 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: hGuHqtQOy/NJ6rcBX2AUgjne564/va6IKYBCGYxd4Z8=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: yoMXZm0LgcOJnV0IoBVg2laJUkPV5hmT1fMRlUH17pM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: Nov 21 02:41:27 2024 GMT Not After : Nov 28 02:41:27 2024 GMT Subject: CN=673e9dd7-5050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:45:5c:6f:4e:73:5b:69:70:bb:ef:5d:d8: d9:b7:65:82:9e:29:4f:3d:d2:35:4b:42:f8:47:2e: ac:e3:87:e3:36:1a:81:6f:77:cb:0b:48:25:92:4a: d6:22:6a:8e:aa:09:08:6e:7d:cb:a5:d5:4a:71:35: 0d:43:95:8d:f1:f3:a9:0a:53:a5:ba:2a:af:be:79: 5c:77:59:a9:da:22:f3:c8:3f:9f:7b:3a:0e:37:e8: 76:73:cd:3c:8c:48:54:07:59:ad:42:1d:11:57:40: eb:d4:26:76:d9:6b:03:8d:13:8f:c1:f4:cb:b8:1e: b0:eb:18:36:7b:f1:84:23:5e:9b:61:c8:b2:f7:7c: bb:d3:d5:60:45:5c:86:7a:8f:b6:6d:09:62:20:79: fe:56:1e:11:f7:f1:51:98:3e:78:ec:57:60:5c:31: 7a:2c:38:0f:7c:3d:38:c3:21:e1:6d:70:81:db:62: e7:26:6a:2a:e5:83:be:7d:8d:b3:98:d7:4d:c7:62: f8:35:67:87:0e:a2:98:33:c6:63:c6:65:b2:47:a0: 3d:4e:67:59:f6:44:ad:1f:96:91:00:87:fb:01:f4: 1f:27:5b:6b:6f:14:57:59:f7:4e:8c:77:e8:b3:3e: fe:53:b7:50:f7:42:54:45:b6:bc:e9:93:e7:1c:c1: 23:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:42:77:B7:2B:56:62:54:A7:C3:FB:1D:44:4F:CD:B3:68:C5:3A:E5 X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:d0:43:92:38:90:46:0a:55:f6:03:bc:d1:89:24:0e:5e:56: d1:80:53:1c:84:60:61:88:17:0d:65:86:17:ab:ab:97:c5:03: e7:1d:2f:87:1b:16:6e:81:bb:ac:ec:02:7e:97:46:45:ec:01: e2:06:b7:62:55:e8:02:e2:7d:a8:36:a0:b1:b5:5e:02:83:55: ed:2b:df:66:6e:83:55:a0:7c:fb:05:7d:1a:ec:46:88:c4:dd: 8d:a5:86:22:43:ba:87:fc:32:d0:ba:89:40:dc:9d:79:ed:b1: 9f:ee:35:98:79:51:74:6f:8a:18:62:29:0f:60:b3:25:aa:a5: 11:6d:4b:0b:0e:84:a9:d0:bc:3e:1f:a1:9e:95:e2:b0:e1:db: 6a:be:ac:56:34:e5:da:8a:1c:49:a0:5e:a8:0e:28:8d:c1:c8: 2c:d3:65:e1:b1:05:40:0b:85:46:d8:f2:81:7a:b1:6c:ce:d9: 50:03:d6:1e:f1:d9:9e:36:de:89:31:e4:e0:c6:08:7b:e1:45: c9:6b:8b:36:c1:a4:87:71:83:6f:93:d9:bf:ec:e6:3f:98:43: f3:19:6c:ac:2c:e7:6f:53:75:e0:f4:8d:80:5a:a5:d6:3f:e1: e8:6d:a4:df:88:8a:12:0c:7d:c2:1a:0c:f5:bc:25:6b:f9:0b: 61:ee:8d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjQxMTIxMDI0MTI3WhcNMjQxMTI4MDI0MTI3WjAYMRYwFAYD VQQDEw02NzNlOWRkNy01MDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1JFXG9Oc1tpcLvvXdjZt2WCnilPPdI1S0L4Ry6s44fjNhqBb3fLC0glkkrW ImqOqgkIbn3LpdVKcTUNQ5WN8fOpClOluiqvvnlcd1mp2iLzyD+fezoON+h2c808 jEhUB1mtQh0RV0Dr1CZ22WsDjROPwfTLuB6w6xg2e/GEI16bYciy93y709VgRVyG eo+2bQliIHn+Vh4R9/FRmD547FdgXDF6LDgPfD04wyHhbXCB22LnJmoq5YO+fY2z mNdNx2L4NWeHDqKYM8ZjxmWyR6A9TmdZ9kStH5aRAIf7AfQfJ1trbxRXWfdOjHfo sz7+U7dQ90JURba86ZPnHMEj8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFCd7cr VmJUp8P7HURPzbNoxTrlMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm0EOSOJBGClX2A7zRiSQOXlbRgFMchGBhiBcNZYYXq6uXxQPnHS+H GxZugbus7AJ+l0ZF7AHiBrdiVegC4n2oNqCxtV4Cg1XtK99mboNVoHz7BX0a7EaI xN2NpYYiQ7qH/DLQuolA3J157bGf7jWYeVF0b4oYYikPYLMlqqURbUsLDoSp0Lw+ H6GeleKw4dtqvqxWNOXaihxJoF6oDiiNwcgs02XhsQVAC4VG2PKBerFsztlQA9Ye 8dmeNt6JMeTgxgh74UXJa4s2waSHcYNvk9m/7OY/mEPzGWysLOdvU3Xg9I2AWqXW P+HobaTfiIoSDH3CGgz1vCVr+Qth7o0e -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:06 2024 by rpki-client on console-ams.rpki-client.org