$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft File: cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json) Hash identifier: Wqkvi2Y/GhrOOIOyys1KrUBnWbvG7afb6D4UdKwvs68= Subject key identifier: 25:A1:38:34:0B:49:20:5D:FF:88:ED:38:79:7D:19:09:3D:06:62:1B Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft Manifest number: 01AD Signing time: Sat 23 Nov 2024 01:51:22 +0000 Manifest this update: Sat 23 Nov 2024 01:51:21 +0000 Manifest next update: Sat 30 Nov 2024 01:51:21 +0000 Files and hashes: 1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: KfLsLcevX9psCyE4eZXIcJ+JAzqXFaQgKmnY3sY471E=) 2: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: fpl1QeLbfvQuhkR1/wuQiPy5mkE26myDKA7Pu9M6C4M=) 3: 54AABA183DB011EE9F747386C4F9AE02.roa (hash: ONapLZvUqu3mpJkB9dcSlu94PIbPVn9cCFsHZdZqgAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D Validity Not Before: Nov 23 01:51:21 2024 GMT Not After : Nov 30 01:51:21 2024 GMT Subject: CN=67413519-a2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:27:fe:ed:60:8a:c3:32:95:b7:d6:0c:6e: 71:f7:87:b1:1f:05:b3:11:a5:cb:c1:38:13:9c:a8: 2a:03:55:09:22:a0:59:0d:f7:73:38:f1:62:e0:12: 66:88:08:88:19:2b:cb:92:1b:fd:ef:f1:fa:57:9a: 24:5d:82:84:67:2c:88:93:54:c6:6c:22:4d:2c:10: dc:a1:72:1c:0d:33:28:5b:c6:d9:69:16:60:57:d3: 23:aa:5f:25:93:ed:f6:04:5d:94:d8:18:c7:e8:87: 39:22:8e:c0:7e:89:e8:2a:bc:f5:9b:f7:b1:53:02: 34:63:09:9f:3d:28:61:31:9b:9d:8b:b1:12:de:87: fc:0b:78:f8:2e:db:36:e0:78:c6:da:2c:3c:23:78: 54:b3:1e:96:a9:19:88:1c:34:61:b2:5d:7f:f4:8c: 5c:f2:c0:9a:39:2f:01:f2:db:b6:d3:45:84:79:f7: 3a:03:92:9c:05:f3:f3:d7:c9:ec:0d:c9:f0:88:bf: e5:8e:31:61:81:61:bb:50:53:69:ef:c8:f8:38:54: d3:de:40:f5:33:2a:7f:20:96:4f:0a:45:ab:dc:79: db:96:ad:4c:50:94:0c:64:f7:7d:81:08:e5:1a:fa: 4b:5f:c1:79:9c:f7:9d:a1:69:d3:3e:af:e6:2b:e8: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A1:38:34:0B:49:20:5D:FF:88:ED:38:79:7D:19:09:3D:06:62:1B X509v3 Authority Key Identifier: keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:9e:6f:4d:fe:9a:cf:23:ab:df:d2:79:80:99:3c:a5:ab:1d: 47:d8:c6:a1:08:da:ec:25:86:92:f8:ae:3e:d9:ca:8a:ef:73: 08:4a:6d:57:30:ca:42:f2:6d:9c:ad:31:36:da:52:1f:d1:36: 6f:cf:d8:80:7f:15:67:7d:e7:95:f2:32:69:2a:08:12:67:6a: 73:ca:ee:71:e3:15:ea:e6:60:eb:36:e8:72:e8:28:5c:b1:ad: 3e:fe:b5:73:24:23:5b:2c:c0:dc:07:08:60:cf:2f:a0:bb:b0: 64:6b:c7:69:06:2f:be:15:2b:fc:29:18:40:d7:e4:33:19:70: 0d:f1:bd:e5:05:2c:bd:ee:3c:89:32:0e:96:b0:e3:56:fe:3b: fd:c0:c7:03:bb:f1:71:85:d8:66:37:c7:b7:35:04:67:51:79: 8f:ed:30:55:2b:14:e7:19:4d:41:b8:1e:bb:70:80:9a:f9:bb: e4:38:0c:48:64:79:0c:1a:40:47:0a:b4:e3:cd:c0:76:e9:68: 33:21:ff:2c:e7:6f:bb:d1:92:07:da:aa:cc:b8:29:19:96:8b: f3:48:83:f4:cc:86:61:db:c2:41:3c:35:39:81:1c:c1:24:fc: e8:87:eb:a2:15:e1:0a:a9:56:db:25:c0:8b:03:28:45:14:c6: 85:9e:e7:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF MDcxNTdCNUQwHhcNMjQxMTIzMDE1MTIxWhcNMjQxMTMwMDE1MTIxWjAYMRYwFAYD VQQDEw02NzQxMzUxOS1hMmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkYn/u1gisMylbfWDG5x94exHwWzEaXLwTgTnKgqA1UJIqBZDfdzOPFi4BJm iAiIGSvLkhv97/H6V5okXYKEZyyIk1TGbCJNLBDcoXIcDTMoW8bZaRZgV9Mjql8l k+32BF2U2BjH6Ic5Io7AfonoKrz1m/exUwI0YwmfPShhMZudi7ES3of8C3j4Lts2 4HjG2iw8I3hUsx6WqRmIHDRhsl1/9Ixc8sCaOS8B8tu200WEefc6A5KcBfPz18ns DcnwiL/ljjFhgWG7UFNp78j4OFTT3kD1Myp/IJZPCkWr3Hnblq1MUJQMZPd9gQjl GvpLX8F5nPedoWnTPq/mK+hufQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWhODQL SSBd/4jtOHl9GQk9BmIbMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODA3QS8wMjYzQUI0ODNFODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdo UnpVSGpQMGh4ampnY1ZlMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChnm9N/prPI6vf0nmAmTylqx1H2MahCNrsJYaS+K4+2cqK73MISm1X MMpC8m2crTE22lIf0TZvz9iAfxVnfeeV8jJpKggSZ2pzyu5x4xXq5mDrNuhy6Chc sa0+/rVzJCNbLMDcBwhgzy+gu7Bka8dpBi++FSv8KRhA1+QzGXAN8b3lBSy97jyJ Mg6WsONW/jv9wMcDu/FxhdhmN8e3NQRnUXmP7TBVKxTnGU1BuB67cICa+bvkOAxI ZHkMGkBHCrTjzcB26WgzIf8s52+70ZIH2qrMuCkZlovzSIP0zIZh28JBPDU5gRzB JPzoh+uiFeEKqVbbJcCLAyhFFMaFnueX -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org