$ rpki-client -vvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft File: SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json) Hash identifier: 6bE6vIgIJH2uu+L0PxLQkdO8HgC0glc418uRfXI2aBg= Subject key identifier: 5F:8D:4D:F7:D3:20:EA:29:44:4B:3E:9B:C4:FD:38:00:2E:B2:AE:BC Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A Certificate issuer: /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft Manifest number: 013A Signing time: Sat 23 Nov 2024 02:43:06 +0000 Manifest this update: Sat 23 Nov 2024 02:43:05 +0000 Manifest next update: Sat 30 Nov 2024 02:43:05 +0000 Files and hashes: 1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: RIk8b/AArRhA5AetXHxTjRIUoLQ6BTtlMoNM0Bic6V8=) 2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: kU6fsRIP10rXpeTdFL72qzNk8DJAVh671AdmFJV9slI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A Validity Not Before: Nov 23 02:43:05 2024 GMT Not After : Nov 30 02:43:05 2024 GMT Subject: CN=67414139-ee50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:44:a8:92:4e:22:a8:f2:3f:77:36:5c:98: 58:42:ad:8f:6a:0e:90:25:5b:06:d8:e3:5d:e5:2a: 7a:ba:33:13:14:60:aa:82:83:73:65:2f:ab:b6:81: 34:3b:21:40:4b:1a:bf:1a:b7:50:bf:4c:37:0d:54: 00:e3:38:6d:25:77:76:c1:c5:b2:5b:df:94:e7:46: 6e:f9:65:05:97:b6:a7:dc:39:9b:d4:5e:f8:a3:61: c3:95:29:df:ec:5d:a2:a6:3d:ad:88:40:b8:77:04: 76:6c:52:df:c6:1d:38:c2:3a:fe:6c:f3:e8:96:7b: e7:c0:42:75:52:ba:a9:69:d2:97:ba:26:cc:fb:17: 02:05:6e:a2:d7:9a:9d:31:22:3b:ee:8e:8d:d9:27: ac:4f:81:7a:9f:67:f6:8d:04:52:5e:a0:7d:b9:17: 13:ec:4b:da:33:1e:a4:d0:9f:c0:96:c4:15:29:d6: 16:bc:24:b5:f7:a6:30:dc:33:1f:cd:0b:03:2f:d6: 33:73:c3:f0:e4:9a:0e:ad:b9:ed:4e:24:c2:76:54: cc:7d:a2:e2:f8:5a:68:c2:9b:40:57:8a:db:db:d2: 40:ed:9a:66:5d:ae:e7:e4:45:c6:7b:64:46:ac:28: 63:46:df:03:92:e6:a6:56:5a:6e:a4:53:1a:5d:33: 86:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8D:4D:F7:D3:20:EA:29:44:4B:3E:9B:C4:FD:38:00:2E:B2:AE:BC X509v3 Authority Key Identifier: keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:df:7c:74:58:ae:65:a0:47:62:b6:db:e1:f1:cc:38:cd:20: 60:9a:10:31:b1:0f:8d:16:5f:e4:50:08:fe:a5:3c:53:7c:1a: b3:34:2d:76:42:42:c6:cd:d1:34:19:a9:74:11:58:a6:73:fc: 7a:44:c0:be:b4:68:63:c2:b7:91:fe:3e:ec:60:85:15:f7:2f: 1c:53:2c:36:9e:fb:d8:e6:3c:0b:51:b1:b8:73:67:4f:60:c1: 2f:0b:9e:a7:59:d9:15:16:1b:ea:13:34:07:93:13:28:36:ef: 67:98:ca:ab:a3:39:6b:08:7f:64:85:01:16:d7:0a:36:20:9c: 53:cc:7c:f5:d2:1e:07:10:be:78:b9:e0:8a:c3:e7:03:f2:bd: ad:60:54:96:29:f1:04:c7:0e:46:0d:a6:ce:e9:b8:b9:28:3d: 7d:d7:a5:ab:6d:79:3c:a9:91:a8:b1:eb:68:5c:53:65:c5:ce: 22:dc:ee:5b:78:3b:42:30:22:09:4a:2c:94:f7:5a:28:5f:02: 91:b2:54:60:d5:ad:8c:90:53:e8:81:7d:cf:a5:63:fc:2e:e4: d8:ec:21:61:c1:bd:c5:85:55:73:d9:c8:f2:9e:9a:cb:52:53: a8:a9:1a:9f:5c:5c:fd:f5:e7:5a:15:2c:f2:a3:87:9d:c6:8b: 1c:03:24:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5OUUxMTAvBgNVBAUTKDQ4N0NCNjMzMTcxQTBEREYzOEFDQkI2QUQxRUQ4QUU2 OTY1NTg2MEEwHhcNMjQxMTIzMDI0MzA1WhcNMjQxMTMwMDI0MzA1WjAYMRYwFAYD VQQDEw02NzQxNDEzOS1lZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmREqJJOIqjyP3c2XJhYQq2Pag6QJVsG2ONd5Sp6ujMTFGCqgoNzZS+rtoE0 OyFASxq/GrdQv0w3DVQA4zhtJXd2wcWyW9+U50Zu+WUFl7an3Dmb1F74o2HDlSnf 7F2ipj2tiEC4dwR2bFLfxh04wjr+bPPolnvnwEJ1UrqpadKXuibM+xcCBW6i15qd MSI77o6N2SesT4F6n2f2jQRSXqB9uRcT7EvaMx6k0J/AlsQVKdYWvCS196Yw3DMf zQsDL9Yzc8Pw5JoOrbntTiTCdlTMfaLi+FpowptAV4rb29JA7ZpmXa7n5EXGe2RG rChjRt8DkuamVlpupFMaXTOGtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+NTffT IOopREs+m8T9OAAusq68MB8GA1UdIwQYMBaAFEh8tjMXGg3fOKy7atHtiuaWVYYK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk5RS82QzEzNTQzNEM5 RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURkODRyTHRxMGUySzVwWlZo Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NIeTJNeGNhRGQ4NHJMdHEwZTJLNXBaVmhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODk5RS82QzEzNTQzNEM5RjMxMUVEQTU4NDkyNjlDNEY5QUUwMi9TSHkyTXhjYURk ODRyTHRxMGUySzVwWlZoZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl33x0WK5loEdittvh8cw4zSBgmhAxsQ+NFl/kUAj+pTxTfBqzNC12 QkLGzdE0Gal0EVimc/x6RMC+tGhjwreR/j7sYIUV9y8cUyw2nvvY5jwLUbG4c2dP YMEvC56nWdkVFhvqEzQHkxMoNu9nmMqrozlrCH9khQEW1wo2IJxTzHz10h4HEL54 ueCKw+cD8r2tYFSWKfEExw5GDabO6bi5KD1916WrbXk8qZGosetoXFNlxc4i3O5b eDtCMCIJSiyU91ooXwKRslRg1a2MkFPogX3PpWP8LuTY7CFhwb3FhVVz2cjynprL UlOoqRqfXFz99edaFSzyo4edxoscAyQk -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org