$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft File: tNHFfu7y2pEKr3lGCpvLIab80v0.mft (raw, json) Hash identifier: Rw+2bvApI8AXJux8r8t6+VN79+Y9eTSR45InwmBy5+o= Subject key identifier: 12:22:C7:17:F8:54:AF:08:95:40:55:1C:51:03:97:18:9D:96:0A:BA Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD Certificate issuer: /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Certificate serial: 06F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft Manifest number: 06E8 Signing time: Fri 22 Nov 2024 21:33:35 +0000 Manifest this update: Fri 22 Nov 2024 21:33:34 +0000 Manifest next update: Fri 29 Nov 2024 21:33:34 +0000 Files and hashes: 1: tNHFfu7y2pEKr3lGCpvLIab80v0.crl (hash: Jdq5Z+lH2zp+eQ+tm9U1UnkhKfNlXeCGohh+SmynGKI=) 2: EB0FEBAA295811EBB519AC70C4F9AE02.roa (hash: l0d5U/HukOAxqR+/ThmuC5REmFDut/5BnvDM1762AlY=) 3: 102C7C702D2111EBB741A15CC4F9AE02.roa (hash: KCgNayUWmtPfdGS7Is0Ze1b8PcPt/zkwwnSWuZkApSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1779 (0x6f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Validity Not Before: Nov 22 21:33:34 2024 GMT Not After : Nov 29 21:33:34 2024 GMT Subject: CN=6740f8af-bf93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:73:4c:c7:33:db:b5:4a:2b:90:80:5f:3b:cf: 72:3e:29:3a:c9:22:a9:3c:82:eb:7b:ba:88:55:73: c6:ea:b7:3a:e1:be:cf:48:6c:72:ae:79:ff:56:70: 1b:64:2a:89:43:06:55:dc:ca:0d:6a:96:32:f1:e1: 4c:c8:ca:ba:b4:8e:8f:47:73:40:d6:15:2c:ad:6b: 26:75:e2:8c:8b:94:31:54:7d:71:7b:2b:b8:79:10: a1:d7:6d:50:5a:97:61:05:5d:fb:c3:61:fd:2b:b9: 5e:66:cd:d3:32:d1:79:93:23:dc:21:d6:4c:09:13: 90:f8:8c:67:31:b9:a8:18:a3:a8:1c:f9:9b:61:84: 18:97:1a:21:04:8e:37:3c:a7:68:25:49:b0:7d:c6: 3f:e3:e6:d5:11:c3:30:37:83:b3:d3:68:80:87:a8: b9:c4:20:2f:5b:23:45:c5:ab:55:b1:2e:e2:0e:17: cc:7a:a4:89:51:80:14:16:b4:23:9e:b4:8d:95:27: fb:29:cc:0f:74:9f:49:e9:97:2b:62:ae:29:27:cb: ab:df:5f:9d:65:9c:4a:c5:1c:1a:ad:de:6c:8a:95: 53:30:71:75:d5:3b:a4:2e:99:9d:61:ad:2d:8a:59: c0:ba:b6:61:da:01:5f:c6:1f:74:ab:79:9a:0f:49: 88:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:22:C7:17:F8:54:AF:08:95:40:55:1C:51:03:97:18:9D:96:0A:BA X509v3 Authority Key Identifier: keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:86:41:7e:39:46:28:d0:9a:db:71:0b:a2:7c:05:15:a4:f5: 91:27:0d:8c:41:69:d9:57:b5:9c:5f:b8:5a:72:19:b5:91:28: 67:e6:70:bb:3e:72:5f:17:5b:6a:c7:79:c3:ea:e5:01:08:eb: e7:07:c4:d6:b0:85:3e:9b:7a:50:79:08:ac:ba:de:42:38:46: 47:ed:d1:67:b3:e0:d9:4b:3f:2a:e4:aa:03:45:67:0a:4e:1d: c2:1f:46:c0:2a:6e:af:54:e6:25:d2:c2:d2:5a:7f:1a:77:47: d3:3c:41:51:5c:81:4c:c1:16:e6:f1:a7:f9:11:3b:05:c8:74: 3c:4b:88:3e:fa:af:5a:8b:98:af:da:3e:2c:63:85:ce:1a:dd: 8b:87:a3:84:65:95:92:41:82:7d:ca:c9:2b:2d:fa:81:35:a7: a0:de:ad:78:45:75:9a:ea:61:c2:3a:e2:1a:aa:1a:e6:83:2f: d7:af:e2:be:91:60:39:c8:cc:17:c2:2e:4b:ff:ed:51:c1:06: b8:be:da:d5:ac:9d:f6:e2:31:26:cb:c8:08:cc:1d:18:18:be: 1c:8a:c6:0d:e1:fa:06:79:bd:67:5a:1e:bb:85:a5:5f:98:2a: 16:51:2e:9e:09:62:a9:41:92:45:af:86:99:be:ac:75:72:e6: 13:c6:94:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMzMxMTAvBgNVBAUTKEI0RDFDNTdFRUVGMkRBOTEwQUFGNzk0NjBBOUJDQjIx QTZGQ0QyRkQwHhcNMjQxMTIyMjEzMzM0WhcNMjQxMTI5MjEzMzM0WjAYMRYwFAYD VQQDEw02NzQwZjhhZi1iZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3NMxzPbtUorkIBfO89yPik6ySKpPILre7qIVXPG6rc64b7PSGxyrnn/VnAb ZCqJQwZV3MoNapYy8eFMyMq6tI6PR3NA1hUsrWsmdeKMi5QxVH1xeyu4eRCh121Q WpdhBV37w2H9K7leZs3TMtF5kyPcIdZMCROQ+IxnMbmoGKOoHPmbYYQYlxohBI43 PKdoJUmwfcY/4+bVEcMwN4Oz02iAh6i5xCAvWyNFxatVsS7iDhfMeqSJUYAUFrQj nrSNlSf7KcwPdJ9J6ZcrYq4pJ8ur31+dZZxKxRward5sipVTMHF11TukLpmdYa0t ilnAurZh2gFfxh90q3maD0mIAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIixxf4 VK8IlUBVHFEDlxidlgq6MB8GA1UdIwQYMBaAFLTRxX7u8tqRCq95RgqbyyGm/NL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAzMy84QkFFOEI4ODI5 NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJwRUtyM2xHQ3B2TElhYjgw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSEZmdTd5MnBFS3IzbEdDcHZMSWFiODB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAzMy84QkFFOEI4ODI5NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJw RUtyM2xHQ3B2TElhYjgwdjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqhkF+OUYo0JrbcQuifAUVpPWRJw2MQWnZV7WcX7hachm1kShn5nC7 PnJfF1tqx3nD6uUBCOvnB8TWsIU+m3pQeQisut5COEZH7dFns+DZSz8q5KoDRWcK Th3CH0bAKm6vVOYl0sLSWn8ad0fTPEFRXIFMwRbm8af5ETsFyHQ8S4g++q9ai5iv 2j4sY4XOGt2Lh6OEZZWSQYJ9yskrLfqBNaeg3q14RXWa6mHCOuIaqhrmgy/Xr+K+ kWA5yMwXwi5L/+1RwQa4vtrVrJ324jEmy8gIzB0YGL4cisYN4foGeb1nWh67haVf mCoWUS6eCWKpQZJFr4aZvqx1cuYTxpQG -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org