$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json) Hash identifier: xT9EzarYRV2BFfxyFOPDkRKbnvnJc8rAZ8GWZNg0Sgs= Subject key identifier: 7B:C8:98:FE:A5:95:2A:ED:E1:E9:4E:67:A4:86:07:89:C4:84:EF:B5 Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 05CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft Manifest number: 05BD Signing time: Wed 20 Nov 2024 22:40:13 +0000 Manifest this update: Wed 20 Nov 2024 22:40:12 +0000 Manifest next update: Wed 27 Nov 2024 22:40:12 +0000 Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: 8httflbaDbXU2VyDwmP/GcA8LbOslfEoccxIYTY82js=) 2: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: u+IddtnEZ3PpaS5wkgvcnMQ5NxiRiCy+krC9UIm0AEs=) 3: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: GTvoFugBA+uCvfRWo4LUswGkHyD24NgsZWWXmqE2VNc=) 4: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: z3se8A09zx2Huzx3cHt2XniXO/IZyEE/vV6YRsvSpe0=) 5: 68219776A41311EBBF911855C4F9AE02.roa (hash: ItkS9hhBxUUr7QTrdN4qhsm8OMGF5bAvi1QRQ2K74xw=) 6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: WKwWhbPawyOzgAjOsk/HfPjPqc+lQeKAyZrRcRmfwlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1487 (0x5cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Validity Not Before: Nov 20 22:40:12 2024 GMT Not After : Nov 27 22:40:12 2024 GMT Subject: CN=673e654d-d8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:bc:8d:e6:b9:74:6e:31:64:c6:55:af:f3: 24:54:3c:ff:0e:19:e7:66:e8:c4:c4:f7:c6:4d:a3: ed:44:6f:c4:47:b4:72:80:59:08:4d:82:aa:54:ad: 73:77:7a:b6:0c:a0:5b:b4:ec:f5:08:06:99:3b:af: 5d:18:a3:f1:58:f4:19:2b:6b:e8:78:2e:7c:7e:3c: 98:80:06:dc:4b:38:09:81:4f:49:ed:c2:4d:18:64: 29:15:ae:15:01:61:14:e3:ee:e4:b8:ae:95:30:cb: 8a:29:6f:3b:c5:a6:c2:61:bb:c0:b5:c0:21:e7:74: b0:71:17:62:c9:65:ab:90:59:28:c7:c3:62:01:f1: 7d:f5:cc:14:c3:3f:ab:b9:15:2c:1b:32:76:d8:44: 76:c9:8c:13:82:c6:29:b3:ee:b1:49:56:83:f3:d1: 42:5d:74:44:74:0c:bf:70:13:12:4e:a2:d4:84:97: 2b:45:d3:1f:d1:c6:71:c4:12:2f:1b:e8:23:18:79: 88:86:f4:e4:d3:71:71:46:e1:aa:13:cb:29:ce:95: 6e:f1:5b:8d:7f:c4:e0:f2:1e:77:7b:7f:a6:cd:9f: e4:08:6b:37:46:ad:0b:03:51:2e:56:43:d1:18:6f: 36:ba:0c:7a:e2:13:bc:88:44:c8:82:6d:6d:82:08: 94:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C8:98:FE:A5:95:2A:ED:E1:E9:4E:67:A4:86:07:89:C4:84:EF:B5 X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:0c:62:8b:2e:39:42:76:a1:3d:5a:4b:cd:82:c3:12:a2:c8: 07:88:82:ab:b3:91:39:ce:c0:9d:01:f9:1f:ca:02:1d:77:f4: 12:f5:60:2a:2e:79:f0:67:43:28:49:52:03:4c:41:3a:d3:10: d9:26:9a:fb:bf:34:e8:a2:ce:5f:ad:c3:9e:6b:b8:6c:6b:b2: dc:5b:cb:ad:6e:e4:55:7b:79:05:00:cf:e0:d3:25:e9:c4:03: 40:02:5a:f7:4b:e7:74:c6:a1:06:73:81:fa:2e:fe:15:98:dc: 89:c8:31:6e:5c:95:46:d1:0e:f3:a2:ad:b4:ac:60:1c:9b:41: bb:73:02:b7:41:e9:01:af:41:58:ba:90:12:a2:d9:b3:2a:1c: c0:5f:ca:e8:dc:3b:df:89:db:e0:3f:ad:84:77:a2:25:ac:b4: 01:2e:1a:05:b9:1e:96:bd:94:e9:cd:a8:e3:08:76:9d:cb:bd: 08:36:40:45:63:39:c4:1b:6a:25:f1:9d:2b:19:57:f9:4c:1b: 2c:84:52:8f:16:da:67:c6:d9:7e:fa:94:d0:5d:fa:4b:ff:5b: 7e:dc:e6:ad:3f:28:5a:34:54:a7:25:4d:c0:e8:18:a2:53:c1: 31:da:ab:3c:af:00:24:bf:65:46:3b:52:e0:26:dc:6f:3a:0d: cd:0f:8c:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjQxMTIwMjI0MDEyWhcNMjQxMTI3MjI0MDEyWjAYMRYwFAYD VQQDEw02NzNlNjU0ZC1kOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndy8jea5dG4xZMZVr/MkVDz/DhnnZujExPfGTaPtRG/ER7RygFkITYKqVK1z d3q2DKBbtOz1CAaZO69dGKPxWPQZK2voeC58fjyYgAbcSzgJgU9J7cJNGGQpFa4V AWEU4+7kuK6VMMuKKW87xabCYbvAtcAh53SwcRdiyWWrkFkox8NiAfF99cwUwz+r uRUsGzJ22ER2yYwTgsYps+6xSVaD89FCXXREdAy/cBMSTqLUhJcrRdMf0cZxxBIv G+gjGHmIhvTk03FxRuGqE8spzpVu8VuNf8Tg8h53e3+mzZ/kCGs3Rq0LA1EuVkPR GG82ugx64hO8iETIgm1tggiUJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvImP6l lSrt4elOZ6SGB4nEhO+1MB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ dEVRa1dEMzBTa2N6SUlMRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgDGKLLjlCdqE9WkvNgsMSosgHiIKrs5E5zsCdAfkfygIdd/QS9WAq LnnwZ0MoSVIDTEE60xDZJpr7vzToos5frcOea7hsa7LcW8utbuRVe3kFAM/g0yXp xANAAlr3S+d0xqEGc4H6Lv4VmNyJyDFuXJVG0Q7zoq20rGAcm0G7cwK3QekBr0FY upASotmzKhzAX8ro3DvfidvgP62Ed6IlrLQBLhoFuR6WvZTpzajjCHady70INkBF YznEG2ol8Z0rGVf5TBsshFKPFtpnxtl++pTQXfpL/1t+3OatPyhaNFSnJU3A6Bii U8Ex2qs8rwAkv2VGO1LgJtxvOg3ND4xV -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:43 2024 by rpki-client on console-ams.rpki-client.org