$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: o+cQ87bP8I+ebT2gL6kVZnncvaUzt5gx6ZWK/XGjbb4= Subject key identifier: 1F:8A:0B:74:87:F3:DB:38:1D:F5:B7:7D:FA:3F:01:9B:44:EB:17:FB Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 0493 Signing time: Fri 22 Nov 2024 23:34:24 +0000 Manifest this update: Fri 22 Nov 2024 23:34:23 +0000 Manifest next update: Fri 29 Nov 2024 23:34:23 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: mObDJ94t/UaQNphL20JrtkKD9sGNrcfmNt5SBFDyWsM=) 2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: RUb4fveS6KNpdqQZ3iK34TgQh1XppIjAE8PLiJx+i58=) 3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: oV2v23VyIR5s0kEFyHz3FmFpgbo4gZtQ6jb48hoRfTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Nov 22 23:34:23 2024 GMT Not After : Nov 29 23:34:23 2024 GMT Subject: CN=674114ff-7b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:39:71:10:62:0d:cf:de:99:a5:a9:0e:5e: d4:38:25:98:b4:32:9b:85:55:84:e7:8e:ae:1c:9b: 5f:22:7f:b6:af:ba:de:3a:7f:f5:40:c9:90:2d:b6: 24:26:23:58:46:c2:cf:12:4b:e4:4e:77:eb:dc:58: 09:2f:24:38:38:ab:ef:de:68:69:ab:c3:30:8a:12: 75:a2:22:b8:85:43:9f:70:17:b9:c9:01:29:43:4d: 22:92:25:2d:01:a6:ea:7e:b0:4d:48:37:f9:fb:b4: 79:8c:f0:d5:3b:ba:8e:d1:f5:66:61:be:85:6f:8c: a1:26:3c:2c:39:25:e0:7f:ed:ae:38:d9:93:a3:bb: a7:08:b4:43:f6:df:72:83:2c:c0:8d:f8:49:68:4e: cb:33:bd:e3:11:d4:de:29:83:44:95:02:81:8a:fb: 86:78:e7:45:c4:0f:bc:0f:74:92:02:d9:2a:a9:35: d1:de:9a:3e:6c:6e:42:e3:38:88:ef:64:04:9e:a0: 0e:f9:10:c0:ff:96:82:35:bd:8a:d7:ca:34:42:bb: 9b:b2:3c:d8:e8:de:1e:4b:c5:9e:bc:c2:0c:0d:53: 70:ea:31:3c:63:4d:0f:3d:bd:6c:e3:57:b2:5a:6a: 43:52:60:50:11:40:f8:1a:5f:1e:90:eb:61:d8:27: eb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8A:0B:74:87:F3:DB:38:1D:F5:B7:7D:FA:3F:01:9B:44:EB:17:FB X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:9a:ef:2c:6f:ef:6b:ec:21:bf:18:59:af:b2:e1:fb:b4:98: 23:2a:bc:b9:38:24:17:74:9e:06:5f:06:ad:f9:06:a4:f5:0c: 0d:00:e4:52:0a:69:d3:b0:c3:25:dd:a2:5f:24:3d:94:dc:b5: 0c:ee:a3:46:ea:bc:d2:59:1b:d4:af:a9:d6:80:6d:93:c2:f0: 8d:f6:d1:4e:6d:60:1c:4a:09:56:84:8f:67:55:c7:a7:16:7b: b9:ea:cd:21:5a:fc:51:4a:a3:15:e9:58:ae:91:65:8d:49:77: dd:5f:f7:36:45:27:17:0a:d7:90:fd:41:27:17:5e:2c:a3:45: 2b:20:85:54:f1:34:49:dd:f3:f6:00:e1:97:ec:02:fc:bd:3c: f8:96:ba:11:96:f3:e0:de:76:a3:b1:d2:e0:6a:65:89:8d:3e: 1d:9a:ee:5a:aa:dd:60:be:9c:7d:c0:9a:93:ab:8d:fe:ee:82: a4:c3:b8:b1:66:82:52:74:de:5d:a9:1b:90:ed:a3:c6:76:dd: bd:5e:ff:85:41:c3:c2:61:5c:fa:40:78:66:17:64:41:7c:6b: de:75:85:48:6d:8b:67:c1:c7:c8:1c:0b:4f:00:79:97:48:73: b9:38:86:91:bc:28:ff:e2:96:9b:ca:06:00:4d:39:bd:77:8b: be:5c:9a:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjQxMTIyMjMzNDIzWhcNMjQxMTI5MjMzNDIzWjAYMRYwFAYD VQQDEw02NzQxMTRmZi03YjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubg5cRBiDc/emaWpDl7UOCWYtDKbhVWE546uHJtfIn+2r7reOn/1QMmQLbYk JiNYRsLPEkvkTnfr3FgJLyQ4OKvv3mhpq8MwihJ1oiK4hUOfcBe5yQEpQ00ikiUt AabqfrBNSDf5+7R5jPDVO7qO0fVmYb6Fb4yhJjwsOSXgf+2uONmTo7unCLRD9t9y gyzAjfhJaE7LM73jEdTeKYNElQKBivuGeOdFxA+8D3SSAtkqqTXR3po+bG5C4ziI 72QEnqAO+RDA/5aCNb2K18o0QrubsjzY6N4eS8WevMIMDVNw6jE8Y00PPb1s41ey WmpDUmBQEUD4Gl8ekOth2Cfr9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+KC3SH 89s4HfW3ffo/AZtE6xf7MB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkmu8sb+9r7CG/GFmvsuH7tJgjKry5OCQXdJ4GXwat+Qak9QwNAORS CmnTsMMl3aJfJD2U3LUM7qNG6rzSWRvUr6nWgG2TwvCN9tFObWAcSglWhI9nVcen Fnu56s0hWvxRSqMV6ViukWWNSXfdX/c2RScXCteQ/UEnF14so0UrIIVU8TRJ3fP2 AOGX7AL8vTz4lroRlvPg3najsdLgamWJjT4dmu5aqt1gvpx9wJqTq43+7oKkw7ix ZoJSdN5dqRuQ7aPGdt29Xv+FQcPCYVz6QHhmF2RBfGvedYVIbYtnwcfIHAtPAHmX SHO5OIaRvCj/4pabygYATTm9d4u+XJpl -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org