$ rpki-client -vvf rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft File: 8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft (raw, json) Hash identifier: GhWVWFQWjSkVp64uR3jo5GaqyuZ9RgKRE+JrJXpN2qM= Subject key identifier: F5:9C:FF:3B:5C:63:80:55:46:39:39:76:FD:CB:A2:4D:70:55:F0:69 Authority key identifier: F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6 Certificate issuer: /CN=A916E554/serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6 Certificate serial: 0E1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft Manifest number: 0E10 Signing time: Fri 22 Nov 2024 17:45:31 +0000 Manifest this update: Fri 22 Nov 2024 17:45:31 +0000 Manifest next update: Fri 29 Nov 2024 17:45:31 +0000 Files and hashes: 1: 8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl (hash: DeD91PS6tWEg7A4Z2E1B0W6Qet0XhlfX43KKvTLd81w=) 2: E8F7CA24E38211EB8BAE655EC4F9AE02.roa (hash: 7/M7b1S/qFJmA9ijaIHjOSpLsrFFzRPV61WLZ9RxN6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3613 (0xe1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E554/serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6 Validity Not Before: Nov 22 17:45:31 2024 GMT Not After : Nov 29 17:45:31 2024 GMT Subject: CN=6740c33b-c1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:15:56:f8:74:30:f5:64:76:72:5c:0f:f7: e1:ec:28:59:28:0a:ec:7a:8c:93:ee:7d:93:28:ef: d0:8e:d9:51:af:44:35:43:79:86:71:b8:a0:de:1c: 5b:8f:64:de:67:f4:73:14:75:e4:e4:ae:cb:1f:e6: 18:72:6b:b1:31:a6:7d:34:ed:c7:61:22:5a:4c:11: 2e:48:13:fb:be:29:73:e1:0f:f8:ad:49:af:b6:42: 05:93:1d:4a:6b:aa:27:dd:17:6f:e3:cc:1a:50:5a: b7:4a:f2:38:b1:78:9e:c0:58:ef:f7:ee:44:35:0c: f9:99:ba:a6:7a:a2:01:ec:09:4d:c2:3f:d2:d9:ff: 3d:3f:e4:33:f8:fb:c9:fa:3e:85:30:1e:da:1d:91: a8:75:25:48:4c:97:5c:e9:7c:7b:72:3a:17:dd:d2: b3:57:15:07:f5:04:bb:03:05:75:23:cc:38:f8:93: 56:ec:a3:b2:ea:57:6b:58:5e:f0:7c:67:6f:93:9b: c7:3e:52:62:86:af:2d:62:f7:a9:f7:ab:cd:b3:ce: 40:a3:08:0b:d2:f8:4e:5b:ff:02:dd:0a:5a:27:ee: 91:3a:38:f0:cb:82:68:04:c5:2f:b1:11:6e:a3:54: 97:bb:9b:4d:cf:64:84:13:ab:a4:8d:22:13:0d:ab: 48:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9C:FF:3B:5C:63:80:55:46:39:39:76:FD:CB:A2:4D:70:55:F0:69 X509v3 Authority Key Identifier: keyid:F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c6:70:54:04:c7:5a:7a:2a:73:93:9f:3b:2b:d4:1e:61:25: 41:bd:be:47:c7:fd:8f:a1:c9:ca:16:96:8f:66:e8:ce:50:39: f1:c9:ae:fc:a8:a2:2f:f2:1a:05:a0:df:26:c5:ad:76:3a:49: ef:50:e7:b3:70:94:3c:8a:6f:f2:60:a5:04:c9:f9:5a:9d:2d: a8:5b:c9:da:69:ea:64:d0:3b:95:65:b5:eb:9f:7a:63:3e:1b: ae:32:3b:c8:ad:f4:f3:58:55:e4:4a:bf:49:a4:58:3a:b5:8a: df:b2:bc:0d:bb:11:bf:1f:7f:23:5c:a3:b1:b6:94:82:54:95: 85:45:10:52:4d:f3:d4:fe:da:a9:ca:d9:01:d4:1c:5a:92:d5: 98:a0:99:a6:12:a8:c4:c2:96:bc:8b:76:26:17:48:f9:a1:17: c9:c9:c5:25:d4:c3:0c:be:8d:6d:65:37:97:6f:bf:0d:f5:db: 04:70:b2:dd:3f:0f:cd:89:06:2f:ea:4e:98:6f:e4:1e:67:3d: 20:03:75:10:00:15:12:e8:cc:f8:5d:d3:4a:f5:14:6c:77:44: 4d:cf:e3:bd:06:77:8e:9c:4a:ca:d2:49:90:03:c7:81:83:bd: a4:fd:ae:b3:fd:58:dd:03:f5:74:e3:ab:ab:bd:13:a3:63:a7: d3:7e:3e:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1NTQxMTAvBgNVBAUTKEYzRkMzRThGRTNGQ0Q4NkNBRjBGNzFBRjZGQjQyMzFF QzU3MUJBRjYwHhcNMjQxMTIyMTc0NTMxWhcNMjQxMTI5MTc0NTMxWjAYMRYwFAYD VQQDEw02NzQwYzMzYi1jMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgMVVvh0MPVkdnJcD/fh7ChZKArseoyT7n2TKO/QjtlRr0Q1Q3mGcbig3hxb j2TeZ/RzFHXk5K7LH+YYcmuxMaZ9NO3HYSJaTBEuSBP7vilz4Q/4rUmvtkIFkx1K a6on3Rdv48waUFq3SvI4sXiewFjv9+5ENQz5mbqmeqIB7AlNwj/S2f89P+Qz+PvJ +j6FMB7aHZGodSVITJdc6Xx7cjoX3dKzVxUH9QS7AwV1I8w4+JNW7KOy6ldrWF7w fGdvk5vHPlJihq8tYvep96vNs85AowgL0vhOW/8C3QpaJ+6ROjjwy4JoBMUvsRFu o1SXu5tNz2SEE6ukjSITDatIkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWc/ztc Y4BVRjk5dv3Lok1wVfBpMB8GA1UdIwQYMBaAFPP8Po/j/Nhsrw9xr2+0Ix7Fcbr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTU1NC83RTA1M0U5MDk4 Q0YxMUU5ODYxNzlBODZDNEY5QUUwMi84X3ctai1QODJHeXZEM0d2YjdRakhzVnh1 dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfdy1qLVA4Mkd5dkQzR3ZiN1FqSHNWeHV2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTU1NC83RTA1M0U5MDk4Q0YxMUU5ODYxNzlBODZDNEY5QUUwMi84X3ctai1QODJH eXZEM0d2YjdRakhzVnh1dlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzxnBUBMdaeipzk587K9QeYSVBvb5Hx/2PocnKFpaPZujOUDnxya78 qKIv8hoFoN8mxa12OknvUOezcJQ8im/yYKUEyflanS2oW8naaepk0DuVZbXrn3pj PhuuMjvIrfTzWFXkSr9JpFg6tYrfsrwNuxG/H38jXKOxtpSCVJWFRRBSTfPU/tqp ytkB1BxaktWYoJmmEqjEwpa8i3YmF0j5oRfJycUl1MMMvo1tZTeXb78N9dsEcLLd Pw/NiQYv6k6Yb+QeZz0gA3UQABUS6Mz4XdNK9RRsd0RNz+O9BneOnErK0kmQA8eB g72k/a6z/VjdA/V046urvROjY6fTfj4I -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:04 2024 by rpki-client on console-ams.rpki-client.org