$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft File: h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft (raw, json) Hash identifier: O8b6YurGnsRLhBdgilrZscruDc8JDIB584n08dyoPNQ= Subject key identifier: 45:D3:D8:42:68:76:B4:2F:7C:E7:C4:7E:E6:B9:35:0A:B0:B9:D9:81 Authority key identifier: 87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE Certificate issuer: /CN=A9174CB0/serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft Manifest number: 0783 Signing time: Fri 22 Nov 2024 20:53:08 +0000 Manifest this update: Fri 22 Nov 2024 20:53:07 +0000 Manifest next update: Fri 29 Nov 2024 20:53:07 +0000 Files and hashes: 1: h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl (hash: lZZuWwWsSwXKGX3pQOm0Y62XCdMT7wj5GF0POi3XZWk=) 2: E21E5A44EB5611EA85A6FA39C4F9AE02.roa (hash: ZX23RhuYqkzoLKfZ4oAAbrq1ioRUR074gyPzJolxmF4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174CB0/serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Validity Not Before: Nov 22 20:53:07 2024 GMT Not After : Nov 29 20:53:07 2024 GMT Subject: CN=6740ef33-2b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:bc:b2:3c:43:bb:86:42:0a:34:62:4d:cc: f6:5d:be:41:af:45:df:93:58:1c:8d:88:5c:a8:ca: 4b:4f:f7:bd:42:1c:42:83:e8:eb:1d:8f:f3:30:24: a6:51:67:73:7e:7b:be:a4:02:ba:8b:f5:84:24:9b: 3a:bc:68:2f:d3:29:c9:86:fc:2c:ce:54:13:24:7e: 39:6c:22:8e:a5:43:6b:0e:24:a5:a0:0d:33:d0:9c: 80:98:9e:17:5e:49:15:a4:a1:54:3e:11:1e:68:3e: a2:96:da:51:36:30:3a:3e:16:60:21:9f:f6:bb:e8: db:48:0e:53:14:c3:65:af:67:92:a3:99:d6:c2:9b: 64:b2:16:d2:f1:40:fa:90:00:35:65:16:d1:4f:5d: 4d:51:88:ac:8a:0e:4d:ae:61:4b:b6:fb:fd:81:4d: 1e:26:62:90:5b:af:b7:ef:71:5e:a2:9d:46:36:7e: f8:27:11:50:b6:1c:92:ae:6f:e8:14:bd:23:ba:b4: f9:b0:37:cd:cc:38:fe:2c:57:50:64:ef:11:40:33: f7:f1:58:92:9d:03:4b:01:45:46:14:6f:40:04:fd: a9:b6:50:39:cc:35:6b:df:03:42:da:fd:6e:ce:9d: 77:77:51:0b:ed:2a:cc:f9:5a:37:eb:e2:67:9f:a6: 2e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D3:D8:42:68:76:B4:2F:7C:E7:C4:7E:E6:B9:35:0A:B0:B9:D9:81 X509v3 Authority Key Identifier: keyid:87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:70:e0:0b:de:a3:44:c6:f0:f9:5f:e7:03:0b:a7:9b:bd:99: 6c:6b:bf:2d:05:43:a1:ea:28:8b:ce:fa:32:9f:af:96:83:1e: 82:4c:9a:bc:23:1f:8f:c6:a0:50:22:9b:df:7e:0c:83:b1:29: 00:25:bb:b2:86:5f:fa:21:65:e3:9c:f6:85:28:8a:68:06:8f: 5e:fb:fd:a8:93:7b:04:cc:fc:c7:47:c5:fe:a5:5b:f9:66:5e: 6c:a9:81:8b:62:b1:04:e7:b7:69:9c:f3:54:32:89:45:26:df: b5:30:ce:22:37:42:1d:25:e0:77:24:62:e8:c2:69:31:08:e6: c0:30:6e:a7:d3:bb:16:fd:50:fe:5d:17:c5:56:c4:59:9a:20: a5:09:e2:22:d2:f4:74:94:95:f4:0a:95:3b:7a:26:1a:08:f1: 2b:01:ae:46:e7:97:f4:b7:bc:47:63:fc:78:1e:5c:92:68:9f: 86:8e:5f:bf:df:63:66:3b:db:9b:44:d6:a8:63:93:56:69:ab: 44:ff:21:c8:95:e1:44:d3:c3:41:ae:08:f6:82:71:ad:5f:f2: 51:32:b9:5d:ce:5e:16:98:b9:43:94:56:1d:67:98:e7:8b:8c: 5b:71:50:50:72:46:9b:06:b7:5f:82:e8:bc:a2:11:8a:87:59: 13:27:e1:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDQjAxMTAvBgNVBAUTKDg3QkY1N0ZCQkNFMDY0NUUyOTFENDk0NkU1QzcyMjc2 MjQzNzFBQ0UwHhcNMjQxMTIyMjA1MzA3WhcNMjQxMTI5MjA1MzA3WjAYMRYwFAYD VQQDEw02NzQwZWYzMy0yYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslu8sjxDu4ZCCjRiTcz2Xb5Br0Xfk1gcjYhcqMpLT/e9QhxCg+jrHY/zMCSm UWdzfnu+pAK6i/WEJJs6vGgv0ynJhvwszlQTJH45bCKOpUNrDiSloA0z0JyAmJ4X XkkVpKFUPhEeaD6iltpRNjA6PhZgIZ/2u+jbSA5TFMNlr2eSo5nWwptkshbS8UD6 kAA1ZRbRT11NUYisig5NrmFLtvv9gU0eJmKQW6+373Feop1GNn74JxFQthySrm/o FL0jurT5sDfNzDj+LFdQZO8RQDP38ViSnQNLAUVGFG9ABP2ptlA5zDVr3wNC2v1u zp13d1EL7SrM+Vo36+Jnn6YuOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXT2EJo drQvfOfEfua5NQqwudmBMB8GA1UdIwQYMBaAFIe/V/u84GReKR1JRuXHInYkNxrO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NENCMC9DQ0FDMTQ1NEVC NTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pGNHBIVWxHNWNjaWRpUTNH czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3OVgtN3pnWkY0cEhVbEc1Y2NpZGlRM0dzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NENCMC9DQ0FDMTQ1NEVCNTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pG NHBIVWxHNWNjaWRpUTNHczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdcOAL3qNExvD5X+cDC6ebvZlsa78tBUOh6iiLzvoyn6+Wgx6CTJq8 Ix+PxqBQIpvffgyDsSkAJbuyhl/6IWXjnPaFKIpoBo9e+/2ok3sEzPzHR8X+pVv5 Zl5sqYGLYrEE57dpnPNUMolFJt+1MM4iN0IdJeB3JGLowmkxCObAMG6n07sW/VD+ XRfFVsRZmiClCeIi0vR0lJX0CpU7eiYaCPErAa5G55f0t7xHY/x4HlySaJ+Gjl+/ 32NmO9ubRNaoY5NWaatE/yHIleFE08NBrgj2gnGtX/JRMrldzl4WmLlDlFYdZ5jn i4xbcVBQckabBrdfgui8ohGKh1kTJ+Fo -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org