$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft File: CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json) Hash identifier: yPAqmCdwHvdk7wdteqQMpAJIhtarR/b/8haAfipzDxo= Subject key identifier: 77:B7:A1:0E:55:13:2E:8D:C7:34:90:37:CE:DA:D1:6D:13:5A:58:E7 Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2 Certificate issuer: /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2 Certificate serial: 1871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft Manifest number: 1860 Signing time: Fri 22 Nov 2024 16:30:30 +0000 Manifest this update: Fri 22 Nov 2024 16:30:30 +0000 Manifest next update: Fri 29 Nov 2024 16:30:30 +0000 Files and hashes: 1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: AjS9JPwrAxAqbtUaO7ODg11tRsdYo+TSBuaZc+Rqk6E=) 2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: i+oJi6jpDEgYGCAfWO68s9CmpJ8yXleP5d3NPE288zQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6257 (0x1871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2 Validity Not Before: Nov 22 16:30:30 2024 GMT Not After : Nov 29 16:30:30 2024 GMT Subject: CN=6740b1a6-c466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:b7:0f:6f:fd:d6:24:70:8b:b1:4b:03:2f: 2f:1e:88:bd:b8:df:81:7b:e3:58:3b:de:5e:13:a3: 1e:44:0f:77:12:72:73:ca:f4:13:ea:dc:0f:72:15: c6:40:df:fa:e3:3a:ae:51:18:89:cc:78:39:87:05: b4:55:c3:30:de:8f:46:a6:68:33:16:fc:15:77:a9: 97:58:6c:dc:b7:60:2d:af:fa:bf:ac:85:0a:83:7b: b8:f9:fe:e8:f1:df:eb:2f:44:1e:e1:5c:ae:32:54: 02:49:44:7b:ec:ee:4d:98:f8:6c:7b:e0:bc:7e:48: 7c:07:e5:93:6b:36:c7:f9:85:55:dd:25:a1:63:e8: 51:db:06:71:d7:22:66:25:65:f9:8a:e0:6b:d3:f6: 8a:b3:de:38:74:2d:b1:f7:61:97:74:4c:0c:77:33: 33:15:cb:1d:01:27:03:e3:1b:37:ec:1f:f8:6b:a9: 89:1b:71:96:c6:78:37:09:2d:e5:bf:03:84:f3:35: 40:aa:e9:17:18:bc:28:5f:2f:ac:99:b5:45:0b:9f: df:e9:4d:f5:29:0a:54:ee:0b:a4:27:7d:52:89:36: 3e:26:46:06:16:c8:7b:fd:cc:54:b9:a0:db:40:a9: c8:80:8b:f7:c6:2a:5a:05:62:7a:ca:cd:ba:3f:67: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B7:A1:0E:55:13:2E:8D:C7:34:90:37:CE:DA:D1:6D:13:5A:58:E7 X509v3 Authority Key Identifier: keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:10:5b:dd:5b:55:4d:3f:4f:05:36:a5:3b:db:de:50:d6:a3: 79:f2:fb:b1:90:d6:38:a7:d4:a4:26:87:03:1a:cc:d6:48:e5: 87:7f:38:46:52:b8:a4:59:5a:b1:82:64:f1:17:fe:06:2a:5a: 79:fd:0f:3a:7d:04:68:4a:e2:fe:3c:96:b3:36:40:69:a9:89: 5b:2a:ae:2b:84:ee:08:f6:5f:6f:69:de:6d:5d:b9:b3:52:e2: 45:f4:fa:e6:10:e3:c3:05:cc:2b:d0:56:13:6f:82:8f:5c:59: 90:b7:35:ec:38:e0:be:55:1f:2d:62:81:59:94:1b:6d:56:9c: 48:55:d9:fc:40:28:45:b7:11:2a:6c:07:06:6f:93:eb:3e:a2: ff:6a:44:7f:d8:9f:39:37:ca:f9:f3:39:8e:15:31:af:58:25: 26:42:08:be:3c:5a:c9:92:f6:d5:85:62:03:cf:7d:12:54:39: af:98:e2:85:c3:3a:e9:57:96:39:22:e3:f2:62:04:ce:0b:7d: f7:86:88:16:73:bf:3a:c4:14:c5:d9:70:38:05:59:dd:c3:09: 8f:50:d7:05:91:04:cd:17:7e:5e:ad:cc:6f:0c:59:c8:ef:f3: 56:fe:2c:fc:07:2a:4e:48:4a:6c:ea:5f:55:2f:29:d4:82:ea: d2:b8:f0:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZBRkQxMTAvBgNVBAUTKDBBNDIyQTYzOTdEOEVCNkNCMzU3NzUyOTdDRUI1NUE1 RTE4RkUxRTIwHhcNMjQxMTIyMTYzMDMwWhcNMjQxMTI5MTYzMDMwWjAYMRYwFAYD VQQDEw02NzQwYjFhNi1jNDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc23D2/91iRwi7FLAy8vHoi9uN+Be+NYO95eE6MeRA93EnJzyvQT6twPchXG QN/64zquURiJzHg5hwW0VcMw3o9GpmgzFvwVd6mXWGzct2Atr/q/rIUKg3u4+f7o 8d/rL0Qe4VyuMlQCSUR77O5NmPhse+C8fkh8B+WTazbH+YVV3SWhY+hR2wZx1yJm JWX5iuBr0/aKs944dC2x92GXdEwMdzMzFcsdAScD4xs37B/4a6mJG3GWxng3CS3l vwOE8zVAqukXGLwoXy+smbVFC5/f6U31KQpU7gukJ31SiTY+JkYGFsh7/cxUuaDb QKnIgIv3xipaBWJ6ys26P2eUMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHe3oQ5V Ey6NxzSQN87a0W0TWljnMB8GA1UdIwQYMBaAFApCKmOX2Otss1d1KXzrVaXhj+Hi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkFGRC81QkIyMjMwQTky RjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYyeXpWM1VwZk90VnBlR1A0 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrSXFZNWZZNjJ5elYzVXBmT3RWcGVHUDRlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkFGRC81QkIyMjMwQTkyRjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYy eXpWM1VwZk90VnBlR1A0ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoEFvdW1VNP08FNqU7295Q1qN58vuxkNY4p9SkJocDGszWSOWHfzhG UrikWVqxgmTxF/4GKlp5/Q86fQRoSuL+PJazNkBpqYlbKq4rhO4I9l9vad5tXbmz UuJF9PrmEOPDBcwr0FYTb4KPXFmQtzXsOOC+VR8tYoFZlBttVpxIVdn8QChFtxEq bAcGb5PrPqL/akR/2J85N8r58zmOFTGvWCUmQgi+PFrJkvbVhWIDz30SVDmvmOKF wzrpV5Y5IuPyYgTOC333hogWc786xBTF2XA4BVndwwmPUNcFkQTNF35ercxvDFnI 7/NW/iz8BypOSEps6l9VLynUgurSuPAG -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:05 2024 by rpki-client on console-ams.rpki-client.org