$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json) Hash identifier: g2BhyiK5xrKVzItAehYgEkyTCN5PF0dbxiU4830RPos= Subject key identifier: B2:E2:9F:46:85:82:70:CF:60:53:A5:BE:26:BC:D2:61:6C:5C:2C:D1 Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft Manifest number: 0100 Signing time: Sat 23 Nov 2024 03:16:10 +0000 Manifest this update: Sat 23 Nov 2024 03:16:10 +0000 Manifest next update: Sat 30 Nov 2024 03:16:10 +0000 Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: oAyDbyY9Sit0PJXtYy2hwvWCsKZtPOHb3Ynv5CqTDUk=) 2: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: GPm7lgmcPBXG9N85GnRJZzvPZx2wbvxxB75DoAT8PYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Validity Not Before: Nov 23 03:16:10 2024 GMT Not After : Nov 30 03:16:10 2024 GMT Subject: CN=674148fa-fcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9d:d1:f1:7e:32:8e:fc:a0:96:95:97:61:18: 95:65:db:8f:09:55:3e:a1:db:96:13:20:d4:cc:bf: b3:32:d1:d2:45:83:68:32:2f:f2:01:e5:a8:9a:36: 7a:2b:64:66:a2:be:8f:96:96:db:cc:a6:45:fd:b9: f3:05:42:d1:dc:30:86:18:75:7c:37:4b:21:7a:4c: 55:22:57:85:c1:1f:f3:96:28:1d:ac:e9:4f:a5:6a: 53:4f:d4:ee:7d:37:61:c2:9e:d4:7b:5c:79:b5:ad: 8c:80:17:d3:72:08:6e:d8:cf:a9:e7:d2:da:a5:7f: e4:5e:28:6f:23:9a:fe:6d:e0:c1:ca:44:1e:89:7f: b1:bd:0a:8c:15:86:8a:8b:fd:a8:e9:97:d1:c6:74: 40:f0:8f:d4:82:9a:42:13:1b:e4:f8:96:c8:f5:2e: be:9a:8d:d8:58:05:d8:8c:5e:27:4e:de:9d:80:3d: ad:6b:92:4d:cd:1d:c6:03:af:fe:07:26:a3:b3:66: 4a:b2:fc:1a:64:ed:79:62:21:aa:91:48:b2:5f:ee: 25:7a:10:36:06:ec:0c:e4:3a:0a:b5:17:23:28:ea: 11:55:06:a2:0c:a3:f1:97:9f:16:3c:d7:e4:95:25: 7a:fb:e4:af:eb:47:7b:61:f9:01:67:4e:02:d8:ab: 23:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E2:9F:46:85:82:70:CF:60:53:A5:BE:26:BC:D2:61:6C:5C:2C:D1 X509v3 Authority Key Identifier: keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e8:4a:53:3d:b4:7f:5f:4b:e1:a7:29:2f:a9:ed:a0:7f:49: 9f:46:f0:7f:19:bb:64:9a:14:10:57:f9:45:e6:0e:01:81:0d: 41:85:8b:2a:77:19:ac:8a:34:56:c5:c3:e0:7e:53:50:40:55: 3a:7a:7c:e7:2c:a2:2b:a3:c5:97:d1:cc:05:c6:0e:fd:35:e0: ac:df:43:48:95:17:7d:3c:08:11:b2:c6:13:80:96:83:9c:81: 13:17:e8:66:88:7f:25:19:8e:06:92:22:e9:41:41:eb:05:66: 35:1f:2b:e6:dd:9e:75:79:dc:2b:70:05:29:76:3a:2d:3c:e5: ca:85:00:cd:a5:11:08:cd:8e:ea:85:80:5f:e7:86:36:3b:1d: d8:38:bb:9b:b0:13:5c:01:d0:84:38:85:ae:71:f5:4b:a4:55: 21:01:f7:5f:36:5b:6d:50:97:00:39:64:e3:2c:6b:6b:4c:e3: b0:77:66:3d:fa:79:7a:94:b2:ca:71:56:d6:b7:83:b9:e2:e5: 8f:67:d6:e2:42:b3:34:ae:c6:b7:58:fc:7f:f7:43:1c:e2:81: 3e:ad:8e:f0:f9:1f:4b:07:66:c2:4c:27:22:fa:fd:ec:20:32: 1e:41:ea:cd:77:db:ce:ca:7a:9c:e8:3d:8a:4b:35:8e:47:2f: ab:c9:6e:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZERkMxMTAvBgNVBAUTKEIwMzUyQUJCNDNGMEE4NTU2NDlCOUQ3NjFBNjU1QzNG QzYwRjZFNjMwHhcNMjQxMTIzMDMxNjEwWhcNMjQxMTMwMDMxNjEwWjAYMRYwFAYD VQQDEw02NzQxNDhmYS1mY2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA353R8X4yjvyglpWXYRiVZduPCVU+oduWEyDUzL+zMtHSRYNoMi/yAeWomjZ6 K2Rmor6PlpbbzKZF/bnzBULR3DCGGHV8N0shekxVIleFwR/zligdrOlPpWpTT9Tu fTdhwp7Ue1x5ta2MgBfTcghu2M+p59LapX/kXihvI5r+beDBykQeiX+xvQqMFYaK i/2o6ZfRxnRA8I/UgppCExvk+JbI9S6+mo3YWAXYjF4nTt6dgD2ta5JNzR3GA6/+ Byajs2ZKsvwaZO15YiGqkUiyX+4lehA2BuwM5DoKtRcjKOoRVQaiDKPxl58WPNfk lSV6++Sv60d7YfkBZ04C2KsjtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLin0aF gnDPYFOlvia80mFsXCzRMB8GA1UdIwQYMBaAFLA1KrtD8KhVZJuddhplXD/GD25j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkRGQy9CRTQwQzEzNjI0 OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FGVmttNTEyR21WY1A4WVBi bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NEVXF1MFB3cUZWa201MTJHbVZjUDhZUGJtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkRGQy9CRTQwQzEzNjI0OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FG VmttNTEyR21WY1A4WVBibU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY6EpTPbR/X0vhpykvqe2gf0mfRvB/GbtkmhQQV/lF5g4BgQ1BhYsq dxmsijRWxcPgflNQQFU6enznLKIro8WX0cwFxg79NeCs30NIlRd9PAgRssYTgJaD nIETF+hmiH8lGY4GkiLpQUHrBWY1Hyvm3Z51edwrcAUpdjotPOXKhQDNpREIzY7q hYBf54Y2Ox3YOLubsBNcAdCEOIWucfVLpFUhAfdfNlttUJcAOWTjLGtrTOOwd2Y9 +nl6lLLKcVbWt4O54uWPZ9biQrM0rsa3WPx/90Mc4oE+rY7w+R9LB2bCTCci+v3s IDIeQerNd9vOynqc6D2KSzWORy+ryW6G -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:09 2024 by rpki-client on console-ams.rpki-client.org