$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft File: f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json) Hash identifier: ugxtj5nydPAwiPfnEo64p2z4hMkNpIY8rHd3avnJwKM= Subject key identifier: 7A:B6:C4:3E:F7:0A:E3:46:68:EE:99:7B:CB:F0:69:08:12:E4:12:4B Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 Certificate issuer: /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Certificate serial: 02AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft Manifest number: 028B Signing time: Wed 27 Nov 2024 01:18:42 +0000 Manifest this update: Wed 27 Nov 2024 01:18:42 +0000 Manifest next update: Wed 04 Dec 2024 01:18:42 +0000 Files and hashes: 1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: 8PUBKm2zrXvwKDAjIzx3R5zb8lvXwobVek++O0xAX20=) 2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: WMqw6puvAMI/KOIEmj7+KVGtQT9V3R2V9xclcYWsYsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 01:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159 Validity Not Before: Nov 27 01:18:42 2024 GMT Not After : Dec 4 01:18:42 2024 GMT Subject: CN=67467372-7028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:b1:27:1f:3f:48:b9:96:b8:18:d1:a1:c0: 2a:c8:a4:b6:40:c8:4a:8e:5f:ad:6b:48:9c:e9:68: bd:3d:08:2c:cb:26:b3:5e:35:15:d1:ee:e6:97:aa: 73:30:a9:28:03:47:b6:2d:47:ea:b9:b8:1e:63:df: 8d:47:50:d8:03:81:64:12:ff:e0:e7:06:02:ca:1e: 73:7a:5d:31:fc:ad:ac:a9:4a:97:ca:72:69:83:23: a1:05:58:a4:23:d6:d1:77:ce:1b:4e:33:4f:fa:0d: d2:84:e4:14:01:c8:6e:01:b2:59:08:02:cb:55:f8: 33:c2:44:0d:fd:d3:2c:6d:19:1f:96:26:97:57:38: 9e:af:9d:86:7c:a6:ed:e2:f4:90:25:05:28:db:e9: 81:ac:61:88:11:95:83:c5:79:63:3c:5c:b5:ef:58: c2:73:c7:12:b3:ef:04:c6:19:07:93:d6:fc:5a:9b: e5:34:65:d3:88:47:14:5a:b8:a5:02:24:ea:ce:44: a0:e4:d1:e1:07:ee:bf:18:9a:f3:32:68:1b:91:2f: 53:a5:88:30:2d:73:af:0f:69:8c:b6:17:07:2b:32: ca:d3:fa:a3:f2:e6:2f:52:0d:99:bb:0f:9d:4f:14: a6:d4:1a:88:c5:4c:98:6a:0d:bc:6e:b6:63:18:c1: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B6:C4:3E:F7:0A:E3:46:68:EE:99:7B:CB:F0:69:08:12:E4:12:4B X509v3 Authority Key Identifier: keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:df:47:3d:3e:9c:94:a8:7e:0b:fe:52:b0:cc:68:7e:d6:b8: d8:99:4c:c3:11:f3:dc:a0:21:0a:2d:0f:a3:f5:a8:50:61:fb: a9:bf:9d:da:0a:c8:e4:70:28:d6:02:c2:ae:fb:52:f5:9f:0b: a5:24:08:aa:02:06:4e:33:53:14:47:d6:da:ff:63:66:13:16: 06:1e:79:0f:e7:cc:ff:c6:be:6a:24:05:fe:ca:2e:fa:ef:25: 24:58:fe:ce:92:1b:21:21:87:16:bd:9c:99:41:e9:79:d9:3b: 5f:65:15:f3:e7:68:ac:c6:f0:cd:f1:7b:e1:78:2d:7f:bb:fc: 07:c3:17:08:af:04:52:69:ff:95:50:da:6a:21:83:4e:d4:41: 86:1e:ee:94:4a:7e:0b:47:17:6d:6a:f7:03:38:14:3a:61:67: b9:85:86:2a:15:2d:67:2a:4d:41:30:0f:c9:a5:6f:68:65:7d: fe:ff:10:68:59:8c:b9:f9:a3:f3:e4:7e:60:d4:29:33:cb:03: 4c:ce:77:1b:95:1e:80:82:3f:48:58:b4:56:04:30:74:89:03: b2:94:91:41:16:c5:8a:49:1e:5e:eb:b6:22:2c:82:37:a1:1b: 3f:77:ad:02:03:2d:c6:37:ea:91:ae:9c:3a:4b:0d:37:25:8e: b6:46:7a:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCRjcxMTAvBgNVBAUTKDdGQ0RFQzMxRkFGQTdFNTI3REE3QTk3MDM5MzIwNDBG ODQ1NTgxNTkwHhcNMjQxMTI3MDExODQyWhcNMjQxMjA0MDExODQyWjAYMRYwFAYD VQQDEw02NzQ2NzM3Mi03MDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxSxJx8/SLmWuBjRocAqyKS2QMhKjl+ta0ic6Wi9PQgsyyazXjUV0e7ml6pz MKkoA0e2LUfqubgeY9+NR1DYA4FkEv/g5wYCyh5zel0x/K2sqUqXynJpgyOhBVik I9bRd84bTjNP+g3ShOQUAchuAbJZCALLVfgzwkQN/dMsbRkfliaXVzier52GfKbt 4vSQJQUo2+mBrGGIEZWDxXljPFy171jCc8cSs+8ExhkHk9b8WpvlNGXTiEcUWril AiTqzkSg5NHhB+6/GJrzMmgbkS9TpYgwLXOvD2mMthcHKzLK0/qj8uYvUg2Zuw+d TxSm1BqIxUyYag28brZjGMFm9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHq2xD73 CuNGaO6Ze8vwaQgS5BJLMB8GA1UdIwQYMBaAFH/N7DH6+n5SfaepcDkyBA+EVYFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUJGNy80QjY2RjEyQ0Yy QzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZsSjlwNmx3T1RJRUQ0UlZn VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4M3NNZnI2ZmxKOXA2bHdPVElFRDRSVmdWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUJGNy80QjY2RjEyQ0YyQzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZs SjlwNmx3T1RJRUQ0UlZnVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe30c9PpyUqH4L/lKwzGh+1rjYmUzDEfPcoCEKLQ+j9ahQYfupv53a CsjkcCjWAsKu+1L1nwulJAiqAgZOM1MUR9ba/2NmExYGHnkP58z/xr5qJAX+yi76 7yUkWP7OkhshIYcWvZyZQel52TtfZRXz52isxvDN8XvheC1/u/wHwxcIrwRSaf+V UNpqIYNO1EGGHu6USn4LRxdtavcDOBQ6YWe5hYYqFS1nKk1BMA/JpW9oZX3+/xBo WYy5+aPz5H5g1CkzywNMzncblR6Agj9IWLRWBDB0iQOylJFBFsWKSR5e67YiLII3 oRs/d60CAy3GN+qRrpw6Sw03JY62RnrG -----END CERTIFICATE-----Generated at Wed Nov 27 02:04:20 2024 by rpki-client on console-ams.rpki-client.org