$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft File: siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json) Hash identifier: zY+wGwCEeG15qcmUt3BtZADh2yQEd+pU3DqRvGQNKt8= Subject key identifier: FC:25:B7:A8:46:89:24:46:3B:8B:0A:26:62:12:52:3A:FD:D6:B3:BC Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft Manifest number: A7 Signing time: Mon 25 Nov 2024 04:24:38 +0000 Manifest this update: Mon 25 Nov 2024 04:24:38 +0000 Manifest next update: Mon 02 Dec 2024 04:24:38 +0000 Files and hashes: 1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: 65DmuZ8Efnn4Xf48BZyh1CAGZI3J9O+ctWlppwoHSRo=) 2: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: LTeECQk5/azIOJTf8rGaT2gWz1Gmd2inlmhftO85Egc=) 3: 467B9370E1B311EE9D77BF36C4F9AE02.roa (hash: olYzUk3gwLC0xRa80SA0mb8yJeeTyjxH0wAAm7kRikA=) 4: D8210F284C2D11EFB69E1971C4F9AE02.roa (hash: WqGj3maimmt9ctgBv9I2mOJJVp3Tw9OaIsq0AH+SBzE=) 5: C6AB3818EDD211EEB5875527C4F9AE02.roa (hash: oaUh0fbEUMsjPh/pU6go3+rO6X22ZK4YJJK2zrHExd0=) 6: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: stQvqSgEe9eoYY5+iLzps6D0J/Yk9AXd8PNpZXOA3CY=) 7: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: y2+jECrc8lfM7n74JBiDAZoaROHkscHBwjJbSIy8thQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Nov 25 04:24:38 2024 GMT Not After : Dec 2 04:24:38 2024 GMT Subject: CN=6743fc06-12aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8a:b6:4c:e8:74:a4:df:e4:ff:54:08:a2:b4: 88:3d:49:fa:cc:cc:4b:26:f4:79:24:03:7e:19:10: 88:ef:53:ed:78:dc:92:18:60:75:3d:a9:71:6f:d3: 72:32:4c:cb:d1:a4:00:e9:48:eb:4c:30:11:bf:fa: d3:10:aa:b5:06:bf:34:e0:14:7f:45:89:41:98:95: 27:e2:c8:85:57:a6:95:5a:47:fa:b3:0d:71:cf:03: a8:0c:6e:e7:95:1d:de:9e:40:2a:bf:48:4c:52:5c: 48:d9:e5:d6:56:55:cd:3c:18:13:fe:24:21:52:b0: 50:54:fc:8c:81:90:85:d5:d7:fb:39:66:50:eb:6d: cf:bb:8e:47:fe:ff:31:21:f2:1f:40:23:37:b7:4b: 35:84:37:b0:43:82:cf:17:cd:da:2e:35:b7:e5:e4: eb:99:df:3e:29:c1:cf:40:4c:36:9e:02:a0:43:80: b8:a2:79:c8:b0:c2:63:cd:a8:8c:e9:35:fc:6b:90: 05:b0:e8:ea:d7:9e:bb:2d:c7:f2:cb:02:37:71:20: 5d:ae:06:5e:16:26:3d:86:6c:0f:0f:71:66:55:0d: 4c:4d:4a:ed:f4:d9:94:3d:9e:95:aa:5e:45:23:cf: db:56:f1:77:a6:9a:32:99:0e:2a:f7:ec:2d:a2:8a: ec:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:25:B7:A8:46:89:24:46:3B:8B:0A:26:62:12:52:3A:FD:D6:B3:BC X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:2c:e6:23:5b:91:a7:b2:08:c0:e5:ab:12:14:e0:40:33:3f: 53:a5:b8:62:8b:0c:ca:c2:32:52:53:5a:6d:b8:02:19:e1:b0: 35:04:4d:95:fc:ed:fa:af:e2:21:6b:30:db:f9:dc:34:f8:cb: fb:9e:6b:1b:73:22:6a:55:30:9a:04:1d:c0:ff:80:54:6b:e7: 24:9c:06:0c:3a:38:2a:2b:7f:2e:03:ff:e7:01:52:cd:5e:54: 22:8b:21:28:88:2d:c5:3e:1a:4a:89:96:fc:f6:ef:2e:1c:6c: 49:d2:7d:6a:8e:e3:a6:71:12:7e:b3:0b:bb:db:e7:27:ec:ed: ed:71:7c:98:df:c9:71:7a:9e:c2:2c:b9:40:c8:df:8b:4b:a5: a8:3e:0f:1f:b1:a2:92:c9:08:e0:2c:f5:ad:a1:44:eb:7d:e5: 65:01:cf:8a:63:ad:f4:14:3e:6f:15:8a:13:84:d5:2b:57:da: 49:3e:5e:a0:52:76:55:6d:f8:1e:dc:65:cb:db:9d:89:2e:b2: a6:17:fe:63:42:0e:79:2f:ec:b9:1e:fc:e8:b9:02:71:7c:3a: 56:12:96:1f:0c:2f:e7:67:a6:c9:57:f2:92:63:cd:87:e2:06: 6f:73:3c:ea:c2:aa:36:73:40:d6:a5:1b:11:06:f8:80:5e:36: 3e:ac:87:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjQxMTI1MDQyNDM4WhcNMjQxMjAyMDQyNDM4WjAYMRYwFAYD VQQDEw02NzQzZmMwNi0xMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14q2TOh0pN/k/1QIorSIPUn6zMxLJvR5JAN+GRCI71PteNySGGB1Palxb9Ny MkzL0aQA6UjrTDARv/rTEKq1Br804BR/RYlBmJUn4siFV6aVWkf6sw1xzwOoDG7n lR3enkAqv0hMUlxI2eXWVlXNPBgT/iQhUrBQVPyMgZCF1df7OWZQ623Pu45H/v8x IfIfQCM3t0s1hDewQ4LPF83aLjW35eTrmd8+KcHPQEw2ngKgQ4C4onnIsMJjzaiM 6TX8a5AFsOjq1567LcfyywI3cSBdrgZeFiY9hmwPD3FmVQ1MTUrt9NmUPZ6Vql5F I8/bVvF3ppoymQ4q9+wtoorsOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwlt6hG iSRGO4sKJmISUjr91rO8MB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTY2Ri84RkNDOUQyOEM2RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGta U0dvLVllalhpSkk1SXI5cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXLOYjW5GnsgjA5asSFOBAMz9TpbhiiwzKwjJSU1ptuAIZ4bA1BE2V /O36r+IhazDb+dw0+Mv7nmsbcyJqVTCaBB3A/4BUa+cknAYMOjgqK38uA//nAVLN XlQiiyEoiC3FPhpKiZb89u8uHGxJ0n1qjuOmcRJ+swu72+cn7O3tcXyY38lxep7C LLlAyN+LS6WoPg8fsaKSyQjgLPWtoUTrfeVlAc+KY630FD5vFYoThNUrV9pJPl6g UnZVbfge3GXL252JLrKmF/5jQg55L+y5HvzouQJxfDpWEpYfDC/nZ6bJV/KSY82H 4gZvczzqwqo2c0DWpRsRBviAXjY+rIeY -----END CERTIFICATE-----Generated at Mon Nov 25 06:05:07 2024 by rpki-client on console-fra.rpki-client.org