$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: fqqpnYeWBUf8CXAwlsIdvWh2aof63gKLv84YAynoZ/U= Subject key identifier: D4:27:EC:32:A9:F5:93:38:70:40:23:E8:BF:2E:DC:F7:F8:B2:F0:E7 Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0EB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0EAC Signing time: Fri 22 Nov 2024 17:40:33 +0000 Manifest this update: Fri 22 Nov 2024 17:40:33 +0000 Manifest next update: Fri 29 Nov 2024 17:40:33 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: FSo5Yg+vwBdRV3Uw4X0h5OKhgZK3g3OEqFwnHM+urak=) 2: 39275D0C232511EC925DF318C4F9AE02.roa (hash: IUxOhh5i3F8AXkiEHRy2ZFcsd2EB0EPXzUnc2RHCPV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3765 (0xeb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Nov 22 17:40:33 2024 GMT Not After : Nov 29 17:40:33 2024 GMT Subject: CN=6740c211-0032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:0f:a7:73:2d:53:eb:4d:44:5c:34:ab:c4: 1d:38:2f:48:9e:8c:11:8f:88:32:84:40:c1:93:89: 37:e3:f8:8c:0a:7f:65:f3:cf:7b:c2:e3:27:d8:ff: 31:d0:26:89:60:5b:bb:80:27:38:25:d6:a6:c7:48: 1b:04:b5:23:af:52:84:15:ff:36:98:82:8e:4b:0b: 1e:de:3c:38:a8:83:46:02:5d:02:26:4a:c5:f0:a4: 8b:6a:69:f9:b0:e5:c4:77:a9:28:63:2f:69:8d:13: f8:2c:e7:e3:cb:f6:96:76:9b:1f:ba:d0:c9:7b:9f: 76:d3:27:d4:90:ad:ee:09:4e:73:e9:90:3b:5d:65: a9:a2:4a:00:26:e8:5a:38:93:dd:8b:15:d1:92:98: ad:e1:b4:fb:0b:e1:ed:b5:f9:ae:e8:9e:f2:f6:51: b6:df:38:e8:73:fc:99:dc:b7:03:6b:20:ea:fb:e3: d5:37:a6:a8:1d:6d:50:d1:a3:32:31:19:eb:9b:fb: f9:c9:5a:da:f4:1d:10:19:e9:6a:1d:c9:51:b5:bd: 69:b7:2b:a1:0a:c8:8f:23:63:fe:3d:f6:28:4a:00: 2c:40:56:38:48:18:b4:78:f0:62:ca:e8:4c:a9:f6: 32:a7:2e:8e:59:9d:0f:c9:51:11:68:e7:17:e9:52: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:27:EC:32:A9:F5:93:38:70:40:23:E8:BF:2E:DC:F7:F8:B2:F0:E7 X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:0c:e4:23:f2:50:79:10:a6:7f:d4:c1:e9:42:65:4a:74:fd: 18:ec:ea:c9:3e:e8:42:65:20:63:03:4c:2d:1c:e2:d8:a8:98: 19:07:a6:b7:30:3d:b8:07:82:12:de:e2:c3:e7:7a:8c:95:da: b8:91:d4:0f:9d:3a:3b:01:cd:db:2c:bc:43:f8:c7:e1:28:96: 7d:b3:18:c0:ca:d8:79:95:e1:12:04:2c:88:ce:0e:59:26:12: 93:cc:b9:c5:a0:4c:f4:3c:48:37:1d:28:f1:4f:43:46:db:cc: 70:b4:ab:70:f8:15:eb:bb:52:7d:de:76:51:b5:8d:40:f3:92: 99:4b:92:cc:66:7b:8e:51:06:25:dc:2b:b5:2f:fa:13:9e:24: 62:16:aa:b7:24:c6:cb:96:0a:86:0d:19:f4:6e:e5:e8:4d:09: f4:b1:92:0a:5e:ce:3b:29:e7:aa:e5:f1:9f:4e:da:4f:01:b6: d4:1d:9e:22:5f:6d:ef:18:54:68:61:bd:84:c9:7f:67:72:47: 5a:0f:0e:08:17:c3:fe:28:5a:b2:86:8a:dd:3a:b0:a1:e8:7b: a4:df:86:65:fc:aa:99:04:ae:26:a3:8b:d0:06:89:ab:7d:bc: b4:ff:1a:67:e7:82:8b:12:51:b8:5d:bb:0b:c7:71:d8:d6:e7: 56:2e:02:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjQxMTIyMTc0MDMzWhcNMjQxMTI5MTc0MDMzWjAYMRYwFAYD VQQDEw02NzQwYzIxMS0wMDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzB4Pp3MtU+tNRFw0q8QdOC9InowRj4gyhEDBk4k34/iMCn9l8897wuMn2P8x 0CaJYFu7gCc4Jdamx0gbBLUjr1KEFf82mIKOSwse3jw4qINGAl0CJkrF8KSLamn5 sOXEd6koYy9pjRP4LOfjy/aWdpsfutDJe5920yfUkK3uCU5z6ZA7XWWpokoAJuha OJPdixXRkpit4bT7C+Httfmu6J7y9lG23zjoc/yZ3LcDayDq++PVN6aoHW1Q0aMy MRnrm/v5yVra9B0QGelqHclRtb1ptyuhCsiPI2P+PfYoSgAsQFY4SBi0ePBiyuhM qfYypy6OWZ0PyVERaOcX6VJ8dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQn7DKp 9ZM4cEAj6L8u3Pf4svDnMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1DOQj8lB5EKZ/1MHpQmVKdP0Y7OrJPuhCZSBjA0wtHOLYqJgZB6a3 MD24B4IS3uLD53qMldq4kdQPnTo7Ac3bLLxD+MfhKJZ9sxjAyth5leESBCyIzg5Z JhKTzLnFoEz0PEg3HSjxT0NG28xwtKtw+BXru1J93nZRtY1A85KZS5LMZnuOUQYl 3Cu1L/oTniRiFqq3JMbLlgqGDRn0buXoTQn0sZIKXs47Keeq5fGfTtpPAbbUHZ4i X23vGFRoYb2EyX9nckdaDw4IF8P+KFqyhordOrCh6Huk34Zl/KqZBK4mo4vQBomr fby0/xpn54KLElG4XbsLx3HY1udWLgJK -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org