$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: Io/Y88YMcxxI7b0CTt3oXGMCOElWSm1beh5n27qxjlw= Subject key identifier: 83:AA:A0:3D:DB:07:1E:A5:91:BD:25:17:EB:08:11:27:F6:6D:89:42 Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 12C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 12B9 Signing time: Fri 22 Nov 2024 17:04:28 +0000 Manifest this update: Fri 22 Nov 2024 17:04:28 +0000 Manifest next update: Fri 29 Nov 2024 17:04:28 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: LNMH1lvuPOGn6kATdYCMVerzia4V4HIPnwyAzX0sOfk=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: Ai9962mG9CfH4Up1uRkcnN8BqOS0dn7/PxJB7iHyLMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4802 (0x12c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Nov 22 17:04:28 2024 GMT Not After : Nov 29 17:04:28 2024 GMT Subject: CN=6740b99c-b70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6e:f5:c1:45:95:55:b6:54:b3:83:58:33:80: fa:e9:b4:5f:fe:56:f0:fb:a8:48:61:0e:af:f7:57: 87:ec:4e:61:9b:a2:a5:ad:66:b6:72:8e:2f:c3:28: 9c:b8:5e:65:96:32:c5:d4:f9:3f:28:ca:dc:03:6b: 05:47:23:5f:65:06:73:61:13:e1:2a:4c:a5:86:ed: 69:ed:99:16:fe:70:f4:0e:6d:c0:4a:98:87:4a:eb: ba:fa:10:09:21:de:d8:1f:d3:69:cd:bf:74:e8:f0: 49:ce:bb:dc:20:18:d0:54:5e:4e:4f:cf:e4:e7:bf: 51:6f:48:a6:9a:30:58:d2:fa:c7:1f:70:18:0e:5b: ff:23:2b:f2:72:56:c3:77:6a:a9:a3:33:50:cd:17: 81:c2:6d:88:b6:49:49:a9:1a:78:a9:b0:e2:45:04: 9f:24:6c:37:cb:b7:b8:60:dc:3b:37:92:e8:f1:a0: ac:e1:cc:8c:de:70:c9:d5:48:40:5b:2e:59:b9:9d: 2b:57:96:1b:5e:96:39:53:8a:bb:f9:e5:fe:ec:66: b5:9f:95:6f:59:5a:22:ed:1e:6a:ed:77:56:a5:8d: 2d:f2:14:56:a2:9a:0f:9b:bf:01:e6:30:6a:8f:4d: e0:ac:ee:d2:f4:16:63:e9:5c:ca:9a:2a:1b:30:cc: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AA:A0:3D:DB:07:1E:A5:91:BD:25:17:EB:08:11:27:F6:6D:89:42 X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:b7:96:6f:89:25:ed:2b:a3:ad:a3:e8:f7:23:f3:c4:68:6f: a2:7f:14:8c:5c:97:5c:76:7a:b2:a2:36:f1:ca:b8:9a:ef:c8: 76:f3:11:cb:da:75:f1:95:f5:a6:91:c5:13:e8:c2:c2:06:79: 62:fc:95:bc:45:60:b8:de:1b:66:7b:ee:10:00:ba:11:df:0d: 15:a2:68:de:04:92:dd:25:41:b3:56:17:f1:d0:18:a5:6a:d6: 3f:67:6f:de:4a:e8:3b:20:25:e7:6a:36:a8:52:e2:4f:7c:87: 04:8c:04:00:d6:f0:85:0d:4f:b2:d4:d3:b9:e9:58:bf:fe:78: 6e:43:26:46:82:bc:29:ee:86:24:f2:43:04:37:84:0e:ab:f3: 11:f4:56:68:ac:ef:c4:90:1b:1f:92:fd:41:d5:80:35:3b:91: d7:16:8c:89:21:ee:38:db:58:ab:56:14:00:19:ff:40:f3:01: 98:3c:e9:d0:a6:11:b0:21:dc:40:f8:94:b0:8d:76:bd:65:95: 43:1a:1a:57:bd:c3:72:9c:61:84:c3:34:b2:6e:08:15:10:77: bd:54:ec:3c:84:ac:1c:ed:cf:8b:4e:71:f6:6e:82:0c:d9:2e: b4:88:99:97:4a:c8:12:6f:38:dd:1f:c2:a3:5f:8b:e9:8c:26: 2e:9e:3b:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjQxMTIyMTcwNDI4WhcNMjQxMTI5MTcwNDI4WjAYMRYwFAYD VQQDEw02NzQwYjk5Yy1iNzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1271wUWVVbZUs4NYM4D66bRf/lbw+6hIYQ6v91eH7E5hm6KlrWa2co4vwyic uF5lljLF1Pk/KMrcA2sFRyNfZQZzYRPhKkylhu1p7ZkW/nD0Dm3ASpiHSuu6+hAJ Id7YH9Npzb906PBJzrvcIBjQVF5OT8/k579Rb0immjBY0vrHH3AYDlv/IyvyclbD d2qpozNQzReBwm2ItklJqRp4qbDiRQSfJGw3y7e4YNw7N5Lo8aCs4cyM3nDJ1UhA Wy5ZuZ0rV5YbXpY5U4q7+eX+7Ga1n5VvWVoi7R5q7XdWpY0t8hRWopoPm78B5jBq j03grO7S9BZj6VzKmiobMMyhSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOqoD3b Bx6lkb0lF+sIESf2bYlCMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgt5ZviSXtK6Oto+j3I/PEaG+ifxSMXJdcdnqyojbxyria78h28xHL 2nXxlfWmkcUT6MLCBnli/JW8RWC43htme+4QALoR3w0VomjeBJLdJUGzVhfx0Bil atY/Z2/eSug7ICXnajaoUuJPfIcEjAQA1vCFDU+y1NO56Vi//nhuQyZGgrwp7oYk 8kMEN4QOq/MR9FZorO/EkBsfkv1B1YA1O5HXFoyJIe4421irVhQAGf9A8wGYPOnQ phGwIdxA+JSwjXa9ZZVDGhpXvcNynGGEwzSybggVEHe9VOw8hKwc7c+LTnH2boIM 2S60iJmXSsgSbzjdH8KjX4vpjCYunjuo -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org