$ rpki-client -vvf rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft File: 8mzvyND2FJXOpWXLF0zPkuc6CJk.mft (raw, json) Hash identifier: V8Vh/oMrPDEISe7MUCIunpB7uvdywUnIBwgmWOXslSc= Subject key identifier: 69:EC:D1:48:99:11:24:46:DA:96:C5:60:51:11:29:50:08:93:1E:CB Authority key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 Certificate issuer: /CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft Manifest number: 57 Signing time: Thu 17 Oct 2024 05:33:21 +0000 Manifest this update: Thu 17 Oct 2024 05:33:20 +0000 Manifest next update: Thu 24 Oct 2024 05:33:20 +0000 Files and hashes: 1: 8mzvyND2FJXOpWXLF0zPkuc6CJk.crl (hash: itiCgt4Cl2wtKUvE/vxpCgyhqQaxpNCXn9rkKD/TTSk=) 2: 81DED04C065411EFAAF0D25DC4F9AE02.roa (hash: PM+dQHiuzPJ4TjqXf8laXn6T0B+DAOl9u0Z/i0Jm5/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Oct 2024 05:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Validity Not Before: Oct 17 05:33:20 2024 GMT Not After : Oct 24 05:33:20 2024 GMT Subject: CN=6710a1a0-e461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:53:89:38:7a:a8:b0:35:b3:37:f8:3b:b8: 8d:21:fb:30:11:08:45:58:3e:3c:9a:0d:3f:ef:3e: 4b:10:7e:6c:2f:00:59:84:c5:d2:50:27:ed:5a:40: ce:1d:9a:52:91:57:76:89:19:de:d0:c9:30:2f:33: 0e:7e:e5:15:9b:f4:4b:f0:a4:af:58:ba:56:46:b3: 7c:86:4e:99:e1:09:17:00:eb:48:57:6b:73:9a:bf: c4:3d:cc:25:40:ee:d4:85:b5:c4:5d:bb:6a:ae:d0: 5b:17:23:25:cd:dd:b1:af:13:29:cd:ea:4d:79:27: c0:91:ac:06:f4:84:7c:6a:a8:ca:7e:25:f9:67:df: 98:24:6b:26:ce:c1:fb:ff:cb:22:6a:53:c7:1a:3c: 6d:5e:25:cb:ed:53:5d:16:e7:1e:dc:b6:b0:dd:7d: fb:11:ff:f3:30:54:15:21:57:dc:18:f7:b6:7e:6a: 6d:8f:99:a7:b0:03:0f:fb:1f:66:65:48:b4:ff:24: 7f:b6:30:da:eb:b5:27:67:63:6e:28:97:2d:e0:36: a1:0e:af:b6:80:ff:40:27:8b:6a:bc:05:d2:60:36: 77:cc:89:84:74:f0:15:7f:5d:af:db:e9:f6:33:ae: f4:6d:fe:02:a1:6a:1e:13:64:c6:d0:5a:18:29:69: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EC:D1:48:99:11:24:46:DA:96:C5:60:51:11:29:50:08:93:1E:CB X509v3 Authority Key Identifier: keyid:F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6c:eb:7d:51:65:6d:d7:11:91:0f:c9:2f:88:20:a4:a1:f5: 2c:5b:7b:36:a2:c2:64:19:35:5d:cd:cd:11:48:07:d2:eb:79: 65:2b:4c:0d:6c:16:46:89:9e:c6:49:2d:ac:b9:16:3c:70:19: f6:25:fd:02:94:c8:3d:78:80:65:12:68:24:ab:0a:3b:56:18: 77:76:19:88:53:f1:14:35:42:a5:a4:6c:5b:b4:7c:32:bc:40: 9b:29:27:ca:f3:e4:d2:c9:60:30:8b:19:6e:73:48:c1:1c:e0: 8f:10:cb:07:2a:9d:f7:bc:e0:fb:9f:01:f3:c2:ec:d2:71:fa: ed:68:fb:36:3a:9e:dd:28:cc:84:1c:29:7d:45:2b:c0:88:5d: 00:f4:d7:f3:55:7a:22:6e:a4:74:27:b7:eb:bf:e8:8e:11:a4: ca:c5:02:2d:e4:17:dc:8e:62:3a:52:42:4c:6f:a5:5e:82:c6: 37:f9:d8:da:bd:44:13:12:ed:80:0a:28:ba:ea:72:ad:12:3e: 87:19:20:9e:e8:00:8a:a1:0d:5b:df:9a:fd:be:f1:8d:cc:51: b9:ff:2c:70:f9:75:bc:53:be:f9:a7:f8:66:15:3c:de:ed:77: e9:d2:07:fe:c3:3f:6f:f1:07:0f:66:47:05:c1:90:ea:10:c9: 0d:b1:ed:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEEwQTExMC8GA1UEBRMoRjI2Q0VGQzhEMEY2MTQ5NUNFQTU2NUNCMTc0Q0NGOTJF NzNBMDg5OTAeFw0yNDEwMTcwNTMzMjBaFw0yNDEwMjQwNTMzMjBaMBgxFjAUBgNV BAMTDTY3MTBhMWEwLWU0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEWlOJOHqosDWzN/g7uI0h+zARCEVYPjyaDT/vPksQfmwvAFmExdJQJ+1aQM4d mlKRV3aJGd7QyTAvMw5+5RWb9EvwpK9YulZGs3yGTpnhCRcA60hXa3Oav8Q9zCVA 7tSFtcRdu2qu0FsXIyXN3bGvEynN6k15J8CRrAb0hHxqqMp+Jfln35gkaybOwfv/ yyJqU8caPG1eJcvtU10W5x7ctrDdffsR//MwVBUhV9wY97Z+am2PmaewAw/7H2Zl SLT/JH+2MNrrtSdnY24oly3gNqEOr7aA/0Ani2q8BdJgNnfMiYR08BV/Xa/b6fYz rvRt/gKhah4TZMbQWhgpaRDRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaezRSJkR JEbalsVgUREpUAiTHsswHwYDVR0jBBgwFoAU8mzvyND2FJXOpWXLF0zPkuc6CJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0QTBBL0Q0OTFEODgwMDY1 MzExRUZCOTY3MDM1MUM0RjlBRTAyLzhtenZ5TkQyRkpYT3BXWExGMHpQa3VjNkNK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOG16dnlORDJGSlhPcFdYTEYwelBrdWM2Q0prLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 QTBBL0Q0OTFEODgwMDY1MzExRUZCOTY3MDM1MUM0RjlBRTAyLzhtenZ5TkQyRkpY T3BXWExGMHpQa3VjNkNKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJs631RZW3XEZEPyS+IIKSh9SxbezaiwmQZNV3NzRFIB9LreWUrTA1s FkaJnsZJLay5FjxwGfYl/QKUyD14gGUSaCSrCjtWGHd2GYhT8RQ1QqWkbFu0fDK8 QJspJ8rz5NLJYDCLGW5zSMEc4I8Qywcqnfe84PufAfPC7NJx+u1o+zY6nt0ozIQc KX1FK8CIXQD01/NVeiJupHQnt+u/6I4RpMrFAi3kF9yOYjpSQkxvpV6Cxjf52Nq9 RBMS7YAKKLrqcq0SPocZIJ7oAIqhDVvfmv2+8Y3MUbn/LHD5dbxTvvmn+GYVPN7t d+nSB/7DP2/xBw9mRwXBkOoQyQ2x7Rs= -----END CERTIFICATE-----Generated at Thu Oct 17 08:05:48 2024 by rpki-client on console-ams.rpki-client.org