$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft File: if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json) Hash identifier: mBCMinfoMFCHxU8Fe+MhUt6Cn4p83UlG4HYlnzxnNnQ= Subject key identifier: 7E:BB:2B:9F:51:50:CF:6D:AD:5E:6A:E9:2F:69:C3:1F:62:77:D6:97 Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Certificate serial: 3442 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft Manifest number: 3430 Signing time: Wed 20 Nov 2024 15:05:13 +0000 Manifest this update: Wed 20 Nov 2024 15:05:12 +0000 Manifest next update: Wed 27 Nov 2024 15:05:12 +0000 Files and hashes: 1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: HDjnuVA1Q1Kzzt7qFoi6A4sOETkvT9qDOiwqHpwavK0=) 2: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: zDQWuqCZIhUi8QY/I4kch58V8XHnqGl1lQQctTfprP4=) 3: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: l8ghcFMDKwWn7mEoy2VKp7tzKqBu2ry3hOlnwXhnj7Q=) 4: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 4Cfi8enYLubX2wFBBV7Fm3xiJ/Lbq6nGpawgJqzCyB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13378 (0x3442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Validity Not Before: Nov 20 15:05:12 2024 GMT Not After : Nov 27 15:05:12 2024 GMT Subject: CN=673dfaa9-5b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:e0:7c:f4:bd:11:c8:74:0c:6d:7f:1f:f4: bf:91:ec:c8:9d:ef:3d:ed:34:c8:7d:07:b8:9f:27: c2:9d:b6:1e:a7:ec:fd:6d:61:da:69:4b:b5:fc:82: 07:69:a4:f1:f8:f4:bc:1e:5d:e8:b2:1b:99:dd:dc: 67:87:46:5e:58:b6:78:e4:c2:4b:e8:09:7f:10:db: 9d:4e:27:05:33:a1:dd:7e:f2:42:c1:04:aa:a2:ff: ea:d9:02:f3:22:98:24:23:29:a1:ea:c6:8f:9f:2c: 0f:3b:e2:62:69:41:a4:05:75:fd:8c:a8:30:83:33: da:7e:26:d7:9e:4c:fb:b4:c9:b2:b9:ed:3b:47:2e: 72:f5:57:6c:10:13:84:67:1c:73:39:f3:4c:c0:c4: 6e:30:6c:dc:07:79:c1:52:4e:d0:69:9f:51:1d:70: a7:e6:57:a7:2e:56:e0:b0:ff:7a:91:c6:f6:19:81: 64:b8:31:ca:6a:09:a5:6a:0e:8b:c3:bf:50:5d:bf: 24:c6:71:87:48:65:1f:1c:b5:56:4a:c7:70:62:c1: 82:36:69:09:f1:43:ba:58:d9:0a:27:c7:1b:fa:34: c4:0b:b4:e5:48:03:1f:0f:f1:b9:6b:69:b7:08:cd: 89:3c:d8:c7:5c:5b:bc:2f:a9:2e:75:41:fd:b1:19: ea:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BB:2B:9F:51:50:CF:6D:AD:5E:6A:E9:2F:69:C3:1F:62:77:D6:97 X509v3 Authority Key Identifier: keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5b:3c:8c:c4:1d:58:43:b3:6b:89:ce:e9:fb:4f:ad:81:bd: bf:56:4e:7e:e9:4e:a3:22:8f:b9:35:35:a8:d5:21:2e:fa:59: 02:41:1b:7c:dd:2d:2c:4f:81:bc:68:7a:91:07:98:94:fb:e1: 99:83:96:3d:26:64:83:90:e6:92:51:2b:d5:62:8e:16:95:8f: e5:c3:c0:53:56:4d:92:f7:0b:a3:d9:a3:55:d1:c8:43:f8:7c: e4:3d:b3:e5:2a:c1:c3:64:6b:67:54:1f:12:5e:88:54:d0:6c: 5c:41:4b:5c:e9:0b:32:17:34:d5:9c:c9:1d:9e:06:6c:1e:9d: 2b:6f:e9:eb:d9:0c:12:7c:70:14:bd:63:ec:ff:b3:3e:4c:eb: c3:91:85:1c:5c:49:5d:d1:7f:0c:c8:fd:7a:29:ef:57:54:41: 74:43:ee:3e:e3:36:25:46:08:ae:6b:2d:b5:7e:fd:f2:9d:a6: 45:19:a5:94:61:ec:0c:00:40:6a:3b:00:a0:c5:44:6c:e9:c8: 06:10:cd:a8:3a:ac:1b:1d:f3:79:9d:47:5d:f9:b2:b7:68:e1: 23:82:33:33:24:38:8b:af:54:06:d8:5e:ad:c8:5c:8b:7b:e1: 89:e1:3d:29:6b:e7:b3:ab:49:f0:20:d0:13:92:40:0e:28:c2: 9b:bd:30:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzNDQxMTAvBgNVBAUTKDg5RkQyN0M1MDY3QjRDRjQxMjI5NkZFQkE2Q0U2RDgz MTE4NTgwMEIwHhcNMjQxMTIwMTUwNTEyWhcNMjQxMTI3MTUwNTEyWjAYMRYwFAYD VQQDEw02NzNkZmFhOS01YjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJvgfPS9Ech0DG1/H/S/kezIne897TTIfQe4nyfCnbYep+z9bWHaaUu1/IIH aaTx+PS8Hl3oshuZ3dxnh0ZeWLZ45MJL6Al/ENudTicFM6HdfvJCwQSqov/q2QLz IpgkIymh6saPnywPO+JiaUGkBXX9jKgwgzPafibXnkz7tMmyue07Ry5y9VdsEBOE ZxxzOfNMwMRuMGzcB3nBUk7QaZ9RHXCn5lenLlbgsP96kcb2GYFkuDHKagmlag6L w79QXb8kxnGHSGUfHLVWSsdwYsGCNmkJ8UO6WNkKJ8cb+jTEC7TlSAMfD/G5a2m3 CM2JPNjHXFu8L6kudUH9sRnq6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH67K59R UM9trV5q6S9pwx9id9aXMB8GA1UdIwQYMBaAFIn9J8UGe0z0Eilv66bObYMRhYAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTM0NC81MTVDQUJFMDFE QTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQUVNLV19ycHM1dGd4R0Zn QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmMG54UVo3VFBRU0tXX3JwczV0Z3hHRmdBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTM0NC81MTVDQUJFMDFEQTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQ UVNLV19ycHM1dGd4R0ZnQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIWzyMxB1YQ7Nric7p+0+tgb2/Vk5+6U6jIo+5NTWo1SEu+lkCQRt8 3S0sT4G8aHqRB5iU++GZg5Y9JmSDkOaSUSvVYo4WlY/lw8BTVk2S9wuj2aNV0chD +HzkPbPlKsHDZGtnVB8SXohU0GxcQUtc6QsyFzTVnMkdngZsHp0rb+nr2QwSfHAU vWPs/7M+TOvDkYUcXEld0X8MyP16Ke9XVEF0Q+4+4zYlRgiuay21fv3ynaZFGaWU YewMAEBqOwCgxURs6cgGEM2oOqwbHfN5nUdd+bK3aOEjgjMzJDiLr1QG2F6tyFyL e+GJ4T0pa+ezq0nwINATkkAOKMKbvTAM -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:22 2024 by rpki-client on console-ams.rpki-client.org