$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft File: 7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json) Hash identifier: xUrdvd1ZaExgiFaP54RBuHj2HQmk/XLG98+tw66qZjU= Subject key identifier: 71:BC:CD:A6:F9:C7:54:B3:1F:0C:3F:00:BB:47:8D:F6:EB:D9:7F:E8 Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B Certificate issuer: /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft Manifest number: D8 Signing time: Thu 21 Nov 2024 03:43:36 +0000 Manifest this update: Thu 21 Nov 2024 03:43:36 +0000 Manifest next update: Thu 28 Nov 2024 03:43:36 +0000 Files and hashes: 1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: EvZNriM/dnpIYPfURS6Uq28sxOhqzeQeYokfECevrUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Validity Not Before: Nov 21 03:43:36 2024 GMT Not After : Nov 28 03:43:36 2024 GMT Subject: CN=673eac68-120f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0f:1e:6c:14:5b:5f:78:90:2d:3b:2b:02:fa: 9a:f0:ba:43:48:0a:73:0b:59:7f:4a:cc:f0:14:fc: 10:ec:0f:2e:1e:74:dd:ab:04:25:6d:cc:df:c4:16: 62:b2:5c:3b:d7:e9:05:21:ec:84:bf:73:46:81:b5: 7a:e7:d0:b2:7f:17:1e:8c:99:56:21:4d:74:76:68: ce:34:74:51:83:41:cd:e9:70:02:d3:a7:7e:fa:3e: 33:fc:e3:42:6d:c9:db:64:f3:c9:fd:59:84:e4:3d: 17:0d:9d:b2:17:e6:2b:ca:69:10:13:58:39:5d:9e: 69:b4:63:27:c6:fa:82:54:5b:35:9f:24:2c:2f:04: e8:33:4a:a1:cd:f1:c7:92:f5:62:1b:4e:6d:95:29: e1:1d:01:42:6f:19:3a:2d:61:79:c8:c5:0e:d1:2c: d7:f8:1c:10:1e:2a:31:07:cb:b3:2c:72:97:09:c8: 02:f3:c0:ab:35:3d:1d:e8:89:85:4f:b7:7a:df:29: e8:c2:4f:b6:7f:76:f2:0e:49:2a:8b:12:d6:66:87: 40:ef:cd:de:b3:56:be:51:43:8a:72:fc:26:7e:da: 14:56:71:43:a9:b1:c0:1b:13:4a:46:c8:49:8f:c5: 63:4c:53:a4:8b:3a:2a:09:13:23:fe:2d:71:ac:cd: 89:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BC:CD:A6:F9:C7:54:B3:1F:0C:3F:00:BB:47:8D:F6:EB:D9:7F:E8 X509v3 Authority Key Identifier: keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d5:99:f3:a4:88:cd:b6:d4:c0:c1:e9:23:cb:94:22:b2:bb: 1a:ab:e8:ab:b7:de:8d:9e:fb:ae:a3:51:0d:d7:f6:c4:a7:29: ee:1f:89:1d:a9:b1:15:97:ec:fe:55:c0:c3:a7:7e:5b:1e:35: 2f:9a:dc:0d:12:47:37:db:66:4f:1c:81:14:15:b7:bc:e4:2e: 6d:aa:1e:dc:f0:1f:38:dd:ae:86:d8:79:29:c5:62:76:a2:95: e9:01:65:ab:6d:ae:74:49:b7:81:ce:32:5e:7e:0c:98:9b:5a: 72:44:dd:23:c7:32:ad:3a:87:ff:ed:52:ce:c3:52:e6:e4:00: ab:6d:c7:b7:36:07:0a:af:fb:15:6b:e2:04:3f:2d:3e:0b:d2: b4:58:fb:56:5a:c3:03:ac:ca:0d:77:99:f5:e2:63:8e:d4:6f: 1a:6f:78:9c:ef:82:2e:ce:c5:41:3a:32:30:b6:59:e5:70:22: 0d:38:45:b8:9f:a3:3e:ba:f2:21:b1:75:16:81:f2:89:90:fd: 75:4e:0f:10:54:c8:7b:fe:23:c0:99:54:dd:58:42:5d:cc:8b: 93:57:5a:99:a4:39:a6:0b:1d:3d:68:32:1a:b2:31:a4:dc:05: 99:7d:45:18:0a:7c:c6:5b:55:32:d1:b4:d7:3f:94:fa:ef:fe: 1a:58:49:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKEVFMjRDOThCOTYxMzEwRjUwREYwRENCMkQyNzY5NkJB MEVCRDdENEIwHhcNMjQxMTIxMDM0MzM2WhcNMjQxMTI4MDM0MzM2WjAYMRYwFAYD VQQDEw02NzNlYWM2OC0xMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1w8ebBRbX3iQLTsrAvqa8LpDSApzC1l/SszwFPwQ7A8uHnTdqwQlbczfxBZi slw71+kFIeyEv3NGgbV659CyfxcejJlWIU10dmjONHRRg0HN6XAC06d++j4z/ONC bcnbZPPJ/VmE5D0XDZ2yF+YrymkQE1g5XZ5ptGMnxvqCVFs1nyQsLwToM0qhzfHH kvViG05tlSnhHQFCbxk6LWF5yMUO0SzX+BwQHioxB8uzLHKXCcgC88CrNT0d6ImF T7d63ynowk+2f3byDkkqixLWZodA783es1a+UUOKcvwmftoUVnFDqbHAGxNKRshJ j8VjTFOkizoqCRMj/i1xrM2J1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHG8zab5 x1SzHww/ALtHjfbr2X/oMB8GA1UdIwQYMBaAFO4kyYuWExD1DfDcstJ2lroOvX1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9BODhGRkNGODVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQVU44Tnl5MG5hV3VnNjlm VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdpVEppNVlURVBVTjhOeXkwbmFXdWc2OWZVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9BODhGRkNGODVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQ VU44Tnl5MG5hV3VnNjlmVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE1ZnzpIjNttTAwekjy5Qisrsaq+irt96Nnvuuo1EN1/bEpynuH4kd qbEVl+z+VcDDp35bHjUvmtwNEkc322ZPHIEUFbe85C5tqh7c8B843a6G2HkpxWJ2 opXpAWWrba50SbeBzjJefgyYm1pyRN0jxzKtOof/7VLOw1Lm5ACrbce3NgcKr/sV a+IEPy0+C9K0WPtWWsMDrMoNd5n14mOO1G8ab3ic74IuzsVBOjIwtlnlcCINOEW4 n6M+uvIhsXUWgfKJkP11Tg8QVMh7/iPAmVTdWEJdzIuTV1qZpDmmCx09aDIasjGk 3AWZfUUYCnzGW1Uy0bTXP5T67/4aWEmu -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:08 2024 by rpki-client on console-ams.rpki-client.org