$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft File: pTIumCBoFSdtwSYXlhk4_8bIhIo.mft (raw, json) Hash identifier: KHcuBFQMdfhyz0FcGkzZ8J4d7VxzIEVFDfN9zjpe3mc= Subject key identifier: 20:79:F4:2C:C9:25:A1:CD:B6:2E:CB:9F:C7:48:F7:A0:9F:E6:88:82 Authority key identifier: A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A Certificate issuer: /CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Certificate serial: 0731 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft Manifest number: 0E43 Signing time: Fri 22 Nov 2024 21:18:33 +0000 Manifest this update: Fri 22 Nov 2024 21:18:32 +0000 Manifest next update: Fri 29 Nov 2024 21:18:32 +0000 Files and hashes: 1: pTIumCBoFSdtwSYXlhk4_8bIhIo.crl (hash: IhqwssIqJJkrjenPGGhVNNgL2dqdxkzI/odjpSB4WkE=) 2: F409CCBAAF7611EE85B8CF2DC4F9AE02.roa (hash: iMCCO68A+xFPuTceoqybbjqBZn+lCWKxuzNQ0n+JIxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1841 (0x731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186CDF/serialNumber=A5322E98206815276DC12617961938FFC6C8848A Validity Not Before: Nov 22 21:18:32 2024 GMT Not After : Nov 29 21:18:32 2024 GMT Subject: CN=6740f528-7bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:ff:23:e2:c4:09:98:5c:e4:aa:db:53:cd: 4f:17:97:fc:13:7c:ef:fa:42:06:87:e5:c1:db:0c: 98:43:ac:8d:e4:d4:7a:f6:12:43:17:ac:23:b2:be: dd:e3:f8:a5:01:4c:74:64:69:93:5d:d0:1e:6e:78: 9a:64:77:16:75:c9:5a:cb:4d:66:03:21:98:a3:57: 61:ba:42:07:22:e1:50:f0:f2:e1:fc:85:c8:06:ae: ce:70:81:52:12:79:dc:7f:c0:0a:a0:13:9a:3a:22: 9d:93:9d:fb:3c:e7:1c:3b:92:0d:43:ac:d9:f3:32: 5e:7d:7a:33:bf:4c:79:1f:3a:7c:8b:56:6e:fd:5f: 16:0a:a9:ea:8b:ee:ea:3f:fd:76:61:08:bb:9c:17: a0:08:9f:ea:a0:d2:d3:8b:92:90:61:64:59:7a:f2: 9b:46:07:ab:9d:86:da:5a:e3:8b:fb:f7:a3:fb:57: f4:18:ca:b9:00:75:eb:42:d9:90:a1:57:51:bf:4f: a6:00:5e:1c:77:2f:e2:9b:eb:9a:82:4b:52:fd:d6: 33:5c:d3:a1:25:cb:5d:3d:77:5f:2f:96:95:cf:bf: e6:b7:41:82:ff:11:c1:02:a7:d2:ce:64:5f:f1:2f: 59:6f:14:85:44:a0:c0:87:5b:7c:f1:18:bd:04:f1: bf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:79:F4:2C:C9:25:A1:CD:B6:2E:CB:9F:C7:48:F7:A0:9F:E6:88:82 X509v3 Authority Key Identifier: keyid:A5:32:2E:98:20:68:15:27:6D:C1:26:17:96:19:38:FF:C6:C8:84:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTIumCBoFSdtwSYXlhk4_8bIhIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/pTIumCBoFSdtwSYXlhk4_8bIhIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d3:b5:a2:cf:5d:45:b8:09:88:a5:4f:84:68:68:1c:cc:c9: f8:1b:ff:d8:2e:fc:a0:34:c8:5f:42:55:b1:db:1d:9f:b8:13: e8:88:fc:d4:e8:0a:eb:17:f2:ba:f3:43:de:75:ba:b1:55:fb: c7:e9:f0:88:51:10:de:4f:84:6d:f8:e8:fc:e1:11:a8:f8:fa: 3d:88:5c:1c:d1:d6:cc:de:8d:c0:65:b0:53:41:6a:05:a1:01: 47:b5:52:ca:d7:6e:24:0c:8a:b9:4b:1a:5d:c3:65:85:4a:3c: b1:2b:45:ef:a2:60:23:f0:2a:e8:da:df:11:66:29:a1:8e:9f: 7c:05:38:56:73:14:79:5b:66:a7:17:c0:1f:31:3d:a8:f2:25: 52:93:82:63:ab:bf:32:3b:4d:4a:2d:22:3b:83:87:cb:c0:e2: b3:79:72:3e:60:7d:e9:91:0e:4c:09:f4:17:8d:bc:1f:cb:82: 74:dc:78:a2:5c:9b:41:cf:93:b9:71:19:50:07:bb:5e:2e:a9: 13:81:51:ae:56:31:47:2d:b3:bf:bb:71:1d:d3:a6:97:56:bc: 34:62:ea:14:93:c7:d4:82:b0:7e:66:60:13:a0:20:57:15:68: 89:d9:97:27:1f:df:b0:97:a9:12:06:cf:fb:d6:53:4f:24:7d: 4f:68:2b:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZDREYxMTAvBgNVBAUTKEE1MzIyRTk4MjA2ODE1Mjc2REMxMjYxNzk2MTkzOEZG QzZDODg0OEEwHhcNMjQxMTIyMjExODMyWhcNMjQxMTI5MjExODMyWjAYMRYwFAYD VQQDEw02NzQwZjUyOC03YmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArr3/I+LECZhc5KrbU81PF5f8E3zv+kIGh+XB2wyYQ6yN5NR69hJDF6wjsr7d 4/ilAUx0ZGmTXdAebniaZHcWdclay01mAyGYo1dhukIHIuFQ8PLh/IXIBq7OcIFS Enncf8AKoBOaOiKdk537POccO5INQ6zZ8zJefXozv0x5Hzp8i1Zu/V8WCqnqi+7q P/12YQi7nBegCJ/qoNLTi5KQYWRZevKbRgernYbaWuOL+/ej+1f0GMq5AHXrQtmQ oVdRv0+mAF4cdy/im+uagktS/dYzXNOhJctdPXdfL5aVz7/mt0GC/xHBAqfSzmRf 8S9ZbxSFRKDAh1t88Ri9BPG/HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCB59CzJ JaHNti7Ln8dI96Cf5oiCMB8GA1UdIwQYMBaAFKUyLpggaBUnbcEmF5YZOP/GyISK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx REUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZTZHR3U1lYbGhrNF84Yklo SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUSXVtQ0JvRlNkdHdTWVhsaGs0XzhiSWhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi9wVEl1bUNCb0ZT ZHR3U1lYbGhrNF84YkloSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq07Wiz11FuAmIpU+EaGgczMn4G//YLvygNMhfQlWx2x2fuBPoiPzU 6ArrF/K680PedbqxVfvH6fCIURDeT4Rt+Oj84RGo+Po9iFwc0dbM3o3AZbBTQWoF oQFHtVLK124kDIq5Sxpdw2WFSjyxK0XvomAj8Cro2t8RZimhjp98BThWcxR5W2an F8AfMT2o8iVSk4Jjq78yO01KLSI7g4fLwOKzeXI+YH3pkQ5MCfQXjbwfy4J03Hii XJtBz5O5cRlQB7teLqkTgVGuVjFHLbO/u3Ed06aXVrw0YuoUk8fUgrB+ZmAToCBX FWiJ2ZcnH9+wl6kSBs/71lNPJH1PaCt7 -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org