$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft File: fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json) Hash identifier: i8tiuR9DcvPWPf7S0blGP7dleXhhAd7oX0hWfGlGcfc= Subject key identifier: 76:D1:F9:64:85:96:65:7C:52:4A:3B:95:8E:D6:30:82:8D:5A:17:3F Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Certificate serial: 05CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft Manifest number: 05BF Signing time: Fri 22 Nov 2024 22:38:46 +0000 Manifest this update: Fri 22 Nov 2024 22:38:46 +0000 Manifest next update: Fri 29 Nov 2024 22:38:46 +0000 Files and hashes: 1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: uX6aMbTq5MaTtZDTE9w8yBlrcG2RbdfzoiPGso2griQ=) 2: 76053AC29ED311EBB06C4E4DC4F9AE02.roa (hash: 3hRCIGv8J6ZPD7eqCFcSdXHz6UnDLueLvhKMUoFXKZg=) 3: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: VUfYYGUfVgXIhkgz5s5HyLNUsWHidDwIj7X1Pl5aTe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1482 (0x5ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Validity Not Before: Nov 22 22:38:46 2024 GMT Not After : Nov 29 22:38:46 2024 GMT Subject: CN=674107f6-03b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:1e:9b:ec:01:d5:29:d8:c4:12:88:ae:d3: df:58:01:85:6e:fe:f9:47:25:8b:79:c2:f4:6e:a3: 70:50:58:14:6a:b0:94:26:04:6a:e3:8c:15:70:90: 2d:73:36:40:04:27:bd:79:f3:ba:c4:01:1f:fb:9e: 97:30:1d:a2:71:ca:00:8f:e7:53:5b:62:ff:0e:d3: 57:fa:5d:e8:91:05:53:69:72:ae:56:bf:87:19:c2: 4e:3c:b0:38:4d:c8:95:15:17:31:07:e1:83:44:91: 76:52:94:3b:52:b9:69:81:31:3e:4c:6f:ce:20:12: 72:00:9e:55:ac:00:77:2e:22:ae:13:f7:c5:09:73: 7f:65:cf:e8:bb:11:18:4e:d0:83:77:ae:59:20:ec: ff:d7:ed:d1:5b:89:2e:c8:ee:ee:4f:a9:c9:fd:5e: f3:82:2f:f2:59:43:4f:39:1d:7b:b6:7d:aa:0f:50: fc:2b:8d:00:78:8c:5b:21:71:cb:fe:4a:d6:ab:d6: ff:79:21:87:21:7f:ba:71:01:26:bc:c0:15:26:25: 1f:29:53:32:50:cb:a7:8c:2c:fb:f0:60:bf:50:8d: f6:98:1c:a6:6b:27:f8:6e:57:24:41:a5:78:c4:bf: ea:cf:26:b5:c3:08:e0:63:53:15:08:54:e3:89:ec: 5b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D1:F9:64:85:96:65:7C:52:4A:3B:95:8E:D6:30:82:8D:5A:17:3F X509v3 Authority Key Identifier: keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c3:d0:da:a7:57:33:43:33:6f:e1:dc:8c:fb:de:ea:b6:9b: 0a:91:8b:78:56:88:3c:04:a0:ef:69:4a:dc:a2:b0:0c:87:06: 6c:59:6f:b0:0a:80:fd:94:6e:51:0c:e7:75:d5:f6:43:2e:11: c6:28:3b:1b:d9:e7:55:77:02:f2:f3:10:72:12:14:e9:6a:cb: 57:f9:e8:80:7e:4b:64:78:a6:dc:29:ba:cf:33:3f:80:20:2d: 37:dd:cf:7e:89:72:64:41:01:0d:66:0d:0e:f5:4f:e8:8a:67: 91:d2:0c:aa:58:b2:c2:68:e0:7c:77:2d:41:de:bf:df:4f:72: bb:a0:04:69:14:ee:3a:dc:87:bc:12:5d:de:0a:fe:7b:1d:07: 44:f5:6b:61:c2:38:f8:ac:2f:bd:d4:4a:66:c6:8b:e5:1e:39: df:a3:e1:f7:3c:be:98:8a:74:ec:54:72:e5:2a:9f:33:fb:c6: 4e:cc:12:c9:5c:a8:a8:96:1f:51:56:96:fa:bf:01:85:f8:04: 1a:52:61:81:a4:e4:dc:57:8e:dd:d4:08:91:44:f9:75:69:bb: 36:49:d7:0a:48:27:0a:35:ca:bb:ae:c1:a6:ce:7c:54:ab:0a: 71:4b:14:ba:12:c3:2f:c7:6a:d1:ec:d9:82:5c:c4:10:c6:59: 03:2f:b0:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFODAxMTAvBgNVBAUTKDdDQjBFNTgyNTEwMUM2NjU0NDNGMkNGQUIxOUU4NEQx QTc3OTc1OTcwHhcNMjQxMTIyMjIzODQ2WhcNMjQxMTI5MjIzODQ2WjAYMRYwFAYD VQQDEw02NzQxMDdmNi0wM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhUem+wB1SnYxBKIrtPfWAGFbv75RyWLecL0bqNwUFgUarCUJgRq44wVcJAt czZABCe9efO6xAEf+56XMB2iccoAj+dTW2L/DtNX+l3okQVTaXKuVr+HGcJOPLA4 TciVFRcxB+GDRJF2UpQ7UrlpgTE+TG/OIBJyAJ5VrAB3LiKuE/fFCXN/Zc/ouxEY TtCDd65ZIOz/1+3RW4kuyO7uT6nJ/V7zgi/yWUNPOR17tn2qD1D8K40AeIxbIXHL /krWq9b/eSGHIX+6cQEmvMAVJiUfKVMyUMunjCz78GC/UI32mBymayf4blckQaV4 xL/qzya1wwjgY1MVCFTjiexbzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbR+WSF lmV8Uko7lY7WMIKNWhc/MB8GA1UdIwQYMBaAFHyw5YJRAcZlRD8s+rGehNGneXWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U4MC9EMjc4Q0E2NDlF NzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnhtVkVQeXo2c1o2RTBhZDVk WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMRGxnbEVCeG1WRVB5ejZzWjZFMGFkNWRaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U4MC9EMjc4Q0E2NDlFNzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnht VkVQeXo2c1o2RTBhZDVkWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+w9Dap1czQzNv4dyM+97qtpsKkYt4Vog8BKDvaUrcorAMhwZsWW+w CoD9lG5RDOd11fZDLhHGKDsb2edVdwLy8xByEhTpastX+eiAfktkeKbcKbrPMz+A IC033c9+iXJkQQENZg0O9U/oimeR0gyqWLLCaOB8dy1B3r/fT3K7oARpFO463Ie8 El3eCv57HQdE9Wthwjj4rC+91EpmxovlHjnfo+H3PL6YinTsVHLlKp8z+8ZOzBLJ XKiolh9RVpb6vwGF+AQaUmGBpOTcV47d1AiRRPl1abs2SdcKSCcKNcq7rsGmznxU qwpxSxS6EsMvx2rR7NmCXMQQxlkDL7DB -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org