$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json) Hash identifier: gV30hsTCr0RdiFnqIw/Y2uonTQIM/zS90TqrFmr0I5E= Subject key identifier: 0E:1B:A8:1D:74:18:B8:2E:E4:5D:EB:6B:5F:02:8D:F1:CD:43:97:66 Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Certificate serial: 1B8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft Manifest number: 1B6F Signing time: Wed 20 Nov 2024 16:14:47 +0000 Manifest this update: Wed 20 Nov 2024 16:14:47 +0000 Manifest next update: Wed 27 Nov 2024 16:14:46 +0000 Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: 7h6gZxtj1cV6N/47GBnC7aGrtAa/jnC1Cj2N0Mjs+kQ=) 2: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: wmloY0/V0QnXq/tRdOtLaVNhTM6eRFEy6zw5vyLq6tc=) 3: 398C15006B8711EF96847F5FC4F9AE02.roa (hash: qaCSlpo76LT56u2iFV1SovGKaha1B4MeUrPqr0rFVDo=) 4: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 2XE3S5KbeNDqdCHX2GsEpBeeuPkzYL7gxFBZ/2xM48o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7053 (0x1b8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Validity Not Before: Nov 20 16:14:47 2024 GMT Not After : Nov 27 16:14:46 2024 GMT Subject: CN=673e0af7-600d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0a:10:64:3b:d6:43:f1:c7:d2:83:c7:64:63: f1:c2:22:f2:b3:ec:04:86:f9:7a:e5:b8:02:9f:08: 32:c5:7a:f6:45:09:25:af:04:ff:c5:f4:65:4f:56: 23:fc:65:22:58:0f:4e:22:d3:cc:5f:00:1c:b2:6a: 9e:ce:96:e3:fc:55:7e:2f:00:5b:db:cf:d0:42:f0: 3c:2b:c4:d2:51:c8:a0:01:c7:d4:df:77:34:0e:d9: c1:72:0f:a1:c0:21:d7:8f:84:52:c8:41:a8:6d:32: eb:88:2b:1d:5f:34:f1:f9:99:89:b4:83:8b:a5:ab: c1:9b:f1:70:55:11:1c:c6:f4:02:57:e6:b0:e1:cd: c3:bc:4a:aa:b6:e8:ee:83:ac:c7:67:94:aa:d6:81: 65:45:23:d8:71:b2:c9:4a:0c:21:81:5a:97:1d:9f: 8b:e4:4e:68:20:7a:c0:3b:4a:fa:39:f9:31:ef:97: 01:28:91:ef:9b:a7:55:cf:c2:80:56:22:0e:67:aa: eb:a9:4b:de:10:d2:64:92:45:35:1f:54:dc:d7:8f: 1d:f8:3b:ab:04:aa:3e:38:a4:32:c0:e3:9f:f7:9c: 53:2c:11:6d:90:7a:91:8e:f3:0b:9e:25:07:a2:66: 6a:11:4c:d5:62:bd:2c:33:1b:24:da:a2:7c:d1:51: 8a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1B:A8:1D:74:18:B8:2E:E4:5D:EB:6B:5F:02:8D:F1:CD:43:97:66 X509v3 Authority Key Identifier: keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5e:db:f4:4e:ce:6d:7b:92:3b:f8:80:0d:6b:1b:d0:37:b2: 98:16:27:f2:09:2a:b0:d8:d6:19:b6:ee:96:fa:e6:21:b3:98: 08:72:47:9a:b5:c1:0d:11:8f:e3:ac:2c:7f:2b:f2:ff:68:f6: 07:73:ff:77:5e:15:01:19:af:3b:8a:21:97:51:22:94:64:35: 4b:d2:c1:23:26:7b:e5:69:90:22:63:0c:2a:fd:c3:19:a2:ca: f0:58:35:d5:b1:0d:e5:c5:80:43:94:78:c3:af:4a:f2:a7:8c: ac:f1:0c:eb:52:a8:df:fd:2a:19:8b:2c:c3:43:f8:14:41:0e: 16:bf:f0:9a:2b:09:8f:db:d4:89:a8:7c:f9:61:47:62:fb:df: f6:23:25:f5:4f:5e:62:92:eb:f1:ad:1c:16:d3:08:44:eb:01: 03:1c:be:c4:c6:b9:6d:47:ad:c8:61:ef:2b:a3:2f:10:a4:f6: c3:20:df:bb:25:ee:b2:c4:c8:ee:d5:d9:cf:eb:dd:3d:2d:f1: 0d:9f:5c:99:56:8d:25:74:d0:4d:e0:fb:13:a4:3f:22:79:d9: 6e:27:bd:c6:4c:e9:20:ee:76:83:04:31:65:ff:5e:0f:fa:33: d4:ee:fe:92:b9:b6:1a:01:b0:39:77:9e:77:1c:c2:b4:56:74: 28:1a:fc:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNzgxMTAvBgNVBAUTKDA5Q0ZGRTQ2N0YzQjA5QzNEMDZGMjQ5MTlDRkFDN0Uw MDNFNEJCNzUwHhcNMjQxMTIwMTYxNDQ3WhcNMjQxMTI3MTYxNDQ2WjAYMRYwFAYD VQQDEw02NzNlMGFmNy02MDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QoQZDvWQ/HH0oPHZGPxwiLys+wEhvl65bgCnwgyxXr2RQklrwT/xfRlT1Yj /GUiWA9OItPMXwAcsmqezpbj/FV+LwBb28/QQvA8K8TSUcigAcfU33c0DtnBcg+h wCHXj4RSyEGobTLriCsdXzTx+ZmJtIOLpavBm/FwVREcxvQCV+aw4c3DvEqqtuju g6zHZ5Sq1oFlRSPYcbLJSgwhgVqXHZ+L5E5oIHrAO0r6Ofkx75cBKJHvm6dVz8KA ViIOZ6rrqUveENJkkkU1H1Tc148d+DurBKo+OKQywOOf95xTLBFtkHqRjvMLniUH omZqEUzVYr0sMxsk2qJ80VGKfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4bqB10 GLgu5F3ra18CjfHNQ5dmMB8GA1UdIwQYMBaAFAnP/kZ/OwnD0G8kkZz6x+AD5Lt1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE3OC82OEQzMzQ5MEZE NjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0NjUFFieVNSblBySDRBUGt1 M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjXy1Sbjg3Q2NQUWJ5U1JuUHJINEFQa3UzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE3OC82OEQzMzQ5MEZENjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0Nj UFFieVNSblBySDRBUGt1M1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuXtv0Ts5te5I7+IANaxvQN7KYFifyCSqw2NYZtu6W+uYhs5gIckea tcENEY/jrCx/K/L/aPYHc/93XhUBGa87iiGXUSKUZDVL0sEjJnvlaZAiYwwq/cMZ osrwWDXVsQ3lxYBDlHjDr0ryp4ys8QzrUqjf/SoZiyzDQ/gUQQ4Wv/CaKwmP29SJ qHz5YUdi+9/2IyX1T15ikuvxrRwW0whE6wEDHL7ExrltR63IYe8roy8QpPbDIN+7 Je6yxMju1dnP6909LfENn1yZVo0ldNBN4PsTpD8iedluJ73GTOkg7naDBDFl/14P +jPU7v6SubYaAbA5d553HMK0VnQoGvxB -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:23 2024 by rpki-client on console-ams.rpki-client.org