$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: 8YwoivoBJdSScLOfgabC7UbOiObAjFLb2kFcsmXg/78= Subject key identifier: 59:84:09:9F:B2:BA:D0:9B:29:A2:60:C5:EA:3B:66:9A:41:4D:F4:2A Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0AAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0AA6 Signing time: Wed 20 Nov 2024 19:14:49 +0000 Manifest this update: Wed 20 Nov 2024 19:14:49 +0000 Manifest next update: Wed 27 Nov 2024 19:14:49 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: 8GjJhxhY/gub1yo3XuNuPzfuqP7UtC1JTp7CZH5luI8=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: 0iqs/HxuwqHawKwVtyf9NZs5o720KQbaDZmDxQoYfvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2733 (0xaad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: Nov 20 19:14:49 2024 GMT Not After : Nov 27 19:14:49 2024 GMT Subject: CN=673e3529-c28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:73:99:b3:fb:1f:15:27:56:eb:6f:81:e8:ce: d2:c2:1a:fa:79:53:a1:02:d7:bd:22:c5:ef:81:98: 94:81:5b:e2:91:fa:71:f6:71:f5:cf:e2:8b:1d:c8: 62:7c:e4:7c:12:5a:76:7e:4d:0a:83:dc:40:65:97: ca:e8:a2:39:81:23:99:a3:5b:7f:d4:cf:86:a5:e8: 5a:f6:5c:eb:bc:95:5b:c0:f5:41:01:b8:c7:60:0b: 1d:5a:4e:36:e3:32:e0:77:e7:80:b2:71:25:1d:0b: af:76:6f:54:5c:06:75:71:e4:c6:76:c9:44:8b:c1: bc:28:39:fd:80:9b:84:1e:4b:18:35:17:ad:74:46: 7d:70:23:94:f0:a4:fe:39:f6:62:e6:99:c7:f0:b1: 17:2c:11:af:2a:e5:cc:b8:d8:17:73:aa:38:02:02: 50:2d:05:6c:90:54:11:b5:5d:65:c3:dc:13:a5:d5: a7:01:cc:16:44:86:61:e7:fa:c8:d2:ee:2c:64:9b: e6:d2:a8:da:75:25:72:aa:e5:cf:c9:55:da:54:3c: 23:9e:46:11:21:04:0c:37:6d:dc:b6:61:92:50:f5: 6f:aa:20:65:f9:4f:4d:ae:cf:5b:fe:84:29:29:43: a1:8a:90:f7:fe:ee:5e:18:f0:44:d0:f4:d2:44:02: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:84:09:9F:B2:BA:D0:9B:29:A2:60:C5:EA:3B:66:9A:41:4D:F4:2A X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b6:c8:bf:45:e8:f0:3b:a8:82:56:42:16:fa:5d:19:98:22: 91:95:95:57:9a:3e:6b:61:70:aa:85:b3:0f:9a:80:7b:99:4a: 83:38:9d:e5:a5:2c:41:de:09:f4:f9:78:bc:cc:3f:5f:05:7b: e6:d8:ea:79:ff:ab:a9:07:77:05:5d:f9:94:6b:5d:ca:cf:44: fa:82:17:bb:84:14:a6:a1:18:ad:60:fd:e6:41:f3:cf:4e:d2: e6:6e:8e:46:14:f2:38:79:cf:34:be:ff:8f:6c:26:aa:74:60: 44:43:89:09:8e:ab:0b:10:12:bf:8e:e0:e1:47:01:64:67:75: ba:67:52:01:53:5e:21:f9:9b:5c:8e:09:42:e1:3e:68:0e:71: b4:e1:37:a4:1d:c0:79:83:0f:09:1f:ab:a6:4f:ce:10:09:17: d7:2b:df:54:11:e4:f4:3c:3c:b8:8e:2b:16:ee:74:74:fb:b1: 82:3f:e9:c6:d5:1d:28:22:77:5e:11:0b:c8:79:95:1a:57:d1: 7d:38:95:05:20:07:02:00:3c:82:d2:40:28:09:b3:76:73:bc: 7c:83:eb:8e:af:25:a4:1e:f2:17:73:9b:90:0b:ec:85:42:20: c3:9c:dc:51:f8:1a:36:73:65:d5:ba:b9:70:3d:d0:de:bb:4f: b3:f3:39:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjQxMTIwMTkxNDQ5WhcNMjQxMTI3MTkxNDQ5WjAYMRYwFAYD VQQDEw02NzNlMzUyOS1jMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3OZs/sfFSdW62+B6M7Swhr6eVOhAte9IsXvgZiUgVvikfpx9nH1z+KLHchi fOR8Elp2fk0Kg9xAZZfK6KI5gSOZo1t/1M+Gpeha9lzrvJVbwPVBAbjHYAsdWk42 4zLgd+eAsnElHQuvdm9UXAZ1ceTGdslEi8G8KDn9gJuEHksYNRetdEZ9cCOU8KT+ OfZi5pnH8LEXLBGvKuXMuNgXc6o4AgJQLQVskFQRtV1lw9wTpdWnAcwWRIZh5/rI 0u4sZJvm0qjadSVyquXPyVXaVDwjnkYRIQQMN23ctmGSUPVvqiBl+U9Nrs9b/oQp KUOhipD3/u5eGPBE0PTSRAL3ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmECZ+y utCbKaJgxeo7ZppBTfQqMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMtsi/RejwO6iCVkIW+l0ZmCKRlZVXmj5rYXCqhbMPmoB7mUqDOJ3l pSxB3gn0+Xi8zD9fBXvm2Op5/6upB3cFXfmUa13Kz0T6ghe7hBSmoRitYP3mQfPP TtLmbo5GFPI4ec80vv+PbCaqdGBEQ4kJjqsLEBK/juDhRwFkZ3W6Z1IBU14h+Ztc jglC4T5oDnG04TekHcB5gw8JH6umT84QCRfXK99UEeT0PDy4jisW7nR0+7GCP+nG 1R0oIndeEQvIeZUaV9F9OJUFIAcCADyC0kAoCbN2c7x8g+uOryWkHvIXc5uQC+yF QiDDnNxR+Bo2c2XVurlwPdDeu0+z8zk8 -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:55 2024 by rpki-client on console-ams.rpki-client.org