$ rpki-client -vvf rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft File: stutBbafR5fu9x8D1lq-rdKJLIA.mft (raw, json) Hash identifier: qPs9mQ1T4ENRJBsLFN01Bui7RtS21khtEvcTza8u+D4= Subject key identifier: D1:F0:F8:CA:A8:F1:C6:30:E3:A0:2D:9F:0D:A4:07:6E:37:E6:FE:5E Authority key identifier: B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 Certificate issuer: /CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft Manifest number: 02CC Signing time: Sat 23 Nov 2024 00:57:45 +0000 Manifest this update: Sat 23 Nov 2024 00:57:45 +0000 Manifest next update: Sat 30 Nov 2024 00:57:45 +0000 Files and hashes: 1: stutBbafR5fu9x8D1lq-rdKJLIA.crl (hash: wCzSONRR0kMyzhRsLfUGEj0FRsT4jOhEFkQgF8VDrDA=) 2: F19DA35AC6C211EC87251528C4F9AE02.roa (hash: AmgmjBfamPYZPViCl3kuvn8G5sH5j/syqOSUyub68c8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D1A4/serialNumber=B2DBAD05B69F4797EEF71F03D65ABEADD2892C80 Validity Not Before: Nov 23 00:57:45 2024 GMT Not After : Nov 30 00:57:45 2024 GMT Subject: CN=67412889-c524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:95:77:71:23:e3:43:54:10:e9:84:60:c1:00: 9f:a8:cb:2b:d0:ad:82:6b:23:b6:5f:a6:28:5a:19: 38:3c:3c:d7:7b:53:0d:94:e2:0a:bb:eb:1a:8e:67: 70:db:9a:09:92:24:7b:01:e2:f5:ae:28:f6:bb:3a: 8b:a8:32:da:69:ac:a5:c4:73:c9:a1:96:0e:9e:8e: a9:f3:df:30:ac:56:f4:93:fd:59:5c:ef:7d:60:64: d4:73:c8:39:9d:db:4c:98:99:3a:db:5b:f7:7e:37: a8:a0:ab:ea:44:97:4a:c1:47:55:0e:82:a2:f8:bb: 3a:14:2f:1a:c1:6f:ec:71:9a:e1:08:95:80:64:0f: ab:5f:25:b9:24:39:90:08:f5:5e:ac:59:24:3a:f0: c2:e7:db:5d:62:71:f6:cd:3d:08:6d:3c:06:3b:48: bf:6d:3c:69:84:32:4e:18:09:4e:7b:16:62:9d:c9: a7:68:9e:47:a2:02:90:67:5d:52:45:7a:02:cc:cd: 91:70:2f:c7:95:75:c6:4f:39:f8:6c:92:79:40:42: f5:2b:ad:f9:0a:f7:80:ec:54:ee:a6:f0:88:3e:73: 3d:41:ac:85:05:a3:88:12:86:6c:81:67:f6:b0:e1: 33:ea:c4:3e:51:83:4b:fa:a3:62:b8:09:8f:15:c3: 05:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F0:F8:CA:A8:F1:C6:30:E3:A0:2D:9F:0D:A4:07:6E:37:E6:FE:5E X509v3 Authority Key Identifier: keyid:B2:DB:AD:05:B6:9F:47:97:EE:F7:1F:03:D6:5A:BE:AD:D2:89:2C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stutBbafR5fu9x8D1lq-rdKJLIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D1A4/1EB9E3A6C6C011EC96C0DD23C4F9AE02/stutBbafR5fu9x8D1lq-rdKJLIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:73:11:fd:9b:bb:65:a3:6b:ea:9d:27:aa:4a:b9:60:0c:9d: 41:f1:42:7a:ec:0a:68:06:a7:2a:40:0b:8b:89:dc:0d:b5:13: ce:74:b4:c1:26:67:a6:9c:bd:3d:d5:a2:0f:22:e1:04:ef:29: 37:b9:c0:90:4b:6f:0e:8d:88:67:9e:bd:3e:61:18:2a:11:e5: 18:23:94:11:f1:93:23:88:bf:89:91:a7:d4:5d:0f:d4:04:0d: 5f:86:1d:ac:ab:a8:c2:e8:5b:d3:0f:c0:91:00:1f:f7:05:03: e8:a3:8e:9f:70:98:16:c4:89:9d:da:b7:81:04:cb:a1:0a:18: 31:44:7a:28:d3:fa:31:3a:43:ce:bd:dc:16:e3:5f:51:84:de: 71:90:45:c9:23:93:be:79:a8:90:bf:1b:c4:40:7d:cc:a5:90: b8:77:5c:a9:4a:e2:c9:11:d7:7d:54:50:7c:84:f8:09:8d:31: 12:5d:8c:a0:0e:b2:98:ad:70:18:2b:80:58:7d:50:df:ec:ce: 83:02:96:8a:00:00:33:25:9b:17:e0:32:48:88:0f:4c:b3:ea: 89:66:c7:33:7d:45:af:6f:fb:a8:3c:be:04:7b:18:a0:b1:43: 55:bb:83:21:9a:9a:7e:89:15:7f:d5:5e:ce:cd:9d:cb:8c:a9: f2:4f:bb:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQxQTQxMTAvBgNVBAUTKEIyREJBRDA1QjY5RjQ3OTdFRUY3MUYwM0Q2NUFCRUFE RDI4OTJDODAwHhcNMjQxMTIzMDA1NzQ1WhcNMjQxMTMwMDA1NzQ1WjAYMRYwFAYD VQQDEw02NzQxMjg4OS1jNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZV3cSPjQ1QQ6YRgwQCfqMsr0K2CayO2X6YoWhk4PDzXe1MNlOIKu+sajmdw 25oJkiR7AeL1rij2uzqLqDLaaaylxHPJoZYOno6p898wrFb0k/1ZXO99YGTUc8g5 ndtMmJk621v3fjeooKvqRJdKwUdVDoKi+Ls6FC8awW/scZrhCJWAZA+rXyW5JDmQ CPVerFkkOvDC59tdYnH2zT0IbTwGO0i/bTxphDJOGAlOexZincmnaJ5HogKQZ11S RXoCzM2RcC/HlXXGTzn4bJJ5QEL1K635CveA7FTupvCIPnM9QayFBaOIEoZsgWf2 sOEz6sQ+UYNL+qNiuAmPFcMFoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHw+Mqo 8cYw46Atnw2kB2435v5eMB8GA1UdIwQYMBaAFLLbrQW2n0eX7vcfA9Zavq3SiSyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDFBNC8xRUI5RTNBNkM2 QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1ZnU5eDhEMWxxLXJkS0pM SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0dXRCYmFmUjVmdTl4OEQxbHEtcmRLSkxJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDFBNC8xRUI5RTNBNkM2QzAxMUVDOTZDMEREMjNDNEY5QUUwMi9zdHV0QmJhZlI1 ZnU5eDhEMWxxLXJkS0pMSUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUcxH9m7tlo2vqnSeqSrlgDJ1B8UJ67ApoBqcqQAuLidwNtRPOdLTB JmemnL091aIPIuEE7yk3ucCQS28OjYhnnr0+YRgqEeUYI5QR8ZMjiL+JkafUXQ/U BA1fhh2sq6jC6FvTD8CRAB/3BQPoo46fcJgWxImd2reBBMuhChgxRHoo0/oxOkPO vdwW419RhN5xkEXJI5O+eaiQvxvEQH3MpZC4d1ypSuLJEdd9VFB8hPgJjTESXYyg DrKYrXAYK4BYfVDf7M6DApaKAAAzJZsX4DJIiA9Ms+qJZsczfUWvb/uoPL4Eexig sUNVu4Mhmpp+iRV/1V7OzZ3LjKnyT7s6 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org