$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json) Hash identifier: uKBaGlp3cjv0kbQFHHFR613lkovJoJdLEPQkZE7Es4w= Subject key identifier: 01:7F:46:7A:D1:1F:2D:80:40:C3:46:8A:AA:62:37:34:92:4A:71:CA Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft Manifest number: 013D Signing time: Thu 21 Nov 2024 02:41:48 +0000 Manifest this update: Thu 21 Nov 2024 02:41:47 +0000 Manifest next update: Thu 28 Nov 2024 02:41:47 +0000 Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: IamPdyB5bYV9gHnWYpC7tCnKrH+YicJGI2pTn8DMVoc=) 2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: Uk3rBIxJV45EOBy2eFPekpy4A8sQVxEwLHcYZPjeIaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A Validity Not Before: Nov 21 02:41:47 2024 GMT Not After : Nov 28 02:41:47 2024 GMT Subject: CN=673e9dec-11db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:10:fb:b5:a2:6c:06:c1:c0:6b:7f:89:c9: 1b:db:16:c4:4b:68:16:79:89:b7:a8:73:f9:0b:c6: 21:d5:bb:d1:a0:5b:a5:2b:f2:7b:2e:ae:85:e9:17: 63:8d:17:28:71:ff:5b:c8:9f:87:4b:ec:07:cf:16: e4:e8:12:99:c5:4b:8b:6e:a8:d9:9d:94:6e:46:47: fc:53:2b:96:97:65:42:cc:6d:2e:b2:f2:a5:2b:3f: 94:74:57:0a:25:31:ed:9b:81:50:d5:a4:05:de:ef: c2:f4:0b:57:59:a0:fe:f9:36:75:c5:51:10:7d:68: eb:0e:7c:67:9b:60:13:e8:3b:c8:1e:a4:43:b5:76: 69:0a:a0:c9:64:27:56:73:88:ad:2f:d7:14:af:e3: 8e:e7:2d:69:6c:77:8f:2b:37:55:05:30:31:ad:7a: 4c:25:51:e5:2a:6b:ac:5e:68:e7:ba:fb:be:9c:5a: f3:4d:dd:ec:88:80:68:42:78:c3:d4:c6:7c:9e:06: 9d:47:1f:47:0e:86:f2:62:9c:ac:e8:9f:9f:cd:47: f3:10:5b:bd:42:38:88:ba:40:1a:a2:77:71:11:56: e7:99:cd:4c:84:04:9f:67:af:18:e1:ef:33:20:e1: 3c:68:23:33:31:ac:5e:87:32:87:ce:f5:c7:b0:b5: e6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7F:46:7A:D1:1F:2D:80:40:C3:46:8A:AA:62:37:34:92:4A:71:CA X509v3 Authority Key Identifier: keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ae:c1:2c:47:95:16:73:26:87:15:69:bd:29:42:3a:96:a0: 17:79:3b:52:f9:02:ea:0f:28:14:1a:2a:6f:67:4b:97:36:6f: b6:d6:13:9b:9a:1a:67:b5:91:ac:fc:06:b2:94:bc:2e:f3:c7: c6:be:c9:5f:c0:b4:24:6e:f1:20:b2:87:18:dd:80:bf:c7:90: f2:5f:a6:2c:7d:f9:1a:ca:2e:ca:3b:fd:09:70:63:d1:a3:8c: a3:4c:db:4b:6c:10:57:6f:ab:3f:64:50:82:31:2f:82:00:91: a3:4c:b2:43:ae:49:b2:4e:43:01:ba:12:70:67:b0:e3:29:51: ea:6c:5a:0c:7a:32:21:14:57:7a:93:49:28:5b:a7:f0:04:16: ee:c4:93:aa:ae:c3:a2:90:df:6e:16:71:b7:da:e6:1f:a3:e3: 92:fe:cc:e5:0b:4e:b0:72:ae:23:e4:b4:bc:cd:8d:bc:af:65: b7:0b:27:4c:c1:e1:bd:ce:b4:3d:17:97:04:ce:98:06:54:65: 67:de:6f:22:e9:4f:b1:fb:ee:b1:13:41:7e:4a:12:29:02:de: 83:30:e9:f4:70:fa:1b:c1:5c:24:62:38:99:01:38:96:24:f3: c5:4e:86:af:02:64:d2:b6:be:b1:a0:6a:db:15:33:5e:54:8f: 48:09:33:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4 MkYxNDVBNEEwHhcNMjQxMTIxMDI0MTQ3WhcNMjQxMTI4MDI0MTQ3WjAYMRYwFAYD VQQDEw02NzNlOWRlYy0xMWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydgQ+7WibAbBwGt/ickb2xbES2gWeYm3qHP5C8Yh1bvRoFulK/J7Lq6F6Rdj jRcocf9byJ+HS+wHzxbk6BKZxUuLbqjZnZRuRkf8UyuWl2VCzG0usvKlKz+UdFcK JTHtm4FQ1aQF3u/C9AtXWaD++TZ1xVEQfWjrDnxnm2AT6DvIHqRDtXZpCqDJZCdW c4itL9cUr+OO5y1pbHePKzdVBTAxrXpMJVHlKmusXmjnuvu+nFrzTd3siIBoQnjD 1MZ8ngadRx9HDobyYpys6J+fzUfzEFu9QjiIukAaondxEVbnmc1MhASfZ68Y4e8z IOE8aCMzMaxehzKHzvXHsLXmZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAF/RnrR Hy2AQMNGiqpiNzSSSnHKMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4 ay00M0lRMTNNOUtDOFVXa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4rsEsR5UWcyaHFWm9KUI6lqAXeTtS+QLqDygUGipvZ0uXNm+21hOb mhpntZGs/AaylLwu88fGvslfwLQkbvEgsocY3YC/x5DyX6Ysffkayi7KO/0JcGPR o4yjTNtLbBBXb6s/ZFCCMS+CAJGjTLJDrkmyTkMBuhJwZ7DjKVHqbFoMejIhFFd6 k0koW6fwBBbuxJOqrsOikN9uFnG32uYfo+OS/szlC06wcq4j5LS8zY28r2W3CydM weG9zrQ9F5cEzpgGVGVn3m8i6U+x++6xE0F+ShIpAt6DMOn0cPobwVwkYjiZATiW JPPFToavAmTStr6xoGrbFTNeVI9ICTNy -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:08 2024 by rpki-client on console-ams.rpki-client.org