$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json) Hash identifier: Z6LnMZISEh281vWFINxBx6S4h9cLzJRKxdGSz7juT8c= Subject key identifier: 31:D4:32:D8:D5:43:8C:E0:03:99:A6:45:4A:2C:FD:B3:E1:7C:41:63 Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft Manifest number: 0244 Signing time: Sat 23 Nov 2024 01:21:10 +0000 Manifest this update: Sat 23 Nov 2024 01:21:10 +0000 Manifest next update: Sat 30 Nov 2024 01:21:10 +0000 Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: WeZFpaSMeGq2US8TUEfLN1vBHksypYP1HT8bK168iWM=) 2: C79B240C249811EFABD23253C4F9AE02.roa (hash: vxN5ELpDSKeuKP/1PWPd9uK2hQBdf3IJCeKh68BuUKw=) 3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: 6c0Jw3077JWhUg1z+ONRU+S6jEOJ+qb2QR7rvXgZlpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087 Validity Not Before: Nov 23 01:21:10 2024 GMT Not After : Nov 30 01:21:10 2024 GMT Subject: CN=67412e06-87ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:f8:3a:4a:4a:53:92:3b:df:0d:af:f9:27: d3:2c:13:33:da:df:c2:e2:ac:b8:c6:43:9f:00:0a: 65:f2:da:21:22:18:e5:24:ee:26:e9:0e:7a:af:d0: 1a:6f:2a:74:59:a5:73:ea:60:77:aa:7b:c1:c9:ca: fe:28:fd:4b:86:11:7e:5f:30:11:34:74:41:65:5c: 9c:b6:bb:2a:ca:21:44:d3:19:1f:bd:72:6b:83:48: df:2d:69:ad:bc:33:60:6d:74:ed:f9:64:65:83:5e: 53:d4:46:01:84:f8:16:df:4f:89:48:0d:9b:ec:b7: 74:7c:2e:5a:7c:6b:05:10:99:c8:ee:19:37:fb:8e: d4:a1:07:4f:f9:3e:3b:36:6d:dd:ba:e1:9d:ff:9c: 9d:0e:ea:ab:15:c1:1a:6b:71:0a:3c:15:8c:56:82: 39:98:19:ef:61:4b:fc:94:c9:36:81:39:f1:80:4e: fc:a7:99:fd:57:8b:ea:73:45:a2:e1:c6:45:fc:f3: 30:96:df:49:84:92:0b:70:fd:43:22:30:f3:4e:aa: a2:b1:cc:89:0b:27:58:cd:52:79:f8:19:9e:30:e9: 0e:c8:23:58:6d:31:cd:08:82:19:d7:ca:30:c3:66: 72:a2:0a:6f:99:11:4b:e9:7e:9b:84:87:e4:05:68: cd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D4:32:D8:D5:43:8C:E0:03:99:A6:45:4A:2C:FD:B3:E1:7C:41:63 X509v3 Authority Key Identifier: keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:41:e1:10:a3:5d:9c:4a:7b:63:0c:98:a6:9f:14:ca:98:a5: 60:d0:5e:e9:27:cc:b8:21:7c:14:a6:b5:7d:a9:06:1e:d5:c4: a9:e3:10:96:f8:8a:40:56:ab:4d:44:06:cb:99:cd:23:86:d6: 90:f4:b7:ce:dd:b6:f4:6e:c4:92:c0:09:94:dc:57:8e:0d:94: 8f:4c:2c:79:7d:1d:78:f4:8e:79:78:c0:01:21:b4:4c:04:71: bf:1c:1b:4a:95:18:5c:38:8d:41:27:3e:ee:00:dd:3b:f1:87: 8b:ac:0b:93:ec:d5:56:8f:7d:6f:77:80:46:e4:70:3c:f8:1a: 62:34:e5:e9:8f:04:0f:4d:a2:b2:90:a0:d0:d1:c0:84:1e:73: bd:ea:91:df:ec:46:4d:e7:a4:a5:9c:62:41:b2:46:6f:f1:90: cf:52:8b:05:1e:a8:71:1d:b4:f6:ce:ed:79:83:5d:d9:f2:87: f8:94:ff:a5:f1:a4:d5:cd:b5:92:5f:81:4c:a9:37:df:a8:4c: 8a:eb:75:c0:42:e9:88:5e:94:13:76:57:68:b9:38:1d:68:ef: 24:71:b0:8a:e9:19:9a:68:40:0f:a8:8d:1c:ff:dc:a2:2f:00: 6d:84:17:8d:87:4f:85:cd:1c:a1:6f:0e:d4:c1:93:70:db:76: f5:b6:62:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCNDkxMTAvBgNVBAUTKEY4MzZERDMwQjYwNDI2MzYyMEQwNjFEMTA1ODRDOEYz MDExNjAwODcwHhcNMjQxMTIzMDEyMTEwWhcNMjQxMTMwMDEyMTEwWjAYMRYwFAYD VQQDEw02NzQxMmUwNi04N2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4D4OkpKU5I73w2v+SfTLBMz2t/C4qy4xkOfAApl8tohIhjlJO4m6Q56r9Aa byp0WaVz6mB3qnvBycr+KP1LhhF+XzARNHRBZVyctrsqyiFE0xkfvXJrg0jfLWmt vDNgbXTt+WRlg15T1EYBhPgW30+JSA2b7Ld0fC5afGsFEJnI7hk3+47UoQdP+T47 Nm3duuGd/5ydDuqrFcEaa3EKPBWMVoI5mBnvYUv8lMk2gTnxgE78p5n9V4vqc0Wi 4cZF/PMwlt9JhJILcP1DIjDzTqqiscyJCydYzVJ5+BmeMOkOyCNYbTHNCIIZ18ow w2ZyogpvmRFL6X6bhIfkBWjNvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHUMtjV Q4zgA5mmRUos/bPhfEFjMB8GA1UdIwQYMBaAFPg23TC2BCY2INBh0QWEyPMBFgCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUI0OS81NTMyQjk2MEZG NUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpqWWcwR0hSQllUSTh3RVdB SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EYmRNTFlFSmpZZzBHSFJCWVRJOHdFV0FJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUI0OS81NTMyQjk2MEZGNUMxMUVDOERBRUE1NTNDNEY5QUUwMi8tRGJkTUxZRUpq WWcwR0hSQllUSTh3RVdBSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZQeEQo12cSntjDJimnxTKmKVg0F7pJ8y4IXwUprV9qQYe1cSp4xCW +IpAVqtNRAbLmc0jhtaQ9LfO3bb0bsSSwAmU3FeODZSPTCx5fR149I55eMABIbRM BHG/HBtKlRhcOI1BJz7uAN078YeLrAuT7NVWj31vd4BG5HA8+BpiNOXpjwQPTaKy kKDQ0cCEHnO96pHf7EZN56SlnGJBskZv8ZDPUosFHqhxHbT2zu15g13Z8of4lP+l 8aTVzbWSX4FMqTffqEyK63XAQumIXpQTdldouTgdaO8kcbCK6RmaaEAPqI0c/9yi LwBthBeNh0+FzRyhbw7UwZNw23b1tmJI -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org