$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: FyfWaqi23sXyhgkurOiRsIwJ+0vKvpHljSOS4iSAOPE= Subject key identifier: 3F:80:AA:15:23:AF:24:C4:67:F6:63:38:9E:FF:80:9A:90:52:BE:B0 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0D9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0D87 Signing time: Wed 20 Nov 2024 17:51:51 +0000 Manifest this update: Wed 20 Nov 2024 17:51:50 +0000 Manifest next update: Wed 27 Nov 2024 17:51:50 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: UtsDHhF7lzR6pklSgEvd+zqHidQVwxaQ5E/eIwdG9iM=) 2: FAAC7098424911EFABBC7D78C4F9AE02.roa (hash: 3NPXcNsi26X2NuLDFnrNuZlOxEwbtdhE/ZNaHoNQNAw=) 3: B2A2CFCEF56C11EE90E38718C4F9AE02.roa (hash: 9ef3bsd1YWEQ0cPGMtCDhRdH7824+50itsw2PqzlK9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3482 (0xd9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Nov 20 17:51:50 2024 GMT Not After : Nov 27 17:51:50 2024 GMT Subject: CN=673e21b6-7c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:f2:b8:9f:53:fd:1b:92:11:f2:b5:02:58: 35:66:bd:80:0c:be:88:7f:a3:6f:f1:c2:14:d9:5c: c1:90:46:f9:e5:c4:90:f7:cf:75:14:80:27:47:a8: 61:2f:ce:7f:f4:ea:1d:6c:14:b2:d8:5b:01:e3:e5: ad:45:fb:2a:01:d9:91:df:15:0a:8f:86:a9:46:0e: ea:0c:01:b4:be:22:14:d4:13:df:60:31:f9:ab:ad: 53:4b:ec:24:bf:07:b1:0e:e4:7e:f2:c2:e8:2d:b1: 0b:50:16:39:a5:c4:1b:07:88:11:46:db:6b:54:a1: 37:d0:e8:70:86:83:de:6e:a7:87:d2:39:82:e0:97: 9b:96:0d:3e:cb:6e:81:19:5b:61:7f:73:ba:d6:d9: fb:9a:19:ae:03:1d:e2:49:0b:88:28:46:01:d6:2d: c6:8a:63:90:88:08:ad:de:01:01:ce:67:10:c6:77: b0:83:f6:2b:80:24:57:b3:29:5d:88:1b:39:52:ba: db:ec:b0:8a:bb:82:42:fc:2f:7c:39:21:03:0f:7b: e7:86:7a:4b:0e:26:58:a1:09:2d:ef:da:61:6f:4e: 5a:49:4e:06:58:85:59:b3:e7:e3:f9:40:43:2e:1a: f2:51:53:65:fd:61:ee:63:c5:44:14:02:5e:f1:77: 8e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:80:AA:15:23:AF:24:C4:67:F6:63:38:9E:FF:80:9A:90:52:BE:B0 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:be:82:13:f9:22:e6:e8:e1:dd:28:b8:1c:00:35:77:cc:e1: 92:a3:dc:46:7a:0e:3f:32:b2:6b:95:fd:ff:7b:6e:35:4a:e2: 38:43:20:c4:f6:61:30:79:26:32:e1:67:46:5a:ce:a8:d6:1a: 2a:95:0f:cc:2b:f6:70:20:cf:27:cd:ef:e9:50:9e:3b:18:dc: 14:da:b9:8c:a2:52:36:4d:e0:ea:dc:88:be:17:39:e5:05:10: a3:03:82:7c:f3:78:5e:63:ee:bb:6b:fa:0b:eb:b0:12:d5:44: 37:17:0f:34:c1:cf:0a:09:ad:05:eb:af:f7:24:e0:0d:90:eb: d2:8b:9c:01:0a:4f:d5:11:8d:9a:3c:d9:44:bc:5d:1b:fb:1e: 89:59:d6:d6:cc:ae:a8:55:fd:ae:21:e0:50:5f:e7:12:a1:3b: a0:e1:2d:aa:b9:15:36:9f:85:a7:8e:92:a1:b9:ad:04:a4:22: ca:9b:33:6f:1d:2b:97:d1:3c:0e:1a:e7:41:83:36:6b:a3:7c: 42:c9:08:8e:d2:43:0b:ab:ce:43:de:77:52:03:29:ba:33:b5: 63:ab:f4:e6:e1:b1:25:1b:b3:a6:ff:fd:2f:62:46:df:0b:15: 44:12:c0:29:ab:a1:9e:39:c0:68:e9:22:07:20:1f:4b:f3:a8: ae:22:8a:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjQxMTIwMTc1MTUwWhcNMjQxMTI3MTc1MTUwWjAYMRYwFAYD VQQDEw02NzNlMjFiNi03YzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJvyuJ9T/RuSEfK1Alg1Zr2ADL6If6Nv8cIU2VzBkEb55cSQ9891FIAnR6hh L85/9OodbBSy2FsB4+WtRfsqAdmR3xUKj4apRg7qDAG0viIU1BPfYDH5q61TS+wk vwexDuR+8sLoLbELUBY5pcQbB4gRRttrVKE30OhwhoPebqeH0jmC4Jeblg0+y26B GVthf3O61tn7mhmuAx3iSQuIKEYB1i3GimOQiAit3gEBzmcQxnewg/YrgCRXsyld iBs5Urrb7LCKu4JC/C98OSEDD3vnhnpLDiZYoQkt79phb05aSU4GWIVZs+fj+UBD LhryUVNl/WHuY8VEFAJe8XeOrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+AqhUj ryTEZ/ZjOJ7/gJqQUr6wMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4voIT+SLm6OHdKLgcADV3zOGSo9xGeg4/MrJrlf3/e241SuI4QyDE 9mEweSYy4WdGWs6o1hoqlQ/MK/ZwIM8nze/pUJ47GNwU2rmMolI2TeDq3Ii+Fznl BRCjA4J883heY+67a/oL67AS1UQ3Fw80wc8KCa0F66/3JOANkOvSi5wBCk/VEY2a PNlEvF0b+x6JWdbWzK6oVf2uIeBQX+cSoTug4S2quRU2n4WnjpKhua0EpCLKmzNv HSuX0TwOGudBgzZro3xCyQiO0kMLq85D3ndSAym6M7Vjq/Tm4bElG7Om//0vYkbf CxVEEsApq6GeOcBo6SIHIB9L86iuIoqF -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:00 2024 by rpki-client on console-ams.rpki-client.org