$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json) Hash identifier: qBOWB4UKOuwCPeq9gKW5/ykUpScGLeV6ZnW5JVT3aWI= Subject key identifier: 62:35:38:B3:BF:34:D8:3A:4C:98:D0:C9:FA:10:DA:B8:45:5C:AB:7D Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft Manifest number: 4D Signing time: Sat 23 Nov 2024 05:16:48 +0000 Manifest this update: Sat 23 Nov 2024 05:16:48 +0000 Manifest next update: Sat 30 Nov 2024 05:16:48 +0000 Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: gA1BBj0nJtyLwHWlDhNIWVg+mxzf9l/2Rjr3/1w0xfY=) 2: CB6840EE3BAC11EF9C334410C4F9AE02.roa (hash: q+bs+pmU+B7fJo6iymx9EUit+9N40A02etOl0mkXvRg=) 3: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: bKtFSMRmBEl0oKGrwWVZYxuAEvHDipNsFv7Plkp3FeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Validity Not Before: Nov 23 05:16:48 2024 GMT Not After : Nov 30 05:16:48 2024 GMT Subject: CN=67416540-195c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6a:3c:b2:f4:56:d6:5b:7e:81:e0:62:e6:0e: b1:a6:35:8f:74:00:ae:4f:7f:07:44:3d:c0:9b:e3: 15:7a:04:7b:42:94:5f:00:eb:bf:f1:53:ec:aa:5e: 83:84:db:15:ab:9f:e5:24:54:a6:45:10:09:47:d4: 1a:7d:03:1a:c5:bd:ad:6f:d8:04:72:04:3a:2b:d4: 49:e9:24:66:f5:5f:9d:95:19:5b:6c:41:eb:29:f6: ed:9f:23:3a:60:18:bd:67:e5:61:91:aa:91:54:34: 00:63:1d:aa:04:19:cc:f8:9e:8e:53:ab:6e:53:7f: 86:6f:46:da:1a:a2:29:47:15:f8:d7:c8:0c:cf:f3: 57:5a:9d:56:f4:df:ae:e6:1b:34:14:17:2a:12:5a: 51:46:4d:b8:cf:4e:99:d8:ce:2f:5d:6a:31:65:98: b4:5c:4d:7f:15:11:25:0f:2c:f6:4c:78:f1:1c:a9: cc:1e:9f:a1:25:a7:1b:07:1a:5b:8e:35:79:9f:93: fa:1b:f7:00:4d:eb:65:1d:4a:49:af:7c:f9:4d:70: fd:59:4d:45:c0:5d:02:b7:ba:7d:ff:04:bc:ae:c1: e0:52:6b:79:ff:a3:46:9d:5b:f3:79:ed:0d:37:ee: d3:f2:cd:b7:7b:1f:5f:d5:7d:7b:c7:5a:dc:c6:5d: 77:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:35:38:B3:BF:34:D8:3A:4C:98:D0:C9:FA:10:DA:B8:45:5C:AB:7D X509v3 Authority Key Identifier: keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e6:b7:f7:3a:9b:bc:1e:5b:33:06:23:e3:f1:52:9e:a3:6a: 04:8a:46:09:be:b5:9b:de:26:cc:fa:58:4f:0f:b7:b4:c0:29: 42:94:55:4d:6f:d4:bd:bf:9c:87:54:53:46:8e:fd:6c:5b:8e: b1:d4:33:4d:a9:35:b5:d0:c2:42:76:72:c6:4a:8e:36:de:9e: 2a:cb:41:bd:35:f9:67:af:d0:bd:b1:c2:2e:ae:c0:e5:72:d9: 28:b2:2c:24:80:c1:b8:a0:34:5c:ec:8a:ce:79:fa:8f:cf:d7: e8:08:c9:df:9c:a0:9d:59:46:48:b4:24:b4:12:b6:dc:13:65: f7:3f:3e:90:e7:df:b8:b4:19:1b:7a:3b:76:67:6f:59:cf:24: 08:e0:3d:ec:2a:22:e3:ba:89:cd:b5:a3:0c:0c:c4:64:a3:4f: 02:3a:dc:76:36:bf:3f:88:49:fa:b5:fa:66:56:b7:86:60:5e: 49:04:e4:91:83:d5:d4:db:5e:05:13:03:3b:1b:18:79:d1:3e: 79:e3:fe:87:a8:f1:e4:49:d5:08:d7:e1:d4:ef:4a:b6:3c:1a: fc:af:0f:8a:24:e7:9d:0e:81:ec:d9:5a:4b:33:4e:4c:58:12: c4:24:f8:93:5c:f3:1c:c5:44:3f:41:f1:49:a3:f2:78:98:e7: ac:fb:f2:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NEFFMjExMC8GA1UEBRMoODQ1RDg4RTBBMjE1MTQ1RjM2N0Q5MzA0QkYzRjcxQUVF OEVCNEMyRDAeFw0yNDExMjMwNTE2NDhaFw0yNDExMzAwNTE2NDhaMBgxFjAUBgNV BAMTDTY3NDE2NTQwLTE5NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXajyy9FbWW36B4GLmDrGmNY90AK5PfwdEPcCb4xV6BHtClF8A67/xU+yqXoOE 2xWrn+UkVKZFEAlH1Bp9AxrFva1v2ARyBDor1EnpJGb1X52VGVtsQesp9u2fIzpg GL1n5WGRqpFUNABjHaoEGcz4no5Tq25Tf4ZvRtoaoilHFfjXyAzP81danVb0367m GzQUFyoSWlFGTbjPTpnYzi9dajFlmLRcTX8VESUPLPZMePEcqcwen6ElpxsHGluO NXmfk/ob9wBN62UdSkmvfPlNcP1ZTUXAXQK3un3/BLyuweBSa3n/o0adW/N57Q03 7tPyzbd7H1/VfXvHWtzGXXcBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYjU4s780 2DpMmNDJ+hDauEVcq30wHwYDVR0jBBgwFoAUhF2I4KIVFF82fZMEvz9xrujrTC0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0QUUyLzI2QTZGNDRDM0JB QzExRUY5RDdFQTg3MUM0RjlBRTAyL2hGMkk0S0lWRkY4MmZaTUV2ejl4cnVqclRD MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaEYySTRLSVZGRjgyZlpNRXZ6OXhydWpyVEMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 QUUyLzI2QTZGNDRDM0JBQzExRUY5RDdFQTg3MUM0RjlBRTAyL2hGMkk0S0lWRkY4 MmZaTUV2ejl4cnVqclRDMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAILmt/c6m7weWzMGI+PxUp6jagSKRgm+tZveJsz6WE8Pt7TAKUKUVU1v 1L2/nIdUU0aO/WxbjrHUM02pNbXQwkJ2csZKjjbenirLQb01+Wev0L2xwi6uwOVy 2SiyLCSAwbigNFzsis55+o/P1+gIyd+coJ1ZRki0JLQSttwTZfc/PpDn37i0GRt6 O3Znb1nPJAjgPewqIuO6ic21owwMxGSjTwI63HY2vz+ISfq1+mZWt4ZgXkkE5JGD 1dTbXgUTAzsbGHnRPnnj/oeo8eRJ1QjX4dTvSrY8GvyvD4ok550OgezZWkszTkxY EsQk+JNc8xzFRD9B8Umj8niY56z78uM= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:15 2024 by rpki-client on console-ams.rpki-client.org