$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json) Hash identifier: F6BFOOhsC1sbbwfSOqeVyoveE3ZFIskvPce6KV1c0Do= Subject key identifier: 51:2A:D6:D1:63:04:54:B7:28:9D:9A:1A:A1:B9:B2:F8:D4:CA:8A:56 Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Certificate serial: 0425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft Manifest number: 0420 Signing time: Fri 22 Nov 2024 23:54:36 +0000 Manifest this update: Fri 22 Nov 2024 23:54:35 +0000 Manifest next update: Fri 29 Nov 2024 23:54:35 +0000 Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: OX4ChBwr3CArBFyrVAJThTp3tKf6hsmq0szkKTJivLc=) 2: CF272560413111ECB71E086AC4F9AE02.roa (hash: xZ/5xBHbsPYmy5fKXzWMNz/s+f7VPa3yOiPF6PNDgEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1061 (0x425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0 Validity Not Before: Nov 22 23:54:35 2024 GMT Not After : Nov 29 23:54:35 2024 GMT Subject: CN=674119bc-3b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:41:51:dd:82:8b:63:15:2c:e0:c6:f1:25:16: 3d:12:e5:ed:20:ca:35:e4:ca:bf:0f:4f:fe:26:43: f0:83:82:77:47:77:f3:8c:d9:ee:98:6c:e9:3a:28: 77:55:47:1e:51:a6:25:eb:50:8d:a1:86:6a:c2:c1: b2:19:e5:f8:26:af:57:a5:49:fa:1d:f9:61:19:d1: 5f:32:6c:67:37:2e:0d:38:b1:20:f9:e7:0a:0d:12: fc:57:ef:e1:7f:0c:64:b3:58:c2:72:11:8c:a9:29: 09:dc:67:ee:3d:bc:c4:b2:d9:a9:2b:cc:7e:5d:9f: b2:40:03:e3:73:9c:50:be:06:ca:32:f0:55:d3:26: a5:8d:c3:9b:d2:ad:c2:fb:bc:07:a1:06:74:e5:60: 6f:fa:cf:9c:1b:54:23:58:ce:f2:37:1c:2b:87:95: bd:64:ff:75:23:f3:c2:a0:85:4a:aa:24:c3:9a:c3: cf:e2:8e:36:ab:ce:e8:13:e6:e6:55:a1:ec:ae:e2: 19:33:df:60:ef:d8:71:91:cb:ac:a3:e4:70:02:0b: 53:46:d3:4f:49:d1:30:ff:2d:e9:28:42:18:cb:6f: c3:2d:0a:8c:a0:3a:28:7f:a4:96:c4:bd:25:ed:ce: 12:a6:65:59:01:75:da:8a:40:05:ed:42:97:6e:ca: a5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2A:D6:D1:63:04:54:B7:28:9D:9A:1A:A1:B9:B2:F8:D4:CA:8A:56 X509v3 Authority Key Identifier: keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:eb:18:86:42:f7:ed:6b:ec:af:7a:37:e5:9f:08:e0:55:dd: a6:87:ed:6b:2d:17:22:67:a9:a4:d6:e4:15:cd:54:a0:78:11: 76:c2:74:de:6d:25:71:ab:38:14:28:6a:2f:1d:eb:d1:20:8b: 87:b0:d6:1d:c7:9f:ba:b8:1e:03:1b:7c:dd:ce:54:8a:7d:97: d3:ac:31:46:2d:0c:23:c3:8a:2d:d9:0d:1a:c8:b6:43:a6:ff: c2:43:3a:84:c3:0f:b2:95:59:78:4f:b1:aa:31:5e:ee:90:02: 5e:39:a6:6a:11:a4:29:04:b8:c9:d3:e6:5e:1f:51:e3:11:ad: 5c:b3:0b:39:d1:1d:d2:de:28:f2:dd:2b:64:bd:df:46:27:35: 0b:99:ac:8e:90:40:f4:98:4c:96:af:b0:8c:f9:0e:aa:9f:7f: 68:a8:b4:19:8a:1c:4c:57:5b:ee:aa:f6:8d:a5:46:74:c5:20: a1:be:2d:5b:0d:cd:3f:c8:17:2d:d2:f9:30:f8:18:c6:07:11: e4:c8:3c:23:90:10:29:43:d1:d8:25:b2:2a:58:74:3a:20:6d: 7b:a3:51:7f:9b:7f:c5:87:e1:ed:e3:9d:eb:87:ec:2e:d9:dd: 73:2c:d8:01:49:d0:e7:5e:c7:97:ba:3e:ab:8a:d4:70:e2:62: 63:cf:92:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCMjQxMTAvBgNVBAUTKDMxRjM3ODNDN0ExRUQ3ODNGQzFGREE3NDFGNkE3NTI5 RDVBNUU2QTAwHhcNMjQxMTIyMjM1NDM1WhcNMjQxMTI5MjM1NDM1WjAYMRYwFAYD VQQDEw02NzQxMTliYy0zYjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0FR3YKLYxUs4MbxJRY9EuXtIMo15Mq/D0/+JkPwg4J3R3fzjNnumGzpOih3 VUceUaYl61CNoYZqwsGyGeX4Jq9XpUn6HflhGdFfMmxnNy4NOLEg+ecKDRL8V+/h fwxks1jCchGMqSkJ3GfuPbzEstmpK8x+XZ+yQAPjc5xQvgbKMvBV0yaljcOb0q3C +7wHoQZ05WBv+s+cG1QjWM7yNxwrh5W9ZP91I/PCoIVKqiTDmsPP4o42q87oE+bm VaHsruIZM99g79hxkcuso+RwAgtTRtNPSdEw/y3pKEIYy2/DLQqMoDoof6SWxL0l 7c4SpmVZAXXaikAF7UKXbsqlkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEq1tFj BFS3KJ2aGqG5svjUyopWMB8GA1UdIwQYMBaAFDHzeDx6HteD/B/adB9qdSnVpeag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUIyNC81RkZDOUVGNjQx MjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0UDhIOXAwSDJwMUtkV2w1 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mTjRQSG9lMTRQOEg5cDBIMnAxS2RXbDVxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUIyNC81RkZDOUVGNjQxMjUxMUVDQjdERjQ3N0VDNEY5QUUwMi9NZk40UEhvZTE0 UDhIOXAwSDJwMUtkV2w1cUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA6xiGQvfta+yvejflnwjgVd2mh+1rLRciZ6mk1uQVzVSgeBF2wnTe bSVxqzgUKGovHevRIIuHsNYdx5+6uB4DG3zdzlSKfZfTrDFGLQwjw4ot2Q0ayLZD pv/CQzqEww+ylVl4T7GqMV7ukAJeOaZqEaQpBLjJ0+ZeH1HjEa1csws50R3S3ijy 3Stkvd9GJzULmayOkED0mEyWr7CM+Q6qn39oqLQZihxMV1vuqvaNpUZ0xSChvi1b Dc0/yBct0vkw+BjGBxHkyDwjkBApQ9HYJbIqWHQ6IG17o1F/m3/Fh+Ht453rh+wu 2d1zLNgBSdDnXseXuj6ritRw4mJjz5L8 -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:26 2024 by rpki-client on console-ams.rpki-client.org