$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: zexveBxR4W9CVCdvRklFwkXRU9PcpT9QqWcV1g3s8wA= Subject key identifier: 45:0A:67:B4:E9:4A:F9:5B:AB:48:43:5F:FF:35:37:4A:4E:6A:3E:79 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 04BE Signing time: Wed 20 Nov 2024 23:29:13 +0000 Manifest this update: Wed 20 Nov 2024 23:29:13 +0000 Manifest next update: Wed 27 Nov 2024 23:29:12 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: R7jqtKMGkJpyDCNP1DSqEzyBidgkeFG/1bdOWEKrakA=) 2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: uEs/Ek7RKHaXQAk1u0ZUP/YjMBmk6kEDrvy+C4XPa0M=) 3: 8A0874C0AA5211EEAFC18554C4F9AE02.roa (hash: NlN5fs6YliLYR5HdT/sNLzjDC0HoiB4qtgUQ0EkZvxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Nov 20 23:29:13 2024 GMT Not After : Nov 27 23:29:12 2024 GMT Subject: CN=673e70c9-8237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:4c:9a:cc:37:1a:be:0d:f6:68:cc:dc:09: d8:7c:08:ff:77:ac:85:60:7c:b1:59:ef:db:48:3d: 25:22:39:d0:14:35:50:a5:c6:e7:21:95:06:21:1a: ed:9b:7f:61:70:10:2f:24:6a:6e:45:5c:8c:c0:1e: c4:d7:61:3b:4f:80:e0:89:32:1e:7e:09:a7:b2:44: 5c:44:da:28:81:f1:71:8f:e9:04:35:e2:5c:9b:20: 92:bc:67:92:62:9c:90:ed:5d:7d:d5:e7:fd:f4:be: 80:23:1f:4c:ec:4e:2f:f7:62:70:b0:90:9e:97:8f: 5f:66:6d:ab:a5:c8:ac:26:4a:f7:21:e7:d1:9a:6d: 7b:d5:cd:24:99:bb:5d:9a:2c:9e:49:95:90:3d:e5: 42:12:10:65:2d:8c:e3:94:8c:06:b0:2f:19:5b:87: 79:07:74:3e:ed:8b:a2:28:0d:4b:bb:c8:fa:6b:fd: b6:7c:27:da:39:73:8d:4a:ea:be:6e:29:77:fd:fe: 76:b0:33:b6:f5:b8:6b:d0:c1:f3:ab:71:65:a3:dd: 64:e5:e4:c6:1a:56:64:60:c6:90:c1:52:40:36:0d: 7d:b2:89:71:1e:18:d5:e7:72:25:93:6a:30:b1:35: 11:1f:e9:1c:c6:48:82:a5:a7:b7:de:9b:49:15:00: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0A:67:B4:E9:4A:F9:5B:AB:48:43:5F:FF:35:37:4A:4E:6A:3E:79 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d8:9e:8f:15:1f:95:95:fc:86:92:0c:8e:87:9c:8f:63:fe: 40:55:1a:dd:90:5a:3f:bb:ba:ab:2f:cb:d1:f9:8a:2c:6e:3d: b0:f9:e2:61:65:2c:0c:af:5d:f2:93:bc:3e:7e:33:41:d9:bf: 1d:82:3e:8d:3a:ea:d8:10:bc:a4:bb:36:55:dc:ea:0b:b8:be: 47:a2:65:d3:28:2d:fa:65:a5:ab:bd:8b:c8:d7:1a:d8:e8:97: 11:fb:ac:4b:b4:1f:07:c1:8a:ff:f0:09:d5:45:f6:11:d6:e7: e5:3c:e0:48:43:bb:6d:20:32:48:d0:89:dd:68:3e:29:7a:ea: ac:5e:43:04:01:71:27:e4:25:08:11:84:a9:bb:c7:41:35:6e: a3:d2:2f:8e:d9:4d:02:4d:6c:d3:eb:ee:c1:5c:e1:82:c4:6a: 0d:a8:3c:f2:73:11:12:91:d4:8a:1d:6b:f4:24:0d:cb:7b:10: 80:d4:b8:e4:09:8d:4d:ed:46:81:c9:da:4e:87:c9:4d:d8:f4: e6:c5:7c:86:7a:4a:a2:4e:5f:d4:33:d1:8f:20:b7:d7:a3:b5: a6:35:2a:09:88:00:02:e8:7f:48:ef:34:80:01:78:a4:3f:ec: 18:b7:61:dd:85:fa:c0:09:f4:86:9a:a0:a5:40:16:36:c7:3a: 44:34:92:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjQxMTIwMjMyOTEzWhcNMjQxMTI3MjMyOTEyWjAYMRYwFAYD VQQDEw02NzNlNzBjOS04MjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi5Mmsw3Gr4N9mjM3AnYfAj/d6yFYHyxWe/bSD0lIjnQFDVQpcbnIZUGIRrt m39hcBAvJGpuRVyMwB7E12E7T4DgiTIefgmnskRcRNoogfFxj+kENeJcmyCSvGeS YpyQ7V191ef99L6AIx9M7E4v92JwsJCel49fZm2rpcisJkr3IefRmm171c0kmbtd miyeSZWQPeVCEhBlLYzjlIwGsC8ZW4d5B3Q+7YuiKA1Lu8j6a/22fCfaOXONSuq+ bil3/f52sDO29bhr0MHzq3Flo91k5eTGGlZkYMaQwVJANg19solxHhjV53Ilk2ow sTURH+kcxkiCpae33ptJFQC9pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUKZ7Tp Svlbq0hDX/81N0pOaj55MB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA12J6PFR+VlfyGkgyOh5yPY/5AVRrdkFo/u7qrL8vR+Yosbj2w+eJh ZSwMr13yk7w+fjNB2b8dgj6NOurYELykuzZV3OoLuL5HomXTKC36ZaWrvYvI1xrY 6JcR+6xLtB8HwYr/8AnVRfYR1uflPOBIQ7ttIDJI0IndaD4peuqsXkMEAXEn5CUI EYSpu8dBNW6j0i+O2U0CTWzT6+7BXOGCxGoNqDzycxESkdSKHWv0JA3LexCA1Ljk CY1N7UaBydpOh8lN2PTmxXyGekqiTl/UM9GPILfXo7WmNSoJiAAC6H9I7zSAAXik P+wYt2HdhfrACfSGmqClQBY2xzpENJLG -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:03 2024 by rpki-client on console-ams.rpki-client.org