$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: YFSukXka2YXvzq60ZjKvHjDxVOzUlBoG5/Qdtmewifo= Subject key identifier: D6:7D:68:71:D9:92:F3:FC:B9:1E:A7:BF:67:49:EA:9B:D9:A5:D7:F6 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 8C Signing time: Thu 21 Nov 2024 04:49:54 +0000 Manifest this update: Thu 21 Nov 2024 04:49:53 +0000 Manifest next update: Thu 28 Nov 2024 04:49:53 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: f0WJJObCRAY5AICbhAQtBc0kfC+euysvTjRYtp6SPyQ=) 2: 97D6B88618D511EFAC43EE73C4F9AE02.roa (hash: u8zPnTnR8vdMXMZM3gfu234Z3NZHwyNarOREwLy/WOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Nov 21 04:49:53 2024 GMT Not After : Nov 28 04:49:53 2024 GMT Subject: CN=673ebbf1-e2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d7:84:49:b0:51:16:4c:31:b8:76:4a:d1:e3: 69:fb:47:63:b7:33:14:cf:23:69:af:9d:29:ad:dd: 3f:20:9f:13:11:44:c3:fa:f1:81:da:b2:ee:5f:07: 38:be:17:fa:fb:39:58:89:f2:a0:f2:40:a8:2f:99: cc:7e:6e:16:6a:80:9a:7f:4d:f7:79:c2:56:1c:54: bb:53:c6:c6:0d:06:1d:2e:87:af:7c:0c:0c:8d:61: 31:5b:60:e3:a6:51:b1:4a:b7:e6:93:8e:3d:7e:13: 6f:ae:03:37:ce:37:e1:a1:df:ea:45:b5:4d:89:f8: ca:52:5d:a1:2b:29:12:4e:00:43:84:df:2f:13:6d: 4c:2b:9a:25:28:1f:6b:dc:a7:0b:9e:3c:d4:27:c1: b7:2a:5f:50:40:33:aa:74:f7:9f:95:22:7b:58:a5: bb:57:3b:7b:6f:fb:0e:8a:7c:4b:21:b2:05:2b:de: 7f:69:ad:d1:88:bf:9f:5f:92:b4:bb:4b:21:a8:47: 99:e3:f9:77:2b:02:0c:92:39:0a:29:02:87:9d:86: 0e:4a:ac:b8:12:44:e2:5b:84:26:c8:75:51:30:49: 35:44:67:41:3a:86:71:9a:16:45:4d:c0:65:47:9a: 0c:bd:bd:7e:93:c6:77:4d:53:79:c1:45:49:7e:cc: 26:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7D:68:71:D9:92:F3:FC:B9:1E:A7:BF:67:49:EA:9B:D9:A5:D7:F6 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b2:73:30:07:2b:d8:bd:03:14:bf:47:59:79:0c:03:93:68: ee:55:1a:d2:6b:0d:3c:be:81:eb:14:c3:7f:70:bb:1b:84:0a: 19:79:12:c3:cb:45:a6:4b:41:7d:a9:2e:7b:8c:b8:31:03:82: 7f:df:99:50:f3:06:f5:30:59:0d:c1:36:28:e9:65:70:2a:1e: 2f:f3:f2:54:8e:17:24:4e:05:c4:c5:cc:91:b9:c0:84:d6:1c: 8b:90:77:44:af:0e:e9:c1:24:b4:d4:24:73:fe:65:72:5e:08: 53:e8:3f:16:e6:61:ac:06:27:91:0d:69:2b:a6:0f:fd:10:e2: da:6e:95:3c:ab:c0:bd:10:ae:54:2f:c3:da:b3:fc:ac:e0:2e: b3:21:fc:fd:28:65:0c:60:db:9d:53:b9:e4:ee:85:60:51:41: de:be:b3:91:2e:39:59:4e:6e:2b:4d:fb:d4:74:a0:20:e5:e1: 1a:e0:07:0b:28:09:75:22:2e:98:14:5c:ba:85:06:c1:37:7b: 9c:2e:b4:8c:30:4f:ea:bb:e5:cb:cb:9b:4a:af:6e:9c:59:42: 34:11:e6:1c:01:1f:12:89:41:29:b2:9d:2b:8c:97:56:65:53: 79:d4:73:cd:0b:48:d2:8f:f0:f6:ed:20:d0:3c:50:6f:21:a1: 45:e8:e5:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjQxMTIxMDQ0OTUzWhcNMjQxMTI4MDQ0OTUzWjAYMRYwFAYD VQQDEw02NzNlYmJmMS1lMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdeESbBRFkwxuHZK0eNp+0djtzMUzyNpr50prd0/IJ8TEUTD+vGB2rLuXwc4 vhf6+zlYifKg8kCoL5nMfm4WaoCaf033ecJWHFS7U8bGDQYdLoevfAwMjWExW2Dj plGxSrfmk449fhNvrgM3zjfhod/qRbVNifjKUl2hKykSTgBDhN8vE21MK5olKB9r 3KcLnjzUJ8G3Kl9QQDOqdPeflSJ7WKW7Vzt7b/sOinxLIbIFK95/aa3RiL+fX5K0 u0shqEeZ4/l3KwIMkjkKKQKHnYYOSqy4EkTiW4QmyHVRMEk1RGdBOoZxmhZFTcBl R5oMvb1+k8Z3TVN5wUVJfswmeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZ9aHHZ kvP8uR6nv2dJ6pvZpdf2MB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAysnMwByvYvQMUv0dZeQwDk2juVRrSaw08voHrFMN/cLsbhAoZeRLD y0WmS0F9qS57jLgxA4J/35lQ8wb1MFkNwTYo6WVwKh4v8/JUjhckTgXExcyRucCE 1hyLkHdErw7pwSS01CRz/mVyXghT6D8W5mGsBieRDWkrpg/9EOLabpU8q8C9EK5U L8Pas/ys4C6zIfz9KGUMYNudU7nk7oVgUUHevrORLjlZTm4rTfvUdKAg5eEa4AcL KAl1Ii6YFFy6hQbBN3ucLrSMME/qu+XLy5tKr26cWUI0EeYcAR8SiUEpsp0rjJdW ZVN51HPNC0jSj/D27SDQPFBvIaFF6OV2 -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:36 2024 by rpki-client on console-ams.rpki-client.org