$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft File: snbxWm1Kl8SBkekr0WYfNovvIeQ.mft (raw, json) Hash identifier: m7ZmLRqt3G6Y3isS7fQ1wTpY3qkIqlKvBgjz1bWqpQI= Subject key identifier: BE:5E:19:9C:CD:7F:EA:90:27:CE:CD:6E:CD:21:13:1C:21:BC:CD:36 Authority key identifier: B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4 Certificate issuer: /CN=A91B37C4/serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft Manifest number: 19 Signing time: Sat 23 Nov 2024 05:55:28 +0000 Manifest this update: Sat 23 Nov 2024 05:55:27 +0000 Manifest next update: Sat 30 Nov 2024 05:55:27 +0000 Files and hashes: 1: snbxWm1Kl8SBkekr0WYfNovvIeQ.crl (hash: 2EifgAmkj90NmGHrGiHWm9d9Cayyut3ots/Gc+yA/Ag=) 2: 3E4B01008BDA11EFA4A11684C4F9AE02.roa (hash: zwx+U9J08Id0maPwN81wQAKGfgxb2cKuo5oynZYPQgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37C4/serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4 Validity Not Before: Nov 23 05:55:27 2024 GMT Not After : Nov 30 05:55:27 2024 GMT Subject: CN=67416e4f-05b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:33:27:72:b3:a5:59:00:18:ad:5e:62:ac: 52:8c:78:c8:ea:c4:cf:e7:d7:7e:0a:45:c4:34:62: 81:01:16:e7:d9:2e:30:98:1b:f4:c6:b6:d1:0d:eb: 1e:5d:90:64:b2:0c:e8:a7:46:f1:b4:20:52:a4:4e: 62:cf:85:cd:d1:bf:c7:8f:97:d7:64:1e:7b:13:f6: 9f:73:93:2e:e0:cc:ae:9a:1c:9c:94:b0:8b:87:b6: 04:1b:ab:70:0c:65:33:04:f3:51:61:28:c3:1c:ed: 89:2f:01:f9:15:40:4d:63:ab:e8:aa:37:14:23:f0: 42:92:1c:5e:de:ce:23:64:3e:86:f5:5a:72:55:dd: 88:b6:d9:d1:09:e1:4e:04:24:8d:1e:e4:21:ba:49: 8f:f1:dd:65:47:bd:10:54:86:37:2b:08:f8:b8:2a: 95:82:c3:3f:a3:a2:b0:76:ed:ca:76:7f:9a:4a:72: 43:2e:84:2f:30:0e:38:cd:34:66:f5:1d:29:a3:04: a8:1f:46:40:b5:e8:ef:fc:a0:56:7a:06:8e:ba:34: ba:ee:66:92:2d:ce:79:25:ff:0d:8c:00:91:4e:01: 13:16:b9:60:0b:ea:48:11:7b:ff:63:d2:17:19:84: 00:ec:30:64:03:9b:61:e7:54:33:77:1c:8a:de:6f: b6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5E:19:9C:CD:7F:EA:90:27:CE:CD:6E:CD:21:13:1C:21:BC:CD:36 X509v3 Authority Key Identifier: keyid:B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:39:ba:1a:a1:4c:d4:9c:09:25:9d:2e:67:c9:0e:8b:95:7b: bc:7f:3d:d1:88:ca:f0:64:21:d4:8b:6e:2c:e8:fe:46:50:10: 20:1a:0c:f2:a3:c4:ad:af:23:73:a6:bf:61:3a:7d:48:5a:e5: 92:d4:cb:c4:6d:d6:83:c3:4c:14:38:bd:be:67:38:98:8f:cd: 4e:2f:ff:43:63:94:72:e3:f0:04:54:52:84:70:66:31:f4:c5: e1:b3:b6:f6:99:c2:2c:56:ea:70:3b:ff:f1:78:67:c3:20:ec: 0e:a5:0f:c5:ec:6d:4e:8e:e5:89:a2:d2:84:e8:4f:dd:41:21: 01:70:a7:e3:15:86:29:0e:84:af:51:d5:28:a1:c4:5d:1d:bf: 9c:e3:9c:3d:40:28:84:9c:49:a1:24:bb:0c:32:70:f4:84:3e: 9f:20:bd:81:48:72:b5:32:81:4c:87:b5:72:3a:71:06:ff:84: 80:52:ab:f5:20:2d:d9:5d:85:6a:7a:db:dd:3e:16:cb:63:a5: c3:54:32:05:80:f3:b8:31:36:cc:22:67:0d:0a:76:9e:5d:1e: 9b:95:f4:4c:77:23:b7:f4:44:2c:b2:29:a4:d7:17:30:7d:36: e2:0f:45:21:e6:0b:f4:37:3b:70:5d:91:74:ad:5f:c7:10:0f: b7:3a:03:ea -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzdDNDExMC8GA1UEBRMoQjI3NkYxNUE2RDRBOTdDNDgxOTFFOTJCRDE2NjFGMzY4 QkVGMjFFNDAeFw0yNDExMjMwNTU1MjdaFw0yNDExMzAwNTU1MjdaMBgxFjAUBgNV BAMTDTY3NDE2ZTRmLTA1YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfwjMncrOlWQAYrV5irFKMeMjqxM/n134KRcQ0YoEBFufZLjCYG/TGttEN6x5d kGSyDOinRvG0IFKkTmLPhc3Rv8ePl9dkHnsT9p9zky7gzK6aHJyUsIuHtgQbq3AM ZTME81FhKMMc7YkvAfkVQE1jq+iqNxQj8EKSHF7eziNkPob1WnJV3Yi22dEJ4U4E JI0e5CG6SY/x3WVHvRBUhjcrCPi4KpWCwz+jorB27cp2f5pKckMuhC8wDjjNNGb1 HSmjBKgfRkC16O/8oFZ6Bo66NLruZpItznkl/w2MAJFOARMWuWAL6kgRe/9j0hcZ hADsMGQDm2HnVDN3HIreb7bnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvl4ZnM1/ 6pAnzs1uzSETHCG8zTYwHwYDVR0jBBgwFoAUsnbxWm1Kl8SBkekr0WYfNovvIeQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzN0M0L0EyQUJBNzJDOEJE OTExRUY5Rjk2QkE0RUM0RjlBRTAyL3NuYnhXbTFLbDhTQmtla3IwV1lmTm92dkll US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc25ieFdtMUtsOFNCa2VrcjBXWWZOb3Z2SWVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz N0M0L0EyQUJBNzJDOEJEOTExRUY5Rjk2QkE0RUM0RjlBRTAyL3NuYnhXbTFLbDhT Qmtla3IwV1lmTm92dkllUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAII5uhqhTNScCSWdLmfJDouVe7x/PdGIyvBkIdSLbizo/kZQECAaDPKj xK2vI3Omv2E6fUha5ZLUy8Rt1oPDTBQ4vb5nOJiPzU4v/0NjlHLj8ARUUoRwZjH0 xeGztvaZwixW6nA7//F4Z8Mg7A6lD8XsbU6O5Ymi0oToT91BIQFwp+MVhikOhK9R 1SihxF0dv5zjnD1AKIScSaEkuwwycPSEPp8gvYFIcrUygUyHtXI6cQb/hIBSq/Ug LdldhWp6290+FstjpcNUMgWA87gxNswiZw0Kdp5dHpuV9Ex3I7f0RCyyKaTXFzB9 NuIPRSHmC/Q3O3BdkXStX8cQD7c6A+o= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org