$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: g9+svOtzQAfJexW7dRP0HPrXqrCfZ27m7jKJjEjaHb0= Subject key identifier: B2:85:39:DD:99:EB:1A:F7:DE:66:52:39:61:91:A4:C6:F5:18:DC:5F Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 017E Signing time: Thu 21 Nov 2024 02:09:25 +0000 Manifest this update: Thu 21 Nov 2024 02:09:25 +0000 Manifest next update: Thu 28 Nov 2024 02:09:25 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: +3PrO9t2vOMHapwErk0yDFBH6xbDjmx0PlH8eSdXt8k=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: u6i0aL0lGd+DkS8Cd1HM9x+4U1BJruGUogvC+Sy1wtw=) 3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: IIRWaPut9Ga2CFDh4DoBpgMGLj7TDwhjoYp6oTvz8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Nov 21 02:09:25 2024 GMT Not After : Nov 28 02:09:25 2024 GMT Subject: CN=673e9655-0725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dc:6d:0d:a8:40:65:5d:02:5b:96:03:30:27: 10:f8:e5:86:d0:50:30:80:d4:60:51:df:df:13:1b: 85:8e:a4:58:80:c3:09:f3:b8:0e:8f:fe:2a:15:08: 09:65:d6:37:44:95:5e:4b:55:1b:27:fb:d9:6c:86: a8:73:a4:75:63:17:9a:ab:57:af:2e:ec:e4:d1:16: d8:cd:89:c5:69:42:cc:35:45:0e:43:74:b0:ef:e7: 84:ee:70:20:93:c3:ac:49:36:ef:d8:7b:5b:b7:41: 61:17:60:e8:57:5c:27:6b:ef:28:1c:a4:09:81:b5: 8a:fc:68:f1:1b:47:49:66:a5:41:67:ec:26:ff:fb: 67:d3:35:f4:8e:91:ab:1e:f3:68:66:fd:d3:b8:c7: 17:b0:8b:f3:b6:f1:7d:8c:ad:ef:ca:19:c8:a4:23: c4:d8:da:9e:77:bf:4f:f8:48:8b:88:f8:c5:42:d8: ec:7e:85:e9:0e:69:4e:44:e0:df:b9:15:44:ce:1d: 0f:e8:8c:71:81:14:4e:f6:6f:7c:6a:6b:24:c2:cd: a9:fb:9e:84:d9:98:08:84:71:55:f2:bc:be:a7:39: d4:3d:ed:61:c9:49:f5:38:22:71:82:83:f3:a0:bd: 68:01:02:01:07:34:4b:5f:85:06:a7:15:7f:87:e1: be:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:85:39:DD:99:EB:1A:F7:DE:66:52:39:61:91:A4:C6:F5:18:DC:5F X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6d:05:67:9b:af:39:10:33:20:31:85:a1:a2:84:1f:e4:da: 5a:46:c9:08:c6:99:44:2b:0b:47:93:70:4c:68:c9:e2:f4:22: b7:39:ef:97:67:74:a5:6b:9a:ee:d5:18:cf:79:78:7c:97:d8: 1b:97:17:4d:ad:ce:1e:a1:5a:ab:e0:0c:a7:61:89:e8:aa:20: e4:2d:11:a6:18:c5:98:36:ab:ec:3c:dd:09:06:f3:9a:48:82: 40:90:d7:4e:c3:04:25:c1:49:10:28:3c:e2:8f:76:40:86:f4: 38:23:18:88:8d:fc:1a:88:dc:75:4b:ab:fd:c9:06:84:c5:4a: 80:38:4e:21:7d:ce:27:9d:f6:7c:b7:fb:bc:04:89:b9:ef:fd: 3a:aa:c3:ef:28:13:62:af:d5:22:82:83:34:47:35:64:ed:e4: f7:9f:3b:3b:35:5c:8b:9d:64:0c:58:a6:13:be:a7:31:94:13: 46:18:75:a8:bf:10:92:ea:91:ff:e0:3c:bf:4c:a4:7d:dd:14: 80:f5:cd:2f:fa:12:8e:87:44:99:42:40:44:7a:7a:6e:9b:19: a9:45:7a:5a:63:81:c7:6f:7e:af:21:01:a7:af:9c:1e:d2:9c: 40:60:98:9e:6e:ce:68:76:a1:1e:73:cb:56:b9:23:4c:7b:13: 7c:37:79:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjQxMTIxMDIwOTI1WhcNMjQxMTI4MDIwOTI1WjAYMRYwFAYD VQQDEw02NzNlOTY1NS0wNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9xtDahAZV0CW5YDMCcQ+OWG0FAwgNRgUd/fExuFjqRYgMMJ87gOj/4qFQgJ ZdY3RJVeS1UbJ/vZbIaoc6R1Yxeaq1evLuzk0RbYzYnFaULMNUUOQ3Sw7+eE7nAg k8OsSTbv2Htbt0FhF2DoV1wna+8oHKQJgbWK/GjxG0dJZqVBZ+wm//tn0zX0jpGr HvNoZv3TuMcXsIvztvF9jK3vyhnIpCPE2Nqed79P+EiLiPjFQtjsfoXpDmlORODf uRVEzh0P6IxxgRRO9m98amskws2p+56E2ZgIhHFV8ry+pznUPe1hyUn1OCJxgoPz oL1oAQIBBzRLX4UGpxV/h+G+AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKFOd2Z 6xr33mZSOWGRpMb1GNxfMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrbQVnm685EDMgMYWhooQf5NpaRskIxplEKwtHk3BMaMni9CK3Oe+X Z3Sla5ru1RjPeXh8l9gblxdNrc4eoVqr4AynYYnoqiDkLRGmGMWYNqvsPN0JBvOa SIJAkNdOwwQlwUkQKDzij3ZAhvQ4IxiIjfwaiNx1S6v9yQaExUqAOE4hfc4nnfZ8 t/u8BIm57/06qsPvKBNir9UigoM0RzVk7eT3nzs7NVyLnWQMWKYTvqcxlBNGGHWo vxCS6pH/4Dy/TKR93RSA9c0v+hKOh0SZQkBEenpumxmpRXpaY4HHb36vIQGnr5we 0pxAYJiebs5odqEec8tWuSNMexN8N3mt -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:04 2024 by rpki-client on console-fra.rpki-client.org