$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft File: _SW6lhEBtc5gFJk850iP228IpCM.mft (raw, json) Hash identifier: +GwRG9xyykV2kjslRlYE4VZanjtXfsAxdNUPYwnCtuY= Subject key identifier: 93:D5:B4:BC:1E:5A:D0:E3:33:80:CC:3F:A2:E3:A4:D6:88:32:84:51 Authority key identifier: FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23 Certificate issuer: /CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423 Certificate serial: 07B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft Manifest number: 12FE Signing time: Wed 20 Nov 2024 18:51:35 +0000 Manifest this update: Wed 20 Nov 2024 18:51:35 +0000 Manifest next update: Wed 27 Nov 2024 18:51:35 +0000 Files and hashes: 1: _SW6lhEBtc5gFJk850iP228IpCM.crl (hash: Z96H38lXQBQ4RzmuR6RGZGpwm6kZW3wnCpvFDNpyYNE=) 2: 9412C93EDC6F11EABFEF2548C4F9AE02.roa (hash: RLwYPMhMe9BwDK8rCAnXVnWtpCBgPhejDp6NcWERB7s=) 3: 949F398CDC6F11EABFEF2548C4F9AE02.roa (hash: JKN99SL1qpZZYm8JW/0SbU0c9K8PYY5zTB3QwwglAC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1975 (0x7b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423 Validity Not Before: Nov 20 18:51:35 2024 GMT Not After : Nov 27 18:51:35 2024 GMT Subject: CN=673e2fb7-4806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:df:f3:e7:f1:e1:bb:96:d7:4d:80:20:a3: a4:81:3e:71:63:38:f6:7f:fa:e7:4b:24:49:42:41: 58:65:30:43:f6:1c:6d:cd:ae:cb:69:a9:f5:c8:6e: 2d:84:b7:91:a3:c4:4b:b9:9c:43:02:1b:cc:d0:7f: 21:a1:2f:a9:03:7e:ec:da:fa:88:bb:36:84:de:4b: d8:46:80:58:c6:c7:d9:47:44:bb:a4:8e:e6:46:ce: 09:d4:2c:8e:ac:e1:74:81:e4:5e:6b:1d:2e:57:96: 18:d6:4a:50:d1:7a:12:1d:67:37:12:2d:56:99:d6: 1b:c7:0e:ce:72:04:9e:4c:76:4a:86:62:9c:d6:41: 43:ed:b9:80:17:9c:8b:89:59:ef:7e:99:af:be:ac: cf:f1:02:80:7d:41:08:fd:98:1d:0f:a6:f3:cd:41: 66:8c:93:a4:4d:9d:4d:86:29:0a:84:d3:c1:72:ca: c3:56:70:cb:58:4e:c7:79:b8:3a:10:a9:77:87:12: d8:45:23:51:4d:c7:f4:7c:2d:0a:25:ec:fd:d3:92: 2e:7d:1d:6f:bf:71:84:8d:97:f5:85:a9:5f:ca:95: 14:cb:79:71:e5:91:83:f8:9b:d1:2f:90:2b:c2:23: 41:0a:37:9b:c3:fd:a8:c3:d5:71:9e:ac:f5:3e:4a: ca:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D5:B4:BC:1E:5A:D0:E3:33:80:CC:3F:A2:E3:A4:D6:88:32:84:51 X509v3 Authority Key Identifier: keyid:FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b3:1b:d2:55:99:90:15:06:2e:b4:d1:a9:b8:1d:61:3e:f8: 99:94:1c:ce:81:9e:0c:35:ca:8d:ae:fe:e0:dc:15:8c:e0:71: bb:11:fd:4b:1d:9d:48:60:16:d5:4b:31:58:9e:19:84:b4:69: 78:cd:6c:1a:db:1f:3a:92:82:ba:17:4f:ac:09:a3:5d:e9:6f: ff:5c:bd:00:62:78:4e:47:f1:d0:67:3f:c5:2f:18:46:93:fe: 99:74:29:e3:b4:fc:7e:44:e8:21:ce:8f:db:6a:dc:b6:0b:8b: 9d:28:47:ec:2d:28:2c:94:26:36:db:3c:17:a3:45:df:79:ae: 3a:94:9e:ec:de:09:e0:35:ec:44:60:92:c1:50:12:e9:8e:73: 80:fc:06:b4:56:c4:eb:ce:d6:b6:f4:7f:13:0c:28:76:6b:b2: 38:92:31:32:a9:37:c0:35:1c:78:24:c6:b0:f6:c7:ce:0f:9e: bb:71:f7:62:23:8c:d4:b2:f8:d8:17:c9:5c:05:45:52:58:0b: ad:79:26:a7:4b:b8:fb:ca:c6:34:6f:56:d6:3e:dc:5f:73:fe: 59:62:1a:09:f5:f3:13:5e:6c:ba:2f:60:5f:6f:20:71:fe:7a: b8:0e:db:73:0a:53:72:2b:c9:b8:8e:d6:ed:84:e2:96:32:c6: ad:eb:d3:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKEZEMjVCQTk2MTEwMUI1Q0U2MDE0OTkzQ0U3NDg4RkRC NkYwOEE0MjMwHhcNMjQxMTIwMTg1MTM1WhcNMjQxMTI3MTg1MTM1WjAYMRYwFAYD VQQDEw02NzNlMmZiNy00ODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Mnf8+fx4buW102AIKOkgT5xYzj2f/rnSyRJQkFYZTBD9hxtza7Laan1yG4t hLeRo8RLuZxDAhvM0H8hoS+pA37s2vqIuzaE3kvYRoBYxsfZR0S7pI7mRs4J1CyO rOF0geReax0uV5YY1kpQ0XoSHWc3Ei1WmdYbxw7OcgSeTHZKhmKc1kFD7bmAF5yL iVnvfpmvvqzP8QKAfUEI/ZgdD6bzzUFmjJOkTZ1NhikKhNPBcsrDVnDLWE7Hebg6 EKl3hxLYRSNRTcf0fC0KJez905IufR1vv3GEjZf1halfypUUy3lx5ZGD+JvRL5Ar wiNBCjebw/2ow9Vxnqz1PkrKgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPVtLwe WtDjM4DMP6LjpNaIMoRRMB8GA1UdIwQYMBaAFP0lupYRAbXOYBSZPOdIj9tvCKQj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9fU1c2bGhFQnRjNWdGSms4NTBpUDIyOElw Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19TVzZsaEVCdGM1Z0ZKazg1MGlQMjI4SXBDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9fU1c2bGhFQnRj NWdGSms4NTBpUDIyOElwQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArsxvSVZmQFQYutNGpuB1hPviZlBzOgZ4MNcqNrv7g3BWM4HG7Ef1L HZ1IYBbVSzFYnhmEtGl4zWwa2x86koK6F0+sCaNd6W//XL0AYnhOR/HQZz/FLxhG k/6ZdCnjtPx+ROghzo/baty2C4udKEfsLSgslCY22zwXo0Xfea46lJ7s3gngNexE YJLBUBLpjnOA/Aa0VsTrzta29H8TDCh2a7I4kjEyqTfANRx4JMaw9sfOD567cfdi I4zUsvjYF8lcBUVSWAuteSanS7j7ysY0b1bWPtxfc/5ZYhoJ9fMTXmy6L2BfbyBx /nq4DttzClNyK8m4jtbthOKWMsat69Nt -----END CERTIFICATE-----Generated at Wed Nov 20 21:35:05 2024 by rpki-client on console-ams.rpki-client.org