$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: iV2Cl98GS9xdw87tOAguAlSqfXCdZrGXXWHNAu7ujA8= Subject key identifier: 58:0B:79:F9:E4:58:C8:20:91:92:CE:DD:1A:17:D6:A9:0B:90:5F:66 Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 0130 Signing time: Sat 23 Nov 2024 02:49:57 +0000 Manifest this update: Sat 23 Nov 2024 02:49:57 +0000 Manifest next update: Sat 30 Nov 2024 02:49:57 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: 6i4qU1lXQi/hBUBsJJUXudHatGc7B6O2ESlw6632tB4=) 2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: T2GxpprBCkLcK8nLanU7+iPRdUPJ3LHSQZhYNBEF7S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: Nov 23 02:49:57 2024 GMT Not After : Nov 30 02:49:57 2024 GMT Subject: CN=674142d5-b80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:27:0d:29:d5:fd:59:56:ac:97:d5:c7:7a: 9b:7d:dd:fa:1a:f7:c3:3b:ab:04:37:22:97:32:ff: 6c:d5:40:a9:77:23:f3:b3:5d:7f:15:4d:dd:8b:d4: d2:a7:58:39:cb:05:a8:5f:f9:1f:74:7a:ca:d1:f2: a3:a2:83:07:f0:d3:47:1d:22:36:79:b2:5b:f6:72: a1:2a:42:ab:75:ef:84:9b:7d:14:18:73:52:e9:f2: c9:44:bf:76:9a:85:4a:3d:fa:33:57:41:66:f5:ba: 9b:89:c7:2d:05:30:f9:ea:39:25:00:0b:8e:72:29: 5f:52:ae:0f:8b:e1:38:33:57:87:7f:e0:1c:2b:c1: 9a:ce:ac:03:e0:b3:1d:cc:9d:36:e4:97:5b:19:a5: 45:0c:f8:50:5d:b1:71:25:a8:e3:ea:7f:b1:ed:88: 97:41:b0:b0:8b:0f:0c:98:d4:24:5f:e4:cd:e4:02: eb:5d:de:c2:5c:75:a2:d7:6b:69:7e:77:bd:4a:9d: 84:5a:3d:6f:df:55:30:23:00:8c:a6:88:be:bf:d5: e8:ef:58:61:3a:2e:7a:b5:64:80:c0:69:fd:7b:50: c4:0b:9f:f7:96:2e:23:c4:58:b8:fb:36:41:f3:20: 2d:d7:14:ec:ec:50:48:b3:e1:6c:1a:71:c1:19:be: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0B:79:F9:E4:58:C8:20:91:92:CE:DD:1A:17:D6:A9:0B:90:5F:66 X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:2b:01:d2:74:88:45:ec:fb:37:cd:0e:66:fc:d3:d3:2d:eb: c7:a9:77:e8:9f:83:55:a3:05:46:e4:eb:7f:2a:b2:5b:18:69: 0a:90:b9:57:4b:f3:e9:f9:a7:b8:85:e6:3e:5f:67:fc:22:87: f6:f2:de:3c:64:f5:03:bf:9b:0e:2a:85:b9:0f:4b:33:18:72: 26:14:19:92:94:47:47:c0:c8:39:94:8a:05:4b:ec:52:9f:d0: c4:d7:7f:7a:dd:4d:7e:0c:42:79:82:56:03:a2:77:95:ed:6f: 6a:07:24:97:78:1c:e2:8b:d0:15:5c:ce:f2:f7:15:34:e7:5b: 93:50:d7:1f:55:a3:9b:95:f5:21:d4:77:fe:a3:9a:82:15:c1: 33:ff:4a:73:28:c4:4c:a5:9b:55:56:1b:6d:96:79:58:c3:78: c5:66:39:4d:14:c5:e8:91:49:8d:e1:5e:43:41:f4:cd:cc:8f: 87:b9:93:04:ea:3c:0d:ed:d2:5d:f6:4f:88:1c:17:a5:f0:0d: 27:a5:7a:43:d1:d1:ff:61:a5:89:cb:dd:c6:bf:c5:f8:81:ce: 2a:76:96:7b:15:c1:60:ff:a8:a0:81:16:d1:e2:5a:58:7a:d2: 3b:3a:f2:b0:c0:9e:dc:1f:cd:90:6f:75:ab:33:07:6e:21:fd: 94:4a:c3:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjQxMTIzMDI0OTU3WhcNMjQxMTMwMDI0OTU3WjAYMRYwFAYD VQQDEw02NzQxNDJkNS1iODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWsnDSnV/VlWrJfVx3qbfd36GvfDO6sENyKXMv9s1UCpdyPzs11/FU3di9TS p1g5ywWoX/kfdHrK0fKjooMH8NNHHSI2ebJb9nKhKkKrde+Em30UGHNS6fLJRL92 moVKPfozV0Fm9bqbicctBTD56jklAAuOcilfUq4Pi+E4M1eHf+AcK8GazqwD4LMd zJ025JdbGaVFDPhQXbFxJajj6n+x7YiXQbCwiw8MmNQkX+TN5ALrXd7CXHWi12tp fne9Sp2EWj1v31UwIwCMpoi+v9Xo71hhOi56tWSAwGn9e1DEC5/3li4jxFi4+zZB 8yAt1xTs7FBIs+FsGnHBGb4ehQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgLefnk WMggkZLO3RoX1qkLkF9mMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0KwHSdIhF7Ps3zQ5m/NPTLevHqXfon4NVowVG5Ot/KrJbGGkKkLlX S/Pp+ae4heY+X2f8Iof28t48ZPUDv5sOKoW5D0szGHImFBmSlEdHwMg5lIoFS+xS n9DE13963U1+DEJ5glYDoneV7W9qBySXeBzii9AVXM7y9xU051uTUNcfVaOblfUh 1Hf+o5qCFcEz/0pzKMRMpZtVVhttlnlYw3jFZjlNFMXokUmN4V5DQfTNzI+HuZME 6jwN7dJd9k+IHBel8A0npXpD0dH/YaWJy93Gv8X4gc4qdpZ7FcFg/6iggRbR4lpY etI7OvKwwJ7cH82Qb3WrMwduIf2USsN6 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:36 2024 by rpki-client on console-ams.rpki-client.org