$ rpki-client -vvf rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft File: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft (raw, json) Hash identifier: pLj8U+3JVnmu4C/Y4fbcn0f3dGL5kLEFUS5mzvEwRfE= Subject key identifier: 6F:14:43:A3:F0:67:C1:FD:0F:20:AA:9C:C8:CB:9B:A8:7E:01:8C:CE Authority key identifier: DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC Certificate issuer: /CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Certificate serial: 3424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft Manifest number: 3424 Signing time: Sun 24 Nov 2024 14:48:31 +0000 Manifest this update: Sun 24 Nov 2024 14:48:30 +0000 Manifest next update: Sun 01 Dec 2024 14:48:30 +0000 Files and hashes: 1: 2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl (hash: YPH9/BYJ/AANNov1KKgUE83Ez8/zXrP+SB/Oj1M6VJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13348 (0x3424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127A9B/serialNumber=DA604CFDB2730A8DE725FC74AB0FC63E0558E5DC Validity Not Before: Nov 24 14:48:30 2024 GMT Not After : Dec 1 14:48:30 2024 GMT Subject: CN=67433cbe-5de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:59:0a:2a:fe:94:0d:bf:a7:49:5f:7e:0c:28: a4:5a:4a:bc:2f:02:e2:06:78:9e:a0:a8:20:bc:40: 69:53:1e:16:7e:96:dd:14:6e:7e:e0:ed:2f:0c:71: 98:c7:ef:2c:af:84:e0:20:c6:bd:1c:47:85:c4:95: 95:35:6c:2f:a3:87:b9:97:d1:2d:a4:46:17:b7:28: 63:23:c2:65:e8:7b:02:7b:4c:d9:d6:f6:49:bd:ec: 7c:8b:75:a9:47:af:81:47:24:61:45:06:81:fa:a1: 93:ad:f3:a9:25:36:9b:fd:86:5e:48:83:d6:b6:2e: 4e:77:1c:a9:95:dc:12:ff:84:ba:b2:64:6d:90:16: ee:00:fd:64:ed:cf:73:9a:a2:12:c0:6c:f0:8f:c0: 17:85:3d:da:49:d2:6c:9c:56:46:df:0b:13:62:12: 7e:d7:b0:72:bd:9e:15:7c:0e:95:d5:1b:47:fc:21: bb:57:22:42:d6:bc:16:4b:aa:29:f2:9b:35:3b:4e: d8:29:d1:e6:47:bc:e1:8e:a9:6a:bd:34:83:43:c4: 05:78:9c:cb:5a:04:7b:40:21:44:5f:92:be:af:f8: c1:16:64:46:78:a3:6d:c2:d5:e4:24:8e:5b:f8:c8: 26:62:ca:ee:0f:94:d8:50:db:6d:c4:4b:46:b2:06: 24:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:14:43:A3:F0:67:C1:FD:0F:20:AA:9C:C8:CB:9B:A8:7E:01:8C:CE X509v3 Authority Key Identifier: keyid:DA:60:4C:FD:B2:73:0A:8D:E7:25:FC:74:AB:0F:C6:3E:05:58:E5:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127A9B/FC058E561D9511E2B1A0467E08B02CD2/2mBM_bJzCo3nJfx0qw_GPgVY5dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2f:da:da:a2:95:1c:f2:34:c5:5f:cf:16:cb:4c:40:fe:9f: 02:c9:1e:5f:87:10:04:87:06:87:38:e8:a2:b2:4b:24:ff:d6: 53:cc:54:c6:97:f7:4d:9c:06:63:29:df:8e:8e:72:30:06:f4: c0:3d:d2:9d:a2:09:d6:4f:99:0d:df:ea:27:72:a3:cb:fa:bd: 84:b1:44:05:91:21:70:4d:ca:5f:b5:1d:50:a7:de:47:c6:b0: df:f6:20:d6:43:1b:67:36:2c:ad:6b:40:3f:e2:0f:9e:4a:df: 4b:38:b0:9e:e4:33:9a:4f:12:17:74:2e:9f:f9:e5:02:8d:54: e2:a3:dc:e6:92:15:fe:bd:ce:67:10:44:3f:93:e4:e5:1b:78: fd:1c:7b:c6:41:6e:91:52:b7:65:17:b7:c6:5d:31:ac:2e:e0: 06:1d:f8:04:6a:de:c0:01:77:6c:8d:8d:0c:2b:16:a3:90:1f: a3:d4:a3:55:32:d8:05:8e:97:0d:9d:af:e2:a6:7a:93:28:9a: 2e:3f:d6:a9:a4:95:3e:cb:ba:0c:42:e0:97:1a:de:e9:0a:f8: ae:94:cf:7c:70:4f:e0:cb:1f:ef:22:fb:6b:1d:d8:3c:93:86: 0a:bd:d3:a8:3a:84:a8:e2:58:dd:14:2c:ab:53:ad:e9:54:52: ab:15:4a:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdBOUIxMTAvBgNVBAUTKERBNjA0Q0ZEQjI3MzBBOERFNzI1RkM3NEFCMEZDNjNF MDU1OEU1REMwHhcNMjQxMTI0MTQ0ODMwWhcNMjQxMjAxMTQ0ODMwWjAYMRYwFAYD VQQDEw02NzQzM2NiZS01ZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1kKKv6UDb+nSV9+DCikWkq8LwLiBnieoKggvEBpUx4WfpbdFG5+4O0vDHGY x+8sr4TgIMa9HEeFxJWVNWwvo4e5l9EtpEYXtyhjI8Jl6HsCe0zZ1vZJvex8i3Wp R6+BRyRhRQaB+qGTrfOpJTab/YZeSIPWti5OdxypldwS/4S6smRtkBbuAP1k7c9z mqISwGzwj8AXhT3aSdJsnFZG3wsTYhJ+17ByvZ4VfA6V1RtH/CG7VyJC1rwWS6op 8ps1O07YKdHmR7zhjqlqvTSDQ8QFeJzLWgR7QCFEX5K+r/jBFmRGeKNtwtXkJI5b +MgmYsruD5TYUNttxEtGsgYkfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8UQ6Pw Z8H9DyCqnMjLm6h+AYzOMB8GA1UdIwQYMBaAFNpgTP2ycwqN5yX8dKsPxj4FWOXc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0E5Qi9GQzA1OEU1NjFE OTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNvM25KZngwcXdfR1BnVlk1 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtQk1fYkp6Q28zbkpmeDBxd19HUGdWWTVkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0E5Qi9GQzA1OEU1NjFEOTUxMUUyQjFBMDQ2N0UwOEIwMkNEMi8ybUJNX2JKekNv M25KZngwcXdfR1BnVlk1ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeL9raopUc8jTFX88Wy0xA/p8CyR5fhxAEhwaHOOiisksk/9ZTzFTG l/dNnAZjKd+OjnIwBvTAPdKdognWT5kN3+oncqPL+r2EsUQFkSFwTcpftR1Qp95H xrDf9iDWQxtnNiyta0A/4g+eSt9LOLCe5DOaTxIXdC6f+eUCjVTio9zmkhX+vc5n EEQ/k+TlG3j9HHvGQW6RUrdlF7fGXTGsLuAGHfgEat7AAXdsjY0MKxajkB+j1KNV MtgFjpcNna/ipnqTKJouP9appJU+y7oMQuCXGt7pCviulM98cE/gyx/vIvtrHdg8 k4YKvdOoOoSo4ljdFCyrU63pVFKrFUrf -----END CERTIFICATE-----Generated at Sun Nov 24 17:19:58 2024 by rpki-client on console-fra.rpki-client.org