$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json) Hash identifier: Cbsl8sB7f7Wo5QYRfgo6bQofVuBL5n5f5zRVVDhyX1g= Subject key identifier: 19:83:1F:E7:F2:58:BA:45:0E:E3:34:EB:3D:2C:CD:20:30:7E:4F:D0 Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Certificate serial: 05FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft Manifest number: 05F1 Signing time: Fri 22 Nov 2024 22:24:36 +0000 Manifest this update: Fri 22 Nov 2024 22:24:36 +0000 Manifest next update: Fri 29 Nov 2024 22:24:36 +0000 Files and hashes: 1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: 6ishr4nU+OOR881LPmC/L9sVM8A4x/gT1uoMfi+UO0Q=) 2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: LiXw5QkDIdwB3vLGmFYHfIaKv0T0QYD0Rl/2R7/Sqas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1531 (0x5fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Validity Not Before: Nov 22 22:24:36 2024 GMT Not After : Nov 29 22:24:36 2024 GMT Subject: CN=674104a4-876d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e6:ed:ee:1f:ac:a3:6e:8f:64:a0:7f:f8:14: a5:39:9c:d5:35:c5:7a:84:a7:4f:a1:4b:3f:8e:c4: b0:b7:3e:e6:0f:27:59:49:d1:90:4f:57:a7:74:67: 4e:b9:3f:a4:ec:c4:7f:3b:7b:52:59:9a:57:38:69: d3:ea:79:bd:46:1d:99:5e:22:72:c4:4f:90:77:20: b3:2b:ef:86:8c:0f:a9:25:2a:cb:3e:48:7f:4b:34: 3c:13:20:ef:b6:ed:7a:d4:8d:2f:cc:73:f3:69:47: 4e:4e:ea:75:7b:00:ba:d8:a6:cc:1d:ea:7c:20:4a: 48:e8:89:84:9e:4d:fd:30:b5:de:bc:c3:16:8c:63: d7:5d:b6:5e:85:2b:7b:0c:fe:ed:99:63:6f:4d:bc: 75:21:b3:e6:ed:2a:ab:f1:42:31:16:53:66:cc:18: ad:d9:40:5d:8e:5f:8a:ec:b9:4d:48:f8:6a:40:ce: 30:ae:82:78:50:d3:22:30:5f:97:f8:43:b9:ae:cc: 37:29:83:ed:f8:49:b9:56:89:61:b1:24:e9:8a:61: 14:16:4b:d2:45:8f:b1:a8:af:e7:10:c8:f2:3a:d0: 94:46:ea:ae:99:84:bb:4e:9f:71:b2:20:0f:3a:3d: 61:d2:f5:21:d9:cd:c4:09:9d:0d:f0:c8:1c:49:2c: 80:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:83:1F:E7:F2:58:BA:45:0E:E3:34:EB:3D:2C:CD:20:30:7E:4F:D0 X509v3 Authority Key Identifier: keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:23:f9:9b:89:63:50:f3:19:62:63:92:31:82:3e:56:ab:16: 71:fe:93:fa:c3:e8:62:78:29:ba:c8:bb:e8:64:e9:4c:70:a5: d1:d4:9e:77:4b:72:22:2e:8d:32:25:d9:5b:49:5c:e4:bf:9e: bb:d9:ea:a9:6a:4c:f2:2a:06:0d:74:f2:55:d9:f0:c7:9f:07: 2a:74:05:09:24:3b:f5:c0:bd:3e:7b:01:bd:90:9c:67:60:29: 70:47:f5:1d:a7:1c:82:d6:3a:d0:77:e1:6b:b9:bc:b9:53:ce: a2:8d:b0:ea:b1:69:bf:59:89:74:ae:3a:b6:6a:1c:7a:22:ad: ab:7f:93:a9:b3:9d:a1:aa:0f:da:28:da:8a:d8:8e:0c:4e:77: f0:d5:60:09:6c:12:e7:3a:b3:85:9f:30:04:a3:e2:3e:09:27: 70:25:4b:0d:74:40:8a:e1:36:36:ad:85:0a:57:86:75:b0:e4: 52:ef:1b:09:43:a7:e4:31:cc:db:19:cc:1b:c6:f1:53:df:95: 71:ad:87:ac:ab:b1:43:80:ca:ca:7e:a2:6f:a4:b3:ab:18:2a: 4f:f1:47:ef:d0:f3:c6:6c:98:1c:b4:95:f6:f1:e7:e1:54:d4: 45:cf:fc:e0:a3:7e:5b:76:19:5e:26:78:3c:32:7b:02:ab:c6: 3e:ba:35:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkzRTkxMTAvBgNVBAUTKEQ5QzYxNUQxMEI0MUU2RTU2OTg2NUNDQUE3RkUyODBE MTI4RTMxMUMwHhcNMjQxMTIyMjIyNDM2WhcNMjQxMTI5MjIyNDM2WjAYMRYwFAYD VQQDEw02NzQxMDRhNC04NzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzObt7h+so26PZKB/+BSlOZzVNcV6hKdPoUs/jsSwtz7mDydZSdGQT1endGdO uT+k7MR/O3tSWZpXOGnT6nm9Rh2ZXiJyxE+QdyCzK++GjA+pJSrLPkh/SzQ8EyDv tu161I0vzHPzaUdOTup1ewC62KbMHep8IEpI6ImEnk39MLXevMMWjGPXXbZehSt7 DP7tmWNvTbx1IbPm7Sqr8UIxFlNmzBit2UBdjl+K7LlNSPhqQM4wroJ4UNMiMF+X +EO5rsw3KYPt+Em5VolhsSTpimEUFkvSRY+xqK/nEMjyOtCURuqumYS7Tp9xsiAP Oj1h0vUh2c3ECZ0N8MgcSSyAKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmDH+fy WLpFDuM06z0szSAwfk/QMB8GA1UdIwQYMBaAFNnGFdELQeblaYZcyqf+KA0SjjEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNFOS84M0ExNzRGQzhD NjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1VnBobHpLcF80b0RSS09N UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjWVYwUXRCNXVWcGhsektwXzRvRFJLT01Sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTNFOS84M0ExNzRGQzhDNjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1 VnBobHpLcF80b0RSS09NUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNI/mbiWNQ8xliY5Ixgj5WqxZx/pP6w+hieCm6yLvoZOlMcKXR1J53 S3IiLo0yJdlbSVzkv5672eqpakzyKgYNdPJV2fDHnwcqdAUJJDv1wL0+ewG9kJxn YClwR/UdpxyC1jrQd+Fruby5U86ijbDqsWm/WYl0rjq2ahx6Iq2rf5Ops52hqg/a KNqK2I4MTnfw1WAJbBLnOrOFnzAEo+I+CSdwJUsNdECK4TY2rYUKV4Z1sORS7xsJ Q6fkMczbGcwbxvFT35VxrYesq7FDgMrKfqJvpLOrGCpP8Ufv0PPGbJgctJX28efh VNRFz/zgo35bdhleJng8MnsCq8Y+ujXL -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org