$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft File: C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json) Hash identifier: hUQ1HmsZW58Kr51wby8U4ESWLN7naxTcnQIejgbeRdc= Subject key identifier: AE:56:3E:65:FB:CA:F4:5F:2E:F4:BF:F0:00:09:A2:16:FE:38:14:7F Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 Certificate issuer: /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft Manifest number: 0135 Signing time: Sat 23 Nov 2024 02:54:26 +0000 Manifest this update: Sat 23 Nov 2024 02:54:25 +0000 Manifest next update: Sat 30 Nov 2024 02:54:25 +0000 Files and hashes: 1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: vPggTZNSwrLzWqaLkEsBlmo7tJgxU0LNefesQZ4i1QQ=) 2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: TJla+6OU4JtW1zEWex9/TydUYGGDR5CR5xflmjoiF3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Validity Not Before: Nov 23 02:54:25 2024 GMT Not After : Nov 30 02:54:25 2024 GMT Subject: CN=674143e1-b7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:3c:e6:a8:fa:96:6e:dc:f3:b1:c2:bc:fa: 5c:b2:23:39:aa:97:1c:54:08:28:d8:9e:4d:3d:35: a0:3d:7b:80:07:e1:8e:97:91:cc:ae:50:91:36:5d: ac:ee:99:76:e7:8a:29:33:f2:8b:6a:bc:50:0d:26: 84:56:01:dc:07:d5:90:ec:b8:3f:13:95:7f:a4:01: 32:33:02:dc:ef:9b:3b:f7:1f:c2:77:93:c7:32:2d: cd:05:63:5c:80:10:f4:bf:ed:47:71:e3:23:c7:eb: 66:8f:3a:c6:8d:d1:72:0f:21:99:3b:67:9d:55:b7: af:8b:98:a2:50:16:52:07:de:57:0b:98:b6:f0:3c: 7a:3d:54:27:74:72:ce:be:b2:f6:91:2f:e7:91:be: cc:eb:52:87:86:ac:46:52:b8:35:6c:6b:42:be:c0: 8e:ec:f9:ff:63:91:b2:d9:04:9c:84:ac:5f:40:90: fc:8d:6a:d4:4e:b9:da:90:2a:a7:33:44:9e:13:fa: 2c:21:e3:18:08:08:0c:51:30:92:de:7c:db:4b:d0: 28:94:4a:15:fa:dc:42:61:15:b7:b5:38:5d:77:32: e3:65:ea:a2:03:8a:cb:3d:d9:66:f4:a3:2f:9d:35: fc:91:11:a3:84:66:fd:71:f3:12:6f:40:86:58:5d: 0d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:56:3E:65:FB:CA:F4:5F:2E:F4:BF:F0:00:09:A2:16:FE:38:14:7F X509v3 Authority Key Identifier: keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f9:aa:07:15:9c:4a:4b:66:95:26:93:22:4b:a6:04:12:e9: 5e:fb:e7:d3:91:2f:90:b2:19:18:60:f0:5b:e2:f2:34:31:ad: 22:7b:eb:00:79:0b:22:09:b0:2f:70:ed:fa:23:02:a4:09:98: 44:d9:1b:af:33:f1:d0:e6:bf:c6:7d:5c:44:84:58:ac:ff:6f: a7:ed:bd:32:c7:9b:43:c7:05:32:7d:ae:a0:72:38:eb:4a:33: 97:d8:a5:cf:cb:ea:68:1e:b1:98:25:00:c4:3e:71:33:7f:6e: 72:4e:69:8b:57:70:17:cf:66:35:bd:57:7d:e7:e1:68:bc:83: 1e:4c:09:e4:93:fa:1d:b2:c8:18:69:10:f7:d0:a0:a1:40:30: 60:77:0c:c6:f9:06:5e:64:f4:34:2c:a1:20:c5:91:bd:d7:23: 99:8a:de:53:a8:d8:c4:61:c6:d3:b5:0b:88:f8:84:87:e5:9d: 9d:31:7b:ff:dc:a8:fd:19:86:10:a7:ec:b2:38:a6:5a:e4:e0: 1f:98:b3:67:a5:6a:44:a7:ca:4f:dc:0c:c6:33:f5:28:68:42: a0:d3:b0:3a:4d:5a:8b:23:77:3b:50:75:5b:5d:e3:5a:37:a0: d7:2c:69:88:91:8f:e9:48:ba:79:65:24:a5:5b:af:1d:1d:75: c3:a9:aa:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwOTIxMTAvBgNVBAUTKDBCNjFDNDc0ODk2OUE0NEZDODNDODg4MkEwMjU3OUQw RDU5MjNCNjEwHhcNMjQxMTIzMDI1NDI1WhcNMjQxMTMwMDI1NDI1WjAYMRYwFAYD VQQDEw02NzQxNDNlMS1iN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTE85qj6lm7c87HCvPpcsiM5qpccVAgo2J5NPTWgPXuAB+GOl5HMrlCRNl2s 7pl254opM/KLarxQDSaEVgHcB9WQ7Lg/E5V/pAEyMwLc75s79x/Cd5PHMi3NBWNc gBD0v+1HceMjx+tmjzrGjdFyDyGZO2edVbevi5iiUBZSB95XC5i28Dx6PVQndHLO vrL2kS/nkb7M61KHhqxGUrg1bGtCvsCO7Pn/Y5Gy2QSchKxfQJD8jWrUTrnakCqn M0SeE/osIeMYCAgMUTCS3nzbS9AolEoV+txCYRW3tThddzLjZeqiA4rLPdlm9KMv nTX8kRGjhGb9cfMSb0CGWF0N8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5WPmX7 yvRfLvS/8AAJohb+OBR/MB8GA1UdIwQYMBaAFAthxHSJaaRPyDyIgqAledDVkjth MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjA5Mi8yODIzMDk5NkVF MjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBFX0lQSWlDb0NWNTBOV1NP MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MySEVkSWxwcEVfSVBJaUNvQ1Y1ME5XU08yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjA5Mi8yODIzMDk5NkVFMjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBF X0lQSWlDb0NWNTBOV1NPMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR+aoHFZxKS2aVJpMiS6YEEule++fTkS+QshkYYPBb4vI0Ma0ie+sA eQsiCbAvcO36IwKkCZhE2RuvM/HQ5r/GfVxEhFis/2+n7b0yx5tDxwUyfa6gcjjr SjOX2KXPy+poHrGYJQDEPnEzf25yTmmLV3AXz2Y1vVd95+FovIMeTAnkk/odssgY aRD30KChQDBgdwzG+QZeZPQ0LKEgxZG91yOZit5TqNjEYcbTtQuI+ISH5Z2dMXv/ 3Kj9GYYQp+yyOKZa5OAfmLNnpWpEp8pP3AzGM/UoaEKg07A6TVqLI3c7UHVbXeNa N6DXLGmIkY/pSLp5ZSSlW68dHXXDqarg -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org