$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft File: 2QewWcyN7ki84-g5oeaIF6LWOtQ.mft (raw, json) Hash identifier: qu34SqhuyxEI6tNPiFZ9R1/pqzE51MmguzWeNZ+Xbfw= Subject key identifier: 7B:3E:8B:82:7D:FA:11:84:AA:A1:4B:74:2A:C3:5E:9D:5C:B7:A1:A5 Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 Certificate issuer: /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Certificate serial: 072A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft Manifest number: 0725 Signing time: Fri 22 Nov 2024 21:17:41 +0000 Manifest this update: Fri 22 Nov 2024 21:17:41 +0000 Manifest next update: Fri 29 Nov 2024 21:17:41 +0000 Files and hashes: 1: 2QewWcyN7ki84-g5oeaIF6LWOtQ.crl (hash: HWCDSohCMekOPt51yU3mUgpB1DVW9bYp/TVWDbnGrbg=) 2: 083499C00F7711EBBCB67820C4F9AE02.roa (hash: iH4fPRrd7IgPg8RKrkUWfUFk9KGwtBM2lg9Wq+mePiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1834 (0x72a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Validity Not Before: Nov 22 21:17:41 2024 GMT Not After : Nov 29 21:17:41 2024 GMT Subject: CN=6740f4f5-af84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:4a:47:14:79:b6:a0:e6:42:60:0c:6b:40: ef:07:6d:5b:8a:b4:02:62:53:67:26:19:8d:d4:80: ce:1c:0f:4f:de:ad:7e:5b:7b:31:80:b1:00:a3:87: 5d:a2:19:1a:1a:b2:d6:11:e2:9b:ba:56:3b:6f:c9: a6:bf:9e:85:49:c7:2b:bc:d4:00:39:cb:10:cb:cf: ef:ad:d1:84:c8:b4:c1:30:5d:e1:36:03:64:f3:b6: b4:bf:e8:5b:57:77:9f:43:88:b0:7b:15:02:94:14: 37:57:22:1a:39:0f:92:37:78:14:3b:75:4d:bb:5b: e9:b5:6c:14:dd:6f:66:da:d8:3a:f3:18:e0:18:8b: b3:2b:24:d1:b5:8a:20:e0:3a:1a:5e:21:b4:99:82: 9f:9a:26:d0:8b:f3:b1:41:ba:61:7d:bf:a1:e6:41: a7:4f:bc:5d:d2:8c:09:8f:92:e4:48:84:18:34:be: 5e:79:66:4e:79:f9:a4:5b:cc:e3:a7:83:04:9e:a9: c1:fa:e8:89:69:3f:e9:e0:f9:24:bd:ee:e2:e7:1d: c7:65:07:63:4e:aa:ca:52:b0:bb:5a:8d:2c:06:b2: 8c:0a:d2:a8:fe:ad:0b:05:5a:0b:4f:47:22:fe:a4: 29:02:91:ba:64:b0:74:3a:38:96:94:33:27:e2:14: 81:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3E:8B:82:7D:FA:11:84:AA:A1:4B:74:2A:C3:5E:9D:5C:B7:A1:A5 X509v3 Authority Key Identifier: keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:d1:35:db:bf:39:c1:da:8f:7a:69:e8:17:01:d9:9a:49:fd: 37:7c:7b:be:ea:a2:05:20:66:66:1f:02:90:8a:bc:ed:ce:d2: 4c:99:e3:93:26:d9:bc:67:a8:85:b4:d1:2e:2e:83:0b:d9:0d: c3:fd:7e:4d:ac:58:ca:cf:28:98:9d:af:e4:f4:7b:41:b4:89: db:97:76:6a:0b:ba:84:7e:8c:65:65:65:5b:90:e5:7a:28:af: 6e:95:6d:40:44:1b:9d:23:b4:a5:6d:eb:f2:6e:f1:fa:20:dc: 59:d5:55:c5:aa:56:c3:2a:ee:48:23:8a:75:6f:e9:4e:8f:67: 12:44:88:e8:bf:dd:5c:9e:4d:fd:42:c1:f6:50:92:ed:d4:9f: 0b:c1:00:90:97:14:57:8e:1f:0d:41:af:58:2e:65:82:0a:e7: 14:f7:61:61:9f:dc:b5:88:67:b6:0d:19:67:56:c8:59:a9:23: bb:e2:24:a2:02:5d:32:fb:77:d6:12:d3:07:79:86:c6:56:ca: 12:29:9c:69:7e:3a:fc:85:40:04:20:bf:18:fa:0a:d2:cf:6d: 6c:94:94:13:51:3d:48:9e:56:66:b3:c0:f8:70:f0:37:3d:e3: e5:bd:ab:40:06:c6:5b:93:ed:62:db:75:0e:65:7a:54:f8:0e: 55:95:27:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNTExMTAvBgNVBAUTKEQ5MDdCMDU5Q0M4REVFNDhCQ0UzRTgzOUExRTY4ODE3 QTJENjNBRDQwHhcNMjQxMTIyMjExNzQxWhcNMjQxMTI5MjExNzQxWjAYMRYwFAYD VQQDEw02NzQwZjRmNS1hZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3FKRxR5tqDmQmAMa0DvB21birQCYlNnJhmN1IDOHA9P3q1+W3sxgLEAo4dd ohkaGrLWEeKbulY7b8mmv56FSccrvNQAOcsQy8/vrdGEyLTBMF3hNgNk87a0v+hb V3efQ4iwexUClBQ3VyIaOQ+SN3gUO3VNu1vptWwU3W9m2tg68xjgGIuzKyTRtYog 4DoaXiG0mYKfmibQi/OxQbphfb+h5kGnT7xd0owJj5LkSIQYNL5eeWZOefmkW8zj p4MEnqnB+uiJaT/p4Pkkve7i5x3HZQdjTqrKUrC7Wo0sBrKMCtKo/q0LBVoLT0ci /qQpApG6ZLB0OjiWlDMn4hSBKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHs+i4J9 +hGEqqFLdCrDXp1ct6GlMB8GA1UdIwQYMBaAFNkHsFnMje5IvOPoOaHmiBei1jrU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY1MS9CMjk5MzI2MDBG NzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5TjdraTg0LWc1b2VhSUY2TFdP dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRZXdXY3lON2tpODQtZzVvZWFJRjZMV090US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY1MS9CMjk5MzI2MDBGNzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5Tjdr aTg0LWc1b2VhSUY2TFdPdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA40TXbvznB2o96aegXAdmaSf03fHu+6qIFIGZmHwKQirztztJMmeOT Jtm8Z6iFtNEuLoML2Q3D/X5NrFjKzyiYna/k9HtBtInbl3ZqC7qEfoxlZWVbkOV6 KK9ulW1ARBudI7SlbevybvH6INxZ1VXFqlbDKu5II4p1b+lOj2cSRIjov91cnk39 QsH2UJLt1J8LwQCQlxRXjh8NQa9YLmWCCucU92Fhn9y1iGe2DRlnVshZqSO74iSi Al0y+3fWEtMHeYbGVsoSKZxpfjr8hUAEIL8Y+grSz21slJQTUT1InlZms8D4cPA3 PePlvatABsZbk+1i23UOZXpU+A5VlSdX -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:33 2024 by rpki-client on console-ams.rpki-client.org