$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: S5eaqvI8Olc5haxxsZcuaz8S90qWrN1Wq4zFimHstoQ= Subject key identifier: B3:0B:E9:11:87:53:88:C5:19:45:9E:1C:E1:E1:3C:23:4C:1C:94:A2 Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0DA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0D90 Signing time: Fri 22 Nov 2024 17:54:06 +0000 Manifest this update: Fri 22 Nov 2024 17:54:06 +0000 Manifest next update: Fri 29 Nov 2024 17:54:06 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: qyw2aKI1iVe/2N7G+idnWhhktInI7xWbuq8eMtwSNdw=) 2: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: 9N5REIY+2HrtITjoJdJhm20sPzs6LfTpozJyTEhJPKI=) 3: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: 0xCnVozQZWjgc3AYs562bOg5LeDIgNinyp8El/uXPPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3495 (0xda7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Nov 22 17:54:06 2024 GMT Not After : Nov 29 17:54:06 2024 GMT Subject: CN=6740c53e-de8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:c6:d9:cc:37:66:be:b7:f3:11:d5:2b:92: 83:0b:b6:33:2e:4e:24:39:e4:49:0b:74:d2:63:53: 44:32:29:15:76:cd:89:c1:ef:eb:ef:30:d0:35:85: e9:b9:c4:7b:6c:ba:aa:86:c0:d2:e7:7f:80:7e:45: 42:ef:cc:b6:da:3d:0d:72:7c:d8:df:ff:e2:f5:4f: ae:a9:f9:fa:dc:90:22:fa:78:9b:28:20:01:c9:50: a0:79:b7:43:a4:13:ec:c9:e8:7b:12:fe:61:71:d0: 88:b0:f6:ab:38:52:f7:55:c8:26:25:75:f9:ce:30: e8:4e:2b:59:6b:bd:8b:26:3b:6d:ac:00:9c:29:ee: c4:ef:17:77:4c:fb:5f:18:b9:95:b8:c3:06:ff:53: 2e:81:c5:d2:93:3a:27:35:8d:11:e9:45:66:b8:af: 1f:da:c0:48:98:b5:58:ae:54:46:5d:79:ab:46:b9: 3b:1f:ad:44:1f:ac:ca:b3:67:5c:8f:ab:f0:7a:fa: d6:86:5a:30:37:eb:9c:21:fb:73:85:7d:be:09:c8: 4c:45:13:6d:41:02:03:29:7d:4a:1c:cc:0d:2f:08: c6:a0:1f:3c:7b:3b:bb:ef:0f:2a:6d:fb:a1:07:6e: 87:6c:a1:b1:a1:7b:4c:e8:91:2b:63:17:82:38:d1: 96:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0B:E9:11:87:53:88:C5:19:45:9E:1C:E1:E1:3C:23:4C:1C:94:A2 X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:4c:38:26:7c:4c:4e:b2:21:73:a6:c3:50:40:97:40:23:fc: ff:6e:dc:d9:3b:be:84:65:7f:7b:5f:cf:7e:c9:c6:82:b9:ca: 78:bb:fa:15:a2:4d:9d:32:dc:be:78:ca:cc:73:fe:92:ab:5e: 0e:f9:d2:7f:60:04:ac:83:a5:85:e9:58:82:bb:48:f7:05:28: f1:94:36:6c:21:82:8d:59:02:e0:88:e0:d2:7c:f0:e2:ee:3f: bb:1a:5e:98:d8:9f:72:35:b0:3d:4f:26:c4:72:d1:23:6e:cc: 18:50:c8:ae:c5:b0:38:f9:d0:15:49:6f:b7:f7:1f:42:26:be: 39:f0:d3:23:cf:64:c4:05:b4:f6:70:67:65:21:6e:c6:a8:2f: 38:8a:a4:fd:33:9c:47:8f:38:38:be:9b:4b:7e:38:b4:99:e7: 41:70:4d:bb:a0:fb:c6:78:b0:8a:62:24:a1:91:d9:b5:3a:bf: 21:8c:52:b7:10:b4:f2:ce:c3:7e:c6:7b:ab:71:c1:64:0b:3f: a4:05:d6:25:d3:53:61:5c:b1:7e:c5:9e:01:73:5b:24:d8:73: 3d:5e:16:18:20:95:a2:98:f9:58:af:ab:e3:23:69:2f:b4:dd: 61:b0:8a:a4:03:e1:e5:8d:d4:d2:87:5b:48:ad:27:83:29:92: f9:67:f0:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjQxMTIyMTc1NDA2WhcNMjQxMTI5MTc1NDA2WjAYMRYwFAYD VQQDEw02NzQwYzUzZS1kZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HPG2cw3Zr638xHVK5KDC7YzLk4kOeRJC3TSY1NEMikVds2Jwe/r7zDQNYXp ucR7bLqqhsDS53+AfkVC78y22j0NcnzY3//i9U+uqfn63JAi+nibKCAByVCgebdD pBPsyeh7Ev5hcdCIsParOFL3VcgmJXX5zjDoTitZa72LJjttrACcKe7E7xd3TPtf GLmVuMMG/1MugcXSkzonNY0R6UVmuK8f2sBImLVYrlRGXXmrRrk7H61EH6zKs2dc j6vwevrWhlowN+ucIftzhX2+CchMRRNtQQIDKX1KHMwNLwjGoB88ezu77w8qbfuh B26HbKGxoXtM6JErYxeCONGWwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLML6RGH U4jFGUWeHOHhPCNMHJSiMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzTDgmfExOsiFzpsNQQJdAI/z/btzZO76EZX97X89+ycaCucp4u/oV ok2dMty+eMrMc/6Sq14O+dJ/YASsg6WF6ViCu0j3BSjxlDZsIYKNWQLgiODSfPDi 7j+7Gl6Y2J9yNbA9TybEctEjbswYUMiuxbA4+dAVSW+39x9CJr458NMjz2TEBbT2 cGdlIW7GqC84iqT9M5xHjzg4vptLfji0medBcE27oPvGeLCKYiShkdm1Or8hjFK3 ELTyzsN+xnurccFkCz+kBdYl01NhXLF+xZ4Bc1sk2HM9XhYYIJWimPlYr6vjI2kv tN1hsIqkA+HljdTSh1tIrSeDKZL5Z/B0 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:08 2024 by rpki-client on console-ams.rpki-client.org