$ rpki-client -vvf rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft File: 2wYwePe5d1L7gdAPqb18UjsclwM.mft (raw, json) Hash identifier: mLxIbV/ttWIPt7Pa3vKTAto/xEIoSb+/daqTTMqC+2k= Subject key identifier: B7:A0:1E:63:FD:CA:4C:26:65:39:6C:C7:D6:60:0D:FB:D9:C0:BB:58 Authority key identifier: DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 Certificate issuer: /CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft Manifest number: 60 Signing time: Sat 23 Nov 2024 05:02:59 +0000 Manifest this update: Sat 23 Nov 2024 05:02:58 +0000 Manifest next update: Sat 30 Nov 2024 05:02:58 +0000 Files and hashes: 1: 2wYwePe5d1L7gdAPqb18UjsclwM.crl (hash: D2Xad7IihBb0dx5KZE++HVb1EhiM/1s4RSkp5A5ZnbE=) 2: CE042A841E5611EFBEDD1F39C4F9AE02.roa (hash: JB0KjJ0CYggpPTh2yx0KHgkWZKP0lJUbgO7Q4giWozY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192698/serialNumber=DB063078F7B97752FB81D00FA9BD7C523B1C9703 Validity Not Before: Nov 23 05:02:58 2024 GMT Not After : Nov 30 05:02:58 2024 GMT Subject: CN=67416203-4bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:1a:54:c5:c1:a7:5d:35:21:1e:5a:47:fe: f9:90:66:73:a2:c8:2b:6a:aa:24:a9:92:cf:b7:50: 0e:c5:01:ba:4f:2c:30:94:8a:1b:25:44:4b:cf:ce: c2:6f:23:e1:4f:b4:ab:bb:d3:1b:c6:e2:d4:e5:2b: 26:dc:b9:cb:82:82:48:81:9b:0c:db:c1:00:c8:d0: 52:a6:f7:82:17:fc:96:c1:52:26:5b:06:23:d9:71: 0f:da:62:54:66:b8:e1:ca:a3:88:9b:ba:29:bc:dd: 84:17:28:35:91:24:4e:90:a5:56:50:54:1c:80:b0: 2a:38:a5:65:f2:61:5d:01:73:94:a8:17:f6:dd:8f: 7a:92:36:2c:52:48:a8:20:7e:c0:c3:d5:e6:20:88: ff:3d:08:de:00:d1:c6:b7:10:95:30:c3:08:94:e9: 2a:de:da:ee:75:ba:89:b3:81:6d:35:6d:2c:be:91: ee:5e:4b:99:a4:b6:f2:3b:cb:bc:d8:f7:08:76:14: 8a:66:6b:4f:03:77:32:74:8a:94:84:b2:fe:f5:c4: 40:30:25:40:f0:c0:50:8c:83:9d:fa:7b:3f:84:de: 88:b5:48:88:e6:e0:df:b1:4f:26:8c:8b:13:85:8b: 0a:e1:ad:2a:05:5f:d7:e8:29:41:b4:39:01:1d:51: 43:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A0:1E:63:FD:CA:4C:26:65:39:6C:C7:D6:60:0D:FB:D9:C0:BB:58 X509v3 Authority Key Identifier: keyid:DB:06:30:78:F7:B9:77:52:FB:81:D0:0F:A9:BD:7C:52:3B:1C:97:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wYwePe5d1L7gdAPqb18UjsclwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192698/D3C0ECE21E5511EFAC959F19C4F9AE02/2wYwePe5d1L7gdAPqb18UjsclwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:38:15:a8:6d:f0:1c:59:87:c9:c0:77:48:a5:1e:f9:1f:e9: 70:23:53:d7:d3:ef:3e:e9:c1:8c:89:bc:04:c3:89:6f:4b:98: 3b:04:88:67:d8:ad:f8:ae:a8:3d:8f:c5:c0:8b:94:b9:51:75: 74:14:df:31:b4:27:f3:d5:e7:bd:35:a0:ef:2e:6f:26:37:dc: 2f:cd:d3:88:7c:e0:1e:14:9a:4b:50:0a:04:60:62:af:cc:06: ff:f4:91:6f:62:ef:ca:d0:f5:e4:cc:6a:a3:3d:d3:47:44:f0: 30:d7:a2:d6:e6:50:57:c9:9a:4e:83:67:80:b4:42:63:3c:59: 01:f9:3f:a0:38:56:fa:6d:9b:4c:8c:56:19:ef:87:08:ce:fb: 8c:96:4b:bc:ef:f2:02:63:96:c4:ef:32:7e:46:66:4e:34:64: b3:90:4b:c4:8d:6e:d6:bc:99:0d:26:fa:7b:ad:b1:cc:01:eb: 15:8e:f4:84:c5:a0:b3:5b:83:c9:39:e8:23:d1:2a:42:89:7a: 54:c6:1a:b8:1f:f6:f7:f2:75:a5:4e:e1:47:2a:74:7d:92:20: 61:d8:fa:7a:32:95:ce:27:43:21:84:cc:47:66:a3:07:da:e5: be:a1:50:02:06:82:2f:f2:d4:22:12:c8:23:8a:24:c7:34:ed: b4:29:65:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjY5ODExMC8GA1UEBRMoREIwNjMwNzhGN0I5Nzc1MkZCODFEMDBGQTlCRDdDNTIz QjFDOTcwMzAeFw0yNDExMjMwNTAyNThaFw0yNDExMzAwNTAyNThaMBgxFjAUBgNV BAMTDTY3NDE2MjAzLTRiYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCY2xpUxcGnXTUhHlpH/vmQZnOiyCtqqiSpks+3UA7FAbpPLDCUihslREvPzsJv I+FPtKu70xvG4tTlKybcucuCgkiBmwzbwQDI0FKm94IX/JbBUiZbBiPZcQ/aYlRm uOHKo4ibuim83YQXKDWRJE6QpVZQVByAsCo4pWXyYV0Bc5SoF/bdj3qSNixSSKgg fsDD1eYgiP89CN4A0ca3EJUwwwiU6Sre2u51uomzgW01bSy+ke5eS5mktvI7y7zY 9wh2FIpma08DdzJ0ipSEsv71xEAwJUDwwFCMg536ez+E3oi1SIjm4N+xTyaMixOF iwrhrSoFX9foKUG0OQEdUUMTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt6AeY/3K TCZlOWzH1mAN+9nAu1gwHwYDVR0jBBgwFoAU2wYwePe5d1L7gdAPqb18UjsclwMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyNjk4L0QzQzBFQ0UyMUU1 NTExRUZBQzk1OUYxOUM0RjlBRTAyLzJ3WXdlUGU1ZDFMN2dkQVBxYjE4VWpzY2x3 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMndZd2VQZTVkMUw3Z2RBUHFiMThVanNjbHdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky Njk4L0QzQzBFQ0UyMUU1NTExRUZBQzk1OUYxOUM0RjlBRTAyLzJ3WXdlUGU1ZDFM N2dkQVBxYjE4VWpzY2x3TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIg4Faht8BxZh8nAd0ilHvkf6XAjU9fT7z7pwYyJvATDiW9LmDsEiGfY rfiuqD2PxcCLlLlRdXQU3zG0J/PV5701oO8ubyY33C/N04h84B4UmktQCgRgYq/M Bv/0kW9i78rQ9eTMaqM900dE8DDXotbmUFfJmk6DZ4C0QmM8WQH5P6A4Vvptm0yM VhnvhwjO+4yWS7zv8gJjlsTvMn5GZk40ZLOQS8SNbta8mQ0m+nutscwB6xWO9ITF oLNbg8k56CPRKkKJelTGGrgf9vfydaVO4UcqdH2SIGHY+noylc4nQyGEzEdmowfa 5b6hUAIGgi/y1CISyCOKJMc07bQpZUI= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:14 2024 by rpki-client on console-ams.rpki-client.org