$ rpki-client -vvf rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft File: 2en59z7k9bHN8XYsLfODKVCja30.mft (raw, json) Hash identifier: 4P4UC33K52xQ7v5Lfb5Hw9ZkxWiDUEvwhVeWTmMA+2A= Subject key identifier: 44:BE:59:10:6C:5E:6D:FC:9F:14:D5:C2:0B:52:3F:E0:1D:28:C1:66 Authority key identifier: D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D Certificate issuer: /CN=A91AACB2/serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D Certificate serial: 342E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft Manifest number: 3429 Signing time: Fri 22 Nov 2024 14:59:29 +0000 Manifest this update: Fri 22 Nov 2024 14:59:28 +0000 Manifest next update: Fri 29 Nov 2024 14:59:28 +0000 Files and hashes: 1: 2en59z7k9bHN8XYsLfODKVCja30.crl (hash: HGpfvfrv+uSmx7UcunpXmZMPs6BSzKBbgh2x08ErR34=) 2: 76B5C744B45E11EAB71DF94AC4F9AE02.roa (hash: QZJWJH8ffRS/84lld/jGevk5cgpEhPMCEoE6pSD5XIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13358 (0x342e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AACB2/serialNumber=D9E9F9F73EE4F5B1CDF1762C2DF3832950A36B7D Validity Not Before: Nov 22 14:59:28 2024 GMT Not After : Nov 29 14:59:28 2024 GMT Subject: CN=67409c50-50ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:6d:f2:ae:ec:ab:18:60:7b:2d:53:ac:85: 24:12:71:e7:c9:55:8f:c6:8c:ef:a4:3e:a3:97:ff: 83:01:79:55:3c:96:b9:3f:e9:4f:44:cd:5c:75:83: 19:56:ad:5d:2b:0c:57:eb:72:de:ff:7a:66:0a:5f: b8:ab:65:11:e7:8c:d6:f0:83:20:6c:50:9a:9b:a0: 85:bc:c6:a6:c8:5a:4f:e4:f3:ac:bc:00:1e:62:9c: fc:15:98:4f:8e:00:c8:7d:22:d7:39:72:66:77:3d: d8:2b:12:72:55:2e:e9:da:f0:cb:0e:69:c5:b6:1a: 22:01:80:6a:a0:e7:aa:e9:7c:c6:38:46:a3:9a:cc: 31:33:d5:db:01:7a:c7:4c:b7:c5:a9:c1:ee:60:97: 9e:59:0c:00:f5:63:a0:66:ae:5b:fa:e4:88:94:53: db:a8:d4:be:ec:c5:a0:ec:41:58:92:d4:d7:2f:0b: 36:6e:5f:56:1f:47:a4:2a:6b:f7:97:a4:93:26:cb: 5b:83:44:c1:09:03:39:32:6d:29:0c:80:00:8b:07: df:ab:3e:0b:f4:13:ae:9b:67:07:2e:be:0e:8d:7d: f7:cf:1f:ad:8b:c4:49:b5:bc:14:fa:ac:6d:89:03: 21:30:b3:8a:99:d8:91:c0:36:ae:fb:ee:df:22:7d: f9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BE:59:10:6C:5E:6D:FC:9F:14:D5:C2:0B:52:3F:E0:1D:28:C1:66 X509v3 Authority Key Identifier: keyid:D9:E9:F9:F7:3E:E4:F5:B1:CD:F1:76:2C:2D:F3:83:29:50:A3:6B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2en59z7k9bHN8XYsLfODKVCja30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AACB2/37D5A3DE1D9C11E2892E8B8A08B02CD2/2en59z7k9bHN8XYsLfODKVCja30.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:35:c7:92:6e:0b:37:3a:80:7a:5f:98:eb:93:49:00:90:91: 2e:d8:47:aa:1e:5f:db:ed:d6:fe:4b:c1:47:79:10:15:88:7f: 98:88:de:12:13:5d:6f:95:da:a6:a7:98:9d:be:9c:b1:77:af: fc:23:55:7b:ae:b1:69:82:c3:9e:22:75:14:df:fb:51:80:f9: 0a:45:ae:06:af:6d:18:3f:d8:0e:c6:5c:ea:b6:6c:29:db:46: 6a:e6:1e:c5:90:42:7d:30:9f:a2:56:b2:90:26:4b:8d:09:a5: 41:bc:1a:26:4c:32:03:e5:16:d9:38:5a:70:35:7e:78:b7:7b: 01:7b:5d:0b:19:5e:f2:8c:b1:0c:cf:e3:f5:82:db:1f:83:43: fc:43:c0:84:d4:eb:f5:6d:fa:aa:fd:67:d5:12:66:f9:d4:87: 74:0e:9c:d9:b0:9a:22:76:c5:ec:26:ae:7d:aa:a8:0c:c8:86: 39:f9:ba:f5:0f:07:a8:a9:03:8e:df:87:97:f5:8d:e4:5e:19: d3:77:3b:2f:54:22:1b:ef:b5:84:72:e6:9d:31:d9:d4:60:78: 4f:4a:14:80:47:bc:3e:c3:7c:1f:62:59:3d:01:35:1a:58:db: 88:98:1c:e2:ec:cd:84:01:c2:55:2a:4b:e9:b8:7f:70:05:85: 92:28:90:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDQjIxMTAvBgNVBAUTKEQ5RTlGOUY3M0VFNEY1QjFDREYxNzYyQzJERjM4MzI5 NTBBMzZCN0QwHhcNMjQxMTIyMTQ1OTI4WhcNMjQxMTI5MTQ1OTI4WjAYMRYwFAYD VQQDEw02NzQwOWM1MC01MGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzpt8q7sqxhgey1TrIUkEnHnyVWPxozvpD6jl/+DAXlVPJa5P+lPRM1cdYMZ Vq1dKwxX63Le/3pmCl+4q2UR54zW8IMgbFCam6CFvMamyFpP5POsvAAeYpz8FZhP jgDIfSLXOXJmdz3YKxJyVS7p2vDLDmnFthoiAYBqoOeq6XzGOEajmswxM9XbAXrH TLfFqcHuYJeeWQwA9WOgZq5b+uSIlFPbqNS+7MWg7EFYktTXLws2bl9WH0ekKmv3 l6STJstbg0TBCQM5Mm0pDIAAiwffqz4L9BOum2cHLr4OjX33zx+ti8RJtbwU+qxt iQMhMLOKmdiRwDau++7fIn35LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFES+WRBs Xm38nxTVwgtSP+AdKMFmMB8GA1UdIwQYMBaAFNnp+fc+5PWxzfF2LC3zgylQo2t9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUNCMi8zN0Q1QTNERTFE OUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azliSE44WFlzTGZPREtWQ2ph MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJlbjU5ejdrOWJITjhYWXNMZk9ES1ZDamEzMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUNCMi8zN0Q1QTNERTFEOUMxMUUyODkyRThCOEEwOEIwMkNEMi8yZW41OXo3azli SE44WFlzTGZPREtWQ2phMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmNceSbgs3OoB6X5jrk0kAkJEu2EeqHl/b7db+S8FHeRAViH+YiN4S E11vldqmp5idvpyxd6/8I1V7rrFpgsOeInUU3/tRgPkKRa4Gr20YP9gOxlzqtmwp 20Zq5h7FkEJ9MJ+iVrKQJkuNCaVBvBomTDID5RbZOFpwNX54t3sBe10LGV7yjLEM z+P1gtsfg0P8Q8CE1Ov1bfqq/WfVEmb51Id0DpzZsJoidsXsJq59qqgMyIY5+br1 DweoqQOO34eX9Y3kXhnTdzsvVCIb77WEcuadMdnUYHhPShSAR7w+w3wfYlk9ATUa WNuImBzi7M2EAcJVKkvpuH9wBYWSKJD0 -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:02 2024 by rpki-client on console-ams.rpki-client.org