$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json) Hash identifier: ACcZ2HB9nyOpODF2mDDvLodH/SRUIObGts6cBQnvvzc= Subject key identifier: B9:89:E2:B9:4D:2F:8A:25:52:F8:0C:6C:7C:30:14:B1:54:9E:BC:DA Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Certificate serial: 06CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft Manifest number: 06C9 Signing time: Fri 22 Nov 2024 21:40:09 +0000 Manifest this update: Fri 22 Nov 2024 21:40:09 +0000 Manifest next update: Fri 29 Nov 2024 21:40:09 +0000 Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: SZIcVjz0eWMKozEw3YN4X77G8IxPq0JRXypQufo6sJM=) 2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: btH4SgDDR4khinDDe+n8XlFXLtg61OADsgnktzAiOJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Validity Not Before: Nov 22 21:40:09 2024 GMT Not After : Nov 29 21:40:09 2024 GMT Subject: CN=6740fa39-3bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:79:c5:4e:61:f5:cd:a6:7e:bf:7e:81:36:b3: ac:cc:0d:ea:4c:ab:ba:79:2a:0e:1a:43:61:eb:e3: 58:40:53:74:9b:cd:14:9d:a6:73:b2:1a:c3:a0:34: df:d1:02:5d:ff:d2:59:38:28:96:19:e0:4f:5f:b3: d7:42:fb:b7:4d:06:ee:6b:a5:8b:dd:c3:ae:c5:7a: b5:be:d4:35:ab:48:ca:19:fd:2e:83:df:00:0d:8f: f2:db:86:3e:02:2a:5a:04:d4:4a:e3:05:82:75:84: 7c:ba:ce:72:30:f2:6e:35:a2:1b:0d:e6:47:89:22: 0a:fe:a9:8a:5d:c0:ff:ac:5e:ce:bb:70:e3:77:8f: 55:53:4d:ba:00:4d:29:0a:07:50:6e:3e:3e:d6:3f: 48:45:6e:aa:1d:f2:77:3a:a2:98:df:27:1a:98:47: 4b:fc:9a:c4:1b:9d:4e:2c:33:51:eb:05:c6:f3:b6: 09:55:84:e3:d5:34:a3:bd:1b:7a:73:c5:80:e3:1c: a6:09:ee:fe:66:a6:62:54:2a:f6:8f:08:12:a0:76: c6:bb:c8:72:e7:bb:40:ee:42:3d:6b:5c:28:fb:46: f8:c6:e2:11:3a:3a:71:42:37:8c:74:e4:86:ad:61: 97:52:0d:1d:a0:10:5b:cc:a0:07:4b:96:4c:b8:af: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:89:E2:B9:4D:2F:8A:25:52:F8:0C:6C:7C:30:14:B1:54:9E:BC:DA X509v3 Authority Key Identifier: keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:69:55:d8:a2:7b:2e:d9:18:18:de:f7:f9:b8:11:e7:19:30: c0:0c:8b:21:b6:b7:78:89:72:73:2e:d2:dc:0d:ce:35:df:9e: 3b:3a:1f:03:ca:03:0b:1e:c8:f6:80:e1:72:0d:25:f8:0f:05: b4:fe:7e:f9:fb:ea:b4:67:c2:3e:5c:cd:1d:61:c5:e4:a4:27: 40:be:c8:e8:ff:9c:39:3e:03:1b:e7:9d:74:31:04:ad:40:a7: 0c:79:73:ba:33:4d:a6:2b:98:d9:2b:2a:c4:2b:68:71:f1:9c: 7d:4b:96:3b:c4:8b:7a:ea:31:df:0d:a3:c7:e3:43:eb:a0:c7: 48:60:4b:6a:db:1e:86:d0:e7:0d:dd:d4:82:d3:8a:7d:3a:2d: c3:32:09:e6:95:b3:df:c2:25:6e:32:95:3b:c7:26:bf:a1:c9: 82:a1:03:0c:00:fa:c8:08:c7:44:8a:08:2f:5c:a2:0c:1f:f6: 0c:b9:8e:13:6d:79:8b:fe:2e:1a:dc:ca:56:19:08:1d:64:b0: 0a:77:45:b3:60:39:ab:b7:68:59:6e:88:79:0e:92:7d:62:53: 0f:58:5d:f3:c8:4e:6d:36:27:2d:af:78:92:26:04:6d:a3:16: 17:bd:28:b3:14:48:43:33:c8:98:4f:ec:7f:e2:70:40:5f:c5: df:78:63:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0REIxMTAvBgNVBAUTKEQ5Q0I4QTZFNTRFMjRCNTBGNEFGRkJGQUEwNTk1QkZE ODEwMjQzRUUwHhcNMjQxMTIyMjE0MDA5WhcNMjQxMTI5MjE0MDA5WjAYMRYwFAYD VQQDEw02NzQwZmEzOS0zYmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXnFTmH1zaZ+v36BNrOszA3qTKu6eSoOGkNh6+NYQFN0m80UnaZzshrDoDTf 0QJd/9JZOCiWGeBPX7PXQvu3TQbua6WL3cOuxXq1vtQ1q0jKGf0ug98ADY/y24Y+ AipaBNRK4wWCdYR8us5yMPJuNaIbDeZHiSIK/qmKXcD/rF7Ou3Djd49VU026AE0p CgdQbj4+1j9IRW6qHfJ3OqKY3ycamEdL/JrEG51OLDNR6wXG87YJVYTj1TSjvRt6 c8WA4xymCe7+ZqZiVCr2jwgSoHbGu8hy57tA7kI9a1wo+0b4xuIROjpxQjeMdOSG rWGXUg0doBBbzKAHS5ZMuK+rHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmJ4rlN L4olUvgMbHwwFLFUnrzaMB8GA1UdIwQYMBaAFNnLim5U4ktQ9K/7+qBZW/2BAkPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzREQi8zQzA3RTJENjM0 NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMxRDByX3Y2b0ZsYl9ZRUNR LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjdUtibFRpUzFEMHJfdjZvRmxiX1lFQ1EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzREQi8zQzA3RTJENjM0NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMx RDByX3Y2b0ZsYl9ZRUNRLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmaVXYonsu2RgY3vf5uBHnGTDADIshtrd4iXJzLtLcDc413547Oh8D ygMLHsj2gOFyDSX4DwW0/n75++q0Z8I+XM0dYcXkpCdAvsjo/5w5PgMb5510MQSt QKcMeXO6M02mK5jZKyrEK2hx8Zx9S5Y7xIt66jHfDaPH40ProMdIYEtq2x6G0OcN 3dSC04p9Oi3DMgnmlbPfwiVuMpU7xya/ocmCoQMMAPrICMdEiggvXKIMH/YMuY4T bXmL/i4a3MpWGQgdZLAKd0WzYDmrt2hZboh5DpJ9YlMPWF3zyE5tNictr3iSJgRt oxYXvSizFEhDM8iYT+x/4nBAX8XfeGNR -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org