$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: wu4YcO1TgJLCA7plVNRSTTYbMnDua18BhJc+G7DCbrI= Subject key identifier: 96:F0:91:E7:F5:7E:70:67:9A:29:77:66:59:A3:54:D4:09:37:DF:66 Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 244F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 243A Signing time: Sun 24 Nov 2024 15:42:36 +0000 Manifest this update: Sun 24 Nov 2024 15:42:36 +0000 Manifest next update: Sun 01 Dec 2024 15:42:36 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: yb2/QUM+oTFMXJCZ18pj2YcQVz1/itSnErAOFeU51Xw=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: CE+jGBv1hmvPpnjcj/lZMkYxYBXBElFQLbmvrCZoU3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9295 (0x244f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Nov 24 15:42:36 2024 GMT Not After : Dec 1 15:42:36 2024 GMT Subject: CN=6743496c-e1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:c3:70:f4:86:20:65:79:16:e5:94:2f:b3: e6:55:36:21:bb:ed:eb:23:3b:da:04:cb:b2:af:b9: 2d:a7:58:4a:47:ab:93:bd:ae:6e:bc:83:ef:00:9f: ad:6e:85:da:a7:dc:3c:7d:d7:3b:84:99:f8:00:ac: 73:c1:36:f6:18:b5:67:c3:99:fb:0c:35:dd:52:06: f7:3b:49:c6:ba:38:4f:a4:eb:d5:4b:ac:b7:42:07: f7:9b:d7:b9:8f:16:ce:da:10:59:ee:1b:8b:83:12: b3:ab:00:f0:c5:23:ee:d8:90:67:a1:97:3b:10:b5: 5a:31:aa:30:ff:cc:6c:c3:a5:91:4f:9c:1a:e7:80: cf:31:1c:93:37:46:d5:f8:74:68:c1:eb:94:c9:8c: 46:7b:10:4d:57:4a:e4:17:4a:bf:98:3f:b7:93:af: 0a:ef:61:cf:b0:c2:ff:c0:f9:66:65:e2:70:c1:23: 2f:26:22:94:be:59:5c:a4:1c:43:20:d6:31:08:37: 99:32:88:aa:d1:e1:33:16:a2:77:7a:66:b9:70:1c: 1e:ad:bc:e5:48:d9:64:3c:e1:c5:6f:53:3f:8b:11: d1:31:81:c8:e0:91:cb:8f:93:b3:11:26:ab:f5:c7: f8:eb:ab:ae:fc:85:64:3f:30:17:21:75:33:61:5c: 13:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F0:91:E7:F5:7E:70:67:9A:29:77:66:59:A3:54:D4:09:37:DF:66 X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ee:c0:b7:81:7c:fb:ee:e1:d4:4f:a6:99:88:ae:e0:46:51: 88:cc:06:13:38:7d:37:d6:1c:1e:32:17:38:88:68:b6:ba:a5: d7:34:5c:ba:65:cb:2b:14:c3:aa:fa:4b:fe:06:31:9e:2e:d1: da:5b:64:77:ba:27:96:19:62:2d:4d:e3:70:cb:44:d0:e6:b3: 88:3d:9e:5d:e2:a3:d5:cf:07:50:91:3b:05:be:81:97:8e:ce: 0b:54:9c:41:b9:02:79:7f:31:30:a9:44:5e:38:cd:35:8b:c1: d2:f9:cf:de:c7:d0:e4:de:54:78:56:ab:a9:2f:01:cf:67:5c: 9c:36:24:9c:af:84:89:be:67:31:60:92:10:7c:03:4e:4b:1e: c7:12:0f:78:a3:f0:9f:cc:3b:71:f5:4f:c1:a3:28:98:ef:78: ce:33:50:be:b6:18:07:ed:54:e6:ba:7c:85:b7:f9:3f:56:04: fa:52:fa:4c:cc:4b:aa:2d:f0:e7:ec:46:3d:96:75:ad:ab:cf: 9c:30:75:75:eb:1c:7c:3c:ad:21:0a:f2:36:89:ca:7c:dd:82: a5:82:99:2f:d3:72:58:09:57:2b:ce:f5:2f:51:8c:37:13:02: 5d:ae:d1:8d:92:2c:3e:59:95:b9:52:5e:97:53:da:2a:da:5f: 74:9a:19:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjQxMTI0MTU0MjM2WhcNMjQxMjAxMTU0MjM2WjAYMRYwFAYD VQQDEw02NzQzNDk2Yy1lMWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNrDcPSGIGV5FuWUL7PmVTYhu+3rIzvaBMuyr7ktp1hKR6uTva5uvIPvAJ+t boXap9w8fdc7hJn4AKxzwTb2GLVnw5n7DDXdUgb3O0nGujhPpOvVS6y3Qgf3m9e5 jxbO2hBZ7huLgxKzqwDwxSPu2JBnoZc7ELVaMaow/8xsw6WRT5wa54DPMRyTN0bV +HRoweuUyYxGexBNV0rkF0q/mD+3k68K72HPsML/wPlmZeJwwSMvJiKUvllcpBxD INYxCDeZMoiq0eEzFqJ3ema5cBwerbzlSNlkPOHFb1M/ixHRMYHI4JHLj5OzESar 9cf466uu/IVkPzAXIXUzYVwTUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbwkef1 fnBnmil3ZlmjVNQJN99mMB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB87sC3gXz77uHUT6aZiK7gRlGIzAYTOH031hweMhc4iGi2uqXXNFy6 ZcsrFMOq+kv+BjGeLtHaW2R3uieWGWItTeNwy0TQ5rOIPZ5d4qPVzwdQkTsFvoGX js4LVJxBuQJ5fzEwqUReOM01i8HS+c/ex9Dk3lR4VqupLwHPZ1ycNiScr4SJvmcx YJIQfANOSx7HEg94o/CfzDtx9U/BoyiY73jOM1C+thgH7VTmunyFt/k/VgT6UvpM zEuqLfDn7EY9lnWtq8+cMHV16xx8PK0hCvI2icp83YKlgpkv03JYCVcrzvUvUYw3 EwJdrtGNkiw+WZW5Ul6XU9oq2l90mhmX -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:55 2024 by rpki-client on console-ams.rpki-client.org