$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json) Hash identifier: 50bzUMT6vz3ISo0N4O4mPnkbnL58t2xdHwkeVn5LQZA= Subject key identifier: DC:4F:AC:7F:8E:95:A1:40:9E:9B:16:93:55:51:44:7A:C1:D4:0D:46 Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft Manifest number: 014B Signing time: Sat 23 Nov 2024 02:35:06 +0000 Manifest this update: Sat 23 Nov 2024 02:35:06 +0000 Manifest next update: Sat 30 Nov 2024 02:35:06 +0000 Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: i/mlMSl9m3AOcBfDQuyRV2VpNFZ+bmd5+Bg9m4sbDV0=) 2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: GAnumIiRmCLh007aW5B9KGyssfw0NgLo3NksPvf73Us=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: Nov 23 02:35:06 2024 GMT Not After : Nov 30 02:35:06 2024 GMT Subject: CN=67413f5a-7d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:69:6d:ee:56:4a:3e:35:6d:96:49:57:e9:3e: 55:f3:7d:15:e6:3f:36:e6:b8:93:57:ed:e8:d7:e8: 3f:e7:95:3d:92:cf:af:5c:ce:31:b6:d5:f4:79:9d: ea:ac:8c:7f:7f:80:0f:27:a5:76:18:b1:f0:4e:34: d0:8a:40:10:f7:a5:e0:03:85:0c:1a:86:69:59:35: 61:58:42:26:31:09:f3:ea:3a:6e:1b:c1:46:a6:2c: f3:3a:2a:28:39:e8:b6:3e:b1:30:20:bf:c2:2e:b3: 2e:5d:77:e4:a9:ba:3c:c2:69:b7:25:77:d1:f9:12: 98:84:ee:ed:e0:c2:7a:ea:86:ac:16:e8:fc:63:db: 80:cd:4e:5e:8f:f2:ab:99:d8:95:67:63:fb:10:01: 26:37:9e:04:ca:ad:e6:df:ff:46:15:ee:ed:74:65: 75:29:3d:f7:4d:00:0c:94:35:aa:af:de:ea:69:c3: ae:24:c3:16:79:a9:b2:9e:09:6d:26:6c:61:24:ed: 88:64:ac:4a:1d:f1:ec:19:6b:4a:f4:37:fa:d9:a9: 29:9f:f3:8a:3f:45:99:fa:0f:d4:0e:a8:99:a3:e9: 97:f0:49:34:29:6d:bc:a6:ea:12:ce:8f:d0:c2:97: 45:e0:1d:21:28:0e:ec:d5:2e:d9:91:bf:3d:2d:66: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4F:AC:7F:8E:95:A1:40:9E:9B:16:93:55:51:44:7A:C1:D4:0D:46 X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f8:6b:91:c0:6f:93:0b:cf:ba:01:15:17:2a:d6:37:97:d8: e3:c9:e5:c6:3b:73:cf:9d:19:8f:3d:fb:c5:77:bd:27:ed:fb: 03:2f:06:cb:7b:8e:01:b9:29:05:6b:ec:2c:0f:22:10:37:af: 8a:f0:c4:c3:85:16:31:56:29:68:25:97:e0:96:cd:fd:e0:df: bf:af:66:7a:b2:7b:a5:bc:d9:d9:41:6c:71:d0:e3:88:38:df: e3:69:21:a6:d6:77:03:e5:6e:9f:b7:a1:0f:85:a3:75:19:8e: 6b:eb:64:17:0c:51:79:10:d1:89:b7:71:9f:f7:b7:d3:bc:31: 15:37:78:f1:9d:44:4a:6d:e2:c9:c8:94:37:e3:e4:1a:8e:61: ec:a6:66:3f:e0:50:ae:d9:51:a8:de:ae:f9:56:d7:74:93:fd: a2:ca:16:f3:08:f7:04:5d:6b:4a:d3:84:61:f5:74:94:79:ff: d1:e9:c5:1d:41:38:1c:e4:c0:9c:de:b6:87:88:1d:da:ff:66: ec:68:23:62:d1:64:fb:95:e6:32:ac:c4:21:d0:41:a8:43:4b: 0a:28:6f:9f:3e:00:21:83:90:69:75:c9:1c:47:9f:9b:35:12: f4:de:a4:51:d5:bc:b6:99:f4:89:5d:82:39:69:34:9d:79:9a: aa:7e:7b:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjQxMTIzMDIzNTA2WhcNMjQxMTMwMDIzNTA2WjAYMRYwFAYD VQQDEw02NzQxM2Y1YS03ZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Wlt7lZKPjVtlklX6T5V830V5j825riTV+3o1+g/55U9ks+vXM4xttX0eZ3q rIx/f4APJ6V2GLHwTjTQikAQ96XgA4UMGoZpWTVhWEImMQnz6jpuG8FGpizzOioo Oei2PrEwIL/CLrMuXXfkqbo8wmm3JXfR+RKYhO7t4MJ66oasFuj8Y9uAzU5ej/Kr mdiVZ2P7EAEmN54Eyq3m3/9GFe7tdGV1KT33TQAMlDWqr97qacOuJMMWeamynglt JmxhJO2IZKxKHfHsGWtK9Df62akpn/OKP0WZ+g/UDqiZo+mX8Ek0KW28puoSzo/Q wpdF4B0hKA7s1S7Zkb89LWYv8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxPrH+O laFAnpsWk1VRRHrB1A1GMB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2 ZmpQc0NEeG9KYktqR1hyT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5+GuRwG+TC8+6ARUXKtY3l9jjyeXGO3PPnRmPPfvFd70n7fsDLwbL e44BuSkFa+wsDyIQN6+K8MTDhRYxViloJZfgls394N+/r2Z6snulvNnZQWxx0OOI ON/jaSGm1ncD5W6ft6EPhaN1GY5r62QXDFF5ENGJt3Gf97fTvDEVN3jxnURKbeLJ yJQ34+QajmHspmY/4FCu2VGo3q75Vtd0k/2iyhbzCPcEXWtK04Rh9XSUef/R6cUd QTgc5MCc3raHiB3a/2bsaCNi0WT7leYyrMQh0EGoQ0sKKG+fPgAhg5BpdckcR5+b NRL03qRR1by2mfSJXYI5aTSdeZqqfnud -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:52 2024 by rpki-client on console-ams.rpki-client.org