$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft File: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft (raw, json) Hash identifier: 2lDwFw02ErNXmk7Bqk4HJIX9N4WHe2FhOydIJ31j3dw= Subject key identifier: BC:B5:48:35:47:FA:15:D2:E3:1F:16:21:E5:27:EF:0D:71:FC:6F:FC Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B Certificate issuer: /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Certificate serial: 0308 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft Manifest number: 0304 Signing time: Sat 23 Nov 2024 00:47:46 +0000 Manifest this update: Sat 23 Nov 2024 00:47:45 +0000 Manifest next update: Sat 30 Nov 2024 00:47:45 +0000 Files and hashes: 1: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl (hash: jT04ETSpSgANAOl76u6NGxWZt37fifg1WzPA7hEy3NA=) 2: E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (hash: KMYbMfLRKgCDX7CbZCwrDOvnhVpSxFbhQooHcCajhmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 776 (0x308) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Validity Not Before: Nov 23 00:47:45 2024 GMT Not After : Nov 30 00:47:45 2024 GMT Subject: CN=67412631-0e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:00:2b:42:62:51:1f:24:31:22:05:8f:d0: 86:f2:a7:82:a2:16:c0:ed:0c:11:3b:bb:6d:b6:ed: f9:47:ab:1b:e6:46:d7:61:15:6e:21:5a:47:05:22: fa:19:8c:71:e0:39:a4:fe:ef:bd:83:d0:e7:1c:29: 14:6f:8d:d4:da:9e:8f:d3:ed:3c:56:64:0c:77:bd: fd:17:c6:68:3b:48:9a:81:20:93:ed:16:8b:f5:8a: 2a:44:ae:d7:40:5e:28:b5:b4:20:e4:d7:5a:02:0d: 4e:bf:25:5a:a5:78:c5:85:ee:61:93:97:2c:b0:6b: b7:a3:a3:85:f3:ad:47:aa:d9:63:7d:ee:d1:fe:d7: 71:75:7f:b5:df:3b:0f:3c:23:52:87:9a:25:1c:30: 58:69:19:aa:65:f9:02:85:cc:42:c2:05:e6:33:a7: b4:52:c7:4e:f1:5e:e7:6f:f7:3c:95:3c:c8:b4:2a: 70:df:e5:35:f9:40:79:15:6f:bf:74:f5:af:c6:49: 2c:53:19:2e:6d:de:27:e5:e0:27:cd:f5:3e:0e:64: 20:5f:87:2a:1f:75:11:47:11:ac:b4:81:b4:86:7f: b1:b4:9e:42:55:54:76:d0:53:69:cd:09:1a:fe:aa: 1d:40:73:f6:a4:58:4a:81:87:00:f5:fb:1c:38:7e: 6d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B5:48:35:47:FA:15:D2:E3:1F:16:21:E5:27:EF:0D:71:FC:6F:FC X509v3 Authority Key Identifier: keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fd:c9:73:29:7e:d8:98:58:61:6d:a8:44:40:29:6e:db:05: 5d:46:45:d6:58:e5:7e:d5:8e:36:c6:34:37:9c:45:bf:ba:c1: 31:80:08:91:e3:a0:df:94:05:73:ad:9c:fa:5e:80:f6:5e:73: 1a:ad:3f:de:c8:9a:30:3f:ce:ea:cd:4a:70:75:e5:8a:95:9d: 69:0b:d5:0c:85:5b:02:bd:fc:0d:f9:77:69:55:71:d8:e3:d4: dc:ea:f3:79:01:dc:b1:b0:58:bf:14:72:28:39:92:ad:98:70: b4:0a:5c:53:a9:65:d4:b2:6e:a1:ee:0a:35:e1:2e:7e:18:c9: 57:4d:2b:83:4c:2c:b7:a3:85:de:ac:e5:31:c1:ea:87:23:ff: 24:05:d2:0f:ce:f8:44:70:3e:ea:0c:25:b1:f9:b1:71:d8:68: 42:1c:ac:f9:00:7c:e0:0c:98:0a:ba:bd:77:56:43:58:b5:fe: 9a:36:9d:3f:02:f3:9b:9f:d0:2d:2e:16:80:9b:e1:6b:43:9a: e1:7c:cf:2e:43:43:fd:28:a4:76:ea:e5:87:91:6b:e4:9e:3a: 0a:a2:ca:9a:7b:ac:f6:ba:e0:7a:86:d7:86:f0:35:d9:5b:1d: 91:9a:23:32:49:62:23:eb:4e:9b:e4:08:e7:a6:1e:6e:5c:79: 31:ed:82:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDN0YxMTAvBgNVBAUTKERBQjRBNTJBOEVDMUFBRDZDOTI1MkVFQTRENUQxNTY5 RDI3QUY0NkIwHhcNMjQxMTIzMDA0NzQ1WhcNMjQxMTMwMDA0NzQ1WjAYMRYwFAYD VQQDEw02NzQxMjYzMS0wZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxQAK0JiUR8kMSIFj9CG8qeCohbA7QwRO7tttu35R6sb5kbXYRVuIVpHBSL6 GYxx4Dmk/u+9g9DnHCkUb43U2p6P0+08VmQMd739F8ZoO0iagSCT7RaL9YoqRK7X QF4otbQg5NdaAg1OvyVapXjFhe5hk5cssGu3o6OF861Hqtljfe7R/tdxdX+13zsP PCNSh5olHDBYaRmqZfkChcxCwgXmM6e0UsdO8V7nb/c8lTzItCpw3+U1+UB5FW+/ dPWvxkksUxkubd4n5eAnzfU+DmQgX4cqH3URRxGstIG0hn+xtJ5CVVR20FNpzQka /qodQHP2pFhKgYcA9fscOH5t+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLy1SDVH +hXS4x8WIeUn7w1x/G/8MB8GA1UdIwQYMBaAFNq0pSqOwarWySUu6k1dFWnSevRr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUM3Ri8wOTFFMUVBQUIw RDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0YkpKUzdxVFYwVmFkSjY5 R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyU2xLbzdCcXRiSkpTN3FUVjBWYWRKNjlHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUM3Ri8wOTFFMUVBQUIwRDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0 YkpKUzdxVFYwVmFkSjY5R3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA//clzKX7YmFhhbahEQClu2wVdRkXWWOV+1Y42xjQ3nEW/usExgAiR 46DflAVzrZz6XoD2XnMarT/eyJowP87qzUpwdeWKlZ1pC9UMhVsCvfwN+XdpVXHY 49Tc6vN5AdyxsFi/FHIoOZKtmHC0ClxTqWXUsm6h7go14S5+GMlXTSuDTCy3o4Xe rOUxweqHI/8kBdIPzvhEcD7qDCWx+bFx2GhCHKz5AHzgDJgKur13VkNYtf6aNp0/ AvObn9AtLhaAm+FrQ5rhfM8uQ0P9KKR26uWHkWvknjoKosqae6z2uuB6hteG8DXZ Wx2RmiMySWIj606b5Ajnph5uXHkx7YKU -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:52 2024 by rpki-client on console-ams.rpki-client.org