$ rpki-client -vvf rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft File: 2-ETC8fG27LbfLvxTgH2GG_9vRA.mft (raw, json) Hash identifier: 8Fp281z16qGJa7WLmtmlL+lW8ppeMam7bLEFM9UW2g4= Subject key identifier: 97:3D:1D:63:27:4B:9B:9A:B9:17:0A:24:05:8C:FB:EB:4D:80:FE:28 Authority key identifier: DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 Certificate issuer: /CN=A9115480/serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft Manifest number: 020F Signing time: Sat 23 Nov 2024 01:33:20 +0000 Manifest this update: Sat 23 Nov 2024 01:33:20 +0000 Manifest next update: Sat 30 Nov 2024 01:33:20 +0000 Files and hashes: 1: 2-ETC8fG27LbfLvxTgH2GG_9vRA.crl (hash: lpG1ClPfvBcoxwW8cbxtjYzj5z5S2tDqQjIgjT1E2zc=) 2: D1D6719A10DD11EDBC7EA35FC4F9AE02.roa (hash: frzjCs+Z/Mi4ZDgqYWFwqblODHyg9lLqa7tObDvQ7CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115480/serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Validity Not Before: Nov 23 01:33:20 2024 GMT Not After : Nov 30 01:33:20 2024 GMT Subject: CN=674130e0-d5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:07:d9:84:be:63:0e:74:64:6e:65:00:c1: 87:0d:9a:0a:24:0b:a9:88:39:37:f5:4d:19:f4:8e: ca:53:82:8f:c5:11:c5:82:06:aa:b1:a8:bd:f4:49: bf:6f:29:1c:5b:c5:4a:d4:5e:89:93:b9:1e:64:e5: d9:86:51:90:0e:e9:30:2f:c6:62:ce:89:f7:e3:fb: 66:e4:77:22:a8:39:39:e0:7d:0e:a2:e8:1d:7a:17: 5f:e3:4d:b5:63:4b:d3:93:b8:cb:7e:6c:4e:21:99: 6e:15:4c:96:71:a5:51:86:8a:19:4d:df:99:c5:96: e4:67:3c:18:29:d5:5c:e0:f9:bd:71:42:02:d9:3f: b0:8d:8b:f4:d1:15:f9:24:f1:85:2d:76:27:5d:d9: a9:78:17:da:6e:db:6b:39:72:1b:a2:1a:cd:50:85: 20:9e:f5:4c:a5:59:7d:9a:37:b2:74:a9:fe:47:d2: a9:c1:46:d4:a6:e7:41:06:cd:81:03:43:d6:3f:73: aa:63:69:b2:fd:68:89:ac:d2:5b:89:64:4e:97:c5: 3e:91:fc:5f:0a:cf:4e:df:2d:fc:3c:44:8e:5f:f5: b2:5b:6a:f0:85:91:70:af:23:dd:f3:8e:9b:5e:6b: 2a:f9:97:69:51:31:e3:62:47:b4:fb:5c:03:99:d0: 47:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3D:1D:63:27:4B:9B:9A:B9:17:0A:24:05:8C:FB:EB:4D:80:FE:28 X509v3 Authority Key Identifier: keyid:DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c4:c1:d6:55:05:01:ad:4e:4c:90:2a:f5:c0:ea:4c:86:17: 71:99:ac:24:89:ed:da:05:53:bd:9e:4a:33:3a:ce:90:b1:38: 05:28:3f:80:ed:2a:b2:00:40:63:b6:60:77:42:f2:63:96:ff: 7c:3b:e5:92:bc:c9:84:be:96:7d:bf:04:72:7b:78:17:ee:50: c8:08:67:2b:a0:78:f5:14:a2:89:2b:ea:ce:87:46:d2:da:34: 86:ab:49:c7:d1:27:d0:2f:a8:60:a1:fd:3d:26:ac:a1:e6:96: 49:75:f8:36:4c:7d:3b:4b:dc:4b:2a:76:1a:14:70:22:89:71: 6f:5a:83:3e:8f:17:b6:c4:6d:83:83:dc:50:ae:03:60:42:90: 48:80:06:de:4b:88:86:c3:31:f6:52:07:02:91:45:4c:9f:99: 64:a2:43:11:5b:af:7c:80:8b:44:64:a0:0e:79:02:4d:89:80: 7b:88:65:c7:9e:33:d7:47:48:fa:7a:e2:44:53:e9:00:d2:e1: 1f:0d:59:e9:5b:0a:b5:e9:61:11:4c:d6:fc:0e:ad:54:54:08: 57:96:5e:58:f7:d6:d4:12:2d:37:15:98:17:0d:06:93:04:c1: 66:0e:3d:64:03:12:85:0c:6f:a7:d0:a7:57:69:0b:74:20:71: 3d:36:74:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0ODAxMTAvBgNVBAUTKERCRTExMzBCQzdDNkRCQjJEQjdDQkJGMTRFMDFGNjE4 NkZGREJEMTAwHhcNMjQxMTIzMDEzMzIwWhcNMjQxMTMwMDEzMzIwWjAYMRYwFAYD VQQDEw02NzQxMzBlMC1kNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnEH2YS+Yw50ZG5lAMGHDZoKJAupiDk39U0Z9I7KU4KPxRHFggaqsai99Em/ bykcW8VK1F6Jk7keZOXZhlGQDukwL8Zizon34/tm5HciqDk54H0Oougdehdf4021 Y0vTk7jLfmxOIZluFUyWcaVRhooZTd+ZxZbkZzwYKdVc4Pm9cUIC2T+wjYv00RX5 JPGFLXYnXdmpeBfabttrOXIbohrNUIUgnvVMpVl9mjeydKn+R9KpwUbUpudBBs2B A0PWP3OqY2my/WiJrNJbiWROl8U+kfxfCs9O3y38PESOX/WyW2rwhZFwryPd846b Xmsq+ZdpUTHjYke0+1wDmdBH3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJc9HWMn S5uauRcKJAWM++tNgP4oMB8GA1UdIwQYMBaAFNvhEwvHxtuy23y78U4B9hhv/b0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTQ4MC85NkYyOEFDNjEw REExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3TGJmTHZ4VGdIMkdHXzl2 UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItRVRDOGZHMjdMYmZMdnhUZ0gyR0dfOXZSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTQ4MC85NkYyOEFDNjEwREExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3 TGJmTHZ4VGdIMkdHXzl2UkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGxMHWVQUBrU5MkCr1wOpMhhdxmawkie3aBVO9nkozOs6QsTgFKD+A 7SqyAEBjtmB3QvJjlv98O+WSvMmEvpZ9vwRye3gX7lDICGcroHj1FKKJK+rOh0bS 2jSGq0nH0SfQL6hgof09Jqyh5pZJdfg2TH07S9xLKnYaFHAiiXFvWoM+jxe2xG2D g9xQrgNgQpBIgAbeS4iGwzH2UgcCkUVMn5lkokMRW698gItEZKAOeQJNiYB7iGXH njPXR0j6euJEU+kA0uEfDVnpWwq16WERTNb8Dq1UVAhXll5Y99bUEi03FZgXDQaT BMFmDj1kAxKFDG+n0KdXaQt0IHE9NnSW -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org