$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft File: N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json) Hash identifier: 3nwL1y1gQ1g1T+lpLSRQqwI2aiKbpl2232kT0kwl60I= Subject key identifier: DD:14:77:BB:08:02:16:0D:B6:7C:36:23:F9:11:90:70:44:62:4F:E3 Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 Certificate issuer: /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft Manifest number: 04D2 Signing time: Wed 20 Nov 2024 23:23:26 +0000 Manifest this update: Wed 20 Nov 2024 23:23:26 +0000 Manifest next update: Wed 27 Nov 2024 23:23:26 +0000 Files and hashes: 1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: g8p4g54r8aLEOS4kX15h1GE+wC1x/7xJx+aYQZIpNt4=) 2: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: zKaqQd3iJgLKWX9/7WECXgXE4p9Cwusvs6IFZGknjWw=) 3: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: 5Bhb6kl3vdn8fYxxshtaRagRNNeIbPt2YFCw1ehb0QI=) 4: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: mIo6Fk+1HKcj+3gplmKqRStq1177bdJCp9mw6ZHAc2E=) 5: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: d0OGg+KUHm/8K/0LGDoFYn0QqVu4VxbAlNDpkl0DNzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735 Validity Not Before: Nov 20 23:23:26 2024 GMT Not After : Nov 27 23:23:26 2024 GMT Subject: CN=673e6f6e-aa80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d6:d9:48:d2:74:d8:f9:fe:a6:e6:3f:90:58: f6:19:75:f5:aa:86:31:bf:13:dd:1b:41:a2:3c:45: 25:00:03:a9:11:86:42:53:3e:be:7b:ee:35:a1:1c: 93:b0:41:05:7b:c5:4c:ec:88:a6:08:09:1c:04:7a: e2:77:50:38:f0:ea:4a:19:3b:6c:df:c0:8c:16:cd: b2:73:36:d3:6e:0e:26:8b:99:0c:d6:b0:1d:fa:cd: 76:c3:f2:bf:7a:6e:4f:14:ca:d5:92:57:e5:59:61: 43:96:e9:0c:51:e3:e5:91:ad:4b:93:96:db:ff:5a: d4:54:6f:be:90:31:02:ea:ea:c5:cd:33:1e:3a:04: f8:2b:24:88:9d:3e:90:1d:51:85:52:e7:c8:67:fb: 6c:f7:09:c4:6a:89:b5:86:c9:44:0a:a4:0b:d0:c9: 93:94:b2:e3:74:7c:59:b3:47:59:c2:76:22:bf:f2: 00:b4:2a:5d:71:da:49:12:46:fd:d8:4b:07:f2:ab: 4b:d7:dc:2c:2f:04:fe:e1:85:ac:b9:09:af:85:6d: 76:05:51:fc:b6:94:51:41:25:d6:ae:d8:52:b5:0a: e4:25:a6:d1:a9:cd:12:8a:85:a4:8d:e8:d4:1e:3b: 6e:32:1d:4e:59:81:3b:6a:6b:38:22:fc:1f:80:2b: 0f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:14:77:BB:08:02:16:0D:B6:7C:36:23:F9:11:90:70:44:62:4F:E3 X509v3 Authority Key Identifier: keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a9:a9:85:55:8b:47:e9:be:a2:97:00:64:3b:b0:77:55:ea: 4e:ca:1f:c9:34:66:7d:1b:f6:f3:6c:9e:96:a1:62:a4:ac:9a: ee:9e:85:0c:d1:6a:07:27:04:e7:1b:18:22:bd:f6:f1:75:ed: 4a:a7:5d:3a:ce:8a:f0:a7:1c:f6:1d:43:25:ca:9f:71:24:ed: 52:2a:46:19:10:5e:fb:eb:f8:0a:24:4e:5e:dd:f9:7a:52:4c: 2a:20:8a:5e:77:04:1b:07:f1:7a:b5:27:e9:ce:8c:3e:7b:07: ab:82:fa:ea:c0:99:ad:58:d3:54:8b:71:cc:de:f4:94:76:50: c8:b2:d0:c0:78:0a:27:24:cc:22:b1:ac:c5:a2:1f:48:7d:05: 40:ba:3d:87:2b:1d:20:5a:6d:07:af:a8:05:99:1a:2a:03:20: 0c:a4:b1:e8:74:e1:b0:10:db:96:73:e3:01:e1:36:7e:37:36: 65:4b:96:c0:e9:51:ef:8b:62:78:3e:86:b4:d9:77:07:42:e9: ca:f2:84:5e:0b:74:b6:1e:06:d7:a4:28:2e:5b:84:42:a3:77: 59:f6:ef:33:6e:79:a7:73:fd:09:f2:8d:31:b8:7a:e6:c7:80: 65:5b:a8:da:23:0d:c0:2e:29:16:c5:d7:c6:64:4b:ed:fa:ac: c5:58:d4:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwMzkxMTAvBgNVBAUTKDM3NEQ5QTJDODMyRjIzNDRCREQ4Q0E0MDYzMTE3OTNG NjZENEM3MzUwHhcNMjQxMTIwMjMyMzI2WhcNMjQxMTI3MjMyMzI2WjAYMRYwFAYD VQQDEw02NzNlNmY2ZS1hYTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztbZSNJ02Pn+puY/kFj2GXX1qoYxvxPdG0GiPEUlAAOpEYZCUz6+e+41oRyT sEEFe8VM7IimCAkcBHrid1A48OpKGTts38CMFs2yczbTbg4mi5kM1rAd+s12w/K/ em5PFMrVklflWWFDlukMUePlka1Lk5bb/1rUVG++kDEC6urFzTMeOgT4KySInT6Q HVGFUufIZ/ts9wnEaom1hslECqQL0MmTlLLjdHxZs0dZwnYiv/IAtCpdcdpJEkb9 2EsH8qtL19wsLwT+4YWsuQmvhW12BVH8tpRRQSXWrthStQrkJabRqc0SioWkjejU HjtuMh1OWYE7ams4IvwfgCsP8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0Ud7sI AhYNtnw2I/kRkHBEYk/jMB8GA1UdIwQYMBaAFDdNmiyDLyNEvdjKQGMReT9m1Mc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAzOS9GQjcwREY2QUZG MjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkwUzkyTXBBWXhGNVAyYlV4 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04wMmFMSU12STBTOTJNcEFZeEY1UDJiVXh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjAzOS9GQjcwREY2QUZGMjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkw UzkyTXBBWXhGNVAyYlV4elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyqamFVYtH6b6ilwBkO7B3VepOyh/JNGZ9G/bzbJ6WoWKkrJrunoUM 0WoHJwTnGxgivfbxde1Kp106zorwpxz2HUMlyp9xJO1SKkYZEF776/gKJE5e3fl6 UkwqIIpedwQbB/F6tSfpzow+ewergvrqwJmtWNNUi3HM3vSUdlDIstDAeAonJMwi sazFoh9IfQVAuj2HKx0gWm0Hr6gFmRoqAyAMpLHodOGwENuWc+MB4TZ+NzZlS5bA 6VHvi2J4Poa02XcHQunK8oReC3S2HgbXpCguW4RCo3dZ9u8zbnmnc/0J8o0xuHrm x4BlW6jaIw3ALikWxdfGZEvt+qzFWNR8 -----END CERTIFICATE-----Generated at Thu Nov 21 01:25:55 2024 by rpki-client on console-ams.rpki-client.org