$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft File: 2m6UHNv-AaruCRs_lVldbUAYMW0.mft (raw, json) Hash identifier: lGusAUv07Gn5kxC6BjhrtQ3rQKENnZZ8SGCpYZD6et8= Subject key identifier: DE:60:0A:6E:5D:B4:05:A1:D9:EF:B2:D5:FF:D5:8E:0C:53:2E:14:1C Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D Certificate issuer: /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Certificate serial: 0575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft Manifest number: 0570 Signing time: Fri 22 Nov 2024 22:52:55 +0000 Manifest this update: Fri 22 Nov 2024 22:52:55 +0000 Manifest next update: Fri 29 Nov 2024 22:52:55 +0000 Files and hashes: 1: 2m6UHNv-AaruCRs_lVldbUAYMW0.crl (hash: bhDyvstwVoV4JSbDcZAXboMZksOHVJRjV3Bhg5j8DbI=) 2: 1576F19ABC5C11EB831EC25AC4F9AE02.roa (hash: N+OLwoylWKY2cx48mF8MRzwF1FMHW/ZLDW5PqvusQ+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1397 (0x575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Validity Not Before: Nov 22 22:52:55 2024 GMT Not After : Nov 29 22:52:55 2024 GMT Subject: CN=67410b47-3687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:bf:7c:94:52:7a:30:16:e9:e6:f7:ad:b5: 0f:63:4d:3c:13:14:4e:65:b0:f7:60:79:e6:17:78: 77:e0:c7:1a:a4:e4:c8:28:e9:e1:bb:4d:a7:7d:cd: 57:e9:48:d3:f0:de:d2:1b:fc:31:07:2e:57:a6:e6: 5e:7a:51:65:ac:80:ee:5e:da:48:a8:be:00:7b:dc: cc:da:e0:ec:b0:8d:32:c0:95:df:80:cb:f6:d8:d5: 2c:30:33:51:5e:43:ba:1c:64:5d:df:2a:98:f7:6a: 1b:c4:ef:9f:ef:8d:46:d5:b5:54:f6:3b:54:f0:33: 96:af:11:fb:a9:f0:a7:b3:ee:e8:de:15:10:34:6c: ab:5b:3f:29:a1:48:94:82:0f:85:7d:6e:42:c7:f7: 73:41:ca:1c:f7:a7:91:b0:c0:70:78:53:3b:60:6e: 86:30:86:bc:d1:54:6e:44:76:43:12:0a:10:ad:47: cd:fd:e7:b3:bc:5b:b2:b9:8d:45:51:6c:c5:bc:18: f2:72:8f:e3:de:19:a2:69:8c:a8:09:66:d4:b6:0a: 46:0f:f8:bc:98:6b:39:64:94:be:53:e0:e6:b1:e2: f6:6c:6c:92:04:12:1c:2c:13:b7:a1:2a:13:80:ac: 5d:30:78:74:74:33:7a:94:75:34:07:6e:87:d0:e9: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:60:0A:6E:5D:B4:05:A1:D9:EF:B2:D5:FF:D5:8E:0C:53:2E:14:1C X509v3 Authority Key Identifier: keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:f7:16:c8:d8:c6:98:8e:1a:18:35:ea:62:73:a6:11:a9:78: 69:42:ff:11:88:96:37:c2:28:2b:ec:1f:cf:50:e8:6e:74:72: 7f:80:a7:ec:74:4a:47:ba:c8:d4:94:04:8e:32:55:be:90:f0: 97:fd:89:eb:db:80:94:a4:9c:94:1b:74:13:66:dc:a1:c9:59: 5b:38:87:37:23:6b:4b:ae:72:0f:28:a8:e6:b8:6f:bf:b0:c7: f1:c7:2d:7a:24:b1:de:f2:c6:76:8f:17:3e:ad:9f:7c:74:02: f4:ef:3b:ad:8a:16:00:7d:87:2e:d7:3b:07:8e:12:b4:4a:63: 2c:73:68:d6:eb:d9:b2:3b:b8:79:9e:46:70:aa:d8:82:36:f2: b3:30:67:1b:50:8a:0f:a2:9e:41:84:94:63:7d:0d:46:c3:5b: 32:87:1d:d4:c2:42:48:1e:b4:68:4d:47:fa:5f:3a:46:05:f4: ac:93:8b:ab:12:05:40:93:ac:79:e2:8e:14:7a:ce:0e:c1:86: 90:c6:96:d7:82:e8:04:af:b7:58:bd:ce:9b:0e:19:a7:b5:3a: 1a:b1:e4:a9:70:bb:6f:c6:a2:4c:dd:11:67:28:19:0b:a5:a0: 46:38:70:8f:89:90:6d:4a:e1:ab:e8:0c:34:5c:b9:45:12:58: 82:f4:22:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQkQxMTAvBgNVBAUTKERBNkU5NDFDREJGRTAxQUFFRTA5MUIzRjk1NTk1RDZE NDAxODMxNkQwHhcNMjQxMTIyMjI1MjU1WhcNMjQxMTI5MjI1MjU1WjAYMRYwFAYD VQQDEw02NzQxMGI0Ny0zNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Hu/fJRSejAW6eb3rbUPY008ExROZbD3YHnmF3h34McapOTIKOnhu02nfc1X 6UjT8N7SG/wxBy5XpuZeelFlrIDuXtpIqL4Ae9zM2uDssI0ywJXfgMv22NUsMDNR XkO6HGRd3yqY92obxO+f741G1bVU9jtU8DOWrxH7qfCns+7o3hUQNGyrWz8poUiU gg+FfW5Cx/dzQcoc96eRsMBweFM7YG6GMIa80VRuRHZDEgoQrUfN/eezvFuyuY1F UWzFvBjyco/j3hmiaYyoCWbUtgpGD/i8mGs5ZJS+U+DmseL2bGySBBIcLBO3oSoT gKxdMHh0dDN6lHU0B26H0Ona+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5gCm5d tAWh2e+y1f/VjgxTLhQcMB8GA1UdIwQYMBaAFNpulBzb/gGq7gkbP5VZXW1AGDFt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVCRC8zMTIwMDY1RUJD NUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFhcnVDUnNfbFZsZGJVQVlN VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtNlVITnYtQWFydUNSc19sVmxkYlVBWU1XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVCRC8zMTIwMDY1RUJDNUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFh cnVDUnNfbFZsZGJVQVlNVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG9xbI2MaYjhoYNepic6YRqXhpQv8RiJY3wigr7B/PUOhudHJ/gKfs dEpHusjUlASOMlW+kPCX/Ynr24CUpJyUG3QTZtyhyVlbOIc3I2tLrnIPKKjmuG+/ sMfxxy16JLHe8sZ2jxc+rZ98dAL07zutihYAfYcu1zsHjhK0SmMsc2jW69myO7h5 nkZwqtiCNvKzMGcbUIoPop5BhJRjfQ1Gw1syhx3UwkJIHrRoTUf6XzpGBfSsk4ur EgVAk6x54o4Ues4OwYaQxpbXgugEr7dYvc6bDhmntToaseSpcLtvxqJM3RFnKBkL paBGOHCPiZBtSuGr6Aw0XLlFEliC9CJX -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:35 2024 by rpki-client on console-ams.rpki-client.org