$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft File: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft (raw, json) Hash identifier: MJ3i0AybZgIHxsEPR88IM19V0CkIB6S5nVLLjDZcgiI= Subject key identifier: 0B:EF:DD:92:31:C6:62:9E:06:A9:47:0C:9F:F5:36:FE:1D:2B:20:56 Authority key identifier: DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF Certificate issuer: /CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Certificate serial: 0C05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft Manifest number: 0BFF Signing time: Fri 22 Nov 2024 18:17:33 +0000 Manifest this update: Fri 22 Nov 2024 18:17:33 +0000 Manifest next update: Fri 29 Nov 2024 18:17:33 +0000 Files and hashes: 1: 2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl (hash: a1/bwrRAhdY4obWTQnPr1ltesTavuJuPSozkjvFMGmU=) 2: 7665CD0AFF7011E99CDC306AC4F9AE02.roa (hash: n/f1uTeEyARI3uLFtA8qgF3ZldlUFB3TY49ssy/Ns3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3077 (0xc05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E66/serialNumber=DA547ED6928AAD1ECFB6847A1B07432BD87B19EF Validity Not Before: Nov 22 18:17:33 2024 GMT Not After : Nov 29 18:17:33 2024 GMT Subject: CN=6740cabd-a1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:0b:6e:d5:8b:cd:f6:e6:b2:4f:9e:bf:97: 3a:d1:b0:24:14:51:13:e2:a9:0b:0b:36:6d:e3:12: e1:a6:53:f4:b4:6a:85:f1:92:9c:a1:be:3b:87:8f: a7:42:6c:71:04:28:56:15:3e:85:d1:ae:51:b9:45: 17:1b:b2:a7:ed:da:ee:22:a3:02:02:b6:d6:00:33: a3:4b:1f:b0:9e:5d:6e:de:89:7c:06:49:7f:34:09: 7f:9c:ae:9f:5c:64:70:b7:89:1a:d0:84:e9:4a:3a: 2f:da:ba:ab:f5:97:c3:dc:1a:05:1c:eb:7d:ba:c2: c3:e8:be:27:e6:a0:90:0b:94:65:85:50:80:94:18: cd:97:46:a2:08:c4:f0:fc:f0:b1:e4:e4:a7:df:a4: 6f:e4:d8:ee:2e:b6:35:43:b2:53:96:3e:41:c6:26: b4:df:b0:cc:7c:31:5c:6e:2c:b5:6a:6a:30:a5:3b: 8b:73:de:a4:56:06:b8:ae:f3:5e:65:fa:5b:29:a5: e7:00:78:13:81:bf:41:26:d1:d2:a2:31:fc:d4:15: 02:2e:d3:db:e8:16:86:0c:e6:55:18:b3:c3:4d:4b: 2b:60:60:34:61:19:50:d9:ee:9a:65:0e:94:50:e4: 98:13:63:99:05:ab:44:be:fb:d2:c1:13:a2:44:20: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EF:DD:92:31:C6:62:9E:06:A9:47:0C:9F:F5:36:FE:1D:2B:20:56 X509v3 Authority Key Identifier: keyid:DA:54:7E:D6:92:8A:AD:1E:CF:B6:84:7A:1B:07:43:2B:D8:7B:19:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E66/70639EFCFF6E11E985A88C67C4F9AE02/2lR-1pKKrR7PtoR6GwdDK9h7Ge8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e2:26:76:0f:c3:6d:9b:be:2c:79:ee:b8:58:ee:85:3d:9b: e5:bb:f8:2c:70:de:2b:7b:28:f2:b1:19:5c:1f:e3:0a:54:40: 33:fd:b7:c1:e7:2d:16:75:03:12:0e:9f:fc:06:0d:8b:25:8c: 37:7e:33:22:74:af:11:c8:4a:e2:ae:9a:f2:e5:95:9f:dc:0c: 50:ce:02:b5:ae:50:dd:0d:9f:9a:8a:b1:1c:02:5a:84:fc:c0: 35:92:b9:a7:04:6d:46:73:bb:ba:c7:b2:ba:8b:2a:9c:f9:c2: 8f:ea:49:4d:bc:a2:c3:b0:0a:7f:74:08:b5:b3:f4:ad:14:6c: f4:55:0a:77:bd:b8:b8:65:27:3f:69:3d:4c:14:0c:03:25:1f: f8:12:80:fe:9e:54:b8:8f:a9:45:bf:03:57:cb:c3:d9:29:9b: 57:b3:4b:4d:c4:1e:c8:27:8d:7c:4e:93:01:ea:bb:a2:4d:45: 03:80:0f:22:9c:ec:d4:7c:9c:20:24:79:76:ae:dc:02:00:38: 2e:3f:49:1b:63:2c:d4:98:cc:06:70:24:5f:c1:cf:98:25:b0: c0:db:d9:3c:46:a7:58:b2:65:0d:08:a3:c5:aa:7c:be:6a:ac: c5:8c:e3:61:46:ee:7a:4d:42:3b:18:02:c6:ee:36:a9:d8:7b: 44:f3:d0:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNjYxMTAvBgNVBAUTKERBNTQ3RUQ2OTI4QUFEMUVDRkI2ODQ3QTFCMDc0MzJC RDg3QjE5RUYwHhcNMjQxMTIyMTgxNzMzWhcNMjQxMTI5MTgxNzMzWjAYMRYwFAYD VQQDEw02NzQwY2FiZC1hMWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJILbtWLzfbmsk+ev5c60bAkFFET4qkLCzZt4xLhplP0tGqF8ZKcob47h4+n QmxxBChWFT6F0a5RuUUXG7Kn7druIqMCArbWADOjSx+wnl1u3ol8Bkl/NAl/nK6f XGRwt4ka0ITpSjov2rqr9ZfD3BoFHOt9usLD6L4n5qCQC5RlhVCAlBjNl0aiCMTw /PCx5OSn36Rv5NjuLrY1Q7JTlj5Bxia037DMfDFcbiy1amowpTuLc96kVga4rvNe ZfpbKaXnAHgTgb9BJtHSojH81BUCLtPb6BaGDOZVGLPDTUsrYGA0YRlQ2e6aZQ6U UOSYE2OZBatEvvvSwROiRCDmuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvv3ZIx xmKeBqlHDJ/1Nv4dKyBWMB8GA1UdIwQYMBaAFNpUftaSiq0ez7aEehsHQyvYexnv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU2Ni83MDYzOUVGQ0ZG NkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JSN1B0b1I2R3dkREs5aDdH ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsUi0xcEtLclI3UHRvUjZHd2RESzloN0dlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU2Ni83MDYzOUVGQ0ZGNkUxMUU5ODVBODhDNjdDNEY5QUUwMi8ybFItMXBLS3JS N1B0b1I2R3dkREs5aDdHZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM4iZ2D8Ntm74see64WO6FPZvlu/gscN4reyjysRlcH+MKVEAz/bfB 5y0WdQMSDp/8Bg2LJYw3fjMidK8RyErirpry5ZWf3AxQzgK1rlDdDZ+airEcAlqE /MA1krmnBG1Gc7u6x7K6iyqc+cKP6klNvKLDsAp/dAi1s/StFGz0VQp3vbi4ZSc/ aT1MFAwDJR/4EoD+nlS4j6lFvwNXy8PZKZtXs0tNxB7IJ418TpMB6ruiTUUDgA8i nOzUfJwgJHl2rtwCADguP0kbYyzUmMwGcCRfwc+YJbDA29k8RqdYsmUNCKPFqny+ aqzFjONhRu56TUI7GALG7jap2HtE89BH -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org