$ rpki-client -vvf rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft File: EE2-9WUN1zWSotPPgXKfJprZkQg.mft (raw, json) Hash identifier: eb/9G9k/6hZIzL3yvlTT0FX8R2i4mrnO5BXxqINQUG8= Subject key identifier: 63:28:F5:BE:69:9C:99:85:95:10:50:22:46:11:0E:00:3A:31:59:34 Authority key identifier: 10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 Certificate issuer: /CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft Manifest number: 06D4 Signing time: Fri 22 Nov 2024 21:36:54 +0000 Manifest this update: Fri 22 Nov 2024 21:36:54 +0000 Manifest next update: Fri 29 Nov 2024 21:36:54 +0000 Files and hashes: 1: EE2-9WUN1zWSotPPgXKfJprZkQg.crl (hash: DLfn1ZqhWOroR7hCIpM6pyV9+s7h984PnQklaifGm3Y=) 2: 4D5B35402E8511EB850F8A18C4F9AE02.roa (hash: eVZ25PhJmdJJ+k8iptjOXcq06eNx21H+Qxt0VJ6DxhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C429/serialNumber=104DBEF5650DD73592A2D3CF81729F269AD99108 Validity Not Before: Nov 22 21:36:54 2024 GMT Not After : Nov 29 21:36:54 2024 GMT Subject: CN=6740f976-7f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:24:29:22:e3:4e:4a:5c:ca:f4:60:69:73: 38:2a:5b:44:28:f3:0a:86:f3:49:32:d1:c7:3e:a7: 83:e4:00:e6:51:0b:e6:33:4d:0c:6f:ce:87:f9:1f: 6b:00:8a:52:0b:56:59:e5:e9:44:af:d4:36:7e:de: 49:a5:f7:6a:61:26:68:43:cb:80:59:82:94:cf:66: b7:05:72:72:b4:dc:49:24:1b:fa:80:b7:1b:b8:e7: 0b:ee:cf:26:77:49:98:9f:5e:7a:fb:93:c1:92:02: b8:78:96:dc:46:7b:70:b8:a9:17:31:75:f6:97:7d: 2a:96:8f:1f:4d:c2:f8:38:26:2a:3e:ce:8a:ec:3a: e7:97:23:8e:6d:d1:d2:75:a4:e8:92:ed:ea:1a:21: 94:48:37:0a:b5:26:95:b8:17:ec:ca:d3:d1:29:87: 20:b8:ab:6f:5c:1e:87:81:5b:52:68:32:8c:27:62: 2d:b7:fe:08:43:e6:61:9e:84:10:45:8e:9c:d3:a6: ab:94:13:c1:0a:b4:a9:99:1f:b0:76:28:56:e9:02: 0d:31:b7:46:24:7a:89:62:96:7b:cb:b5:61:e8:6c: 9c:04:0b:a0:0a:fe:e5:3b:d6:fa:bf:60:37:54:f0: 89:6a:17:41:5e:31:fa:ed:e6:19:03:ba:e3:0f:2c: b2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:28:F5:BE:69:9C:99:85:95:10:50:22:46:11:0E:00:3A:31:59:34 X509v3 Authority Key Identifier: keyid:10:4D:BE:F5:65:0D:D7:35:92:A2:D3:CF:81:72:9F:26:9A:D9:91:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE2-9WUN1zWSotPPgXKfJprZkQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C429/26D6B7C42E8411EBA316C317C4F9AE02/EE2-9WUN1zWSotPPgXKfJprZkQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:21:ce:32:6f:aa:af:73:fe:76:83:84:89:94:18:1b:76:fb: 48:3d:fd:f8:02:44:f2:59:36:c9:3f:da:8a:fd:9b:ba:f4:c8: e6:a9:30:6c:af:1c:60:94:40:32:fa:b8:cf:af:62:19:c7:10: 9e:d2:c0:6e:2b:f4:8d:33:d3:d3:97:49:64:44:93:7f:bb:30: 66:60:06:93:a1:7c:a7:3a:e9:6d:8b:9d:88:98:21:58:0e:a5: 7d:0f:41:8f:e1:6b:53:bc:0f:ce:d3:ea:a3:72:ca:21:8c:fd: 5b:ab:e8:8a:6a:fe:6a:73:a8:6e:fd:b2:04:ad:61:f2:f1:8e: 23:88:dc:92:fb:ae:e8:64:6f:17:56:04:66:39:06:5d:9a:5d: 5a:6e:6b:03:cd:5a:f7:1d:9a:b0:a9:d8:89:5d:46:92:aa:7a: bf:e4:33:50:02:0a:f1:2f:92:89:f0:32:da:4f:2d:27:40:94: 13:3b:a8:67:89:3b:34:f6:39:19:05:64:5b:0c:85:17:f4:53: f1:a1:e8:b3:b7:d5:bd:86:c5:62:a7:b2:43:65:35:bc:83:d7: da:ae:3a:0f:ff:57:20:b2:f8:15:96:35:5f:2f:e8:d4:32:77: 89:ec:a0:db:6d:69:90:b7:66:98:8a:92:ab:b3:3a:a8:74:32: de:80:ce:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0MjkxMTAvBgNVBAUTKDEwNERCRUY1NjUwREQ3MzU5MkEyRDNDRjgxNzI5RjI2 OUFEOTkxMDgwHhcNMjQxMTIyMjEzNjU0WhcNMjQxMTI5MjEzNjU0WjAYMRYwFAYD VQQDEw02NzQwZjk3Ni03ZjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvA8kKSLjTkpcyvRgaXM4KltEKPMKhvNJMtHHPqeD5ADmUQvmM00Mb86H+R9r AIpSC1ZZ5elEr9Q2ft5JpfdqYSZoQ8uAWYKUz2a3BXJytNxJJBv6gLcbuOcL7s8m d0mYn156+5PBkgK4eJbcRntwuKkXMXX2l30qlo8fTcL4OCYqPs6K7DrnlyOObdHS daToku3qGiGUSDcKtSaVuBfsytPRKYcguKtvXB6HgVtSaDKMJ2Itt/4IQ+ZhnoQQ RY6c06arlBPBCrSpmR+wdihW6QINMbdGJHqJYpZ7y7Vh6GycBAugCv7lO9b6v2A3 VPCJahdBXjH67eYZA7rjDyyymQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMo9b5p nJmFlRBQIkYRDgA6MVk0MB8GA1UdIwQYMBaAFBBNvvVlDdc1kqLTz4Fynyaa2ZEI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzQyOS8yNkQ2QjdDNDJF ODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6V1NvdFBQZ1hLZkpwclpr UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFMi05V1VOMXpXU290UFBnWEtmSnByWmtRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzQyOS8yNkQ2QjdDNDJFODQxMUVCQTMxNkMzMTdDNEY5QUUwMi9FRTItOVdVTjF6 V1NvdFBQZ1hLZkpwclprUWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhIc4yb6qvc/52g4SJlBgbdvtIPf34AkTyWTbJP9qK/Zu69MjmqTBs rxxglEAy+rjPr2IZxxCe0sBuK/SNM9PTl0lkRJN/uzBmYAaToXynOulti52ImCFY DqV9D0GP4WtTvA/O0+qjcsohjP1bq+iKav5qc6hu/bIErWHy8Y4jiNyS+67oZG8X VgRmOQZdml1abmsDzVr3HZqwqdiJXUaSqnq/5DNQAgrxL5KJ8DLaTy0nQJQTO6hn iTs09jkZBWRbDIUX9FPxoeizt9W9hsVip7JDZTW8g9farjoP/1cgsvgVljVfL+jU MneJ7KDbbWmQt2aYipKrszqodDLegM5F -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:39 2024 by rpki-client on console-ams.rpki-client.org