$ rpki-client -vvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft File: 2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json) Hash identifier: hX1Srz16dfm05c3xbO4kIqbXwIqKHfzwWEYrFTSvAzQ= Subject key identifier: BB:7A:C2:25:77:AB:18:96:8C:DE:CF:5B:E8:52:F8:88:91:B6:D8:06 Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft Manifest number: 0749 Signing time: Fri 22 Nov 2024 20:52:08 +0000 Manifest this update: Fri 22 Nov 2024 20:52:07 +0000 Manifest next update: Fri 29 Nov 2024 20:52:07 +0000 Files and hashes: 1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: m8P/+KT+yIKE17/Q9BHyT4qMjXMLMLLHtDL5F6wQ1js=) 2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: VKY62GL5Ck/qXDFuD6a8QDseIo6kk4jLfJkbkCLEJK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Validity Not Before: Nov 22 20:52:07 2024 GMT Not After : Nov 29 20:52:07 2024 GMT Subject: CN=6740eef8-1d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:82:6e:df:ba:05:ec:47:b2:b6:39:52:63: 9e:b3:b7:f0:65:cf:b4:ff:3a:0f:82:c9:65:ad:a0: fc:05:71:80:52:ca:c1:70:86:d1:74:ab:4f:45:db: 86:44:e8:29:8a:b7:2d:a7:9f:1e:4b:1e:57:eb:73: e1:79:03:2f:39:ef:72:39:4f:36:3d:6f:7c:77:c8: 86:59:df:b6:e5:23:1b:90:91:cd:80:d8:bd:b1:81: c3:5a:ac:01:39:94:31:7a:15:64:aa:24:54:65:bd: ad:51:bb:d9:de:26:9b:2b:6f:a4:6f:72:43:1a:b3: 7e:4f:63:67:af:49:af:b0:c9:41:5c:cc:16:4d:a1: 47:27:91:f9:f9:e2:18:76:20:8d:58:cf:7f:84:bb: 25:37:44:ea:ee:66:b3:3f:de:da:b3:78:81:7f:ae: 08:ef:d2:b7:d5:d2:14:3a:5c:16:80:21:ad:1f:fc: 74:20:77:b5:7e:c0:bc:d8:b1:04:df:16:56:bf:e2: 5b:97:f1:91:0a:39:b4:e4:f3:a1:e3:38:12:e6:c1: 53:4b:3a:18:76:29:c9:f7:57:19:a0:1d:42:a0:de: 6b:c2:2b:70:8d:5b:7b:9e:89:44:07:7f:97:37:f4: 7d:ba:3f:27:2b:00:10:ce:40:82:b3:85:fc:f7:74: f0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7A:C2:25:77:AB:18:96:8C:DE:CF:5B:E8:52:F8:88:91:B6:D8:06 X509v3 Authority Key Identifier: keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a9:e5:1c:0a:8a:2b:5d:f4:a1:a4:de:72:c7:ce:e2:f0:a3: 5f:25:1d:56:91:9a:44:d1:62:55:f0:7f:67:2a:5b:66:6e:35: fb:f1:bf:5c:21:48:ad:1e:09:16:69:1f:88:eb:91:ec:7a:07: 8a:11:65:d2:59:fc:30:94:92:2f:76:9d:f9:98:d1:56:0d:cd: 33:5c:48:e7:bf:b0:95:e7:2d:d2:04:e8:2c:7f:a2:a4:d8:06: 3c:11:fa:94:ea:c2:36:75:a8:93:4e:31:de:77:38:f8:cf:7e: e0:5d:f5:74:92:bc:b2:58:e2:bf:df:d6:04:69:60:39:f5:1d: 7c:1b:15:fa:77:f8:8a:8a:0e:dc:7c:bc:17:3e:bd:3e:2e:53: e9:57:56:fd:66:3b:cf:9d:e8:fc:c5:d3:37:06:a8:7e:4f:a2: 7b:8c:94:3e:33:c0:16:17:69:ea:d9:4d:c5:cf:9c:ed:30:78: 62:42:a0:d3:bd:25:90:0c:c5:d7:5b:3d:77:b5:6d:02:31:2e: b2:fa:27:70:c0:80:29:b0:4b:c4:bf:db:bd:78:84:27:20:b2: 90:71:d4:ad:87:0c:40:7f:18:fe:7e:30:1d:32:9f:6d:22:da: b8:77:f8:a3:35:6b:4e:16:cd:1d:0f:4d:26:94:1e:df:9a:49: 7c:9b:f0:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF NTIyMzdFOEEwHhcNMjQxMTIyMjA1MjA3WhcNMjQxMTI5MjA1MjA3WjAYMRYwFAYD VQQDEw02NzQwZWVmOC0xZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzyCbt+6BexHsrY5UmOes7fwZc+0/zoPgsllraD8BXGAUsrBcIbRdKtPRduG ROgpirctp58eSx5X63PheQMvOe9yOU82PW98d8iGWd+25SMbkJHNgNi9sYHDWqwB OZQxehVkqiRUZb2tUbvZ3iabK2+kb3JDGrN+T2Nnr0mvsMlBXMwWTaFHJ5H5+eIY diCNWM9/hLslN0Tq7mazP97as3iBf64I79K31dIUOlwWgCGtH/x0IHe1fsC82LEE 3xZWv+Jbl/GRCjm05POh4zgS5sFTSzoYdinJ91cZoB1CoN5rwitwjVt7nolEB3+X N/R9uj8nKwAQzkCCs4X893TwuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLt6wiV3 qxiWjN7PW+hS+IiRttgGMB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4 NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjY5Ny83NTIxREZDMEU4NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJx NDFvaFd3NGhWRXJsSWpmb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACqeUcCoorXfShpN5yx87i8KNfJR1WkZpE0WJV8H9nKltmbjX78b9c IUitHgkWaR+I65HsegeKEWXSWfwwlJIvdp35mNFWDc0zXEjnv7CV5y3SBOgsf6Kk 2AY8EfqU6sI2daiTTjHedzj4z37gXfV0kryyWOK/39YEaWA59R18GxX6d/iKig7c fLwXPr0+LlPpV1b9ZjvPnej8xdM3Bqh+T6J7jJQ+M8AWF2nq2U3Fz5ztMHhiQqDT vSWQDMXXWz13tW0CMS6y+idwwIApsEvEv9u9eIQnILKQcdSthwxAfxj+fjAdMp9t Itq4d/ijNWtOFs0dD00mlB7fmkl8m/CN -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org