$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft File: 2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json) Hash identifier: PdGcCQZpk6V5UYCMqEIWT+jQY1jti7rlX83l5nfUm/k= Subject key identifier: 00:0A:83:CC:D3:F4:97:21:CB:D9:E6:0C:AB:E1:5F:AC:C3:E2:56:78 Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE Certificate issuer: /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft Manifest number: 033C Signing time: Sat 23 Nov 2024 00:37:13 +0000 Manifest this update: Sat 23 Nov 2024 00:37:12 +0000 Manifest next update: Sat 30 Nov 2024 00:37:12 +0000 Files and hashes: 1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: rQeyPJ/HB7pMFqXELxjImvAvE02TfZgFu5G2ADCr5Bg=) 2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: qhynuoprkI0QYX3zOrBN2WK4xqaTH29Aq56lgYsl6oY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Validity Not Before: Nov 23 00:37:12 2024 GMT Not After : Nov 30 00:37:12 2024 GMT Subject: CN=674123b9-cbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ad:86:25:3b:11:88:2e:9b:40:94:fd:21:38: 99:24:33:e4:b2:3b:59:0c:40:3b:af:8a:6e:51:dc: c4:4e:3c:d6:1f:c9:70:d5:9c:a3:ad:d8:c8:2e:36: 07:ae:a1:17:92:8b:24:40:a1:07:81:79:42:03:4a: 54:63:b6:84:b5:7a:5c:32:f0:bd:10:85:2e:94:a5: 64:2e:5f:2c:d7:5e:d5:d3:2f:05:f4:11:7e:be:b4: dc:fa:f7:25:85:de:cf:d2:2f:f5:57:53:a5:ab:44: 0a:42:4f:c1:1e:b0:9a:20:c0:2c:6e:a9:fa:dc:e0: 58:88:bf:8a:06:95:a7:e2:d1:09:78:05:46:16:e3: 62:7d:55:ae:4d:40:0d:d0:17:83:ca:24:b1:7d:59: 4e:b7:f3:e4:e7:c5:5a:2b:9e:3b:82:76:90:d7:2f: 84:c1:9e:93:bd:6a:eb:09:5d:35:f3:20:ac:a1:c9: 7a:6f:e5:cc:f1:dc:98:57:64:70:0e:a7:10:35:20: 1c:2f:9a:c8:59:07:a8:77:59:7e:34:4f:d8:01:0b: 47:c1:e7:df:db:4b:e6:3d:c9:2d:88:d4:70:1a:5a: 6b:e3:49:d7:d6:b1:94:36:73:53:95:29:49:a9:d0: b8:51:de:a3:e8:11:35:43:e9:35:83:b3:e8:f4:37: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0A:83:CC:D3:F4:97:21:CB:D9:E6:0C:AB:E1:5F:AC:C3:E2:56:78 X509v3 Authority Key Identifier: keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:af:00:fd:a3:a7:cb:14:2b:e5:fc:e9:a1:5a:db:b9:e3:7b: 2d:ff:53:88:f5:c5:58:90:6d:15:b5:a9:2c:49:87:71:bf:72: 3a:7b:8e:49:ab:6a:49:84:9c:f6:d4:66:51:71:6e:f8:bf:3c: ef:9a:89:b1:60:b7:8f:2a:d6:c6:71:1d:15:fb:77:a8:88:60: e6:0f:84:17:0c:22:9f:72:ad:aa:bf:7b:5d:a6:02:ad:eb:b5: f4:f8:a2:8a:95:b1:39:5d:e6:d2:a7:e0:31:0b:a8:d4:c1:39: 75:2e:b8:ee:6a:88:9b:47:7b:9b:ee:e0:1c:f1:e8:52:57:a2: ad:c9:d7:79:5b:fb:5f:4b:f1:47:ab:d2:8e:d1:f3:9c:50:f0: b4:96:06:9d:ea:27:da:a8:29:e1:13:08:46:66:6b:0a:2f:3f: ee:50:15:8b:6f:4d:ce:8a:95:66:ec:da:1b:54:e7:02:13:f6: 85:e1:a1:3b:a0:2d:a5:93:d1:cf:69:47:6d:a5:3a:73:09:24: e8:36:9c:6c:b2:7d:59:3e:db:96:99:c0:7f:dc:62:0a:73:98: 91:57:bb:c9:a9:28:d2:5b:9e:0e:01:b2:f1:62:08:ad:4b:1e: 24:a4:c5:af:99:7a:c4:7a:a6:59:8c:01:9c:06:2a:6d:82:05: 10:fb:03:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQyOUMxMTAvBgNVBAUTKERBNkVFNkIyREVCMjYyMTM5NjAxNzBCQTY1ODc2Mjc4 QjJERjdGQ0UwHhcNMjQxMTIzMDAzNzEyWhcNMjQxMTMwMDAzNzEyWjAYMRYwFAYD VQQDEw02NzQxMjNiOS1jYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA162GJTsRiC6bQJT9ITiZJDPksjtZDEA7r4puUdzETjzWH8lw1ZyjrdjILjYH rqEXkoskQKEHgXlCA0pUY7aEtXpcMvC9EIUulKVkLl8s117V0y8F9BF+vrTc+vcl hd7P0i/1V1Olq0QKQk/BHrCaIMAsbqn63OBYiL+KBpWn4tEJeAVGFuNifVWuTUAN 0BeDyiSxfVlOt/Pk58VaK547gnaQ1y+EwZ6TvWrrCV018yCsocl6b+XM8dyYV2Rw DqcQNSAcL5rIWQeod1l+NE/YAQtHweff20vmPcktiNRwGlpr40nX1rGUNnNTlSlJ qdC4Ud6j6BE1Q+k1g7Po9DeOTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAKg8zT 9Jchy9nmDKvhX6zD4lZ4MB8GA1UdIwQYMBaAFNpu5rLesmITlgFwumWHYniy33/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDI5Qy9FNkIyNTRGODlB QTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVloT1dBWEM2WllkaWVMTGZm ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtN21zdDZ5WWhPV0FYQzZaWWRpZUxMZmY4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDI5Qy9FNkIyNTRGODlBQTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVlo T1dBWEM2WllkaWVMTGZmODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFrwD9o6fLFCvl/OmhWtu543st/1OI9cVYkG0VtaksSYdxv3I6e45J q2pJhJz21GZRcW74vzzvmomxYLePKtbGcR0V+3eoiGDmD4QXDCKfcq2qv3tdpgKt 67X0+KKKlbE5XebSp+AxC6jUwTl1LrjuaoibR3ub7uAc8ehSV6Ktydd5W/tfS/FH q9KO0fOcUPC0lgad6ifaqCnhEwhGZmsKLz/uUBWLb03OipVm7NobVOcCE/aF4aE7 oC2lk9HPaUdtpTpzCSToNpxssn1ZPtuWmcB/3GIKc5iRV7vJqSjSW54OAbLxYgit Sx4kpMWvmXrEeqZZjAGcBiptggUQ+wNe -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org