$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json) Hash identifier: mCx2PWaZuj3mQxc5ldM/1XXeMJ7Tt8IihWr4w9i+7ys= Subject key identifier: DD:D9:40:8D:5E:98:A3:E1:F7:A7:DE:F5:9D:88:69:DC:C4:B5:38:7A Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft Manifest number: 0131 Signing time: Sat 23 Nov 2024 02:48:36 +0000 Manifest this update: Sat 23 Nov 2024 02:48:35 +0000 Manifest next update: Sat 30 Nov 2024 02:48:35 +0000 Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: HiPZ6RuECbkLBbaHds83t5CJUsF1PMl0z4YvHqhCE5Q=) 2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: lrJXxDbusDQNnxZVLvp/KiXpw4drpdRHgf2/ruvhTVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: Nov 23 02:48:35 2024 GMT Not After : Nov 30 02:48:35 2024 GMT Subject: CN=67414283-7b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7a:26:29:30:34:61:35:b5:57:e2:0a:b7:28: 7e:3a:4e:59:73:e0:c7:a1:97:7e:2e:11:40:01:27: e6:44:a0:87:b8:f6:5f:b9:50:81:22:83:1d:9a:00: 9a:76:08:a9:a0:c2:95:1f:fb:b4:c8:b6:17:38:94: ca:2d:b4:07:d3:9e:cf:9b:69:2f:3a:f5:6d:6e:d6: f9:3a:92:64:f8:aa:1b:3c:ba:93:17:01:23:67:4e: 27:6d:7a:61:25:d5:09:1c:4a:0e:7f:4e:36:a4:52: 8b:23:c7:04:2b:6d:60:71:f0:ff:1e:65:1e:a4:b9: 0b:f2:25:9e:13:8b:d0:7a:21:47:f6:fa:68:35:6c: dd:89:0c:1c:ed:00:03:c0:9b:3f:d7:97:64:08:c4: 93:b6:61:23:16:51:4c:3b:1d:07:39:75:85:01:b6: 33:9b:a6:93:be:13:3d:24:22:92:7b:a9:23:dd:a3: 29:d5:75:19:8a:04:6c:9d:0d:11:73:64:f0:c7:08: 03:38:52:19:0e:b8:b1:31:ff:6b:50:e3:e9:c5:d1: 53:1f:fe:0d:30:84:8a:a0:6a:4a:94:b6:ff:25:db: 81:a9:00:c8:68:da:7e:66:15:4b:b4:95:e9:fc:6f: 95:87:ee:91:69:33:60:0b:39:fd:32:c7:1b:ed:78: 48:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D9:40:8D:5E:98:A3:E1:F7:A7:DE:F5:9D:88:69:DC:C4:B5:38:7A X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:e7:92:a8:60:d2:5c:68:0e:b5:b5:7e:51:77:dd:ab:23:3c: 36:db:b1:e7:f6:d9:8b:f1:e0:69:6e:db:53:c2:fb:64:9c:53: 52:c4:0a:49:fa:c2:35:81:ec:34:05:3e:94:78:83:61:88:ed: ff:f3:34:da:b1:c4:b5:cb:6d:e2:ca:61:f5:37:c2:96:21:73: fd:84:ea:64:0d:7a:a1:df:31:99:b9:28:ba:b8:40:61:b8:04: 65:fb:3b:9a:7d:70:01:7a:57:71:17:76:39:53:7b:20:07:39: 00:ed:b5:b6:28:b6:b8:a6:1d:56:0e:0e:5b:f5:f6:e2:21:e0: b4:72:53:c6:14:c7:48:1f:58:8c:dc:37:4c:73:0c:4c:1f:ff: c3:8e:a9:c0:0d:55:5d:bc:13:5b:3c:0c:fb:70:f4:4e:4f:16: 6e:f6:2a:1d:88:aa:e9:b8:8e:e6:b1:6b:2e:41:c3:b3:33:38: fe:b8:f4:91:30:f1:d6:37:dc:23:a7:1b:72:9e:62:e3:af:70: 87:c1:6b:6a:72:49:02:03:b4:f3:fd:e6:9a:bb:7a:98:16:67: f1:a6:14:66:6c:a5:29:13:7e:f2:df:3c:db:09:cf:35:e8:71: 5f:4b:e8:0d:97:56:a7:8b:37:8a:e2:e1:68:8f:c2:ea:af:7b: 0a:e6:56:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjQxMTIzMDI0ODM1WhcNMjQxMTMwMDI0ODM1WjAYMRYwFAYD VQQDEw02NzQxNDI4My03YjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nomKTA0YTW1V+IKtyh+Ok5Zc+DHoZd+LhFAASfmRKCHuPZfuVCBIoMdmgCa dgipoMKVH/u0yLYXOJTKLbQH057Pm2kvOvVtbtb5OpJk+KobPLqTFwEjZ04nbXph JdUJHEoOf042pFKLI8cEK21gcfD/HmUepLkL8iWeE4vQeiFH9vpoNWzdiQwc7QAD wJs/15dkCMSTtmEjFlFMOx0HOXWFAbYzm6aTvhM9JCKSe6kj3aMp1XUZigRsnQ0R c2TwxwgDOFIZDrixMf9rUOPpxdFTH/4NMISKoGpKlLb/JduBqQDIaNp+ZhVLtJXp /G+Vh+6RaTNgCzn9Mscb7XhILQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3ZQI1e mKPh96fe9Z2IadzEtTh6MB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdC TXZ3UC1oaUllckRIUnJGUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ55KoYNJcaA61tX5Rd92rIzw227Hn9tmL8eBpbttTwvtknFNSxApJ +sI1gew0BT6UeINhiO3/8zTascS1y23iymH1N8KWIXP9hOpkDXqh3zGZuSi6uEBh uARl+zuafXABeldxF3Y5U3sgBzkA7bW2KLa4ph1WDg5b9fbiIeC0clPGFMdIH1iM 3DdMcwxMH//DjqnADVVdvBNbPAz7cPROTxZu9iodiKrpuI7msWsuQcOzMzj+uPSR MPHWN9wjpxtynmLjr3CHwWtqckkCA7Tz/eaau3qYFmfxphRmbKUpE37y3zzbCc81 6HFfS+gNl1anizeK4uFoj8Lqr3sK5lbJ -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org