$ rpki-client -vvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft File: RByw2GqSzt--gIPe1peibWI-5lU.mft (raw, json) Hash identifier: U+GejS8azgUacreV5fpdNIxqm0ICdenzs7wvSGU+Z6g= Subject key identifier: E8:59:7F:C1:32:67:F6:F9:AF:0D:73:86:5A:3B:30:67:18:2F:0A:2D Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 Certificate issuer: /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Certificate serial: 02D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft Manifest number: 02CE Signing time: Sat 23 Nov 2024 00:55:45 +0000 Manifest this update: Sat 23 Nov 2024 00:55:45 +0000 Manifest next update: Sat 30 Nov 2024 00:55:45 +0000 Files and hashes: 1: RByw2GqSzt--gIPe1peibWI-5lU.crl (hash: SRLWHmOmIoxpTrRC24jyIYwNaekpU57KyqQzkspW1Gw=) 2: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (hash: YgVhX2rX+zPQ1467o887/FhnDxbWRkvwY5a2EYtW2qQ=) 3: 9CD74392C9E411EC956B0A3CC4F9AE02.roa (hash: 4fhVLBhfu57aeFMCKT6xqBWKFb9Ogft79B2/qJ68TUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 726 (0x2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Validity Not Before: Nov 23 00:55:45 2024 GMT Not After : Nov 30 00:55:45 2024 GMT Subject: CN=67412811-8162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:a0:9f:52:a0:d3:84:93:6e:04:31:57:64: 81:80:7f:25:2b:6b:42:f2:46:45:92:c0:a0:6e:db: 37:93:b4:af:b0:4f:d0:be:62:d0:de:60:99:50:f2: 89:47:64:26:45:89:b5:06:4c:67:9f:4b:eb:72:65: 4e:ff:4e:c1:94:5b:90:77:4c:73:39:da:6d:c3:13: 98:be:5e:43:3d:ab:56:fe:cb:be:e8:a1:c8:e0:83: de:15:58:f7:0a:dd:7b:0a:a2:a9:6f:23:26:af:2e: 76:b2:ff:45:b6:62:77:07:01:b8:a5:ab:f1:ea:d4: ed:ee:c9:cd:88:ba:dd:54:48:4e:b0:02:86:68:a5: ff:19:70:39:e3:c1:16:63:6a:5a:4b:82:3e:05:2c: a1:36:6d:a8:df:4a:0f:c4:e2:25:56:23:8e:0c:b6: ec:2c:2d:ac:be:38:e4:4e:21:3a:c2:b4:74:4d:3d: 94:49:00:e8:4f:1f:2c:92:e7:a1:f3:c5:fa:4b:5c: 6f:e9:f3:93:0b:24:a2:09:d3:6a:1c:2a:b2:58:e6: ff:eb:4e:9b:67:34:71:79:95:3b:c8:5e:d5:0e:94: 26:27:41:ba:ef:41:0e:82:9d:90:63:25:3c:df:ee: a8:63:c8:d8:c0:75:3e:f8:b2:66:d7:57:95:84:4c: d2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:59:7F:C1:32:67:F6:F9:AF:0D:73:86:5A:3B:30:67:18:2F:0A:2D X509v3 Authority Key Identifier: keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:40:f2:97:cf:2a:3f:da:48:9f:65:18:35:db:6b:fe:42:fb: 41:26:9f:06:b3:d4:c1:b4:99:df:a9:1a:d6:8b:7b:12:92:9d: dc:5c:88:db:6d:38:4f:6c:a6:2e:67:7d:c9:22:3a:f2:57:3f: 32:8c:12:f6:55:b1:df:d0:39:6b:b1:49:2e:36:a1:72:3b:fc: 58:77:58:1f:0a:7e:15:cf:78:12:eb:d8:3e:fd:37:e6:9d:4f: 9d:47:dc:1d:d5:3a:fe:bf:21:31:fb:ea:63:fc:38:63:36:87: 10:69:0c:69:58:7c:3d:22:a7:0a:cc:ac:97:f9:23:83:28:5f: 5a:f0:7e:81:92:5d:fd:12:a8:01:85:94:ff:b3:13:74:65:32: 32:79:76:cc:67:40:18:89:6f:da:db:dc:81:20:f6:b7:a0:65: 3f:94:65:af:66:36:11:3d:c4:73:78:bf:f5:93:a3:39:b7:8d: b3:f2:a7:78:ee:c2:19:a0:6a:cc:0b:0a:e2:df:c4:1d:e8:b4: 4b:65:21:a0:73:60:53:fb:7f:fb:40:66:d9:5d:1a:73:61:67: 05:a0:85:7e:ff:d1:da:cb:bc:f6:a6:cf:0e:37:e1:37:a1:83: 76:87:ee:d6:63:17:0e:4f:87:1f:13:df:90:1f:5a:d6:a6:87: 92:fc:e7:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyMzUxMTAvBgNVBAUTKDQ0MUNCMEQ4NkE5MkNFREZCRTgwODNERUQ2OTdBMjZE NjIzRUU2NTUwHhcNMjQxMTIzMDA1NTQ1WhcNMjQxMTMwMDA1NTQ1WjAYMRYwFAYD VQQDEw02NzQxMjgxMS04MTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIOgn1Kg04STbgQxV2SBgH8lK2tC8kZFksCgbts3k7SvsE/QvmLQ3mCZUPKJ R2QmRYm1Bkxnn0vrcmVO/07BlFuQd0xzOdptwxOYvl5DPatW/su+6KHI4IPeFVj3 Ct17CqKpbyMmry52sv9FtmJ3BwG4pavx6tTt7snNiLrdVEhOsAKGaKX/GXA548EW Y2paS4I+BSyhNm2o30oPxOIlViOODLbsLC2svjjkTiE6wrR0TT2USQDoTx8skueh 88X6S1xv6fOTCySiCdNqHCqyWOb/606bZzRxeZU7yF7VDpQmJ0G670EOgp2QYyU8 3+6oY8jYwHU++LJm11eVhEzSywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhZf8Ey Z/b5rw1zhlo7MGcYLwotMB8GA1UdIwQYMBaAFEQcsNhqks7fvoCD3taXom1iPuZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTIzNS9ERDYxRTIyRUM1 REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0LS1nSVBlMXBlaWJXSS01 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCeXcyR3FTenQtLWdJUGUxcGVpYldJLTVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTIzNS9ERDYxRTIyRUM1REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0 LS1nSVBlMXBlaWJXSS01bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVQPKXzyo/2kifZRg122v+QvtBJp8Gs9TBtJnfqRrWi3sSkp3cXIjb bThPbKYuZ33JIjryVz8yjBL2VbHf0DlrsUkuNqFyO/xYd1gfCn4Vz3gS69g+/Tfm nU+dR9wd1Tr+vyEx++pj/DhjNocQaQxpWHw9IqcKzKyX+SODKF9a8H6Bkl39EqgB hZT/sxN0ZTIyeXbMZ0AYiW/a29yBIPa3oGU/lGWvZjYRPcRzeL/1k6M5t42z8qd4 7sIZoGrMCwri38Qd6LRLZSGgc2BT+3/7QGbZXRpzYWcFoIV+/9Hay7z2ps8ON+E3 oYN2h+7WYxcOT4cfE9+QH1rWpoeS/Oc0 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:41 2024 by rpki-client on console-ams.rpki-client.org