$ rpki-client -vvf rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft File: Aul8r2u1VIcberzm6NeDIOuURpE.mft (raw, json) Hash identifier: 4CDllTznrhP+uoI99grbMk9YFzqNcxiJkYCO7cGJzmM= Subject key identifier: 82:F4:24:BD:20:46:67:3A:1A:22:13:A2:08:1E:8D:9D:D5:1B:80:32 Authority key identifier: 02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 Certificate issuer: /CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Certificate serial: 2386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft Manifest number: 2371 Signing time: Fri 22 Nov 2024 15:50:00 +0000 Manifest this update: Fri 22 Nov 2024 15:50:00 +0000 Manifest next update: Fri 29 Nov 2024 15:50:00 +0000 Files and hashes: 1: Aul8r2u1VIcberzm6NeDIOuURpE.crl (hash: Bc7QIrPOY26nQDH0xvdMcM4ov5GjLTf4Xt6ldixdFuA=) 2: 0B72CFAC049211EBB8144531C4F9AE02.roa (hash: HoemRN9Bqh3dS3wFw1CGTUnb1f4mFjxNW0+qSLr4eCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9094 (0x2386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A47E/serialNumber=02E97CAF6BB554871B7ABCE6E8D78320EB944691 Validity Not Before: Nov 22 15:50:00 2024 GMT Not After : Nov 29 15:50:00 2024 GMT Subject: CN=6740a828-f3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:db:5b:a7:04:8b:1e:e0:ed:38:d2:dc:1e: 64:63:a5:88:37:b7:65:2f:66:c5:1f:31:f2:c3:34: 34:5b:4e:b8:c7:63:20:78:b0:31:c0:1c:c4:98:ae: ff:d5:14:15:39:1e:4a:b8:19:66:56:db:fb:cc:5b: ef:8d:9b:5f:5d:5c:67:d3:ad:ae:1e:b4:bc:a6:fb: db:0b:27:6e:01:02:3c:8c:39:80:e9:6a:f5:15:27: 1c:81:67:47:40:70:c0:01:b7:a9:af:6f:fb:35:1d: 8b:72:5e:90:96:95:38:8e:ea:ac:6f:9d:d8:c3:ae: 31:10:6d:f1:2f:42:cc:bd:30:43:d5:90:60:bd:16: d6:e9:71:ff:68:c2:63:f6:56:67:52:c4:65:6c:6c: ba:0a:8a:a6:2b:a9:d4:5c:91:cd:2c:0f:0e:67:e7: 8f:a4:da:e5:0d:4a:d5:20:fa:3c:36:67:be:36:0a: 4d:56:15:9b:a7:12:38:e7:d3:32:fd:c1:62:f5:f9: 18:08:3a:bb:a2:c5:25:f9:31:87:c0:20:d2:e5:14: 0d:bc:1c:b6:bc:02:5f:40:02:90:b4:33:85:65:42: 89:d4:2b:64:16:31:88:87:3d:09:88:5a:8b:58:9c: 56:5d:07:d0:bc:34:37:05:43:93:ea:d0:f1:f4:d6: 0c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F4:24:BD:20:46:67:3A:1A:22:13:A2:08:1E:8D:9D:D5:1B:80:32 X509v3 Authority Key Identifier: keyid:02:E9:7C:AF:6B:B5:54:87:1B:7A:BC:E6:E8:D7:83:20:EB:94:46:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aul8r2u1VIcberzm6NeDIOuURpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A47E/3E6BEC56690911E5804F0072C4F9AE02/Aul8r2u1VIcberzm6NeDIOuURpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:94:c8:55:db:da:95:dc:dd:57:36:8f:48:ae:17:bb:39:ed: f0:6e:58:17:80:8c:ed:55:22:b3:41:da:f9:89:6f:c4:2a:0c: eb:bb:d3:9c:b2:23:88:16:95:fb:eb:28:cd:a9:c0:0c:af:a1: 56:b5:6a:69:76:8c:53:07:a6:0d:65:b9:1f:8a:41:45:94:dd: 19:a7:65:02:ec:39:05:94:86:3c:66:c4:0a:30:ce:7e:8b:a4: 41:ab:77:22:53:3d:80:f6:50:a1:b7:7c:e3:80:6b:eb:d9:dc: 8d:77:d6:4a:84:ac:0e:10:a2:51:2c:2d:05:ff:c7:24:c5:e7: 97:f2:57:81:63:fb:68:6e:b9:7b:73:41:2a:ca:a2:db:8e:91: 3c:f7:a1:12:ee:fc:19:96:05:eb:6f:15:73:a3:fc:2a:04:95: 79:21:77:ec:3b:37:0d:62:ac:11:53:2d:38:ef:16:75:5e:bb: be:78:93:0f:42:e0:2f:e8:2c:44:3c:d2:9d:bc:ad:2d:85:bc: e2:f4:8e:98:1e:d3:57:d3:1e:84:9f:e0:47:9f:5f:e3:82:46: f3:ab:42:88:55:b8:92:8b:e5:23:be:ec:70:2b:d8:a9:26:e0: 55:e9:9f:df:c5:55:6d:d3:1a:ad:ec:31:f3:5d:48:33:6a:cf: 46:d4:6e:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0N0UxMTAvBgNVBAUTKDAyRTk3Q0FGNkJCNTU0ODcxQjdBQkNFNkU4RDc4MzIw RUI5NDQ2OTEwHhcNMjQxMTIyMTU1MDAwWhcNMjQxMTI5MTU1MDAwWjAYMRYwFAYD VQQDEw02NzQwYTgyOC1mM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsR/bW6cEix7g7TjS3B5kY6WIN7dlL2bFHzHywzQ0W064x2MgeLAxwBzEmK7/ 1RQVOR5KuBlmVtv7zFvvjZtfXVxn062uHrS8pvvbCyduAQI8jDmA6Wr1FSccgWdH QHDAAbepr2/7NR2Lcl6QlpU4juqsb53Yw64xEG3xL0LMvTBD1ZBgvRbW6XH/aMJj 9lZnUsRlbGy6CoqmK6nUXJHNLA8OZ+ePpNrlDUrVIPo8Nme+NgpNVhWbpxI459My /cFi9fkYCDq7osUl+TGHwCDS5RQNvBy2vAJfQAKQtDOFZUKJ1CtkFjGIhz0JiFqL WJxWXQfQvDQ3BUOT6tDx9NYMiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIL0JL0g Rmc6GiIToggejZ3VG4AyMB8GA1UdIwQYMBaAFALpfK9rtVSHG3q85ujXgyDrlEaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ3RS8zRTZCRUM1NjY5 MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJY2JlcnptNk5lRElPdVVS cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F1bDhyMnUxVkljYmVyem02TmVESU91VVJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ3RS8zRTZCRUM1NjY5MDkxMUU1ODA0RjAwNzJDNEY5QUUwMi9BdWw4cjJ1MVZJ Y2JlcnptNk5lRElPdVVScEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAblMhV29qV3N1XNo9Irhe7Oe3wblgXgIztVSKzQdr5iW/EKgzru9Oc siOIFpX76yjNqcAMr6FWtWppdoxTB6YNZbkfikFFlN0Zp2UC7DkFlIY8ZsQKMM5+ i6RBq3ciUz2A9lCht3zjgGvr2dyNd9ZKhKwOEKJRLC0F/8ckxeeX8leBY/tobrl7 c0EqyqLbjpE896ES7vwZlgXrbxVzo/wqBJV5IXfsOzcNYqwRUy047xZ1Xru+eJMP QuAv6CxEPNKdvK0thbzi9I6YHtNX0x6En+BHn1/jgkbzq0KIVbiSi+UjvuxwK9ip JuBV6Z/fxVVt0xqt7DHzXUgzas9G1G4I -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org