$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json) Hash identifier: N04JW31tr1TLmy9dUnQ8vWy6aRdRwXC+S21pNTy8OCI= Subject key identifier: E7:2F:3D:8A:EB:59:C6:E1:24:A4:E1:7E:0D:7E:62:3A:15:9D:8D:A0 Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0CBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft Manifest number: 0CB5 Signing time: Fri 22 Nov 2024 18:03:56 +0000 Manifest this update: Fri 22 Nov 2024 18:03:55 +0000 Manifest next update: Fri 29 Nov 2024 18:03:55 +0000 Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: n2Ns9DJxqIVuzdqeWLLYtmzqQNI+eL3DYJoIO9LDVds=) 2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: he3bY6Is5h9acipgiTdJz3mt+8HdFzcITDRaeiCVzu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3259 (0xcbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: Nov 22 18:03:55 2024 GMT Not After : Nov 29 18:03:55 2024 GMT Subject: CN=6740c78c-5c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:38:13:59:60:84:09:be:bf:5d:f4:fe:a8:45: 45:90:4b:00:88:95:83:36:d3:23:51:30:40:6a:2a: 90:8b:db:e8:03:50:90:8e:66:0b:21:17:78:d1:7d: 6d:3c:6b:82:ef:64:2c:fc:36:72:42:4d:b2:4c:9f: 2b:b4:51:05:06:f9:e5:c8:c8:b0:64:71:59:ba:57: 70:a8:51:a3:be:92:17:a0:cb:b9:f0:22:ed:c3:ed: 38:a0:8c:80:ef:aa:bb:47:81:c0:d5:34:f8:b2:cd: bc:d1:5c:ca:9b:80:83:01:c8:4e:45:1f:e2:cf:34: 4c:df:8e:0f:da:45:f3:2f:83:2a:7c:9f:9c:5c:ab: 0c:93:ce:d0:c3:04:cf:97:fd:7f:ce:54:13:51:58: 82:ac:3a:55:85:98:85:68:6f:12:c5:4e:94:26:fb: 4e:f4:7a:38:df:ba:8d:44:e6:ae:fd:8f:02:24:ba: 53:c7:71:d7:e9:79:67:72:f8:20:e5:c6:8d:53:87: fb:d3:45:d5:4c:93:5e:33:b4:58:9f:38:6c:c7:4d: f0:a0:60:fb:5c:30:62:f3:92:30:1b:ad:cb:90:4e: 17:ff:11:e7:65:79:da:31:7a:42:db:e5:52:71:9d: 10:f6:1d:a8:8f:2c:29:d2:f2:8b:c9:bb:36:2d:f2: 19:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2F:3D:8A:EB:59:C6:E1:24:A4:E1:7E:0D:7E:62:3A:15:9D:8D:A0 X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:06:9a:f6:d8:cc:a7:db:1a:94:db:d4:70:6a:c2:0f:64:27: 5f:3e:73:32:20:52:87:66:3a:e8:1b:63:0f:b9:36:c8:50:76: b4:42:09:48:cc:3b:9f:5d:80:9b:bd:4f:75:9d:89:d0:99:c9: 3e:7b:0d:cf:e7:df:a7:52:9b:4d:89:86:51:0a:bf:20:a7:ac: 35:69:88:3b:67:ad:d8:cf:3c:6e:57:c8:3a:42:de:64:6f:f7: 32:c9:5b:66:99:54:bb:19:fc:ed:c5:fc:4b:20:23:07:74:84: cb:98:4b:01:86:e3:e5:dc:eb:75:bb:75:aa:bf:fa:ae:81:b4: 82:a5:7c:e7:05:46:d1:c8:d6:5c:c8:0e:85:f0:41:e0:50:d7: 15:ed:be:01:eb:26:ec:ff:48:8b:92:e8:11:b4:82:e4:1a:b2: 33:ff:9b:a5:1d:6f:78:0c:a9:93:03:07:57:ba:7c:b6:fe:8d: f7:4b:e6:08:86:cd:bb:ec:a1:07:c4:59:ba:42:34:59:67:95: 91:bc:c9:10:39:d2:5c:42:43:b1:f7:1f:03:af:f7:86:c9:0c: e5:9b:53:db:b6:11:e7:d6:eb:ff:18:12:23:3e:b9:56:5f:cd: fc:a4:cf:8b:5c:e2:15:85:5a:28:64:ad:9b:7b:54:88:a6:37: 45:5e:14:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjQxMTIyMTgwMzU1WhcNMjQxMTI5MTgwMzU1WjAYMRYwFAYD VQQDEw02NzQwYzc4Yy01YzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzgTWWCECb6/XfT+qEVFkEsAiJWDNtMjUTBAaiqQi9voA1CQjmYLIRd40X1t PGuC72Qs/DZyQk2yTJ8rtFEFBvnlyMiwZHFZuldwqFGjvpIXoMu58CLtw+04oIyA 76q7R4HA1TT4ss280VzKm4CDAchORR/izzRM344P2kXzL4MqfJ+cXKsMk87QwwTP l/1/zlQTUViCrDpVhZiFaG8SxU6UJvtO9Ho437qNROau/Y8CJLpTx3HX6Xlncvgg 5caNU4f700XVTJNeM7RYnzhsx03woGD7XDBi85IwG63LkE4X/xHnZXnaMXpC2+VS cZ0Q9h2ojywp0vKLybs2LfIZTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcvPYrr WcbhJKThfg1+YjoVnY2gMB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOBpr22Myn2xqU29RwasIPZCdfPnMyIFKHZjroG2MPuTbIUHa0QglI zDufXYCbvU91nYnQmck+ew3P59+nUptNiYZRCr8gp6w1aYg7Z63YzzxuV8g6Qt5k b/cyyVtmmVS7GfztxfxLICMHdITLmEsBhuPl3Ot1u3Wqv/qugbSCpXznBUbRyNZc yA6F8EHgUNcV7b4B6ybs/0iLkugRtILkGrIz/5ulHW94DKmTAwdXuny2/o33S+YI hs277KEHxFm6QjRZZ5WRvMkQOdJcQkOx9x8Dr/eGyQzlm1PbthHn1uv/GBIjPrlW X838pM+LXOIVhVooZK2be1SIpjdFXhS0 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org