$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft File: 2DPFFS4_LSebiQT4PQDdkKymK9U.mft (raw, json) Hash identifier: 85NFrghCS/FjoW8pPvdNO/MqbmUAmfeIhwqYFk92Hlc= Subject key identifier: A1:F6:9E:A9:A0:09:30:4B:49:4A:90:20:4E:31:C7:F2:4B:DD:55:D6 Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 Certificate issuer: /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft Manifest number: 47 Signing time: Sun 03 Nov 2024 05:12:55 +0000 Manifest this update: Sun 03 Nov 2024 05:12:54 +0000 Manifest next update: Sun 10 Nov 2024 05:12:54 +0000 Files and hashes: 1: 2DPFFS4_LSebiQT4PQDdkKymK9U.crl (hash: lW4FYsFYlrA7A/ZkeS69fSW0KulImLk7jQxWsxkUzo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Validity Not Before: Nov 3 05:12:54 2024 GMT Not After : Nov 10 05:12:54 2024 GMT Subject: CN=67270656-e650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:65:b3:da:ed:8a:10:33:55:82:5d:1e:4c:97: fb:50:69:7f:fe:b7:b1:33:fa:da:e9:db:0e:0c:f5: 17:de:22:fa:c3:fb:c0:bc:73:fd:35:e0:3f:6f:68: 4e:41:21:fd:eb:ae:c0:9a:08:cb:4d:4d:8d:9d:28: 67:24:5d:07:6c:22:e7:29:04:b6:d5:4b:83:9d:2c: 69:72:4b:59:29:a3:33:81:22:bb:52:fc:20:5e:3c: 83:20:7b:da:fc:93:ce:d8:c7:b4:73:31:0d:32:bc: c4:b3:5d:89:94:b3:9c:2a:92:aa:80:d8:55:9a:51: 91:f0:e6:3f:e0:5a:53:b1:23:78:47:0d:3b:4a:13: 5b:b5:03:82:5b:cd:71:f1:4e:18:42:67:31:bd:e3: 23:f9:0a:4c:48:98:ca:1e:0d:46:56:0d:7a:5b:64: b2:f7:97:c3:76:22:7c:8e:16:da:95:6a:61:c6:11: 6c:b9:56:fc:3c:f7:a9:db:be:ae:3b:09:55:a3:42: ee:cc:0a:3c:db:01:f1:fa:67:12:8a:4e:14:4c:94: 82:61:5b:5f:d6:e2:36:5a:d6:3b:0c:ee:23:d6:c4: 8e:26:43:70:dd:c4:2f:46:f9:76:2f:2d:b7:0d:1b: ac:16:73:28:e4:e9:77:a2:34:56:7a:e5:1c:33:0c: 46:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F6:9E:A9:A0:09:30:4B:49:4A:90:20:4E:31:C7:F2:4B:DD:55:D6 X509v3 Authority Key Identifier: keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:cd:81:f2:f2:87:f7:9a:b3:24:b7:8a:10:19:2b:12:66:10: 76:0a:0e:fa:f2:c4:ed:f0:ac:89:ab:2a:8d:9f:df:94:40:f2: a5:a8:01:c0:e8:95:81:86:2d:60:e6:f4:7e:f5:46:12:4c:af: 4d:e3:29:d6:74:0d:d3:b0:ff:8b:61:2b:b8:25:50:79:cb:d2: 16:d7:88:34:d0:91:bd:d1:99:38:57:b3:17:f0:85:6b:b5:04: ed:04:d7:d8:48:9f:e8:8e:a2:dc:c6:c1:ce:09:54:66:b6:c9: e0:b8:73:43:5f:82:c9:12:2e:c8:e2:89:de:52:09:70:1b:3a: 72:9b:4a:36:70:56:28:2f:21:3a:72:f9:ad:3b:c0:7f:9a:48: f4:40:22:8f:89:e9:71:66:02:6c:89:26:7e:9d:ba:f9:f4:9a: 6b:b7:46:79:bd:df:a2:b8:d9:28:85:12:1e:82:a9:cf:7d:a9: a5:45:03:45:80:95:aa:7a:de:52:6f:fd:de:42:31:32:b0:fd: 18:6d:dc:d3:18:61:3f:02:fb:41:9a:92:06:23:aa:2e:7e:8c: c2:b0:09:88:76:a8:2a:b0:49:29:6a:d4:d6:20:6f:4a:a9:0d: 34:84:6f:b7:32:42:ca:8a:40:dd:23:41:90:db:82:76:ce:93: 42:ec:6a:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NkQ5RjExMC8GA1UEBRMoRDgzM0M1MTUyRTNGMkQyNzlCODkwNEY4M0QwMEREOTBB Q0E2MkJENTAeFw0yNDExMDMwNTEyNTRaFw0yNDExMTAwNTEyNTRaMBgxFjAUBgNV BAMTDTY3MjcwNjU2LWU2NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/ZbPa7YoQM1WCXR5Ml/tQaX/+t7Ez+trp2w4M9RfeIvrD+8C8c/014D9vaE5B If3rrsCaCMtNTY2dKGckXQdsIucpBLbVS4OdLGlyS1kpozOBIrtS/CBePIMge9r8 k87Yx7RzMQ0yvMSzXYmUs5wqkqqA2FWaUZHw5j/gWlOxI3hHDTtKE1u1A4JbzXHx ThhCZzG94yP5CkxImMoeDUZWDXpbZLL3l8N2InyOFtqVamHGEWy5Vvw896nbvq47 CVWjQu7MCjzbAfH6ZxKKThRMlIJhW1/W4jZa1jsM7iPWxI4mQ3DdxC9G+XYvLbcN G6wWcyjk6XeiNFZ65RwzDEY/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUofaeqaAJ MEtJSpAgTjHH8kvdVdYwHwYDVR0jBBgwFoAU2DPFFS4/LSebiQT4PQDdkKymK9Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2RDlGL0IyOTBBMzQ2MkUw NDExRUY4NkYyOUQ3OUM0RjlBRTAyLzJEUEZGUzRfTFNlYmlRVDRQUURka0t5bUs5 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkRQRkZTNF9MU2ViaVFUNFBRRGRrS3ltSzlVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 RDlGL0IyOTBBMzQ2MkUwNDExRUY4NkYyOUQ3OUM0RjlBRTAyLzJEUEZGUzRfTFNl YmlRVDRQUURka0t5bUs5VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKvNgfLyh/easyS3ihAZKxJmEHYKDvryxO3wrImrKo2f35RA8qWoAcDo lYGGLWDm9H71RhJMr03jKdZ0DdOw/4thK7glUHnL0hbXiDTQkb3RmThXsxfwhWu1 BO0E19hIn+iOotzGwc4JVGa2yeC4c0NfgskSLsjiid5SCXAbOnKbSjZwVigvITpy +a07wH+aSPRAIo+J6XFmAmyJJn6duvn0mmu3Rnm936K42SiFEh6Cqc99qaVFA0WA lap63lJv/d5CMTKw/Rht3NMYYT8C+0GakgYjqi5+jMKwCYh2qCqwSSlq1NYgb0qp DTSEb7cyQsqKQN0jQZDbgnbOk0LsaqA= -----END CERTIFICATE-----Generated at Sun Nov 3 06:07:40 2024 by rpki-client on console-fra.rpki-client.org