$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft File: 2kObzwPK_LW-ftCuezKPafiMGys.mft (raw, json) Hash identifier: BbLh87NGMUGH0gZ0450HHUOVIPXmV+iMfS5wsaHP4/U= Subject key identifier: D3:EB:FA:51:CA:A8:D4:FB:81:79:17:7C:1F:57:45:F2:C1:20:48:5C Authority key identifier: DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B Certificate issuer: /CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Certificate serial: 0426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft Manifest number: 0422 Signing time: Fri 22 Nov 2024 23:54:22 +0000 Manifest this update: Fri 22 Nov 2024 23:54:21 +0000 Manifest next update: Fri 29 Nov 2024 23:54:21 +0000 Files and hashes: 1: 2kObzwPK_LW-ftCuezKPafiMGys.crl (hash: Pt97BlKszMpt28Ts1u0IW7R2//Ie3Rn59jOQCpCXoOQ=) 2: E9E440F2411511ECBC2FB20BC4F9AE02.roa (hash: kArh2epf30vubdY6QxWez1yhusZT0dxZ15kysclBgsY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1062 (0x426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Validity Not Before: Nov 22 23:54:21 2024 GMT Not After : Nov 29 23:54:21 2024 GMT Subject: CN=674119ad-4c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:e8:2c:e0:59:20:e4:c2:18:9d:c0:d9:84: 5c:1d:05:dd:71:1c:9e:ab:ed:be:a8:af:8a:bb:4e: 9d:d6:f0:47:76:9e:51:91:b8:b0:a6:70:4c:6f:5e: 15:22:3a:96:20:ff:24:54:22:ae:79:c2:f4:be:aa: 88:a0:78:25:5b:e2:f6:e0:5d:bf:80:7d:34:dd:5e: 53:57:b1:3e:b2:21:b1:2b:a6:b6:15:4a:a4:ea:da: 67:00:22:95:46:3e:9a:79:12:28:66:f6:7b:7e:59: 36:e1:86:3d:45:d9:86:76:a6:32:04:66:b1:0f:25: 7d:a5:7b:3b:e0:c0:87:aa:5b:af:73:7d:ba:69:d4: 8e:a5:13:74:c2:99:22:07:61:cf:5e:ae:ff:b0:52: a3:ea:a3:0d:33:ad:a3:16:8f:1a:83:d6:93:1a:31: fe:0a:47:99:63:50:10:d6:d9:99:65:30:80:6e:57: 91:a7:a0:e5:c2:ba:fb:84:a5:d2:10:c6:e5:42:44: 05:fb:5a:9f:50:03:8c:a2:2c:fb:9d:24:28:cf:61: fd:7e:2a:50:88:26:fb:f8:a1:fc:17:ee:ca:01:98: b8:9a:9c:54:7f:f3:f7:71:0d:da:c6:e7:c9:09:d9: 64:8a:43:55:8d:c9:3b:b9:16:98:6e:72:ed:a1:0d: 60:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EB:FA:51:CA:A8:D4:FB:81:79:17:7C:1F:57:45:F2:C1:20:48:5C X509v3 Authority Key Identifier: keyid:DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d2:11:e7:33:59:3a:55:b0:4c:c0:35:bb:86:c4:3d:21:cb: ed:52:eb:13:b0:5c:28:7a:51:42:06:70:7b:7f:cf:5e:58:14: bf:34:e7:30:2c:4e:2c:9c:5d:0a:0a:db:cd:b5:ed:4c:fb:0b: 4c:ee:39:22:c6:ef:65:64:20:ed:fe:e4:5a:9b:b6:a8:78:de: 5a:ad:47:75:d2:74:c9:56:f0:fd:fd:e0:cf:af:2b:fb:f2:21: 33:e4:49:e7:74:fc:8f:ef:66:05:b3:c0:84:d9:d5:19:7a:0e: 8f:60:89:26:3b:92:08:be:26:34:2c:19:04:a4:25:50:d5:1d: 92:3f:90:60:1f:2a:38:30:04:62:e5:96:79:cc:03:16:2f:3e: c3:15:c6:98:ed:ac:2b:21:6b:57:dc:d5:af:14:87:b0:b4:a5: 57:67:18:79:26:c0:53:a5:1b:24:fa:3a:4d:80:38:9f:06:06: 5a:03:d6:5c:a8:c4:ae:26:c7:57:e4:5e:34:5e:0b:1b:c4:cf: 39:c5:90:8a:11:a3:4e:91:a9:c8:45:cb:24:d3:c6:a9:54:10: 3a:e7:bf:01:d9:4b:cb:57:45:cd:b2:36:14:20:38:a3:26:27: 9c:5f:8b:bb:22:1c:d6:1d:14:e3:49:10:ec:63:d7:74:9d:10: 1a:54:73:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhFQjYxMTAvBgNVBAUTKERBNDM5QkNGMDNDQUZDQjVCRTdFRDBBRTdCMzI4RjY5 Rjg4QzFCMkIwHhcNMjQxMTIyMjM1NDIxWhcNMjQxMTI5MjM1NDIxWjAYMRYwFAYD VQQDEw02NzQxMTlhZC00YzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJjoLOBZIOTCGJ3A2YRcHQXdcRyeq+2+qK+Ku06d1vBHdp5RkbiwpnBMb14V IjqWIP8kVCKuecL0vqqIoHglW+L24F2/gH003V5TV7E+siGxK6a2FUqk6tpnACKV Rj6aeRIoZvZ7flk24YY9RdmGdqYyBGaxDyV9pXs74MCHqluvc326adSOpRN0wpki B2HPXq7/sFKj6qMNM62jFo8ag9aTGjH+CkeZY1AQ1tmZZTCAbleRp6Dlwrr7hKXS EMblQkQF+1qfUAOMoiz7nSQoz2H9fipQiCb7+KH8F+7KAZi4mpxUf/P3cQ3axufJ CdlkikNVjck7uRaYbnLtoQ1gPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPr+lHK qNT7gXkXfB9XRfLBIEhcMB8GA1UdIwQYMBaAFNpDm88Dyvy1vn7Qrnsyj2n4jBsr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi8zRUJGNDc5QTQx MTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19MVy1mdEN1ZXpLUGFmaU1H eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrT2J6d1BLX0xXLWZ0Q3VlektQYWZpTUd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEVCNi8zRUJGNDc5QTQxMTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19M Vy1mdEN1ZXpLUGFmaU1HeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR0hHnM1k6VbBMwDW7hsQ9IcvtUusTsFwoelFCBnB7f89eWBS/NOcw LE4snF0KCtvNte1M+wtM7jkixu9lZCDt/uRam7aoeN5arUd10nTJVvD9/eDPryv7 8iEz5EnndPyP72YFs8CE2dUZeg6PYIkmO5IIviY0LBkEpCVQ1R2SP5BgHyo4MARi 5ZZ5zAMWLz7DFcaY7awrIWtX3NWvFIewtKVXZxh5JsBTpRsk+jpNgDifBgZaA9Zc qMSuJsdX5F40XgsbxM85xZCKEaNOkanIRcsk08apVBA6578B2UvLV0XNsjYUIDij JiecX4u7IhzWHRTjSRDsY9d0nRAaVHP9 -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org