$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json) Hash identifier: s65D5pNwTY1aAaI4FhHAgclPPCyr+aovXvELtSAJf5E= Subject key identifier: 2F:A0:B9:81:C6:7A:E4:AA:E8:22:D1:69:7A:C6:F6:93:25:0E:BD:21 Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Certificate serial: 026A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft Manifest number: 0265 Signing time: Sat 23 Nov 2024 01:14:54 +0000 Manifest this update: Sat 23 Nov 2024 01:14:54 +0000 Manifest next update: Sat 30 Nov 2024 01:14:54 +0000 Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: +cmhA6tbIMbg+kG51iKW0UpkJVbwQv0SM3H5Pw++bu0=) 2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: 06qlKoNMAgG5qkJwM6sNlRAgtRr58eOsszFhlsT8L0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 618 (0x26a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Validity Not Before: Nov 23 01:14:54 2024 GMT Not After : Nov 30 01:14:54 2024 GMT Subject: CN=67412c8e-fbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:c3:b3:9f:c8:70:24:bc:08:3b:f4:1f:6a: 19:24:5d:06:a9:81:94:93:27:b8:92:8d:99:69:c2: 2e:94:d8:07:47:5e:76:55:e3:f2:9a:64:2e:49:78: 17:7b:bb:f6:8e:34:28:64:03:17:ea:8a:91:96:02: 83:04:b8:8c:57:61:8d:57:c9:2b:42:75:ad:38:74: f6:2c:ba:49:29:f6:61:fc:ce:23:94:25:d6:8b:2f: 74:17:93:68:bd:ab:d9:f9:c8:de:42:c3:32:72:65: b3:a0:fc:0f:ee:36:26:5a:d1:fe:23:1c:4c:69:48: 22:08:10:64:af:62:81:77:5c:5c:e9:6b:a3:13:aa: 36:12:a2:ef:57:3b:65:5a:42:bc:c4:f0:92:33:05: c6:f3:42:d9:7a:26:b0:2d:75:0a:46:3e:4c:55:cb: ac:ec:e6:24:8f:d2:3b:29:f2:9a:2e:a3:51:62:da: f2:c2:4b:f5:0f:5c:c1:78:fd:e9:39:7c:a5:d1:9c: 0f:9f:fe:43:c7:e3:a6:ee:c0:26:f1:d2:c3:4c:a0: a4:94:54:08:eb:6a:0b:23:3b:72:56:12:d8:96:36: 00:55:ea:3b:c7:0d:31:9c:0f:62:d2:9b:de:80:e9: fc:61:53:5a:06:fe:2d:5d:bd:4c:4c:3a:79:1e:87: a1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A0:B9:81:C6:7A:E4:AA:E8:22:D1:69:7A:C6:F6:93:25:0E:BD:21 X509v3 Authority Key Identifier: keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:86:72:09:e1:c7:2e:07:bd:79:d4:0f:04:3f:3b:db:31:25: a9:7a:c7:ec:09:9b:52:90:c8:c5:dd:71:7d:ad:b5:63:e9:2c: f6:ce:b9:e2:71:eb:4d:15:1a:9c:8f:46:64:e5:7f:98:6f:25: 92:98:00:0c:2e:96:7c:ff:c4:94:d8:22:3e:96:f2:3a:01:c6: 01:64:b3:e4:1a:c6:a5:4d:dd:db:9c:62:0d:86:26:b1:f3:e3: 96:61:dd:9f:dc:23:f5:a2:50:c8:f2:4b:8b:0b:48:01:33:fd: 09:a1:76:f1:e3:df:ee:6d:90:bf:ef:b2:cb:f3:d1:e8:e3:d4: 26:10:68:8f:92:24:63:93:43:d1:9a:7b:68:03:dc:80:46:01: 66:51:7f:be:e9:05:7b:cb:de:95:74:a8:13:0e:da:7a:09:15: b6:1d:0d:0b:44:c5:a8:3d:56:70:5c:d9:80:48:09:71:80:9c: 8c:3d:f6:29:8e:62:82:b8:1e:3c:e0:8a:3f:97:e1:b4:87:14: 6c:6a:eb:2b:92:98:3e:ac:18:91:f6:d1:a2:88:0f:a3:e7:98: 88:90:f7:18:15:ed:66:92:3b:db:60:bf:7e:2d:af:5e:95:ad: 33:0d:24:5a:44:b4:f0:da:42:91:85:9c:f7:bf:1f:76:0a:b8: 29:01:0b:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyNDExMTAvBgNVBAUTKERBMDEyNTQyRUE1OTM1NUZFODg0NzhEMjFENzNFMzZD RUJDREYzQ0IwHhcNMjQxMTIzMDExNDU0WhcNMjQxMTMwMDExNDU0WjAYMRYwFAYD VQQDEw02NzQxMmM4ZS1mYmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8/Ds5/IcCS8CDv0H2oZJF0GqYGUkye4ko2ZacIulNgHR152VePymmQuSXgX e7v2jjQoZAMX6oqRlgKDBLiMV2GNV8krQnWtOHT2LLpJKfZh/M4jlCXWiy90F5No vavZ+cjeQsMycmWzoPwP7jYmWtH+IxxMaUgiCBBkr2KBd1xc6WujE6o2EqLvVztl WkK8xPCSMwXG80LZeiawLXUKRj5MVcus7OYkj9I7KfKaLqNRYtrywkv1D1zBeP3p OXyl0ZwPn/5Dx+Om7sAm8dLDTKCklFQI62oLIztyVhLYljYAVeo7xw0xnA9i0pve gOn8YVNaBv4tXb1MTDp5Hoeh0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+guYHG euSq6CLRaXrG9pMlDr0hMB8GA1UdIwQYMBaAFNoBJULqWTVf6IR40h1z42zrzfPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjI0MS9CNjQ5Q0E5NkYw NzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5WX29oSGpTSFhQamJPdk44 OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRWxRdXBaTlZfb2hIalNIWFBqYk92Tjg4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjI0MS9CNjQ5Q0E5NkYwNzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5W X29oSGpTSFhQamJPdk44OHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyhnIJ4ccuB7151A8EPzvbMSWpesfsCZtSkMjF3XF9rbVj6Sz2zrni cetNFRqcj0Zk5X+YbyWSmAAMLpZ8/8SU2CI+lvI6AcYBZLPkGsalTd3bnGINhiax 8+OWYd2f3CP1olDI8kuLC0gBM/0JoXbx49/ubZC/77LL89Ho49QmEGiPkiRjk0PR mntoA9yARgFmUX++6QV7y96VdKgTDtp6CRW2HQ0LRMWoPVZwXNmASAlxgJyMPfYp jmKCuB484Io/l+G0hxRsausrkpg+rBiR9tGiiA+j55iIkPcYFe1mkjvbYL9+La9e la0zDSRaRLTw2kKRhZz3vx92CrgpAQs3 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:41 2024 by rpki-client on console-fra.rpki-client.org