$ rpki-client -vvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft File: 2xy4SFQGnkPKG3JdQuprqbU5gVs.mft (raw, json) Hash identifier: gnDBcrmuURrZ6bx0YgBq98gGYTgWTt8XxmUC43GLhKs= Subject key identifier: FF:44:BB:CD:1B:E4:54:CA:9F:54:6A:B8:AE:95:45:68:D9:F2:B4:80 Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B Certificate issuer: /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Certificate serial: 0C21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft Manifest number: 0C10 Signing time: Fri 22 Nov 2024 18:19:23 +0000 Manifest this update: Fri 22 Nov 2024 18:19:22 +0000 Manifest next update: Fri 29 Nov 2024 18:19:22 +0000 Files and hashes: 1: 2xy4SFQGnkPKG3JdQuprqbU5gVs.crl (hash: zN0A6kv6I1Hph77HpvM8Ms1JbU/Sa7KMy9x/Ps7MMz0=) 2: 4BA5EC4293D911EE86212B1DC4F9AE02.roa (hash: LN8pESJfKWiK9i2ORSuCclenOa+mxcW/ZR7U6hJ0hpw=) 3: 18F7410671F311ECBA5DA710C4F9AE02.roa (hash: dK4wMXuqZ/VEBpfJlL9LtzexBuDzAG0QNs11K5xMSLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3105 (0xc21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B Validity Not Before: Nov 22 18:19:22 2024 GMT Not After : Nov 29 18:19:22 2024 GMT Subject: CN=6740cb2a-9ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7e:94:3e:ff:b3:f4:b8:a2:00:52:fe:63:43: ca:d2:e3:c3:c8:5f:f8:ec:e8:15:3c:d4:da:59:31: e2:06:d9:e8:eb:83:ec:64:a1:2d:09:48:8d:0f:2b: e8:58:86:81:5f:3c:0f:dd:83:dc:95:2e:57:8c:01: b5:d8:a3:de:8e:c9:23:f9:c6:7f:03:61:9c:97:cf: 37:bc:0b:ee:12:d1:0b:61:10:d7:83:82:c9:92:ca: 1a:f0:89:38:d4:50:32:f0:dc:e8:64:f0:10:8f:50: 61:31:c5:ec:61:b5:66:09:09:2d:20:c8:4f:de:fe: 1d:50:45:b8:40:7d:88:cc:42:90:26:b0:62:d3:7e: 37:77:d7:e1:be:c0:f2:d2:67:7b:a4:89:2f:f3:0f: e9:31:d9:a5:31:33:39:9f:51:ab:74:b3:48:12:cd: f5:49:9f:d3:89:83:3d:eb:ca:48:09:d2:96:07:c7: 83:5f:3a:5d:0d:6f:8d:ae:fd:0f:e1:e4:db:2f:3d: 1d:4a:45:77:da:3f:80:d9:65:af:ca:b1:9c:7c:d4: e8:c4:34:db:25:37:82:64:48:cb:6e:5c:4c:47:5c: fc:48:0c:4a:88:5e:1b:ba:44:a1:d1:b9:3b:f5:03: 53:b9:35:a5:2e:88:36:20:25:63:8a:c0:5c:1c:42: ca:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:44:BB:CD:1B:E4:54:CA:9F:54:6A:B8:AE:95:45:68:D9:F2:B4:80 X509v3 Authority Key Identifier: keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:fe:c0:ea:eb:f9:eb:3c:c1:78:ee:af:aa:a9:96:41:27:85: 2b:5a:be:1b:ac:5b:f9:8c:27:c3:70:03:d1:e4:d0:d7:76:56: 90:5c:63:56:21:10:ed:9d:10:d8:86:9f:5a:ae:c8:92:8a:cf: 1a:05:81:09:cf:ab:5b:b5:a7:dd:18:59:aa:28:82:01:9b:bb: 99:ca:bc:b3:38:03:9d:f0:37:ad:fb:ce:fa:3c:b1:68:6c:89: 7b:29:79:b4:27:e5:ef:82:58:34:96:47:36:e0:b6:be:ae:06: bf:6b:bc:f7:72:40:99:cc:cc:6f:41:93:f8:3d:cc:4f:88:50: 4d:17:b0:7f:14:14:1b:df:f9:d2:26:4f:05:76:71:d9:e4:92: 35:4c:91:8b:ff:20:6e:bc:94:f6:da:e8:fc:af:c5:ee:3b:2e: f5:49:3f:09:d1:7f:b5:e5:4a:38:a0:ab:1a:01:52:75:f9:33: 3d:26:2c:b1:88:0f:8f:c1:a3:a8:1b:fe:10:54:5b:bf:52:ac: 65:51:32:b9:d9:96:b9:f0:30:b6:a3:d7:2b:aa:5b:f5:e0:06: 8a:18:53:d1:c8:bd:ff:cc:54:ed:c8:d0:9c:13:fd:34:2b:36: 85:24:5e:0b:65:bb:ff:e0:f7:0c:cd:42:9c:25:83:49:86:6c: b5:ae:80:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4OEQxMTAvBgNVBAUTKERCMUNCODQ4NTQwNjlFNDNDQTFCNzI1RDQyRUE2QkE5 QjUzOTgxNUIwHhcNMjQxMTIyMTgxOTIyWhcNMjQxMTI5MTgxOTIyWjAYMRYwFAYD VQQDEw02NzQwY2IyYS05ZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArn6UPv+z9LiiAFL+Y0PK0uPDyF/47OgVPNTaWTHiBtno64PsZKEtCUiNDyvo WIaBXzwP3YPclS5XjAG12KPejskj+cZ/A2Gcl883vAvuEtELYRDXg4LJksoa8Ik4 1FAy8NzoZPAQj1BhMcXsYbVmCQktIMhP3v4dUEW4QH2IzEKQJrBi0343d9fhvsDy 0md7pIkv8w/pMdmlMTM5n1GrdLNIEs31SZ/TiYM968pICdKWB8eDXzpdDW+Nrv0P 4eTbLz0dSkV32j+A2WWvyrGcfNToxDTbJTeCZEjLblxMR1z8SAxKiF4bukSh0bk7 9QNTuTWlLog2ICVjisBcHELK2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9Eu80b 5FTKn1RquK6VRWjZ8rSAMB8GA1UdIwQYMBaAFNscuEhUBp5DyhtyXULqa6m1OYFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg4RC8yQTE0QkUwODAw NUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25rUEtHM0pkUXVwcnFiVTVn VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ4eTRTRlFHbmtQS0czSmRRdXBycWJVNWdWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg4RC8yQTE0QkUwODAwNUExMUVBOEZEQ0ExMzBDNEY5QUUwMi8yeHk0U0ZRR25r UEtHM0pkUXVwcnFiVTVnVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv/sDq6/nrPMF47q+qqZZBJ4UrWr4brFv5jCfDcAPR5NDXdlaQXGNW IRDtnRDYhp9arsiSis8aBYEJz6tbtafdGFmqKIIBm7uZyryzOAOd8Det+876PLFo bIl7KXm0J+Xvglg0lkc24La+rga/a7z3ckCZzMxvQZP4PcxPiFBNF7B/FBQb3/nS Jk8FdnHZ5JI1TJGL/yBuvJT22uj8r8XuOy71ST8J0X+15Uo4oKsaAVJ1+TM9Jiyx iA+PwaOoG/4QVFu/UqxlUTK52Za58DC2o9crqlv14AaKGFPRyL3/zFTtyNCcE/00 KzaFJF4LZbv/4PcMzUKcJYNJhmy1roCy -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org