$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json) Hash identifier: WksUDnwLb1SuZO9HkihugXRP7TFvnnYsLlMSMk7yzOo= Subject key identifier: 41:99:B1:8D:2B:13:43:54:EB:03:6B:3D:D3:45:D5:21:0A:D5:FF:87 Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Certificate serial: 03DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft Manifest number: 03D8 Signing time: Sat 23 Nov 2024 00:10:44 +0000 Manifest this update: Sat 23 Nov 2024 00:10:44 +0000 Manifest next update: Sat 30 Nov 2024 00:10:44 +0000 Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: bx7zGTE1gwMu87AZwaA2fSlgQWTevQx70TYsFso3EVU=) 2: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: NlMZe5gqmVPJHi7tBl3pc3oKWd3PWEvyri4lhroQCrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Validity Not Before: Nov 23 00:10:44 2024 GMT Not After : Nov 30 00:10:44 2024 GMT Subject: CN=67411d84-2fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:49:a9:27:bf:07:2a:e9:61:8c:48:42:36:ca: 11:97:4f:6f:b9:17:66:44:cd:bf:ae:02:0b:99:d8: ee:02:6c:4f:32:96:60:3d:29:bb:a8:c3:7c:aa:82: 65:27:6e:78:3b:ec:d1:fc:cb:ab:a5:c5:8e:19:e5: 79:19:65:b7:9a:77:34:86:ee:0a:ba:69:77:31:bf: 82:7c:65:e0:2c:3b:a3:ea:b1:48:77:76:7f:05:e4: 22:86:62:fd:79:2c:ac:6e:7b:27:73:48:a9:b2:e9: f8:88:37:b7:90:14:de:57:19:b6:13:f5:c0:c1:ee: c3:2b:72:29:87:3e:32:bf:d1:f5:dd:d2:fe:4d:e7: 85:d9:38:71:af:c9:39:5c:d6:ae:69:e0:21:f4:2b: 48:09:0b:1a:35:8a:31:e4:33:27:0b:6e:be:55:e3: 32:07:0a:d3:15:7b:7d:38:ae:e3:32:4d:ae:de:6e: 2e:d0:90:41:11:a2:e9:a7:21:e7:dc:2f:6e:bc:6b: 0f:da:42:42:24:98:b2:95:57:fa:97:c8:b8:5a:dd: 7a:8f:d5:4c:98:98:34:ee:65:cb:ce:78:4b:75:a2: dc:19:1f:9c:a0:a5:22:40:04:78:2c:2f:dc:59:06: 56:4a:27:1a:e7:4f:1f:02:d9:80:04:f3:d0:56:71: 07:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:99:B1:8D:2B:13:43:54:EB:03:6B:3D:D3:45:D5:21:0A:D5:FF:87 X509v3 Authority Key Identifier: keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:20:3c:47:b3:8e:7e:18:dc:e9:49:19:9b:3f:5f:61:51:85: ed:73:53:fd:f1:bb:12:61:ed:72:51:0d:5d:f9:49:7a:d3:49: 26:f2:60:49:2c:89:64:39:77:44:e3:a4:55:cf:64:0f:86:f4: c5:f8:78:c1:56:f3:56:d5:de:25:4f:bb:78:0c:cb:2e:f0:64: a5:ff:43:09:c1:6e:b7:95:2e:61:2c:a9:b5:73:1c:86:a1:2b: 2d:fa:23:a3:2c:c5:ca:23:bb:7e:59:20:d3:0d:74:68:68:35: ad:b8:a0:01:3c:a3:2f:00:fd:4d:fb:43:01:87:96:b2:71:c0: 47:5f:10:5f:c2:7f:8f:f5:35:8e:84:c7:72:53:a7:81:30:4f: a2:84:39:fc:36:c0:dc:45:6a:c5:a4:04:9d:5a:ca:e5:58:6e: 37:bc:6f:49:48:fd:1d:a5:66:74:e4:43:88:0f:b2:2f:17:83: c3:e9:7a:7b:51:92:73:6e:69:67:b2:4e:2e:0e:9e:d9:bd:b9: b4:70:76:1e:05:ec:1f:19:bf:66:7d:35:ab:d0:87:46:98:2c: fd:ef:bb:61:17:55:ea:bf:e8:d2:4e:71:1d:fd:52:69:0f:cf: 66:28:21:df:67:b3:45:98:6e:ec:bf:b4:e3:7b:35:39:d5:dc: e6:b9:0a:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0 NkVBNzI1MjAwHhcNMjQxMTIzMDAxMDQ0WhcNMjQxMTMwMDAxMDQ0WjAYMRYwFAYD VQQDEw02NzQxMWQ4NC0yZmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEmpJ78HKulhjEhCNsoRl09vuRdmRM2/rgILmdjuAmxPMpZgPSm7qMN8qoJl J254O+zR/MurpcWOGeV5GWW3mnc0hu4Kuml3Mb+CfGXgLDuj6rFId3Z/BeQihmL9 eSysbnsnc0ipsun4iDe3kBTeVxm2E/XAwe7DK3Iphz4yv9H13dL+TeeF2Thxr8k5 XNauaeAh9CtICQsaNYox5DMnC26+VeMyBwrTFXt9OK7jMk2u3m4u0JBBEaLppyHn 3C9uvGsP2kJCJJiylVf6l8i4Wt16j9VMmJg07mXLznhLdaLcGR+coKUiQAR4LC/c WQZWSica508fAtmABPPQVnEHMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGZsY0r E0NU6wNrPdNF1SEK1f+HMB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01 dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADIDxHs45+GNzpSRmbP19hUYXtc1P98bsSYe1yUQ1d+Ul600km8mBJ LIlkOXdE46RVz2QPhvTF+HjBVvNW1d4lT7t4DMsu8GSl/0MJwW63lS5hLKm1cxyG oSst+iOjLMXKI7t+WSDTDXRoaDWtuKABPKMvAP1N+0MBh5ayccBHXxBfwn+P9TWO hMdyU6eBME+ihDn8NsDcRWrFpASdWsrlWG43vG9JSP0dpWZ05EOID7IvF4PD6Xp7 UZJzbmlnsk4uDp7Zvbm0cHYeBewfGb9mfTWr0IdGmCz977thF1Xqv+jSTnEd/VJp D89mKCHfZ7NFmG7sv7TjezU51dzmuQr+ -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:36 2024 by rpki-client on console-fra.rpki-client.org