$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: OnkiKlaCnKcNaf3T219rO/ry8Px/MO7rnYIkAuQCA+E= Subject key identifier: 49:E4:99:D0:33:66:22:58:2C:12:BB:BD:D4:3B:F8:0C:73:87:21:F6 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 05B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 0598 Signing time: Fri 22 Nov 2024 22:55:28 +0000 Manifest this update: Fri 22 Nov 2024 22:55:27 +0000 Manifest next update: Fri 29 Nov 2024 22:55:27 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: +O10hN+4EqBZs9vzZ9+/jZsfBIYQcX5hlx7R+dzhuaA=) 2: 7D58FFA4085511EFA3E44E39C4F9AE02.roa (hash: C0ymx4svEE5I8iI8iHKAAm5n13IcsE+B9LvxyBw1z7A=) 3: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: c0qz4yTXbQVMbv7V1buw7n7Znsl9Aq3P8KISOSVpRBU=) 4: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: tF2QAvZnpGpxJVZZ8sa2/6kz1coln+/z6anvlxPTcw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Nov 22 22:55:27 2024 GMT Not After : Nov 29 22:55:27 2024 GMT Subject: CN=67410bdf-99c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bc:54:76:5f:33:a5:78:fc:da:71:a7:95:d3: f9:5b:88:e5:e4:4d:00:cd:4d:0d:e1:9a:7b:a4:ed: c6:78:50:49:1e:51:08:02:bc:7e:c7:a7:09:26:87: b0:fe:55:59:6d:d8:73:35:0c:7e:39:21:03:a2:b3: db:fc:0f:85:20:8a:97:70:e8:2e:81:e5:21:45:a0: 1f:fe:99:14:54:88:f5:f2:46:1e:68:91:30:e3:3c: 5a:f7:6f:ef:4f:db:7d:53:88:a7:8e:38:67:6e:df: 4e:7b:c1:1c:01:24:61:26:16:6a:71:af:3c:93:75: 76:d8:6c:0d:8f:cc:04:0e:20:25:ce:71:7a:6c:52: 12:f1:33:8f:67:1a:08:b8:cb:2e:ef:78:f6:7b:11: b5:4c:b9:e6:44:b6:35:80:0c:fe:f7:41:bf:ae:14: 62:b0:b7:1a:ce:9d:0a:c7:c3:db:ed:17:80:be:2a: b2:99:0c:22:fa:c9:72:05:ea:26:c1:04:da:9b:6a: 46:df:a5:27:a8:95:c7:54:94:d2:1a:f5:42:ed:4a: 1a:cd:e3:35:dc:7f:d5:a9:01:fd:80:8e:17:e3:cd: fa:bc:b4:e5:91:be:09:85:7e:59:da:8b:26:8d:ca: 36:e3:cd:ef:2e:c8:f6:65:96:a0:f7:19:d5:c7:17: c6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E4:99:D0:33:66:22:58:2C:12:BB:BD:D4:3B:F8:0C:73:87:21:F6 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f1:95:8e:9e:e3:44:14:34:b5:5e:f6:91:63:70:71:3e:a4: 76:b2:a7:d3:7c:7b:d7:8e:7c:60:4d:bc:61:81:1a:dd:9b:9b: 18:33:8d:4a:98:ed:96:5d:05:83:ff:59:d0:a4:3d:1c:33:9e: 24:32:16:0e:33:aa:0f:68:c3:d0:99:1d:3a:91:18:0f:3e:27: bb:af:a0:ef:75:73:9d:9d:28:46:29:c9:51:76:c3:7d:36:48: 3c:99:2c:e1:10:72:68:0c:28:ae:e8:44:04:aa:b8:77:31:9a: 0f:34:b9:05:01:a9:b6:52:c3:b5:c4:f1:30:01:aa:0c:b0:b2: a8:60:2c:d4:79:0b:0a:ec:f5:58:58:80:0f:4c:b2:77:11:47: a4:d4:29:2e:a2:f4:93:39:94:58:53:f8:f3:a1:1d:dd:d6:f9: e2:c0:c6:f1:42:15:4a:48:11:93:84:9f:01:00:86:e9:b5:f3: f3:f8:99:05:7d:1f:33:e4:5f:8e:f2:fe:31:b1:5c:ef:6f:ff: 79:1b:3f:7d:3b:a2:dc:da:37:2a:d4:8c:fc:02:59:09:ef:64: 98:1d:1f:b6:3b:5b:be:f3:5b:53:6a:eb:c0:93:35:2f:c7:f8: 99:d1:db:89:d2:b0:e5:61:e7:f1:b1:26:bc:d0:ed:ae:d3:37: 1d:9f:fa:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjQxMTIyMjI1NTI3WhcNMjQxMTI5MjI1NTI3WjAYMRYwFAYD VQQDEw02NzQxMGJkZi05OWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57xUdl8zpXj82nGnldP5W4jl5E0AzU0N4Zp7pO3GeFBJHlEIArx+x6cJJoew /lVZbdhzNQx+OSEDorPb/A+FIIqXcOgugeUhRaAf/pkUVIj18kYeaJEw4zxa92/v T9t9U4injjhnbt9Oe8EcASRhJhZqca88k3V22GwNj8wEDiAlznF6bFIS8TOPZxoI uMsu73j2exG1TLnmRLY1gAz+90G/rhRisLcazp0Kx8Pb7ReAviqymQwi+slyBeom wQTam2pG36UnqJXHVJTSGvVC7UoazeM13H/VqQH9gI4X4836vLTlkb4JhX5Z2osm jco2483vLsj2ZZag9xnVxxfGPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnkmdAz ZiJYLBK7vdQ7+AxzhyH2MB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd8ZWOnuNEFDS1XvaRY3BxPqR2sqfTfHvXjnxgTbxhgRrdm5sYM41K mO2WXQWD/1nQpD0cM54kMhYOM6oPaMPQmR06kRgPPie7r6DvdXOdnShGKclRdsN9 Nkg8mSzhEHJoDCiu6EQEqrh3MZoPNLkFAam2UsO1xPEwAaoMsLKoYCzUeQsK7PVY WIAPTLJ3EUek1CkuovSTOZRYU/jzoR3d1vniwMbxQhVKSBGThJ8BAIbptfPz+JkF fR8z5F+O8v4xsVzvb/95Gz99O6Lc2jcq1Iz8AlkJ72SYHR+2O1u+81tTauvAkzUv x/iZ0duJ0rDlYefxsSa80O2u0zcdn/p9 -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:32 2024 by rpki-client on console-fra.rpki-client.org