$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft File: Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json) Hash identifier: QgH7b0HdXyaL/nFLebOesFEomWHpQUaZhdM1rQT706g= Subject key identifier: 1F:CD:08:E1:85:46:49:A7:D3:DF:E3:4F:AD:46:CC:05:B2:39:5E:94 Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Certificate serial: 103C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft Manifest number: 1023 Signing time: Fri 22 Nov 2024 17:23:53 +0000 Manifest this update: Fri 22 Nov 2024 17:23:52 +0000 Manifest next update: Fri 29 Nov 2024 17:23:52 +0000 Files and hashes: 1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: Fp2PzvAvQxzNhENVZm7mvv+XHpFhREvsQwPAUYG0YlI=) 2: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: Ur8W3C7QgJQkw3BnGAD55weFMOItsdqD/26WShAlLaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4156 (0x103c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Validity Not Before: Nov 22 17:23:52 2024 GMT Not After : Nov 29 17:23:52 2024 GMT Subject: CN=6740be28-68fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:82:da:a2:50:d0:ed:cd:5a:83:c0:8b:37: 87:f5:2b:a6:3e:8e:b0:8d:da:d0:9d:92:d8:76:e2: e5:17:af:69:ba:b7:b5:37:51:36:b6:f0:67:b1:f9: 36:61:6a:2d:59:37:80:24:da:6a:b5:05:e5:34:ef: 80:63:fc:63:01:ff:2f:c4:cd:bd:9e:55:7b:27:1f: ca:26:98:f7:cb:b9:5d:9a:c0:b1:1c:05:ff:aa:57: c8:30:ea:7e:46:2c:f9:b8:5c:af:ae:bc:0f:22:e5: 3a:53:34:50:5c:b1:4b:91:a6:71:ec:92:dd:b9:c1: f5:41:f4:c6:da:77:62:77:b3:18:b6:04:63:a4:f1: 51:5a:1e:20:31:8b:70:0e:42:2c:17:4f:ea:ad:51: 5a:de:63:21:2d:d1:f2:ef:b2:8d:8e:82:4c:ea:09: 4c:d8:27:09:ee:96:0a:f9:f2:88:ea:63:78:d3:49: cb:24:67:b8:52:19:56:51:b1:7d:9a:fd:6d:4a:a3: 80:41:7a:31:e6:54:00:a4:ee:db:44:f4:bf:97:ca: ae:5d:06:92:44:5d:d8:fd:64:18:fa:c0:d1:7e:a2: b4:1d:a0:0c:f3:03:82:6a:79:31:f3:c3:fd:ab:a1: fa:82:47:e8:09:cd:c1:8e:07:5c:a5:0d:69:19:ed: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CD:08:E1:85:46:49:A7:D3:DF:E3:4F:AD:46:CC:05:B2:39:5E:94 X509v3 Authority Key Identifier: keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:59:35:14:dd:5e:de:33:cd:23:ec:c8:1d:15:9f:a1:d4:1e: ae:cb:b1:f7:ca:f7:50:e2:f9:f6:b2:fb:96:5d:1a:5d:bb:19: fd:7e:1f:73:43:0e:f4:f9:aa:78:64:12:99:af:d7:15:24:99: 40:f3:c1:2e:9e:1c:4c:90:60:09:53:ff:9e:cd:48:d7:f8:2c: a2:41:2a:c9:fe:e5:0e:36:51:63:97:9c:c4:c6:76:59:95:fc: 36:42:72:d9:10:d1:25:3d:91:ad:b5:37:31:f9:6e:3f:91:b6: 17:8b:37:27:93:0d:45:be:1b:99:04:90:ba:54:85:2d:01:d1: 28:ca:18:2e:77:37:3e:8e:0a:8c:9d:3e:de:3d:95:d4:c7:05: 60:64:8b:27:9a:7e:6b:93:18:0d:00:df:93:35:f9:01:e4:06: 2e:d1:56:e1:a6:b8:3c:73:13:38:64:ea:0c:bb:4a:15:f9:54: 62:17:a2:0c:58:93:9e:b0:33:61:78:84:23:67:78:8c:a8:ae: 5a:06:ed:91:e1:34:7d:2e:70:6d:7e:8d:3d:3c:43:9c:3c:16: 92:af:6a:ea:87:fa:12:6b:65:57:d4:70:15:9f:a3:39:41:d8: a5:b6:25:32:98:46:a6:a6:7b:38:ba:9c:63:cb:df:8f:df:e9: bb:0a:e9:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwOTYxMTAvBgNVBAUTKDRBQkRBMjRBRDdCRDlFOEQ5Q0VGQjM1OTM4RDBBODc4 ODA0QzYyRTQwHhcNMjQxMTIyMTcyMzUyWhcNMjQxMTI5MTcyMzUyWjAYMRYwFAYD VQQDEw02NzQwYmUyOC02OGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshyC2qJQ0O3NWoPAizeH9SumPo6wjdrQnZLYduLlF69pure1N1E2tvBnsfk2 YWotWTeAJNpqtQXlNO+AY/xjAf8vxM29nlV7Jx/KJpj3y7ldmsCxHAX/qlfIMOp+ Riz5uFyvrrwPIuU6UzRQXLFLkaZx7JLducH1QfTG2ndid7MYtgRjpPFRWh4gMYtw DkIsF0/qrVFa3mMhLdHy77KNjoJM6glM2CcJ7pYK+fKI6mN400nLJGe4UhlWUbF9 mv1tSqOAQXox5lQApO7bRPS/l8quXQaSRF3Y/WQY+sDRfqK0HaAM8wOCankx88P9 q6H6gkfoCc3BjgdcpQ1pGe16uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/NCOGF Rkmn09/jT61GzAWyOV6UMB8GA1UdIwQYMBaAFEq9okrXvZ6NnO+zWTjQqHiATGLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA5Ni8yRkJCNDQwRTMz NDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5vMmM3N05aT05Db2VJQk1Z dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyMmlTdGU5bm8yYzc3TlpPTkNvZUlCTVl1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA5Ni8yRkJCNDQwRTMzNDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5v MmM3N05aT05Db2VJQk1ZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQWTUU3V7eM80j7MgdFZ+h1B6uy7H3yvdQ4vn2svuWXRpduxn9fh9z Qw70+ap4ZBKZr9cVJJlA88EunhxMkGAJU/+ezUjX+CyiQSrJ/uUONlFjl5zExnZZ lfw2QnLZENElPZGttTcx+W4/kbYXizcnkw1FvhuZBJC6VIUtAdEoyhgudzc+jgqM nT7ePZXUxwVgZIsnmn5rkxgNAN+TNfkB5AYu0Vbhprg8cxM4ZOoMu0oV+VRiF6IM WJOesDNheIQjZ3iMqK5aBu2R4TR9LnBtfo09PEOcPBaSr2rqh/oSa2VX1HAVn6M5 QdiltiUymEampns4upxjy9+P3+m7CunA -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org