$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: TDlxT92GEVEOmIQ3WC6wKPApu0oWSF1Gl0wndqLXCoU= Subject key identifier: 2B:FF:C0:8C:40:35:3B:4C:14:5A:92:42:CB:0B:4A:1F:BE:D7:AB:1E Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 014C Signing time: Sat 23 Nov 2024 02:30:24 +0000 Manifest this update: Sat 23 Nov 2024 02:30:24 +0000 Manifest next update: Sat 30 Nov 2024 02:30:24 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: sUreu4KHn7eBApx2oJidI0+q7gsKNOLVkdsUPbYZpYU=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: mUitWyAia7OYZSrqATEphyypaSxSHUc51lFfEosaW+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: Nov 23 02:30:24 2024 GMT Not After : Nov 30 02:30:24 2024 GMT Subject: CN=67413e40-7c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:46:84:d2:91:8f:e6:88:da:14:5a:83:a0: 81:49:c8:74:b7:17:97:4a:42:69:f5:d0:09:93:00: 4d:3a:7d:fd:48:e2:22:20:57:6c:35:b4:10:7c:32: 08:e0:af:b0:78:aa:82:3f:ec:43:83:2a:17:aa:36: 38:0a:7b:97:c4:5a:60:f0:10:80:ed:4c:6c:c5:28: 49:1a:52:ad:52:0e:28:dc:22:85:4e:1d:a0:78:ad: 17:6c:1e:22:61:90:ab:a2:14:4d:47:98:8a:7f:1d: 48:ed:09:e1:b1:4b:09:0b:bc:db:ab:02:98:46:3d: b1:7e:a1:b1:cf:e5:e3:16:f3:8e:a6:06:5e:ad:47: 26:39:1d:2c:7f:bf:f0:3c:26:d1:53:41:ce:fc:d7: 6b:e9:d5:e3:ec:65:14:fd:e8:97:2b:49:de:3b:17: 61:8c:d8:ae:e0:fa:9a:ee:0a:4b:a1:32:73:6e:04: d5:59:d6:bd:62:7f:9b:2d:69:d5:e2:b3:5f:79:e6: aa:81:4c:31:4e:c2:14:14:ba:e1:49:7b:26:df:fc: d0:46:05:42:60:9b:98:02:47:ad:6f:ce:1a:eb:16: 42:ab:1d:98:c4:0e:3d:19:bc:3e:ea:7c:81:2f:2e: 73:02:e0:22:0b:60:4f:b2:ea:ab:f0:aa:c5:d3:39: 17:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FF:C0:8C:40:35:3B:4C:14:5A:92:42:CB:0B:4A:1F:BE:D7:AB:1E X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:ee:b5:63:fa:41:23:75:6c:d4:94:69:4c:67:10:66:3c:3c: 83:65:13:5d:3e:28:c5:60:6b:86:53:72:d7:54:01:3d:2c:ca: 80:89:c1:f8:24:47:dc:0f:5d:88:82:76:44:75:8a:af:ef:6f: 01:37:3c:9f:b6:88:5e:8c:d2:1c:e2:81:ca:77:dc:9b:ee:3d: 53:93:ec:75:ed:68:86:24:3c:0f:e8:2d:d7:21:19:33:74:1d: 01:3e:c2:3b:a2:66:b4:51:3e:dc:58:cd:7d:04:36:49:11:14: d3:c1:a6:04:06:7f:49:d2:e2:b8:a0:96:cb:d7:27:86:2d:84: 33:c3:ce:08:32:53:40:f5:2f:45:55:49:22:ca:bb:10:c3:ab: a7:23:51:65:77:e8:a3:95:65:fc:63:cc:0a:5c:f1:15:e0:40: 4b:83:43:2e:de:08:bd:e8:0b:cd:97:6b:23:c2:2e:19:b0:78: 97:49:b6:fd:2f:d6:29:44:79:b9:f6:d6:49:fa:27:90:77:80: 54:15:55:9a:c4:fb:ba:72:65:3c:14:a2:2a:4b:4f:21:8e:a2: 82:98:15:f9:57:ca:82:5e:c9:80:55:6f:bc:24:69:16:8f:71: 2a:ff:ad:1b:d1:6d:6b:1d:ce:80:86:cc:1d:2b:8f:07:a6:d4: 0f:c8:da:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjQxMTIzMDIzMDI0WhcNMjQxMTMwMDIzMDI0WjAYMRYwFAYD VQQDEw02NzQxM2U0MC03YzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWlGhNKRj+aI2hRag6CBSch0txeXSkJp9dAJkwBNOn39SOIiIFdsNbQQfDII 4K+weKqCP+xDgyoXqjY4CnuXxFpg8BCA7UxsxShJGlKtUg4o3CKFTh2geK0XbB4i YZCrohRNR5iKfx1I7QnhsUsJC7zbqwKYRj2xfqGxz+XjFvOOpgZerUcmOR0sf7/w PCbRU0HO/Ndr6dXj7GUU/eiXK0neOxdhjNiu4Pqa7gpLoTJzbgTVWda9Yn+bLWnV 4rNfeeaqgUwxTsIUFLrhSXsm3/zQRgVCYJuYAketb84a6xZCqx2YxA49Gbw+6nyB Ly5zAuAiC2BPsuqr8KrF0zkXgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCv/wIxA NTtMFFqSQssLSh++16seMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC67rVj+kEjdWzUlGlMZxBmPDyDZRNdPijFYGuGU3LXVAE9LMqAicH4 JEfcD12IgnZEdYqv728BNzyftohejNIc4oHKd9yb7j1Tk+x17WiGJDwP6C3XIRkz dB0BPsI7oma0UT7cWM19BDZJERTTwaYEBn9J0uK4oJbL1yeGLYQzw84IMlNA9S9F VUkiyrsQw6unI1Fld+ijlWX8Y8wKXPEV4EBLg0Mu3gi96AvNl2sjwi4ZsHiXSbb9 L9YpRHm59tZJ+ieQd4BUFVWaxPu6cmU8FKIqS08hjqKCmBX5V8qCXsmAVW+8JGkW j3Eq/60b0W1rHc6AhswdK48HptQPyNoI -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:49 2024 by rpki-client on console-ams.rpki-client.org