$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: 8N1kblsfjPBVPkl4oS7oJoXJ8uVNT322EPFb/oczE4o= Subject key identifier: 7E:65:5D:52:0F:B8:78:67:97:05:CA:4A:A4:0F:43:54:ED:CF:BC:E3 Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: 18 Signing time: Thu 21 Nov 2024 06:01:10 +0000 Manifest this update: Thu 21 Nov 2024 06:01:10 +0000 Manifest next update: Thu 28 Nov 2024 06:01:10 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: MUwp/rRtzqQ8Anm3ItmSdoFJfBKdlyTkp+8W5JFkVSM=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: 6Kn2Tc8nx8bkTt0Gnf962Qu64Px5Cncotr8SgT4Ke8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Nov 21 06:01:10 2024 GMT Not After : Nov 28 06:01:10 2024 GMT Subject: CN=673ecca6-0925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:bf:e8:87:74:05:4f:d7:de:f0:bd:62:72: c6:c7:61:c4:fa:52:6a:4e:47:ee:d9:38:54:79:27: 86:da:97:e4:df:00:14:0c:95:e2:38:3f:30:4e:c8: 50:de:ed:98:3c:0b:38:2e:7e:38:03:74:a1:46:09: 40:10:52:cb:5d:37:e9:4f:04:76:6b:5e:2c:32:60: 18:8d:11:5b:9c:95:4e:a2:fd:b7:33:22:db:ab:eb: 38:87:31:86:de:9a:3b:db:07:33:50:3c:fc:2d:d5: 1a:0e:15:7c:aa:f6:e6:2a:03:36:6b:5b:92:01:8d: db:4e:71:3c:59:7c:0b:cd:1e:53:b1:d0:d2:88:5e: d3:87:92:2a:23:0f:ce:76:6a:1a:56:37:e3:b1:e7: 88:bb:03:55:67:6d:0f:68:26:cd:7b:e1:33:54:7a: 49:19:43:27:79:14:eb:d1:b7:c5:a2:f4:68:bd:77: 36:84:3f:c6:8c:03:53:85:fc:c2:54:27:de:fc:9f: 1d:bf:1e:67:60:b9:bb:19:d6:f2:df:b9:e2:92:d7: 86:8b:fc:91:96:96:78:0a:6d:8c:04:f1:4e:19:53: 68:86:1a:47:fe:0e:3d:4b:7a:9a:83:fe:2e:06:a6: 84:bf:5d:46:bd:bd:e7:42:d0:bd:41:78:fe:22:ba: 5b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:65:5D:52:0F:B8:78:67:97:05:CA:4A:A4:0F:43:54:ED:CF:BC:E3 X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f6:c0:d7:0f:b8:29:b8:35:3e:d8:ba:d3:41:0f:b7:dd:f6: 10:e0:14:de:af:92:e8:4e:e1:2f:fe:ff:17:89:16:c9:39:df: 9a:1f:63:26:12:47:f7:1b:47:7c:47:05:3c:d3:df:02:58:ba: ab:fa:eb:a8:5c:5f:38:a9:19:e5:5d:4f:28:e1:91:08:fd:cb: a1:08:1d:a3:9d:05:78:7d:48:a2:76:0d:4d:df:81:15:4a:ba: 24:73:be:13:96:e6:72:7c:36:0c:19:b0:5b:49:f1:94:f4:1c: 3a:eb:7a:9e:fd:fc:ed:07:c1:7a:d6:5d:45:3b:c3:47:46:60: 61:ad:7d:27:ee:17:a1:56:0d:54:6f:66:37:20:1c:97:c2:12: 84:02:47:4a:57:c4:22:0a:70:bd:a6:cd:77:95:1e:2d:9e:52: 5e:46:be:e6:97:38:2c:82:31:3c:0d:23:5b:21:65:54:72:58: e0:31:91:77:66:b8:ca:95:74:67:3a:80:97:39:0a:e0:79:cd: 5e:18:2e:6e:5b:9b:16:19:9c:a1:1d:00:5a:18:c7:de:95:94: 5a:7f:51:9f:2f:37:0f:44:71:3b:61:d6:c2:76:b4:55:58:a3: 9c:28:fb:ed:61:25:40:39:d6:5e:b4:ed:4a:dc:01:75:07:67: e8:a1:f8:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkY4QzExMC8GA1UEBRMoMDE3RDhEQjhBNzg4NzRBQjJGOUFEOTdERTU3QUZERTFC RTE2N0Q0NDAeFw0yNDExMjEwNjAxMTBaFw0yNDExMjgwNjAxMTBaMBgxFjAUBgNV BAMTDTY3M2VjY2E2LTA5MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0wb/oh3QFT9fe8L1icsbHYcT6UmpOR+7ZOFR5J4bal+TfABQMleI4PzBOyFDe 7Zg8CzgufjgDdKFGCUAQUstdN+lPBHZrXiwyYBiNEVuclU6i/bczItur6ziHMYbe mjvbBzNQPPwt1RoOFXyq9uYqAzZrW5IBjdtOcTxZfAvNHlOx0NKIXtOHkiojD852 ahpWN+Ox54i7A1VnbQ9oJs174TNUekkZQyd5FOvRt8Wi9Gi9dzaEP8aMA1OF/MJU J978nx2/HmdgubsZ1vLfueKS14aL/JGWlngKbYwE8U4ZU2iGGkf+Dj1LepqD/i4G poS/XUa9vedC0L1BeP4iultLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfmVdUg+4 eGeXBcpKpA9DVO3PvOMwHwYDVR0jBBgwFoAUAX2NuKeIdKsvmtl95Xr94b4WfUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyRjhDLzU1NzlCOUIwODZF MDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQVgyTnVLZUlkS3N2bXRsOTVYcjk0YjRXZlVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy RjhDLzU1NzlCOUIwODZFMDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJZEtz dm10bDk1WHI5NGI0V2ZVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGH2wNcPuCm4NT7YutNBD7fd9hDgFN6vkuhO4S/+/xeJFsk535ofYyYS R/cbR3xHBTzT3wJYuqv666hcXzipGeVdTyjhkQj9y6EIHaOdBXh9SKJ2DU3fgRVK uiRzvhOW5nJ8NgwZsFtJ8ZT0HDrrep79/O0HwXrWXUU7w0dGYGGtfSfuF6FWDVRv ZjcgHJfCEoQCR0pXxCIKcL2mzXeVHi2eUl5GvuaXOCyCMTwNI1shZVRyWOAxkXdm uMqVdGc6gJc5CuB5zV4YLm5bmxYZnKEdAFoYx96VlFp/UZ8vNw9EcTth1sJ2tFVY o5wo++1hJUA51l607UrcAXUHZ+ih+KU= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:49 2024 by rpki-client on console-fra.rpki-client.org