$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: izi5sGC5NJuoOr+7t+D9MLTNNphH6pu+CqDxvCgLzTM= Subject key identifier: 01:F9:D7:DC:44:E6:69:39:F7:B0:08:F7:3B:43:80:0B:01:FE:0C:89 Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 0270 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 026D Signing time: Sat 23 Nov 2024 01:12:45 +0000 Manifest this update: Sat 23 Nov 2024 01:12:45 +0000 Manifest next update: Sat 30 Nov 2024 01:12:45 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: xeCbIL8HKPCpfUxFSHqQEsjOaixGEHxecA3szDUycL8=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: nnSO9venyDAAa+6GPmHgyrg3uKMxgPIF3inlZFGwpdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: Nov 23 01:12:45 2024 GMT Not After : Nov 30 01:12:45 2024 GMT Subject: CN=67412c0d-8a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bf:6e:5c:ca:5f:80:2d:a5:d9:b8:a9:e8:0b: ee:6d:5f:52:b7:f2:5a:44:b1:49:45:c8:65:e7:e1: d7:af:27:93:2f:e5:35:57:a9:ff:2f:cf:05:03:4b: 16:95:b9:57:36:29:1f:f7:e5:6e:0c:9e:64:37:c7: fe:e2:50:81:fe:b4:d8:79:55:ad:02:b5:14:d0:a4: 71:31:7d:4a:6a:ad:8c:6e:3f:db:24:cc:91:0c:96: fb:31:cd:04:d1:6a:fc:a2:51:8f:67:24:e9:3d:d0: df:0f:d8:81:d8:b2:fa:f6:0b:55:96:04:34:38:af: a6:4d:98:18:06:30:f3:3e:5a:d9:74:cf:68:c3:57: 7c:b2:cb:b8:2a:49:89:fa:ec:76:9a:29:1c:78:36: f9:77:05:f8:9b:5a:37:1b:ab:9f:9e:0b:34:a6:f9: 92:50:37:8f:ad:c5:ea:d6:59:06:bc:15:92:0c:4a: ad:0b:6c:06:1d:80:72:d3:3a:66:e0:fc:5e:e6:a1: 99:18:81:d1:c4:21:f2:b5:41:a8:fc:21:98:37:7a: a2:14:e4:9c:3e:d2:26:c9:a0:41:13:b1:01:bd:e3: 1c:a3:24:e3:70:be:01:36:01:40:bc:72:7e:99:f2: d0:f4:b6:f5:b3:6d:a1:67:3e:58:33:9c:33:59:f1: 32:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F9:D7:DC:44:E6:69:39:F7:B0:08:F7:3B:43:80:0B:01:FE:0C:89 X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:79:49:19:57:c3:ba:46:a9:c2:cd:80:cf:ee:bd:35:d8:19: 63:74:9c:36:95:0a:df:97:05:b0:7f:13:17:93:e6:4d:8e:ec: be:07:63:2f:2b:61:88:51:f5:4c:d7:65:56:61:c5:32:6d:27: 83:6d:c9:1c:8c:07:21:bd:c3:de:03:6e:25:88:7c:48:56:53: 05:b0:0e:87:ec:29:ca:da:60:f2:76:82:75:77:1b:b6:41:d4: c5:7a:7a:6d:37:30:2d:1d:7a:d4:6c:3c:0b:ad:ec:e6:a9:d8: 14:8e:e9:6d:e7:74:aa:77:22:bb:84:5b:90:61:19:ce:f2:b2: ab:47:83:00:52:da:f3:d2:03:4b:ef:22:02:86:23:7a:f8:a9: 1c:c4:3f:0f:c9:d2:e8:ad:24:40:63:5c:89:fe:bb:70:40:f1: 55:e6:95:af:19:89:58:2a:21:f0:12:ef:fc:b4:7d:b4:5e:98: 2d:7d:a9:0e:4c:bf:b7:1f:f3:c9:fe:8f:27:8a:77:f3:20:95: 4c:b0:52:3f:d6:b4:fd:6a:92:fd:c7:bf:af:40:34:1c:e8:e2: 82:60:f8:00:b9:fc:ea:5d:6b:32:5e:d4:1d:79:8a:7b:88:59: ec:f5:ad:78:e9:e0:56:80:d1:e6:dc:ae:03:82:74:fa:89:61: d2:ec:0f:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjQxMTIzMDExMjQ1WhcNMjQxMTMwMDExMjQ1WjAYMRYwFAYD VQQDEw02NzQxMmMwZC04YTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA579uXMpfgC2l2bip6AvubV9St/JaRLFJRchl5+HXryeTL+U1V6n/L88FA0sW lblXNikf9+VuDJ5kN8f+4lCB/rTYeVWtArUU0KRxMX1Kaq2Mbj/bJMyRDJb7Mc0E 0Wr8olGPZyTpPdDfD9iB2LL69gtVlgQ0OK+mTZgYBjDzPlrZdM9ow1d8ssu4KkmJ +ux2mikceDb5dwX4m1o3G6ufngs0pvmSUDePrcXq1lkGvBWSDEqtC2wGHYBy0zpm 4Pxe5qGZGIHRxCHytUGo/CGYN3qiFOScPtImyaBBE7EBveMcoyTjcL4BNgFAvHJ+ mfLQ9Lb1s22hZz5YM5wzWfEydwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAH519xE 5mk597AI9ztDgAsB/gyJMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEeUkZV8O6RqnCzYDP7r012BljdJw2lQrflwWwfxMXk+ZNjuy+B2Mv K2GIUfVM12VWYcUybSeDbckcjAchvcPeA24liHxIVlMFsA6H7CnK2mDydoJ1dxu2 QdTFenptNzAtHXrUbDwLrezmqdgUjult53SqdyK7hFuQYRnO8rKrR4MAUtrz0gNL 7yIChiN6+KkcxD8PydLorSRAY1yJ/rtwQPFV5pWvGYlYKiHwEu/8tH20XpgtfakO TL+3H/PJ/o8ninfzIJVMsFI/1rT9apL9x7+vQDQc6OKCYPgAufzqXWsyXtQdeYp7 iFns9a146eBWgNHm3K4DgnT6iWHS7A+E -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:52 2024 by rpki-client on console-ams.rpki-client.org