$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: 81qJztKw15NTOzV6oSfla3kH1r26D6m2ntlXna3EJEU= Subject key identifier: 9F:99:2B:E2:6C:5F:36:FA:A4:25:06:45:DD:5F:16:F4:9E:A9:94:7E Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0AF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0AA2 Signing time: Wed 20 Nov 2024 19:26:14 +0000 Manifest this update: Wed 20 Nov 2024 19:26:13 +0000 Manifest next update: Wed 27 Nov 2024 19:26:13 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: ty3418cF4VQ9akdPQuUllZJxb555aB2y539O463p0xU=) 2: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: NDMWr6ROve032HDCvpKDnE+3M7NstRNL4WiBRR7Uc9w=) 3: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: 63s4SgNbb9vBgLRS0CVzWGHYHPOxEeCtMsHFimS4Gcc=) 4: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: Z21inXGgFSeaHgz7iITM/kziF7zP/P4QOKxWDnYdlJ8=) 5: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: 1gtmRzqYdhmA8CchuwScykbthJY4rmebTYSAnt6uzqg=) 6: B66F0C58817111EFB121970CC4F9AE02.roa (hash: lkpsOB7nfXsffwnZ1aU9Jr6eTZNpX/TpTJZNQqUrOs8=) 7: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: dhvSYCoAete6HzssYv/JSdKEV/Z2KYxpkGxKw9YFSAY=) 8: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: dGWItSoIfDWTw5ONmMmmwGOtu0hUpDaFw6KptrVVUfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2808 (0xaf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Nov 20 19:26:13 2024 GMT Not After : Nov 27 19:26:13 2024 GMT Subject: CN=673e37d5-d23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7d:5b:90:bd:52:63:91:e0:3a:8a:f1:e5:4c: f8:47:84:20:08:fb:ca:a1:a0:d3:61:d2:2f:ea:be: 38:43:cb:02:6a:a3:19:12:e9:63:53:e7:30:a6:9f: 90:43:90:82:1e:ce:44:b0:69:62:eb:84:68:1c:d9: 8f:81:28:6f:76:93:28:ae:ec:fb:90:7c:ad:53:a2: 62:f4:ff:bc:3c:8c:1f:f7:5f:16:82:d0:2d:f8:a1: 6f:8c:4c:3c:6e:64:4b:ef:76:af:fa:2c:8c:6b:42: e7:73:b9:25:7c:bb:77:9f:b4:fe:14:a3:ce:9c:d9: 23:6d:01:67:6a:33:da:81:e5:6b:72:7e:34:b8:08: 38:68:5b:2e:76:ea:41:50:39:4c:c2:1c:64:10:fa: 3a:35:43:50:62:c3:2d:9d:ac:54:21:3e:78:a4:87: 5d:b1:57:5a:78:fd:d4:a0:5a:11:5b:29:88:c3:1a: 45:53:1f:d4:ad:6b:ed:b4:e6:19:bb:02:04:aa:6c: 36:1c:1f:b7:5c:0f:23:64:c5:30:9c:28:f9:00:11: c2:a6:35:9d:71:97:77:17:12:df:d2:f6:53:b4:9e: 95:91:c0:11:2a:f4:66:65:9f:1e:48:f2:bb:16:4e: 28:40:a4:2d:17:f3:2e:d7:c6:ad:82:a1:83:cc:08: 8c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:99:2B:E2:6C:5F:36:FA:A4:25:06:45:DD:5F:16:F4:9E:A9:94:7E X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d7:62:a1:0a:e1:f7:ef:83:15:3d:7a:ee:73:69:34:38:f7: fe:84:17:9a:43:20:98:af:d9:b6:e4:e6:2d:97:89:1d:9f:a5: 26:03:90:85:74:c0:51:51:ec:f2:db:97:26:0a:5e:8f:80:f4: 3f:6e:0e:4c:a5:e0:50:bd:88:d1:8e:5f:e2:c0:32:34:de:53: 7d:f3:f0:a6:b8:92:0a:f5:3f:e2:b3:21:d2:49:f7:71:67:dd: e8:13:a2:c2:cd:93:21:b2:50:99:be:19:5c:ee:a0:1c:d4:dd: c6:02:a8:5e:dc:a6:23:d5:a8:97:15:96:78:48:3d:a9:5d:b6: 71:29:e7:56:12:25:34:2a:65:c7:30:30:1e:26:d8:74:f4:6c: ea:e5:a0:a0:fe:c5:45:09:2e:f7:7c:48:5e:e9:47:53:22:4d: 31:89:bc:2f:36:56:50:7d:ed:2b:ce:02:c4:26:9f:1d:46:a3: 7b:77:66:59:c5:18:c2:8f:0b:02:16:78:15:40:c7:94:f5:77: 96:de:50:56:7b:61:ef:c1:b0:d1:db:e9:d5:2c:90:0f:99:f3: f1:89:1c:d3:09:2a:69:80:3a:68:14:92:f5:8f:fc:74:ab:65: bc:d4:cb:26:e9:50:aa:27:95:3f:26:62:6d:c2:18:54:7c:3f: 3c:48:4c:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjQxMTIwMTkyNjEzWhcNMjQxMTI3MTkyNjEzWjAYMRYwFAYD VQQDEw02NzNlMzdkNS1kMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0H1bkL1SY5HgOorx5Uz4R4QgCPvKoaDTYdIv6r44Q8sCaqMZEuljU+cwpp+Q Q5CCHs5EsGli64RoHNmPgShvdpMoruz7kHytU6Ji9P+8PIwf918WgtAt+KFvjEw8 bmRL73av+iyMa0Lnc7klfLt3n7T+FKPOnNkjbQFnajPageVrcn40uAg4aFsudupB UDlMwhxkEPo6NUNQYsMtnaxUIT54pIddsVdaeP3UoFoRWymIwxpFUx/UrWvttOYZ uwIEqmw2HB+3XA8jZMUwnCj5ABHCpjWdcZd3FxLf0vZTtJ6VkcARKvRmZZ8eSPK7 Fk4oQKQtF/Mu18atgqGDzAiMewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+ZK+Js Xzb6pCUGRd1fFvSeqZR+MB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF12KhCuH374MVPXruc2k0OPf+hBeaQyCYr9m25OYtl4kdn6UmA5CF dMBRUezy25cmCl6PgPQ/bg5MpeBQvYjRjl/iwDI03lN98/CmuJIK9T/isyHSSfdx Z93oE6LCzZMhslCZvhlc7qAc1N3GAqhe3KYj1aiXFZZ4SD2pXbZxKedWEiU0KmXH MDAeJth09Gzq5aCg/sVFCS73fEhe6UdTIk0xibwvNlZQfe0rzgLEJp8dRqN7d2ZZ xRjCjwsCFngVQMeU9XeW3lBWe2HvwbDR2+nVLJAPmfPxiRzTCSppgDpoFJL1j/x0 q2W81Msm6VCqJ5U/JmJtwhhUfD88SEzH -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:46 2024 by rpki-client on console-fra.rpki-client.org