$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json) Hash identifier: CGwUJEe2pZba6TE5QK7kW6Qhh6gBjFHHxFcKbvlI4o4= Subject key identifier: A9:2F:34:90:BB:98:EE:FF:5A:B7:32:46:16:9A:84:B1:1F:C8:FE:55 Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Certificate serial: 093F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft Manifest number: 0939 Signing time: Fri 22 Nov 2024 20:01:13 +0000 Manifest this update: Fri 22 Nov 2024 20:01:13 +0000 Manifest next update: Fri 29 Nov 2024 20:01:13 +0000 Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: k4oEUht4EHwLdtBiQlgSdr8E/iZZUlD69z6K7ikv4xA=) 2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: 1ZtsZNF5jFsKlAT00IrDzQyZHeqFH7iBf+N8uJoqrEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2367 (0x93f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Validity Not Before: Nov 22 20:01:13 2024 GMT Not After : Nov 29 20:01:13 2024 GMT Subject: CN=6740e309-fea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:52:90:56:6f:e1:34:b7:06:44:e8:76:ab:b0: e4:f1:d2:4e:02:fd:95:e6:35:82:3a:49:b3:c0:a1: c1:86:fa:8f:48:4b:d5:2d:c6:dc:23:7e:3d:20:75: 5f:e6:cd:99:3c:77:0f:f3:19:88:00:25:20:ac:3b: 6b:8e:83:a6:53:e7:67:31:67:15:47:0f:46:ba:24: 2e:80:25:92:bc:49:b3:4e:79:92:c6:2e:a8:18:c5: 10:cc:48:89:c2:2a:e4:8c:6f:d7:9e:17:74:d3:63: f1:b5:83:5b:24:36:ab:ac:eb:fa:bf:fa:bd:29:70: 05:21:9a:40:eb:5e:e8:b2:5f:38:f9:3f:3f:1b:6e: 6c:23:28:3c:61:bf:35:b7:c9:2a:ea:7d:aa:6c:1d: 75:b0:3d:04:0f:17:c6:f3:78:ab:9c:b1:eb:cc:b4: 39:b1:10:2a:eb:11:e2:c5:83:9e:b8:95:62:ea:d5: ba:fc:ab:1c:78:43:04:75:56:67:ba:8a:3c:a6:cb: 43:df:0e:f4:37:97:d7:0a:f3:ad:66:18:93:01:7e: 67:f2:a1:6c:35:4c:0c:0a:c5:e7:13:c1:cb:0d:46: 6d:bf:c6:40:50:d4:a5:64:a8:97:d6:18:a2:84:0b: 59:44:6a:0c:64:07:a4:c6:38:d4:38:2b:55:0e:c0: 55:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2F:34:90:BB:98:EE:FF:5A:B7:32:46:16:9A:84:B1:1F:C8:FE:55 X509v3 Authority Key Identifier: keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:94:60:26:06:c5:aa:48:54:cd:c7:26:a4:b8:d0:87:3d:a5: 76:ca:31:0f:64:c1:8d:9f:e7:36:74:ac:aa:c3:0e:91:76:46: b4:db:71:e1:fe:bc:c3:8c:d7:5b:49:94:b5:9d:d7:e5:69:17: af:6a:ab:a8:39:60:ae:c6:c5:dd:40:5f:47:da:2e:89:76:07: 55:97:2e:08:fb:87:fa:c7:c9:66:58:79:37:90:a2:9a:a1:c4: 9a:d8:ae:16:83:ed:7f:53:5a:a3:1b:a2:d9:49:9b:bb:6e:06: 80:74:7f:d7:8b:79:65:54:f5:b8:b8:a9:78:13:36:a3:9c:80: 27:0d:cc:0d:13:e0:76:e3:38:8b:3d:fc:5a:dd:46:59:4f:97: 66:5a:07:98:39:b3:93:42:7a:14:69:a1:2e:01:51:91:94:d6: 6e:85:ab:ce:98:cf:87:ab:49:bf:0f:e1:86:dd:1f:50:a2:92: c0:d8:50:e4:d3:98:61:ad:1a:4c:fe:45:43:3f:b7:d3:69:4e: 97:da:d1:89:ee:de:bf:af:c7:05:26:a0:e5:20:74:03:3c:bf: fe:43:57:06:aa:8e:f2:5c:02:17:9c:4e:d6:61:43:37:52:59: c6:77:74:4a:a6:c9:32:65:89:9d:5d:bf:3b:53:ec:96:4c:56: c8:8e:35:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxNjQxMTAvBgNVBAUTKDJGNkFERjQyQUZEMTY0MDgwRUEzMUUwRjNCODMzOEJF RDZEQTFFNTkwHhcNMjQxMTIyMjAwMTEzWhcNMjQxMTI5MjAwMTEzWjAYMRYwFAYD VQQDEw02NzQwZTMwOS1mZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolKQVm/hNLcGROh2q7Dk8dJOAv2V5jWCOkmzwKHBhvqPSEvVLcbcI349IHVf 5s2ZPHcP8xmIACUgrDtrjoOmU+dnMWcVRw9GuiQugCWSvEmzTnmSxi6oGMUQzEiJ wirkjG/Xnhd002PxtYNbJDarrOv6v/q9KXAFIZpA617osl84+T8/G25sIyg8Yb81 t8kq6n2qbB11sD0EDxfG83irnLHrzLQ5sRAq6xHixYOeuJVi6tW6/KsceEMEdVZn uoo8pstD3w70N5fXCvOtZhiTAX5n8qFsNUwMCsXnE8HLDUZtv8ZAUNSlZKiX1hii hAtZRGoMZAekxjjUOCtVDsBVvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkvNJC7 mO7/WrcyRhaahLEfyP5VMB8GA1UdIwQYMBaAFC9q30Kv0WQIDqMeDzuDOL7W2h5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzE2NC8yMjhBQkY3NDg5 OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpBZ09veDRQTzRNNHZ0YmFI bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wycmZRcV9SWkFnT294NFBPNE00dnRiYUhsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzE2NC8yMjhBQkY3NDg5OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpB Z09veDRQTzRNNHZ0YmFIbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzlGAmBsWqSFTNxyakuNCHPaV2yjEPZMGNn+c2dKyqww6Rdka023Hh /rzDjNdbSZS1ndflaRevaquoOWCuxsXdQF9H2i6JdgdVly4I+4f6x8lmWHk3kKKa ocSa2K4Wg+1/U1qjG6LZSZu7bgaAdH/Xi3llVPW4uKl4EzajnIAnDcwNE+B24ziL Pfxa3UZZT5dmWgeYObOTQnoUaaEuAVGRlNZuhavOmM+Hq0m/D+GG3R9QopLA2FDk 05hhrRpM/kVDP7fTaU6X2tGJ7t6/r8cFJqDlIHQDPL/+Q1cGqo7yXAIXnE7WYUM3 UlnGd3RKpskyZYmdXb87U+yWTFbIjjX4 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:49 2024 by rpki-client on console-ams.rpki-client.org