$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft File: rcLQEHTd7bWHQSLy4bisO07c23s.mft (raw, json) Hash identifier: vZG+VWZO36Xg9lpTQSnNTvqftF7nSIxiCUg4rGR4Lk8= Subject key identifier: C9:B9:39:B1:50:73:AD:B0:BB:2D:7C:34:2E:F0:FC:B3:BD:AF:BC:CA Authority key identifier: AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B Certificate issuer: /CN=A9114DAE/serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B Certificate serial: 073E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft Manifest number: 073E Signing time: Fri 22 Nov 2024 21:07:59 +0000 Manifest this update: Fri 22 Nov 2024 21:07:59 +0000 Manifest next update: Fri 29 Nov 2024 21:07:59 +0000 Files and hashes: 1: rcLQEHTd7bWHQSLy4bisO07c23s.crl (hash: 0xVDPQJxb1gBXrPXcUujtFi5bYb25cm7dsb+1kOo/D0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854 (0x73e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114DAE/serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B Validity Not Before: Nov 22 21:07:59 2024 GMT Not After : Nov 29 21:07:59 2024 GMT Subject: CN=6740f2af-7eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:be:62:3c:6c:47:cf:58:01:2b:26:db:61:32: 40:09:f4:71:2a:d3:0a:d6:3c:31:c3:2b:9e:87:9b: af:78:59:56:78:ec:a0:26:5e:bb:4c:9a:9e:4f:57: 69:59:b2:60:85:e6:66:1e:bb:4f:7e:f5:97:96:3b: f4:cf:7c:be:42:dc:71:70:40:e8:5c:9e:4c:25:ff: 4c:37:9e:c2:bb:b1:6c:16:1b:6f:04:e0:0c:d8:22: 4a:e2:4f:24:01:fb:ef:dd:4c:97:f1:d0:11:42:c2: b2:38:05:14:07:43:01:c7:85:d6:cd:ee:72:ec:7e: 2c:f4:95:12:c2:bf:57:23:87:36:dc:b9:74:e7:9f: f8:8d:64:a6:4d:be:6f:d0:9c:e6:d2:b0:6b:ee:c8: bb:0d:37:ec:fc:52:0a:3c:80:33:4a:27:cf:ac:b3: 08:4e:0f:1b:94:e4:47:9a:ad:ff:2a:c4:90:62:79: df:51:15:2d:cf:db:b6:db:3c:f4:51:9a:21:01:9e: 70:3c:62:ba:a0:20:45:42:5a:78:af:3c:2f:b1:c4: 0b:42:a6:2e:75:0e:a7:66:fe:b3:09:d9:cc:07:a9: 15:2d:e2:99:a6:61:fc:97:f2:5d:cf:d7:cf:a6:0d: 68:41:86:37:11:da:24:9d:47:d2:13:9d:62:7d:0c: f4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B9:39:B1:50:73:AD:B0:BB:2D:7C:34:2E:F0:FC:B3:BD:AF:BC:CA X509v3 Authority Key Identifier: keyid:AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ce:0f:81:34:0c:93:33:3f:fb:58:ec:83:f2:18:fa:38:73: 9b:06:87:ba:18:39:cd:84:76:74:dc:a2:66:e7:39:1a:ba:18: 0a:06:1a:e9:5b:04:46:02:d3:15:a4:42:79:62:44:3d:9b:3e: d4:ac:89:a1:40:c6:75:8d:3e:58:15:5c:a3:40:bb:f9:1c:42: 36:72:9e:da:32:0d:cf:e1:5d:f4:3b:74:1a:3b:99:88:0d:4a: 63:a3:0a:23:36:9a:c6:0a:57:ce:49:12:8e:15:5a:81:94:da: 1f:e3:49:39:30:74:9f:ad:e0:38:37:bb:2a:3e:99:2f:da:b3: 0b:08:42:87:00:86:b7:89:66:52:5f:46:2e:74:7f:0e:6c:03: d7:50:cd:8f:5a:8b:1f:7c:b0:ab:aa:44:1c:bf:4a:52:b0:c7: 27:af:32:56:99:1f:55:c2:0e:51:ca:bc:a0:3f:c0:5b:64:5f: 32:45:a7:77:c8:90:bc:17:ab:88:6b:f9:bf:e5:f9:02:d2:20: 30:e5:34:ad:4e:de:63:9f:e0:99:8c:3b:4f:3e:68:e2:e8:47: a0:44:2d:25:df:1d:64:82:90:c2:c7:14:e2:a0:7f:23:9f:1c: a1:8a:28:73:35:3f:74:e8:03:09:b8:23:ce:6c:4b:65:0a:21: 2b:3b:da:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREQUUxMTAvBgNVBAUTKEFEQzJEMDEwNzREREVEQjU4NzQxMjJGMkUxQjhBQzNC NEVEQ0RCN0IwHhcNMjQxMTIyMjEwNzU5WhcNMjQxMTI5MjEwNzU5WjAYMRYwFAYD VQQDEw02NzQwZjJhZi03ZWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyr5iPGxHz1gBKybbYTJACfRxKtMK1jwxwyueh5uveFlWeOygJl67TJqeT1dp WbJgheZmHrtPfvWXljv0z3y+QtxxcEDoXJ5MJf9MN57Cu7FsFhtvBOAM2CJK4k8k Afvv3UyX8dARQsKyOAUUB0MBx4XWze5y7H4s9JUSwr9XI4c23Ll055/4jWSmTb5v 0Jzm0rBr7si7DTfs/FIKPIAzSifPrLMITg8blORHmq3/KsSQYnnfURUtz9u22zz0 UZohAZ5wPGK6oCBFQlp4rzwvscQLQqYudQ6nZv6zCdnMB6kVLeKZpmH8l/Jdz9fP pg1oQYY3EdoknUfSE51ifQz0xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMm5ObFQ c62wuy18NC7w/LO9r7zKMB8GA1UdIwQYMBaAFK3C0BB03e21h0Ei8uG4rDtO3Nt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERBRS8yN0U5MzQxODAz MzAxMUVCOEJFQzhCMENDNEY5QUUwMi9yY0xRRUhUZDdiV0hRU0x5NGJpc08wN2My M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JjTFFFSFRkN2JXSFFTTHk0YmlzTzA3YzIzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NERBRS8yN0U5MzQxODAzMzAxMUVCOEJFQzhCMENDNEY5QUUwMi9yY0xRRUhUZDdi V0hRU0x5NGJpc08wN2MyM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnzg+BNAyTMz/7WOyD8hj6OHObBoe6GDnNhHZ03KJm5zkauhgKBhrp WwRGAtMVpEJ5YkQ9mz7UrImhQMZ1jT5YFVyjQLv5HEI2cp7aMg3P4V30O3QaO5mI DUpjowojNprGClfOSRKOFVqBlNof40k5MHSfreA4N7sqPpkv2rMLCEKHAIa3iWZS X0YudH8ObAPXUM2PWosffLCrqkQcv0pSsMcnrzJWmR9Vwg5RyrygP8BbZF8yRad3 yJC8F6uIa/m/5fkC0iAw5TStTt5jn+CZjDtPPmji6EegRC0l3x1kgpDCxxTioH8j nxyhiihzNT906AMJuCPObEtlCiErO9pP -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:05 2024 by rpki-client on console-fra.rpki-client.org