$ rpki-client -vvf rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft File: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft (raw, json) Hash identifier: lyGXUKtzXJX/JXNKZgSgleFUS/sfOkAhUagEJv57gDM= Subject key identifier: 08:FB:F5:AA:98:C1:5E:17:DA:96:9E:2A:FC:ED:71:31:B4:0A:20:20 Authority key identifier: 3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4 Certificate issuer: /CN=A911829D/serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft Manifest number: 0B Signing time: Sat 23 Nov 2024 06:03:48 +0000 Manifest this update: Sat 23 Nov 2024 06:03:48 +0000 Manifest next update: Sat 30 Nov 2024 06:03:48 +0000 Files and hashes: 1: PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl (hash: J8iMhQ0JjmEI6E0SClyHKbJ4bbw/r/py95zdMkxQtGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911829D/serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4 Validity Not Before: Nov 23 06:03:48 2024 GMT Not After : Nov 30 06:03:48 2024 GMT Subject: CN=67417044-7157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b6:70:17:e0:68:ae:59:d0:f0:b9:0d:00:71: ca:c5:0e:22:27:0a:17:8a:92:c3:54:6b:a3:5b:4e: d4:5d:db:ad:44:b5:9a:00:08:e0:cf:de:a0:52:be: 15:63:09:43:10:5c:a4:5a:bf:09:a0:5c:d8:37:1e: 82:12:35:f8:ab:6e:fd:ae:66:72:46:6e:61:18:90: 8e:91:16:b5:13:e4:57:0a:fe:9c:78:0a:94:da:cd: 44:9b:be:30:33:2c:49:69:60:71:d4:c1:5b:f7:46: b6:d1:51:dc:29:ff:f9:51:78:6b:e3:f7:fc:d8:b7: c3:82:76:39:aa:de:ec:2c:d8:d4:c8:16:a7:73:74: 5f:0b:1a:df:55:18:4b:05:c4:34:78:24:72:1c:56: b0:04:ae:77:77:84:02:4d:dd:a7:6c:11:15:d1:63: 23:c2:e2:b0:27:85:78:ce:22:59:c2:c9:83:7f:2c: d2:c7:54:0e:7d:7b:18:d0:fc:a4:70:7a:9c:97:e8: f0:cf:e2:2b:5e:8e:50:8e:41:b1:ef:57:be:bb:52: 70:3e:ca:87:f8:9a:da:95:cc:41:2d:69:8d:35:e2: 8d:d3:3a:cb:b2:48:9f:7d:d1:97:13:32:53:f2:0b: 0e:9c:e3:2e:45:0e:a9:4b:52:4f:6e:d9:70:4b:cb: 26:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FB:F5:AA:98:C1:5E:17:DA:96:9E:2A:FC:ED:71:31:B4:0A:20:20 X509v3 Authority Key Identifier: keyid:3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:aa:1b:9d:36:47:d5:a7:2f:e0:2a:1a:8d:8e:84:93:48:70: de:25:96:3b:82:0e:47:73:a4:13:06:43:04:36:cc:c8:3f:13: a1:81:0f:71:ec:9e:b7:ab:87:04:63:35:ce:8a:37:63:90:0a: 03:88:14:c3:50:a5:14:d3:46:93:d9:2c:ef:4f:a5:03:b9:f6: 76:db:86:ca:23:b1:bc:38:e2:88:32:f1:7e:4f:0b:76:fa:2e: d7:ba:44:bf:cf:38:40:06:33:6f:e6:24:e7:5f:75:80:14:be: a9:65:e4:4d:21:81:83:ab:1f:35:ab:9e:df:5c:ac:c8:89:69: 2f:90:ff:cb:af:12:ea:6f:c9:a0:eb:2f:2c:17:e4:17:74:9f: 7d:18:d8:9f:8c:21:5a:50:d8:cc:0d:b0:5a:0c:42:c4:b6:cd: 16:ba:fd:fc:c7:b4:6a:37:18:8e:45:9e:68:cb:b7:cd:12:3e: fe:2d:2a:20:20:0c:cc:9c:d3:a7:fe:ad:68:fa:48:f1:d6:78: 9f:d9:40:00:34:9a:a5:dd:15:f3:2d:c8:d3:df:16:af:78:cd: ee:31:fb:16:5d:56:7a:0c:40:53:1c:bd:4f:1e:6e:56:37:fa: 6c:31:32:57:45:8d:5e:99:2e:26:08:98:66:b2:fb:44:31:6c: ae:d6:7f:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODI5RDExMC8GA1UEBRMoM0MxOENEOEI1QjAxRDUwMjM3NjQwQzI2QzAzNzc1NDZE ODA0RkRCNDAeFw0yNDExMjMwNjAzNDhaFw0yNDExMzAwNjAzNDhaMBgxFjAUBgNV BAMTDTY3NDE3MDQ0LTcxNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDStnAX4GiuWdDwuQ0AccrFDiInCheKksNUa6NbTtRd261EtZoACODP3qBSvhVj CUMQXKRavwmgXNg3HoISNfirbv2uZnJGbmEYkI6RFrUT5FcK/px4CpTazUSbvjAz LElpYHHUwVv3RrbRUdwp//lReGvj9/zYt8OCdjmq3uws2NTIFqdzdF8LGt9VGEsF xDR4JHIcVrAErnd3hAJN3adsERXRYyPC4rAnhXjOIlnCyYN/LNLHVA59exjQ/KRw epyX6PDP4itejlCOQbHvV767UnA+yof4mtqVzEEtaY014o3TOsuySJ990ZcTMlPy Cw6c4y5FDqlLUk9u2XBLyyadAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCPv1qpjB Xhfalp4q/O1xMbQKICAwHwYDVR0jBBgwFoAUPBjNi1sB1QI3ZAwmwDd1RtgE/bQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4MjlELzUxMjU1MjZFOUM2 RDExRUY4M0E4QkQxNkM0RjlBRTAyL1BCak5pMXNCMVFJM1pBd213RGQxUnRnRV9i US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEJqTmkxc0IxUUkzWkF3bXdEZDFSdGdFX2JRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 MjlELzUxMjU1MjZFOUM2RDExRUY4M0E4QkQxNkM0RjlBRTAyL1BCak5pMXNCMVFJ M1pBd213RGQxUnRnRV9iUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA+qG502R9WnL+AqGo2OhJNIcN4lljuCDkdzpBMGQwQ2zMg/E6GBD3Hs nrerhwRjNc6KN2OQCgOIFMNQpRTTRpPZLO9PpQO59nbbhsojsbw44ogy8X5PC3b6 Lte6RL/POEAGM2/mJOdfdYAUvqll5E0hgYOrHzWrnt9crMiJaS+Q/8uvEupvyaDr LywX5Bd0n30Y2J+MIVpQ2MwNsFoMQsS2zRa6/fzHtGo3GI5FnmjLt80SPv4tKiAg DMyc06f+rWj6SPHWeJ/ZQAA0mqXdFfMtyNPfFq94ze4x+xZdVnoMQFMcvU8eblY3 +mwxMldFjV6ZLiYImGay+0QxbK7Wf4E= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org