$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft File: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft (raw, json) Hash identifier: WU9ZwfylTKrbBIepLNijQOcBQKsOajJAD468vqJ30gA= Subject key identifier: 0E:69:A6:19:C7:E5:0F:3D:6C:AA:A6:49:72:A7:43:B4:B2:D1:F8:4E Authority key identifier: 03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 Certificate issuer: /CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft Manifest number: 050F Signing time: Fri 22 Nov 2024 23:11:11 +0000 Manifest this update: Fri 22 Nov 2024 23:11:10 +0000 Manifest next update: Fri 29 Nov 2024 23:11:10 +0000 Files and hashes: 1: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl (hash: lUOPvT8EGJK0uFsZOu4yjgEratuSsG9Mv4wG2huNng0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Validity Not Before: Nov 22 23:11:10 2024 GMT Not After : Nov 29 23:11:10 2024 GMT Subject: CN=67410f8f-65ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:84:9f:e5:e8:3c:2e:11:02:de:b4:b0:99:10: e5:16:67:41:11:fc:19:df:95:70:c3:32:dd:f9:8e: 14:21:73:fb:8f:e7:6a:a0:4d:57:ac:c7:08:c7:5a: 4b:7c:99:5d:5b:8c:c8:10:ac:ec:bd:dc:f7:7b:a9: 7f:28:a7:4c:4d:30:c8:e3:7b:70:73:62:8e:9e:de: 53:e6:91:35:12:1f:6e:0b:14:3b:41:98:83:cb:1c: 82:61:5d:49:9e:7b:aa:4d:09:43:23:61:a9:57:04: 9a:b6:6b:89:17:5f:63:af:6a:83:a6:31:2f:00:80: bc:cf:1d:67:d0:7f:3c:74:5f:52:b4:8d:d3:ce:3e: 20:67:e4:00:52:61:de:38:ca:58:26:82:aa:e2:37: c3:fb:77:a6:59:bd:1c:eb:fb:6d:fc:e3:8a:04:df: 3e:85:4e:66:f4:f1:7c:8e:bc:68:55:e0:8d:db:f1: b6:53:e2:ee:37:0b:bb:cc:31:65:1d:9f:eb:0d:d5: b1:45:08:94:10:f0:34:f9:0f:7f:30:11:90:b5:7c: 30:65:9d:ae:e7:2b:96:fc:49:d7:82:08:72:64:e9: df:97:e4:07:6d:28:40:fb:4a:4f:c2:65:b1:35:25: b8:8a:c8:22:8c:77:be:0a:03:84:bf:db:aa:be:c3: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:69:A6:19:C7:E5:0F:3D:6C:AA:A6:49:72:A7:43:B4:B2:D1:F8:4E X509v3 Authority Key Identifier: keyid:03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:d9:be:db:9b:d1:7a:4f:11:5e:53:22:d6:02:ca:47:46:e3: 01:85:05:64:06:8d:8e:ee:e1:48:70:97:10:1b:99:16:26:e3: d7:56:73:b2:25:4a:4c:b1:89:5d:6b:7c:51:f4:1f:90:2f:3d: b1:29:b3:ff:8c:95:82:6d:73:fe:b3:4d:68:61:52:dc:e7:dd: 34:56:6e:17:65:55:2c:30:82:95:0b:d2:10:6f:c5:67:0a:18: 83:36:0e:dc:12:1e:47:25:6f:97:25:5b:82:c9:fb:94:5f:a3: 1c:84:35:72:b9:23:94:c4:d2:6f:fd:89:cd:a9:17:36:41:dc: 67:5b:e2:7a:01:85:49:05:e6:db:61:5c:6d:28:c0:ba:e2:1e: f0:ac:3e:ab:a3:16:ea:5c:7c:2f:12:ee:f5:6f:5a:f5:6e:57: 42:b9:45:61:28:df:aa:f9:ff:b9:dd:35:d3:09:ec:06:02:2b: 0c:8b:18:53:78:39:b2:9b:81:d5:ca:49:5a:48:24:ea:97:9f: 88:f7:d7:63:14:3e:3c:d6:d8:2e:54:c1:5b:24:b9:d4:37:47: cc:1b:bc:2d:9f:51:ab:6e:45:20:0b:92:6b:68:4b:80:58:c4: 67:06:32:e6:9c:5d:04:83:00:fc:57:1f:f5:1f:d6:5e:84:63: 30:40:ed:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NkExMTAvBgNVBAUTKDAzMzVBNDgwMEY5OTQxNzAwOUQwODU2NUJFQUU2MDI5 MjM0QkQyOTcwHhcNMjQxMTIyMjMxMTEwWhcNMjQxMTI5MjMxMTEwWjAYMRYwFAYD VQQDEw02NzQxMGY4Zi02NWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoSf5eg8LhEC3rSwmRDlFmdBEfwZ35VwwzLd+Y4UIXP7j+dqoE1XrMcIx1pL fJldW4zIEKzsvdz3e6l/KKdMTTDI43twc2KOnt5T5pE1Eh9uCxQ7QZiDyxyCYV1J nnuqTQlDI2GpVwSatmuJF19jr2qDpjEvAIC8zx1n0H88dF9StI3Tzj4gZ+QAUmHe OMpYJoKq4jfD+3emWb0c6/tt/OOKBN8+hU5m9PF8jrxoVeCN2/G2U+LuNwu7zDFl HZ/rDdWxRQiUEPA0+Q9/MBGQtXwwZZ2u5yuW/EnXgghyZOnfl+QHbShA+0pPwmWx NSW4isgijHe+CgOEv9uqvsOmJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5pphnH 5Q89bKqmSXKnQ7Sy0fhOMB8GA1UdIwQYMBaAFAM1pIAPmUFwCdCFZb6uYCkjS9KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS8wQTE1NTIxOEUw OTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFYQUowSVZsdnE1Z0tTTkww cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F6V2tnQS1aUVhBSjBJVmx2cTVnS1NOTDBwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2QS8wQTE1NTIxOEUwOTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFY QUowSVZsdnE1Z0tTTkwwcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV2b7bm9F6TxFeUyLWAspHRuMBhQVkBo2O7uFIcJcQG5kWJuPXVnOy JUpMsYlda3xR9B+QLz2xKbP/jJWCbXP+s01oYVLc5900Vm4XZVUsMIKVC9IQb8Vn ChiDNg7cEh5HJW+XJVuCyfuUX6MchDVyuSOUxNJv/YnNqRc2QdxnW+J6AYVJBebb YVxtKMC64h7wrD6roxbqXHwvEu71b1r1bldCuUVhKN+q+f+53TXTCewGAisMixhT eDmym4HVyklaSCTql5+I99djFD481tguVMFbJLnUN0fMG7wtn1GrbkUgC5JraEuA WMRnBjLmnF0EgwD8Vx/1H9ZehGMwQO0x -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org