$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft File: 28byJW3eXCxGqA6yQy8lcu3FN9Y.mft (raw, json) Hash identifier: UrwnpSuH+tqV3xyL6fSmtW0Hu138mg/GUNr1QNGUigk= Subject key identifier: 78:C2:2F:D8:50:EB:13:43:B3:A6:39:0B:BA:DB:EE:9B:A3:83:61:EA Authority key identifier: DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6 Certificate issuer: /CN=A914D0E3/serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft Manifest number: 15 Signing time: Sat 23 Nov 2024 05:56:28 +0000 Manifest this update: Sat 23 Nov 2024 05:56:27 +0000 Manifest next update: Sat 30 Nov 2024 05:56:27 +0000 Files and hashes: 1: 28byJW3eXCxGqA6yQy8lcu3FN9Y.crl (hash: 6VlnBYJR3KljaP4kcgOjmd7fknl0nDcmofc8y4/qbck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0E3/serialNumber=DBC6F2256DDE5C2C46A80EB2432F2572EDC537D6 Validity Not Before: Nov 23 05:56:27 2024 GMT Not After : Nov 30 05:56:27 2024 GMT Subject: CN=67416e8c-d3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:10:5e:4e:35:f2:1a:9b:c0:4e:09:f1:83:52: 38:dc:ca:62:71:81:ea:f8:6d:fe:02:23:6d:3a:2c: 6d:79:60:b9:51:5f:6c:a1:b3:09:f9:2f:2d:61:f3: 13:a5:c9:cb:db:6f:82:fe:1e:4c:b0:35:27:e2:bc: 3a:b2:3d:20:1d:94:f7:d8:f6:9e:6f:75:62:3b:3b: 85:79:33:c5:46:ff:99:6e:7f:19:71:46:47:ec:7d: 9e:39:eb:28:6b:83:d0:fe:13:0c:aa:14:cd:04:38: 46:ea:58:62:2f:fe:f4:4b:59:03:de:25:e5:d0:16: a4:91:d1:40:f0:e1:24:56:e1:ee:c9:46:b1:b9:81: ab:91:d4:fd:17:0f:dc:ac:ca:1f:d6:21:f4:de:d0: 7f:8e:c7:c3:1e:38:63:93:a5:8e:a0:90:be:31:c6: 29:6f:4d:43:e9:90:a2:79:b3:9a:32:c9:bd:6e:c5: 62:7d:cc:e1:f9:9b:6f:ba:d0:15:c9:eb:57:47:10: 00:21:86:74:79:d1:a3:8a:2a:c3:80:e0:78:60:c0: 3f:b5:ac:6f:52:18:14:8b:c5:82:a7:64:a3:20:e3: 4a:8f:45:b0:d7:7e:c6:01:0f:0f:b8:fa:35:91:68: 7b:f7:3d:33:c8:be:a5:9c:43:39:37:ba:63:48:10: 32:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C2:2F:D8:50:EB:13:43:B3:A6:39:0B:BA:DB:EE:9B:A3:83:61:EA X509v3 Authority Key Identifier: keyid:DB:C6:F2:25:6D:DE:5C:2C:46:A8:0E:B2:43:2F:25:72:ED:C5:37:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28byJW3eXCxGqA6yQy8lcu3FN9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/B35AB9FA8C7E11EF8E92E71BC4F9AE02/28byJW3eXCxGqA6yQy8lcu3FN9Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:b9:ee:4e:5d:1a:bf:db:6d:39:95:09:ac:31:30:ee:d1:0e: 84:23:e1:f9:6b:55:ac:1a:ec:d7:2a:7e:a7:9e:6d:44:af:01: 08:3d:1b:e1:a5:72:6a:95:e4:c8:22:ab:f2:53:05:1b:1e:a7: d0:61:00:05:21:67:34:1e:62:16:93:19:aa:09:98:a5:de:c7: 16:56:27:6c:35:b1:1e:53:3d:69:4f:e6:f7:97:79:81:2f:95: 65:57:8e:87:d7:91:2a:91:a7:55:32:9a:2c:b1:64:4f:3c:21: e5:69:7f:92:5f:e7:52:ca:05:45:c9:66:79:74:03:c8:c1:7e: 9d:58:de:49:56:8c:6b:f5:46:5c:1b:0a:f6:8c:e9:b6:33:ee: b8:89:58:a0:0c:42:14:5a:e3:3a:cc:7e:87:54:9e:47:8d:6e: 37:3a:8d:2e:47:5f:cb:4d:c8:84:0d:c4:fe:86:76:8f:0c:ba: ef:27:ef:91:31:ad:66:22:c7:d3:96:1d:d5:f6:63:b7:01:f4: 13:cd:31:67:1d:88:aa:8b:d1:5b:d7:a2:ec:80:8b:04:1a:48: ca:2c:99:d9:4e:dd:e4:e7:b4:f5:05:1e:92:23:08:66:4a:14: 66:d0:70:4f:4c:80:e0:20:a5:e6:8d:33:98:a4:62:b2:20:5a: 9d:fa:bb:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDBFMzExMC8GA1UEBRMoREJDNkYyMjU2RERFNUMyQzQ2QTgwRUIyNDMyRjI1NzJF REM1MzdENjAeFw0yNDExMjMwNTU2MjdaFw0yNDExMzAwNTU2MjdaMBgxFjAUBgNV BAMTDTY3NDE2ZThjLWQzZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjEF5ONfIam8BOCfGDUjjcymJxger4bf4CI206LG15YLlRX2yhswn5Ly1h8xOl ycvbb4L+HkywNSfivDqyPSAdlPfY9p5vdWI7O4V5M8VG/5lufxlxRkfsfZ456yhr g9D+EwyqFM0EOEbqWGIv/vRLWQPeJeXQFqSR0UDw4SRW4e7JRrG5gauR1P0XD9ys yh/WIfTe0H+Ox8MeOGOTpY6gkL4xxilvTUPpkKJ5s5oyyb1uxWJ9zOH5m2+60BXJ 61dHEAAhhnR50aOKKsOA4HhgwD+1rG9SGBSLxYKnZKMg40qPRbDXfsYBDw+4+jWR aHv3PTPIvqWcQzk3umNIEDJRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeMIv2FDr E0OzpjkLutvum6ODYeowHwYDVR0jBBgwFoAU28byJW3eXCxGqA6yQy8lcu3FN9Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMEUzL0IzNUFCOUZBOEM3 RTExRUY4RTkyRTcxQkM0RjlBRTAyLzI4YnlKVzNlWEN4R3FBNnlReThsY3UzRk45 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMjhieUpXM2VYQ3hHcUE2eVF5OGxjdTNGTjlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE MEUzL0IzNUFCOUZBOEM3RTExRUY4RTkyRTcxQkM0RjlBRTAyLzI4YnlKVzNlWEN4 R3FBNnlReThsY3UzRk45WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALS57k5dGr/bbTmVCawxMO7RDoQj4flrVawa7NcqfqeebUSvAQg9G+Gl cmqV5Mgiq/JTBRsep9BhAAUhZzQeYhaTGaoJmKXexxZWJ2w1sR5TPWlP5veXeYEv lWVXjofXkSqRp1UymiyxZE88IeVpf5Jf51LKBUXJZnl0A8jBfp1Y3klWjGv1Rlwb CvaM6bYz7riJWKAMQhRa4zrMfodUnkeNbjc6jS5HX8tNyIQNxP6Gdo8Muu8n75Ex rWYix9OWHdX2Y7cB9BPNMWcdiKqL0VvXouyAiwQaSMosmdlO3eTntPUFHpIjCGZK FGbQcE9MgOAgpeaNM5ikYrIgWp36u44= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org