$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json) Hash identifier: iDI3rHRM1HLfBKWwCid87zpZKeSs5CoPMwyLcxtU0Jo= Subject key identifier: BF:B1:CE:4E:7E:18:D5:D6:C6:9F:E6:6B:BD:8E:D6:54:32:C7:DF:79 Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Certificate serial: 3426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft Manifest number: 3426 Signing time: Sun 24 Nov 2024 14:33:06 +0000 Manifest this update: Sun 24 Nov 2024 14:33:06 +0000 Manifest next update: Sun 01 Dec 2024 14:33:06 +0000 Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: r5koHKe/ifgysv6704MjkvJ2CntshBdtvd4q+Z3o6+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13350 (0x3426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Validity Not Before: Nov 24 14:33:06 2024 GMT Not After : Dec 1 14:33:06 2024 GMT Subject: CN=67433922-df53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:30:1a:0a:34:13:e1:27:8a:cb:5b:fc:af:2f: 38:03:b7:33:86:02:8b:29:d6:1b:a6:ab:d6:67:95: e1:ad:97:22:b6:d3:8a:a7:9a:28:6f:d6:3f:bb:b3: cb:48:94:70:9f:ac:29:04:cd:28:95:59:9e:1f:0b: a1:92:e3:4b:98:17:f0:48:6a:ef:4a:8b:5f:46:81: aa:f7:81:bd:b0:88:b9:12:dd:b4:42:4a:5d:e3:67: 9a:1a:a5:22:3d:f0:a6:d8:27:68:dc:dd:59:b5:f7: 45:f5:64:90:76:ab:06:10:89:96:5a:14:a8:78:86: 01:32:82:24:b6:5e:a9:95:7b:d6:5a:b8:9f:8f:54: 65:ca:bc:9c:2b:65:fb:45:b3:b2:18:e1:22:71:a6: bb:89:e2:ec:1a:86:96:f2:d1:4e:ad:94:62:21:6d: 96:f4:dc:7c:26:7a:3f:3f:2b:5c:92:30:d1:aa:25: 10:08:6e:d9:d1:5b:4f:bc:dc:eb:4f:f6:3b:16:2b: 59:03:95:de:7b:2a:b8:cf:bd:b8:7b:c5:d6:f6:7c: f3:03:ae:dd:59:c2:a8:ba:51:c6:db:5d:4b:74:63: 55:d4:cd:0f:98:7b:bf:47:86:81:b6:fc:e5:48:44: 1c:4f:c5:c6:58:16:5c:3c:ba:d8:28:24:cd:0a:2a: e9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B1:CE:4E:7E:18:D5:D6:C6:9F:E6:6B:BD:8E:D6:54:32:C7:DF:79 X509v3 Authority Key Identifier: keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:b7:fb:4c:ec:3f:5d:2d:21:be:6c:59:8d:ef:52:4e:0a:a6: 95:5c:a5:45:df:a2:6d:0c:8f:20:27:70:de:39:93:fc:3d:d7: 9c:e9:ae:3b:fa:10:8b:60:dd:ab:5e:1b:64:7a:25:b6:25:f5: 40:50:6a:b9:84:f8:11:6c:5a:29:ba:47:53:8e:da:69:aa:2d: f9:9b:9d:27:5d:26:55:50:bb:a5:c4:a8:51:3b:ec:17:42:4a: dc:04:ac:8e:4c:a9:9b:2a:5b:ab:0a:b1:75:2b:eb:0a:12:d6: e2:99:81:43:dd:f8:73:5b:cb:1c:c4:64:dc:10:e6:5e:c7:45: b1:87:93:08:31:47:45:da:34:5b:66:ee:bd:d6:d4:b4:dd:53: 01:39:11:f3:99:0c:09:58:84:10:2a:c3:31:fc:89:7e:00:2e: fa:b6:e8:73:80:52:15:25:fb:ab:47:f6:bb:a7:9b:c1:87:04: 2b:b9:ad:c9:01:0a:03:00:b4:fc:33:a8:35:d0:2e:af:0a:74: 5f:f6:de:9b:2d:54:98:ed:dc:22:da:eb:c8:2e:5b:5e:c5:b7: 31:df:5a:5a:7e:90:4f:e7:45:3d:c0:29:8e:1a:0f:bb:e6:fd: 4e:7c:19:04:12:56:f0:72:a0:e8:b7:c4:69:be:ea:1b:dd:fa: ee:92:90:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY0QUExMTAvBgNVBAUTKDMxRjVCQzk0NzI3MTAyNEFGNDc5RjYxMzY0NjZEQUNC RjE0Mzg2QzIwHhcNMjQxMTI0MTQzMzA2WhcNMjQxMjAxMTQzMzA2WjAYMRYwFAYD VQQDEw02NzQzMzkyMi1kZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zAaCjQT4SeKy1v8ry84A7czhgKLKdYbpqvWZ5XhrZcittOKp5oob9Y/u7PL SJRwn6wpBM0olVmeHwuhkuNLmBfwSGrvSotfRoGq94G9sIi5Et20Qkpd42eaGqUi PfCm2Cdo3N1ZtfdF9WSQdqsGEImWWhSoeIYBMoIktl6plXvWWrifj1RlyrycK2X7 RbOyGOEicaa7ieLsGoaW8tFOrZRiIW2W9Nx8Jno/PytckjDRqiUQCG7Z0VtPvNzr T/Y7FitZA5Xeeyq4z724e8XW9nzzA67dWcKoulHG211LdGNV1M0PmHu/R4aBtvzl SEQcT8XGWBZcPLrYKCTNCirpbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+xzk5+ GNXWxp/ma72O1lQyx995MB8GA1UdIwQYMBaAFDH1vJRycQJK9Hn2E2Rm2svxQ4bC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjRBQS9FOUYyQ0E0MDFE OEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFrcjBlZllUWkdiYXlfRkRo c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mVzhsSEp4QWtyMGVmWVRaR2JheV9GRGhzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjRBQS9FOUYyQ0E0MDFEOEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFr cjBlZllUWkdiYXlfRkRoc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgt/tM7D9dLSG+bFmN71JOCqaVXKVF36JtDI8gJ3DeOZP8Pdec6a47 +hCLYN2rXhtkeiW2JfVAUGq5hPgRbFopukdTjtppqi35m50nXSZVULulxKhRO+wX QkrcBKyOTKmbKlurCrF1K+sKEtbimYFD3fhzW8scxGTcEOZex0Wxh5MIMUdF2jRb Zu691tS03VMBORHzmQwJWIQQKsMx/Il+AC76tuhzgFIVJfurR/a7p5vBhwQrua3J AQoDALT8M6g10C6vCnRf9t6bLVSY7dwi2uvILltexbcx31pafpBP50U9wCmOGg+7 5v1OfBkEElbwcqDot8Rpvuob3frukpBz -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:04 2024 by rpki-client on console-fra.rpki-client.org