$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft File: L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft (raw, json) Hash identifier: jKef4yFvBKdiHu5lJ+lX8rXeEfR5nbUE21xg4Tz1LXQ= Subject key identifier: FB:42:E6:C0:EA:16:D1:6E:E8:FA:F3:EF:C6:50:E3:4E:D6:2A:16:FA Authority key identifier: 2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 Certificate issuer: /CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Certificate serial: 0383 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft Manifest number: 0383 Signing time: Sat 23 Nov 2024 00:22:01 +0000 Manifest this update: Sat 23 Nov 2024 00:22:00 +0000 Manifest next update: Sat 30 Nov 2024 00:22:00 +0000 Files and hashes: 1: L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl (hash: mBE8pejiABjR5GYueClhAfKTE8Lt8pkSSt/46x3EyLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 899 (0x383) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Validity Not Before: Nov 23 00:22:00 2024 GMT Not After : Nov 30 00:22:00 2024 GMT Subject: CN=67412029-6a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:a9:00:81:0b:ff:c7:f9:27:f5:63:0a:db: d4:ed:07:85:d8:f6:37:57:0c:85:16:28:6f:7e:32: ae:18:d4:6f:9e:78:4e:43:37:f6:f7:74:6e:70:89: 83:c7:d1:12:63:d1:1c:95:27:aa:47:5a:8f:5c:cb: 27:84:9f:14:91:b5:31:86:8f:31:6a:9e:ec:09:5c: b5:c1:91:3d:f7:5c:d4:79:1b:92:4b:96:d7:2c:ed: bf:00:14:08:db:80:44:5d:5a:a5:95:53:39:e5:05: 40:d2:5d:d6:cc:af:67:f2:67:28:57:fb:7b:da:6d: d8:d4:9d:1c:d2:5f:52:e4:50:66:3c:76:72:ac:f2: 0e:31:59:96:0c:c5:c8:84:15:0f:8e:da:cb:74:3c: 53:80:3e:95:f4:4f:af:1a:49:ca:6b:5c:cd:20:95: c8:b5:a9:db:b7:ee:c5:ad:9b:46:70:4b:67:c5:99: bf:94:08:13:7b:15:20:fa:46:14:3c:9f:9e:74:8a: f8:f2:1f:0b:7c:6b:5a:9b:7b:bb:be:ef:b1:14:e8: c5:c3:b6:9d:6d:3a:cf:bc:2c:4d:9a:8b:ba:fe:a8: ad:56:ba:58:e5:1f:61:37:ab:28:89:46:a9:ee:cc: 62:b5:0d:00:e2:99:fc:41:69:bb:94:79:44:c1:d6: d0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:42:E6:C0:EA:16:D1:6E:E8:FA:F3:EF:C6:50:E3:4E:D6:2A:16:FA X509v3 Authority Key Identifier: keyid:2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:77:e4:e4:9d:38:7f:fd:88:f2:63:0c:de:18:6b:74:46:ca: d0:7a:db:49:8a:ea:cb:f8:2a:a4:a1:76:1c:04:bf:a0:3d:d5: a2:27:33:93:f5:65:3e:55:0c:c3:83:f7:70:1d:3d:6e:ab:75: 60:b8:1b:7e:56:3d:45:e6:1a:4d:17:26:10:5c:bf:bb:ce:50: 84:44:3f:ed:0f:7a:1d:a3:2d:ec:c1:08:f7:06:cb:aa:66:20: 4d:06:f8:79:e1:04:18:d0:88:3a:9a:33:70:61:ab:8f:27:7c: d2:ab:df:9d:4a:05:e3:fd:b4:f2:f3:38:b0:61:e2:6f:bf:87: cd:77:06:35:0c:8e:8c:49:ae:17:c0:21:67:3e:fb:34:65:b3: c4:da:47:bb:d9:ef:1f:ce:ea:be:7a:b1:d4:cd:06:63:19:79: 0d:aa:86:ca:1e:3b:1f:b9:22:41:98:00:4d:ea:0c:13:84:04: ec:5f:6e:73:61:1c:91:7e:46:5d:e5:84:c6:ab:62:42:f6:73: fb:a3:4a:00:2e:82:37:f1:8b:ca:fa:c1:ce:6f:cd:2f:c6:fb: ed:90:d0:57:96:37:b7:04:bd:bc:a4:07:a6:a1:4d:5f:60:2a: 5f:7f:c3:03:25:36:87:5b:4c:4b:d9:36:c6:a3:10:01:2b:f8: b7:d3:fe:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMUUxMTAvBgNVBAUTKDJGQzQ2MDE5RUU1MkQxRTkxQkIxRDFEOEUxN0U5OThB NzE1QjcyNDQwHhcNMjQxMTIzMDAyMjAwWhcNMjQxMTMwMDAyMjAwWjAYMRYwFAYD VQQDEw02NzQxMjAyOS02YTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzepAIEL/8f5J/VjCtvU7QeF2PY3VwyFFihvfjKuGNRvnnhOQzf293RucImD x9ESY9EclSeqR1qPXMsnhJ8UkbUxho8xap7sCVy1wZE991zUeRuSS5bXLO2/ABQI 24BEXVqllVM55QVA0l3WzK9n8mcoV/t72m3Y1J0c0l9S5FBmPHZyrPIOMVmWDMXI hBUPjtrLdDxTgD6V9E+vGknKa1zNIJXItanbt+7FrZtGcEtnxZm/lAgTexUg+kYU PJ+edIr48h8LfGtam3u7vu+xFOjFw7adbTrPvCxNmou6/qitVrpY5R9hN6soiUap 7sxitQ0A4pn8QWm7lHlEwdbQqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtC5sDq FtFu6Prz78ZQ407WKhb6MB8GA1UdIwQYMBaAFC/EYBnuUtHpG7HR2OF+mYpxW3JE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQxRS9DN0MwQzFEQTdE NjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBla2JzZEhZNFg2WmluRmJj a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UmdHZTVTMGVrYnNkSFk0WDZaaW5GYmNrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQxRS9DN0MwQzFEQTdENjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBl a2JzZEhZNFg2WmluRmJja1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVd+TknTh//YjyYwzeGGt0RsrQettJiurL+CqkoXYcBL+gPdWiJzOT 9WU+VQzDg/dwHT1uq3VguBt+Vj1F5hpNFyYQXL+7zlCERD/tD3odoy3swQj3Bsuq ZiBNBvh54QQY0Ig6mjNwYauPJ3zSq9+dSgXj/bTy8ziwYeJvv4fNdwY1DI6MSa4X wCFnPvs0ZbPE2ke72e8fzuq+erHUzQZjGXkNqobKHjsfuSJBmABN6gwThATsX25z YRyRfkZd5YTGq2JC9nP7o0oALoI38YvK+sHOb80vxvvtkNBXlje3BL28pAemoU1f YCpff8MDJTaHW0xL2TbGoxABK/i30/64 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:36 2024 by rpki-client on console-fra.rpki-client.org