$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: ZkIya+RMG1x64S1u45+QLFFczJaoD+J9ZY0U1c2p3Ac= Subject key identifier: 82:E3:91:35:E6:2E:83:7A:75:C1:C1:BB:72:21:24:27:D8:B8:33:1A Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 0192 Signing time: Sat 23 Nov 2024 02:34:06 +0000 Manifest this update: Sat 23 Nov 2024 02:34:05 +0000 Manifest next update: Sat 30 Nov 2024 02:34:05 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: 9/8wqoBFQFY3SaI6dUa8tkCl102IPWXpRWu7biKHtAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Nov 23 02:34:05 2024 GMT Not After : Nov 30 02:34:05 2024 GMT Subject: CN=67413f1e-53cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:b9:21:bc:6d:19:3b:77:87:7d:3b:f9:c8: ff:5f:18:43:5a:55:0b:e8:85:b2:47:7c:e7:42:e7: 49:c2:26:d3:65:9a:85:91:a3:dc:f0:f1:77:fe:c3: 47:3b:e7:01:b5:f3:46:91:3f:ab:3d:08:ec:92:3d: 8d:86:17:d7:0b:d4:d0:50:bd:cb:86:b9:8e:84:3d: f3:c5:a4:01:cb:50:22:70:db:01:d7:76:f5:26:73: b9:06:4b:44:2a:48:e2:ad:d6:fe:01:60:d5:b5:22: 4b:3c:16:74:7b:b4:28:6a:3c:6e:c5:fa:5b:fb:00: d0:7e:db:5c:0c:d0:a1:66:3a:6b:a6:b9:fb:05:28: 79:6d:c6:46:76:e1:a3:81:e3:73:20:7e:f5:d7:2b: a6:07:21:aa:39:84:70:28:5a:23:d4:68:2e:74:1a: ae:e6:9e:0b:d1:18:f1:79:6a:7a:fa:20:c2:1e:0e: 98:36:c5:3a:51:4c:c9:66:be:a1:34:06:1c:0d:a2: c8:84:2f:16:c7:c3:e6:72:7b:6d:2f:d8:f5:b5:8f: 56:d3:b3:c3:21:26:02:c4:22:c6:8b:0b:de:41:a3: ef:00:5b:23:e3:8f:f0:29:e8:5f:06:35:3f:5b:4c: 31:45:94:c6:a6:97:51:34:70:11:fe:fe:77:0a:86: 97:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E3:91:35:E6:2E:83:7A:75:C1:C1:BB:72:21:24:27:D8:B8:33:1A X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9a:94:a1:5f:a0:ea:e9:31:c4:51:70:f3:fd:3a:77:7a:b8: 38:b6:de:a0:d9:05:c8:a6:41:8c:2b:6d:b2:e4:72:53:b4:27: 74:a0:31:ab:94:01:c4:0e:ab:ec:cd:4c:7f:a8:99:fa:0e:ba: cf:d9:78:13:d1:95:d1:6c:05:fb:57:93:e5:31:68:4e:b7:95: b4:02:0a:94:b9:97:4a:08:bb:af:b7:6d:75:26:16:1f:66:f9: c0:cf:ca:56:c0:87:46:33:66:57:a1:e0:dd:48:99:ff:3d:04: bc:b5:40:00:71:7a:c9:be:00:14:81:17:9f:3e:d7:f8:fc:2f: 96:a0:56:d5:41:23:99:be:3a:be:75:dc:69:48:52:02:b0:7d: 1e:88:e0:af:67:a0:7d:f0:fb:18:9d:f6:5e:ad:58:6e:0c:5e: 1b:a8:8f:b1:71:1f:c1:93:f5:50:71:92:be:df:ee:88:1d:63: e8:6c:81:93:7b:47:31:62:9b:7f:d9:94:42:fd:ce:f4:be:f0: 57:5e:03:ba:26:0a:91:19:1a:dd:88:ff:1e:8c:7c:88:20:df: 5d:80:69:f4:80:b5:5c:51:a3:bf:55:2c:06:73:e1:ef:fc:ba: 49:90:16:6c:b8:0a:f4:d3:ba:5b:08:a1:2b:7d:2f:db:47:1f: a5:4b:89:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjQxMTIzMDIzNDA1WhcNMjQxMTMwMDIzNDA1WjAYMRYwFAYD VQQDEw02NzQxM2YxZS01M2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdu5IbxtGTt3h307+cj/XxhDWlUL6IWyR3znQudJwibTZZqFkaPc8PF3/sNH O+cBtfNGkT+rPQjskj2NhhfXC9TQUL3LhrmOhD3zxaQBy1AicNsB13b1JnO5BktE Kkjirdb+AWDVtSJLPBZ0e7Qoajxuxfpb+wDQfttcDNChZjprprn7BSh5bcZGduGj geNzIH711yumByGqOYRwKFoj1GgudBqu5p4L0RjxeWp6+iDCHg6YNsU6UUzJZr6h NAYcDaLIhC8Wx8PmcnttL9j1tY9W07PDISYCxCLGiwveQaPvAFsj44/wKehfBjU/ W0wxRZTGppdRNHAR/v53CoaXpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILjkTXm LoN6dcHBu3IhJCfYuDMaMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAumpShX6Dq6THEUXDz/Tp3erg4tt6g2QXIpkGMK22y5HJTtCd0oDGr lAHEDqvszUx/qJn6DrrP2XgT0ZXRbAX7V5PlMWhOt5W0AgqUuZdKCLuvt211JhYf ZvnAz8pWwIdGM2ZXoeDdSJn/PQS8tUAAcXrJvgAUgRefPtf4/C+WoFbVQSOZvjq+ ddxpSFICsH0eiOCvZ6B98PsYnfZerVhuDF4bqI+xcR/Bk/VQcZK+3+6IHWPobIGT e0cxYpt/2ZRC/c70vvBXXgO6JgqRGRrdiP8ejHyIIN9dgGn0gLVcUaO/VSwGc+Hv /LpJkBZsuAr007pbCKErfS/bRx+lS4mP -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org