$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json) Hash identifier: JjH1ETV21PKIXLTTpklPEIiNEiTu7ushjXEJVuzelNQ= Subject key identifier: 2C:96:79:F4:97:F0:89:AC:33:5D:47:6B:60:D0:04:E8:F3:C4:10:99 Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft Manifest number: 0193 Signing time: Sat 23 Nov 2024 02:34:08 +0000 Manifest this update: Sat 23 Nov 2024 02:34:08 +0000 Manifest next update: Sat 30 Nov 2024 02:34:08 +0000 Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: OqsF62cF5ufvWEdciPHUXTD7urB69ZO+cfoRpln1rhw=) 2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: iRtSO8+daPW9a/0caUBf0vb/ctWu9OylLCXHZ0eMlmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Validity Not Before: Nov 23 02:34:08 2024 GMT Not After : Nov 30 02:34:08 2024 GMT Subject: CN=67413f20-aa9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2b:ee:9a:ae:ce:37:a6:b6:a3:bd:f0:4f:a0: 4e:6b:85:1b:a4:e9:d0:20:86:b2:6a:5d:48:f3:64: 7f:46:ee:0e:3f:e5:7b:2e:d2:6c:fd:af:b2:8d:0f: ac:24:2b:ac:28:ed:45:06:98:d4:9e:ca:ed:b1:58: e1:d3:f0:60:7d:16:db:29:58:44:6b:99:ff:8d:1a: 63:78:6e:85:2b:f8:91:9d:2d:23:98:90:49:a4:74: e4:81:d0:3f:b1:36:26:0c:ad:47:7d:70:b3:09:56: 02:34:42:80:66:03:c4:59:94:c0:20:ab:39:e6:96: f7:fd:73:c6:a2:a8:7f:5d:1e:3e:c5:ad:9d:e4:31: b7:ce:1e:01:32:c7:66:2d:5d:5f:01:42:74:f6:aa: bd:cb:b4:68:60:ca:31:9c:fe:7f:8a:79:98:99:02: 97:c3:4e:69:90:85:45:92:76:60:39:6e:12:66:d8: e9:21:ad:9c:82:ba:11:26:7d:36:58:4a:f9:12:84: ab:2d:68:17:09:ce:84:17:11:a8:d1:f5:47:d9:18: 08:82:11:cf:89:42:24:51:cc:3c:df:31:11:6e:fa: 9a:b3:0e:f5:00:ef:00:70:bc:bf:7f:73:16:72:5d: 6d:a2:59:ea:16:37:d9:9a:01:13:66:8b:b4:76:e2: a0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:96:79:F4:97:F0:89:AC:33:5D:47:6B:60:D0:04:E8:F3:C4:10:99 X509v3 Authority Key Identifier: keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5e:f7:a5:dd:e6:7e:a5:cb:0d:50:a1:8f:11:4d:13:a1:82: c7:5f:53:2e:a9:50:f1:02:76:60:c4:6d:5c:83:97:b0:74:2c: 75:4f:92:b5:81:d1:9b:2b:d0:0a:be:b9:da:38:54:67:0e:92: ba:70:f8:c2:f5:b7:27:55:31:cf:e2:d9:0e:a2:d1:43:55:a4: 5a:0d:4c:13:1c:81:02:fc:d9:ad:cd:ad:af:6c:d4:10:40:1b: b7:92:75:38:03:e2:58:54:1c:61:a9:0d:12:7a:0b:a2:df:7b: bd:d2:62:72:29:87:d5:76:7f:fb:a3:52:c2:a7:1c:42:0b:93: a2:46:b6:4c:54:e2:a3:a5:60:5b:96:98:3e:d5:c0:75:db:1c: 88:96:6d:7f:af:85:e5:25:1a:cc:d1:b5:86:0a:83:84:cc:d3: 72:13:cd:19:ec:11:4f:e3:6b:44:b6:97:56:00:c0:fc:9d:0f: af:29:1f:67:5e:0f:b4:2e:75:f9:2f:d1:76:1e:05:f7:02:86: 73:d1:e3:12:9f:69:35:2c:20:cd:0e:b3:75:69:af:08:8a:a9: 69:b7:78:68:e7:e9:ec:7e:06:e7:b3:bb:ce:c4:a3:8c:fe:12: d8:e3:2e:cb:6d:d2:06:a0:43:88:08:d7:e0:b4:2c:7b:43:a9: 38:f1:21:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjdENTExMC8GA1UEBRMoMzFEQzRCNkMzMkQ3QjVFNUYzQTg2MDE3Mzg4NUE2NDVG NEZDMDE1MjAeFw0yNDExMjMwMjM0MDhaFw0yNDExMzAwMjM0MDhaMBgxFjAUBgNV BAMTDTY3NDEzZjIwLWFhOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWK+6ars43prajvfBPoE5rhRuk6dAghrJqXUjzZH9G7g4/5Xsu0mz9r7KND6wk K6wo7UUGmNSeyu2xWOHT8GB9FtspWERrmf+NGmN4boUr+JGdLSOYkEmkdOSB0D+x NiYMrUd9cLMJVgI0QoBmA8RZlMAgqznmlvf9c8aiqH9dHj7FrZ3kMbfOHgEyx2Yt XV8BQnT2qr3LtGhgyjGc/n+KeZiZApfDTmmQhUWSdmA5bhJm2OkhrZyCuhEmfTZY SvkShKstaBcJzoQXEajR9UfZGAiCEc+JQiRRzDzfMRFu+pqzDvUA7wBwvL9/cxZy XW2iWeoWN9maARNmi7R24qB5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULJZ59Jfw iawzXUdrYNAE6PPEEJkwHwYDVR0jBBgwFoAUMdxLbDLXteXzqGAXOIWmRfT8AVIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2N0Q1L0RFRkNBNDUyQjQx QjExRURCNkM4REQ2N0M0RjlBRTAyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFW SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWR4TGJETFh0ZVh6cUdBWE9JV21SZlQ4QVZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 N0Q1L0RFRkNBNDUyQjQxQjExRURCNkM4REQ2N0M0RjlBRTAyL01keExiRExYdGVY enFHQVhPSVdtUmZUOEFWSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE9e96Xd5n6lyw1QoY8RTROhgsdfUy6pUPECdmDEbVyDl7B0LHVPkrWB 0Zsr0Aq+udo4VGcOkrpw+ML1tydVMc/i2Q6i0UNVpFoNTBMcgQL82a3Nra9s1BBA G7eSdTgD4lhUHGGpDRJ6C6Lfe73SYnIph9V2f/ujUsKnHEILk6JGtkxU4qOlYFuW mD7VwHXbHIiWbX+vheUlGszRtYYKg4TM03ITzRnsEU/ja0S2l1YAwPydD68pH2de D7Qudfkv0XYeBfcChnPR4xKfaTUsIM0Os3VprwiKqWm3eGjn6ex+Buezu87Eo4z+ EtjjLstt0gagQ4gI1+C0LHtDqTjxIRY= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org