$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json) Hash identifier: ZyTAiH14lx+PpJOgcTnt8lejmE5NzdbEA4qz2ncZgxI= Subject key identifier: E9:44:E7:62:1A:D4:01:AB:33:71:46:C0:63:4F:7D:06:AF:73:34:AB Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Certificate serial: 03E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft Manifest number: 0585 Signing time: Sat 23 Nov 2024 00:10:28 +0000 Manifest this update: Sat 23 Nov 2024 00:10:28 +0000 Manifest next update: Sat 30 Nov 2024 00:10:28 +0000 Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: MTN8+1doXeGfTqWNiUSTW5x5+JjU0+d4WY7Eph4mA5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Validity Not Before: Nov 23 00:10:28 2024 GMT Not After : Nov 30 00:10:28 2024 GMT Subject: CN=67411d74-8745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:d9:41:4d:70:b3:f7:d1:b7:04:3d:42:05: 57:42:30:97:15:62:79:41:0b:d2:34:24:e2:a5:fa: da:89:25:fb:f6:4d:48:ea:e0:aa:d7:54:c4:ca:39: ae:1e:70:8b:f0:a9:98:a2:c7:26:b8:4c:1a:45:d3: d3:dc:b1:28:3a:11:dd:8c:d4:84:33:00:6e:47:4e: 8c:f4:34:47:10:86:ae:9e:ac:8d:83:38:9b:1a:b2: e6:33:2b:dd:9d:86:ec:0d:f6:1e:ae:c0:27:e0:fc: 4a:11:fd:ee:8f:e7:60:4f:5d:ab:08:7d:ea:fc:33: 62:8a:27:c8:c8:e9:70:5b:03:1b:b6:2b:66:c0:ef: 9b:38:ba:6b:ef:e0:a0:35:e4:20:f3:0b:e3:08:a8: f5:2a:71:c9:99:36:99:e4:02:ae:08:34:f0:6c:e8: c0:62:3e:c4:2e:46:e6:8b:a5:77:dd:c2:e4:de:f0: 1a:de:8f:8d:8a:46:3d:b4:8b:31:99:89:74:db:91: 88:92:86:9b:79:4e:89:dc:85:e0:23:63:d5:69:d2: 0c:3f:9b:19:e7:92:70:ef:d9:f9:68:40:1b:8d:9d: 6f:58:16:05:c6:39:f5:02:de:3e:f7:c9:d6:a4:20: 82:52:de:15:69:b5:7f:c5:d7:93:6b:b1:41:b4:5b: 30:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:44:E7:62:1A:D4:01:AB:33:71:46:C0:63:4F:7D:06:AF:73:34:AB X509v3 Authority Key Identifier: keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ff:ba:19:65:a9:d7:c3:ac:21:4e:25:f0:1e:6c:ad:40:a2: d3:4b:77:ae:b4:85:c5:55:62:ba:67:6d:f1:f1:c9:40:42:f0: b2:61:56:42:88:9e:01:12:06:90:ca:c2:f5:d0:b5:54:6a:a2: 17:7b:9e:a4:1e:e8:81:31:f6:ee:a2:83:ca:bd:46:d1:3e:8c: 4a:37:ee:77:85:19:42:ed:94:9c:97:d8:1f:42:32:82:bd:1f: 3b:f1:21:b4:c1:ba:11:79:66:a6:71:e0:a7:b3:f4:db:0a:cc: 63:16:19:01:8f:6d:9e:56:38:10:44:a9:49:69:1c:c1:77:e7: 5e:73:69:4c:a2:58:5d:83:e3:ca:04:38:34:b2:48:e9:e9:84: b2:96:22:64:8a:3e:22:db:52:d3:ae:e1:79:dc:0c:e1:e4:51: e4:86:76:56:92:51:24:82:73:07:b4:c2:0d:9b:11:d5:c3:e6: e7:86:86:ad:03:5e:d7:c8:31:4a:9b:7f:27:73:7c:9c:d4:94: a6:c5:89:a5:02:51:5a:53:46:26:d6:00:c7:22:2b:ff:0a:74: b8:6e:0f:8b:56:22:d2:09:a1:37:00:ec:0e:0e:3d:d9:5e:e8: f5:38:1c:33:11:55:3b:e7:11:2e:cc:3e:1e:f1:8c:20:bd:e8: 60:32:bd:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDNGQzE3MEU4REY1QURCRkExQjYzNzBCNzQ1MEYyOEZB RTBCMzVBMTgwHhcNMjQxMTIzMDAxMDI4WhcNMjQxMTMwMDAxMDI4WjAYMRYwFAYD VQQDEw02NzQxMWQ3NC04NzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9bZQU1ws/fRtwQ9QgVXQjCXFWJ5QQvSNCTipfraiSX79k1I6uCq11TEyjmu HnCL8KmYoscmuEwaRdPT3LEoOhHdjNSEMwBuR06M9DRHEIaunqyNgzibGrLmMyvd nYbsDfYersAn4PxKEf3uj+dgT12rCH3q/DNiiifIyOlwWwMbtitmwO+bOLpr7+Cg NeQg8wvjCKj1KnHJmTaZ5AKuCDTwbOjAYj7ELkbmi6V33cLk3vAa3o+NikY9tIsx mYl025GIkoabeU6J3IXgI2PVadIMP5sZ55Jw79n5aEAbjZ1vWBYFxjn1At4+98nW pCCCUt4VabV/xdeTa7FBtFsw9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlE52Ia 1AGrM3FGwGNPfQavczSrMB8GA1UdIwQYMBaAFD/BcOjfWtv6G2Nwt0UPKPrgs1oY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJfb2JZM0MzUlE4by11Q3pX aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4Rnc2TjlhMl9vYlkzQzNSUThvLXVDeldoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJf b2JZM0MzUlE4by11Q3pXaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq/7oZZanXw6whTiXwHmytQKLTS3eutIXFVWK6Z23x8clAQvCyYVZC iJ4BEgaQysL10LVUaqIXe56kHuiBMfbuooPKvUbRPoxKN+53hRlC7ZScl9gfQjKC vR878SG0wboReWamceCns/TbCsxjFhkBj22eVjgQRKlJaRzBd+dec2lMolhdg+PK BDg0skjp6YSyliJkij4i21LTruF53Azh5FHkhnZWklEkgnMHtMINmxHVw+bnhoat A17XyDFKm38nc3yc1JSmxYmlAlFaU0Ym1gDHIiv/CnS4bg+LViLSCaE3AOwODj3Z Xuj1OBwzEVU75xEuzD4e8YwgvehgMr1t -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org