$ rpki-client -vvf rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft File: aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft (raw, json) Hash identifier: +cgxtbfIvNPC5/5lpgb0iU+AC559JMYWeD3iEtqZtNk= Subject key identifier: C1:3E:2E:73:45:48:FD:2B:D0:23:D5:3B:E1:A4:EE:CB:EE:90:1D:D2 Authority key identifier: 68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10 Certificate issuer: /CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710 Certificate serial: 1446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft Manifest number: 1446 Signing time: Fri 22 Nov 2024 16:54:18 +0000 Manifest this update: Fri 22 Nov 2024 16:54:18 +0000 Manifest next update: Fri 29 Nov 2024 16:54:18 +0000 Files and hashes: 1: aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl (hash: Egavgw9Ox6s0Dlhk9jR5jdM6x70TSYDboWAjp6TKj7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5190 (0x1446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710 Validity Not Before: Nov 22 16:54:18 2024 GMT Not After : Nov 29 16:54:18 2024 GMT Subject: CN=6740b73a-77d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:f3:80:51:be:ad:75:77:dd:1b:1a:76:a3: fa:50:aa:d4:5e:ee:1e:f2:ce:8e:1d:5a:34:c3:8c: f9:3c:47:2e:13:26:81:1a:d7:d2:93:4b:c4:55:1a: e7:e6:cf:bc:c3:b1:1e:d2:88:f4:ce:20:b1:96:a6: 6a:ac:d0:aa:4b:9a:f3:b4:f1:71:b4:e5:da:9d:6c: 48:47:77:c5:43:dc:5f:31:5a:0a:dc:c2:86:29:5e: 92:b2:f0:fb:7e:b3:1a:08:d7:e5:66:4f:51:27:5a: f2:a9:aa:8f:c9:80:66:a9:ab:8b:0c:75:f4:85:30: ab:55:c8:80:bc:73:a4:bf:24:51:e2:85:cc:ea:78: f1:bb:5e:39:ba:40:20:f9:15:1d:db:c7:13:49:b4: b3:32:d9:a8:9c:1b:cd:03:ea:26:b7:e6:b5:2e:a1: 8c:1f:ff:ea:d9:1a:15:42:e7:e1:97:69:43:81:b9: 9b:a7:04:8f:ee:6f:41:bd:ae:7c:3d:be:a4:4e:06: 00:d9:85:6f:9b:cd:51:87:2d:cc:b7:95:77:5c:97: b4:29:b9:3c:73:ac:a3:01:90:e1:97:40:95:5a:e0: d3:19:ad:80:06:0b:f3:8a:b5:e2:9f:21:79:83:00: 49:8d:14:77:e4:2e:df:16:89:1a:d7:20:f0:b4:2c: 32:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3E:2E:73:45:48:FD:2B:D0:23:D5:3B:E1:A4:EE:CB:EE:90:1D:D2 X509v3 Authority Key Identifier: keyid:68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f5:7f:f6:69:6d:68:1d:7f:14:c9:ae:43:c8:f8:56:3e:f1: 89:82:29:22:6e:6a:6d:39:08:a2:d7:80:57:47:15:c6:8f:5a: 02:f2:8d:73:fe:ef:92:b8:de:1f:b0:8b:ab:87:1f:93:42:29: 05:94:b9:e0:95:b3:f2:62:72:c7:c6:b0:98:e4:3d:55:dd:cc: d3:cf:77:41:f8:5e:65:f3:71:8a:6e:3d:c5:5a:18:49:e3:4d: 6c:ff:14:6f:77:f6:a5:c4:76:82:82:f6:08:4e:96:ba:d1:05: db:d4:d2:8c:4f:b2:7c:a3:7a:09:af:63:c6:ee:27:14:ca:4d: c1:4b:21:b5:55:a0:c1:4e:a4:fd:79:07:99:f8:10:b0:2e:10: b8:bf:af:ee:4e:07:cc:8d:b5:98:99:6e:41:d1:23:9d:43:a2: d0:74:6c:59:84:5d:90:38:ce:6b:c3:29:dc:7d:5a:94:bd:35: 5e:e9:2e:ae:b2:7a:60:97:f9:07:8c:cd:10:80:8e:0e:fe:54: 1e:ff:7c:d5:0b:33:14:68:b6:b1:be:a9:82:bf:30:b3:2c:11: 98:ad:fb:12:34:d2:21:74:13:10:56:10:fb:e8:e1:db:8c:a5: 39:6d:64:5b:dd:8c:1e:64:dd:0c:89:8c:cb:69:0f:ae:ee:a9: 8b:0e:81:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxMjUxMTAvBgNVBAUTKDY4QzYxMTk3RUJBNDFBNjREODVGMjU1OUUxRDQwRDZF NzVGQ0I3MTAwHhcNMjQxMTIyMTY1NDE4WhcNMjQxMTI5MTY1NDE4WjAYMRYwFAYD VQQDEw02NzQwYjczYS03N2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcXzgFG+rXV33RsadqP6UKrUXu4e8s6OHVo0w4z5PEcuEyaBGtfSk0vEVRrn 5s+8w7Ee0oj0ziCxlqZqrNCqS5rztPFxtOXanWxIR3fFQ9xfMVoK3MKGKV6SsvD7 frMaCNflZk9RJ1ryqaqPyYBmqauLDHX0hTCrVciAvHOkvyRR4oXM6njxu145ukAg +RUd28cTSbSzMtmonBvNA+omt+a1LqGMH//q2RoVQufhl2lDgbmbpwSP7m9Bva58 Pb6kTgYA2YVvm81Rhy3Mt5V3XJe0Kbk8c6yjAZDhl0CVWuDTGa2ABgvzirXinyF5 gwBJjRR35C7fFoka1yDwtCwyQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFME+LnNF SP0r0CPVO+Gk7svukB3SMB8GA1UdIwQYMBaAFGjGEZfrpBpk2F8lWeHUDW51/LcQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDEyNS9GQUI2QkU4ODVE NjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dtVFlYeVZaNGRRTmJuWDh0 eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNWVJsLXVrR21UWVh5Vlo0ZFFOYm5YOHR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDEyNS9GQUI2QkU4ODVENjAxMUU4QjM0OUE4MEZDNEY5QUUwMi9hTVlSbC11a0dt VFlYeVZaNGRRTmJuWDh0eEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt9X/2aW1oHX8Uya5DyPhWPvGJgikibmptOQii14BXRxXGj1oC8o1z /u+SuN4fsIurhx+TQikFlLnglbPyYnLHxrCY5D1V3czTz3dB+F5l83GKbj3FWhhJ 401s/xRvd/alxHaCgvYITpa60QXb1NKMT7J8o3oJr2PG7icUyk3BSyG1VaDBTqT9 eQeZ+BCwLhC4v6/uTgfMjbWYmW5B0SOdQ6LQdGxZhF2QOM5rwyncfVqUvTVe6S6u snpgl/kHjM0QgI4O/lQe/3zVCzMUaLaxvqmCvzCzLBGYrfsSNNIhdBMQVhD76OHb jKU5bWRb3YweZN0MiYzLaQ+u7qmLDoFg -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:49 2024 by rpki-client on console-fra.rpki-client.org