$ rpki-client -vvf rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft File: BRxkf9n6kgFgZoaDhn19Oovl2cE.mft (raw, json) Hash identifier: dKCOqiGB6JKNNUmtbgHxzYkW/TxoX+i88klnwrUb5wI= Subject key identifier: 45:6C:F8:E7:A4:4F:2D:97:DA:87:94:82:C5:AE:68:21:1C:23:23:AE Authority key identifier: 05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1 Certificate issuer: /CN=A9176682/serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1 Certificate serial: 3422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft Manifest number: 3421 Signing time: Fri 22 Nov 2024 15:16:38 +0000 Manifest this update: Fri 22 Nov 2024 15:16:38 +0000 Manifest next update: Fri 29 Nov 2024 15:16:38 +0000 Files and hashes: 1: BRxkf9n6kgFgZoaDhn19Oovl2cE.crl (hash: k65E2/m4oQ6gnI59JrnqtOwTJLSM5YeKSDjvcnUkxN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176682/serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1 Validity Not Before: Nov 22 15:16:38 2024 GMT Not After : Nov 29 15:16:38 2024 GMT Subject: CN=6740a056-d8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d2:7c:2b:39:3d:59:da:3c:d0:59:64:32:50: b3:3e:af:6d:2e:e9:8f:f2:3d:f8:2d:c2:43:f3:82: 0a:e3:be:73:6b:37:3d:ec:e9:f6:7e:7c:f4:cf:3e: 2a:fd:bd:d6:1c:67:01:f1:3a:df:30:77:1f:ee:7b: 22:e4:bb:2d:8d:aa:15:28:6a:d0:1d:57:73:b0:24: 04:64:c1:ad:1d:91:b3:bc:8e:a0:fa:df:6f:be:4f: ef:06:89:37:fa:93:42:2b:cc:98:b1:6d:db:6d:13: 11:db:e8:84:6c:9b:78:49:9c:b1:6c:be:fd:4b:5e: 8e:96:01:eb:6f:e2:9d:88:41:a7:ce:b6:37:e4:2c: b4:ee:7c:7d:ef:93:f3:a2:13:9b:ef:14:16:73:e9: a0:0b:06:f4:97:64:27:8b:35:8e:51:e7:5a:b8:a3: a0:62:73:09:3f:e3:be:b0:a1:f9:fc:52:40:4d:85: e4:b7:83:6d:e9:7c:ee:c4:1a:b4:76:32:03:c2:d4: d3:d7:98:49:97:03:60:8a:ce:f9:e6:d5:05:26:cf: 36:14:c3:db:cb:fc:4d:f4:bb:ef:7e:ba:e1:24:c8: e3:df:43:4f:cd:bb:60:65:72:0e:af:48:89:8c:0f: af:86:c6:3a:c7:3b:bc:36:aa:60:f2:6d:15:30:ee: 44:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6C:F8:E7:A4:4F:2D:97:DA:87:94:82:C5:AE:68:21:1C:23:23:AE X509v3 Authority Key Identifier: keyid:05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:0d:28:03:b1:ea:54:ef:b1:45:13:ce:6b:cb:f7:b4:01:75: 93:d2:11:33:4e:e2:8d:fa:2f:5c:ea:b5:1c:ec:9b:ed:dd:ee: 09:a5:a7:e1:d0:41:31:d2:cf:ca:b9:3e:42:e2:51:45:98:36: 03:da:c9:47:50:12:4f:34:eb:d1:9f:2f:de:d1:14:50:6f:74: f4:4e:27:44:e6:10:9f:0f:0f:f7:4c:6e:54:f9:7d:7e:64:bd: ad:59:03:b6:eb:70:1d:7d:1a:c4:ff:6e:ac:68:59:3a:59:76: ac:f0:ef:29:29:bc:49:42:4c:9f:96:39:ba:8c:fa:33:06:f8: 1d:6d:9c:7f:bc:ce:0e:50:d5:c1:04:c2:1f:c3:ee:56:98:bd: 19:c9:cd:d0:45:44:1f:c6:19:f9:bc:ba:62:03:f8:c9:86:ff: af:5b:67:d2:2c:51:97:1e:c8:79:b4:f8:24:2a:2f:6d:24:b5: a3:ef:51:77:19:a5:21:cb:6e:b8:88:3d:ba:cb:2a:c4:a4:2f: 3d:36:99:b9:38:bd:16:0a:9a:73:80:20:06:03:46:5a:4b:40: f2:f3:15:36:4f:49:cf:7e:7f:9c:7f:a4:57:87:46:0a:43:b1: c2:c8:84:c6:ae:84:94:47:98:d5:04:eb:b8:37:66:0e:e4:e7: 63:5d:6e:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY2ODIxMTAvBgNVBAUTKDA1MUM2NDdGRDlGQTkyMDE2MDY2ODY4Mzg2N0Q3RDNB OEJFNUQ5QzEwHhcNMjQxMTIyMTUxNjM4WhcNMjQxMTI5MTUxNjM4WjAYMRYwFAYD VQQDEw02NzQwYTA1Ni1kOGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49J8Kzk9Wdo80FlkMlCzPq9tLumP8j34LcJD84IK475zazc97On2fnz0zz4q /b3WHGcB8TrfMHcf7nsi5LstjaoVKGrQHVdzsCQEZMGtHZGzvI6g+t9vvk/vBok3 +pNCK8yYsW3bbRMR2+iEbJt4SZyxbL79S16OlgHrb+KdiEGnzrY35Cy07nx975Pz ohOb7xQWc+mgCwb0l2QnizWOUedauKOgYnMJP+O+sKH5/FJATYXkt4Nt6XzuxBq0 djIDwtTT15hJlwNgis755tUFJs82FMPby/xN9LvvfrrhJMjj30NPzbtgZXIOr0iJ jA+vhsY6xzu8Nqpg8m0VMO5EDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVs+Oek Ty2X2oeUgsWuaCEcIyOuMB8GA1UdIwQYMBaAFAUcZH/Z+pIBYGaGg4Z9fTqL5dnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjY4Mi83NTg1RTAwQzFE QTgxMUUyOEQ4N0UzQTIwOEIwMkNEMi9CUnhrZjluNmtnRmdab2FEaG4xOU9vdmwy Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JSeGtmOW42a2dGZ1pvYURobjE5T292bDJjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjY4Mi83NTg1RTAwQzFEQTgxMUUyOEQ4N0UzQTIwOEIwMkNEMi9CUnhrZjluNmtn Rmdab2FEaG4xOU9vdmwyY0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjDSgDsepU77FFE85ry/e0AXWT0hEzTuKN+i9c6rUc7Jvt3e4Jpafh 0EEx0s/KuT5C4lFFmDYD2slHUBJPNOvRny/e0RRQb3T0TidE5hCfDw/3TG5U+X1+ ZL2tWQO263AdfRrE/26saFk6WXas8O8pKbxJQkyfljm6jPozBvgdbZx/vM4OUNXB BMIfw+5WmL0Zyc3QRUQfxhn5vLpiA/jJhv+vW2fSLFGXHsh5tPgkKi9tJLWj71F3 GaUhy264iD26yyrEpC89Npm5OL0WCppzgCAGA0ZaS0Dy8xU2T0nPfn+cf6RXh0YK Q7HCyITGroSUR5jVBOu4N2YO5OdjXW5h -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org