$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft File: 5xDyX0M7YmytODrCnzbCYXy-8Ak.mft (raw, json) Hash identifier: dunveDSN2TiMcNUbM8JOqbPdNKNYFX74ppCvWo7aNWU= Subject key identifier: 6F:63:EA:F5:02:BF:97:57:F0:9B:07:A6:D5:33:EF:0A:D6:33:85:FC Authority key identifier: E7:10:F2:5F:43:3B:62:6C:AD:38:3A:C2:9F:36:C2:61:7C:BE:F0:09 Certificate issuer: /CN=A9184324/serialNumber=E710F25F433B626CAD383AC29F36C2617CBEF009 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xDyX0M7YmytODrCnzbCYXy-8Ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft Manifest number: 20 Signing time: Sat 23 Nov 2024 05:46:35 +0000 Manifest this update: Sat 23 Nov 2024 05:46:34 +0000 Manifest next update: Sat 30 Nov 2024 05:46:34 +0000 Files and hashes: 1: 5xDyX0M7YmytODrCnzbCYXy-8Ak.crl (hash: PdHWJOGEDx+tD7x/BRGrcGfqNFs1l8/+4ivciJGuWU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.crl rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xDyX0M7YmytODrCnzbCYXy-8Ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324/serialNumber=E710F25F433B626CAD383AC29F36C2617CBEF009 Validity Not Before: Nov 23 05:46:34 2024 GMT Not After : Nov 30 05:46:34 2024 GMT Subject: CN=67416c3a-2a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:db:d5:76:12:63:78:12:3c:aa:39:a3:cf:6d: 0a:08:26:11:0b:44:67:ea:2c:28:11:95:d4:60:c8: 1f:88:43:8b:6b:f7:1e:3d:54:ca:74:30:15:55:93: 2f:16:a2:97:0e:b8:44:59:62:fa:18:55:10:34:9b: 9d:42:69:e4:ce:df:65:86:63:3c:3d:90:ae:bc:2e: 87:f9:e6:5b:04:86:80:a5:95:e4:14:de:21:92:78: 40:09:0f:4b:62:bb:87:95:81:6c:5f:65:2c:72:05: 28:a4:06:e8:17:ba:65:64:04:2e:75:1e:b0:14:d4: f6:f4:50:96:a3:05:0b:25:80:1f:e3:e6:b7:e3:5c: a1:a3:7f:78:ee:b0:47:26:42:af:c8:b0:b4:db:03: 29:1a:a3:ea:9c:2f:7d:f3:74:27:89:28:cf:86:df: e4:d3:a9:69:ac:19:3d:c0:92:96:77:88:40:ce:6b: 8b:60:fd:0e:3d:d0:5d:8e:fd:e8:68:c0:6b:eb:68: f0:32:08:87:51:7b:5d:f0:b0:21:be:f9:9a:bb:f7: 6b:4a:a3:b3:b2:d2:05:45:db:e8:6c:db:ef:f2:6d: 05:3d:c2:b0:80:3a:ed:0b:70:c3:48:a1:89:28:c3: e3:89:32:f9:46:cc:e9:22:a9:77:c8:88:b0:e0:00: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:63:EA:F5:02:BF:97:57:F0:9B:07:A6:D5:33:EF:0A:D6:33:85:FC X509v3 Authority Key Identifier: keyid:E7:10:F2:5F:43:3B:62:6C:AD:38:3A:C2:9F:36:C2:61:7C:BE:F0:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xDyX0M7YmytODrCnzbCYXy-8Ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/F4ABE12C7B1C11EFAC109416C4F9AE02/5xDyX0M7YmytODrCnzbCYXy-8Ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:60:d1:b6:c7:b2:97:61:fa:df:1a:74:8b:2c:28:41:02:bd: b5:ab:26:9c:02:aa:18:f6:da:b0:52:0d:4c:1e:aa:49:cd:bc: 38:90:7a:61:91:ff:d7:b8:35:6c:dc:e3:b0:3a:e3:1a:e2:06: 75:e6:c4:42:c2:58:14:b9:b9:bf:21:18:4e:10:75:d3:11:f3: 11:a6:8b:a7:a1:e6:a6:27:df:47:5b:6c:00:54:f6:ac:72:cb: 0f:e8:c6:76:d9:3d:a0:17:f1:78:4d:70:71:a6:23:13:a1:20: 09:2c:2e:b9:9f:e0:32:c2:8b:1c:a8:9f:f0:e9:95:5a:a9:a7: 75:ae:4a:c8:42:96:0c:3f:b4:32:94:73:a9:86:d0:84:82:80: 6b:e2:d6:fe:70:30:f7:fe:56:0e:91:53:20:b9:7a:b1:fa:55: f1:3b:fe:e6:2e:65:10:71:5f:4b:27:69:81:71:80:37:50:24: 30:ea:ff:42:60:7c:07:8c:fc:22:49:de:d7:62:4e:62:77:55: 3e:d3:f5:fa:84:f1:a5:fb:db:3f:32:fc:99:82:07:77:5e:db: 6a:89:f0:d0:5c:ee:0e:5d:89:09:a8:b8:62:bf:bf:72:1e:84: 9b:9f:0d:74:52:e5:84:84:8c:fc:f8:eb:f6:de:17:e4:19:2b: 5c:1a:ab:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDMyNDExMC8GA1UEBRMoRTcxMEYyNUY0MzNCNjI2Q0FEMzgzQUMyOUYzNkMyNjE3 Q0JFRjAwOTAeFw0yNDExMjMwNTQ2MzRaFw0yNDExMzAwNTQ2MzRaMBgxFjAUBgNV BAMTDTY3NDE2YzNhLTJhM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo29V2EmN4EjyqOaPPbQoIJhELRGfqLCgRldRgyB+IQ4tr9x49VMp0MBVVky8W opcOuERZYvoYVRA0m51CaeTO32WGYzw9kK68Lof55lsEhoClleQU3iGSeEAJD0ti u4eVgWxfZSxyBSikBugXumVkBC51HrAU1Pb0UJajBQslgB/j5rfjXKGjf3jusEcm Qq/IsLTbAykao+qcL33zdCeJKM+G3+TTqWmsGT3AkpZ3iEDOa4tg/Q490F2O/eho wGvraPAyCIdRe13wsCG++Zq792tKo7Oy0gVF2+hs2+/ybQU9wrCAOu0LcMNIoYko w+OJMvlGzOkiqXfIiLDgAItvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb2Pq9QK/ l1fwmwem1TPvCtYzhfwwHwYDVR0jBBgwFoAU5xDyX0M7YmytODrCnzbCYXy+8Akw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0MzI0L0Y0QUJFMTJDN0Ix QzExRUZBQzEwOTQxNkM0RjlBRTAyLzV4RHlYME03WW15dE9EckNuemJDWVh5LThB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNXhEeVgwTTdZbXl0T0RyQ256YkNZWHktOEFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 MzI0L0Y0QUJFMTJDN0IxQzExRUZBQzEwOTQxNkM0RjlBRTAyLzV4RHlYME03WW15 dE9EckNuemJDWVh5LThBay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEdg0bbHspdh+t8adIssKEECvbWrJpwCqhj22rBSDUweqknNvDiQemGR /9e4NWzc47A64xriBnXmxELCWBS5ub8hGE4QddMR8xGmi6eh5qYn30dbbABU9qxy yw/oxnbZPaAX8XhNcHGmIxOhIAksLrmf4DLCixyon/DplVqpp3WuSshClgw/tDKU c6mG0ISCgGvi1v5wMPf+Vg6RUyC5erH6VfE7/uYuZRBxX0snaYFxgDdQJDDq/0Jg fAeM/CJJ3tdiTmJ3VT7T9fqE8aX72z8y/JmCB3de22qJ8NBc7g5diQmouGK/v3Ie hJufDXRS5YSEjPz46/beF+QZK1waqxY= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org