$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft File: adr8x94-0cCfTDZqTKThf_sRqEk.mft (raw, json) Hash identifier: ocZm+1BW70j2VAkMwk+VoFxyzundKgspFffR/JrSy0w= Subject key identifier: 6B:D2:5F:D3:47:1B:59:59:0F:38:36:30:D4:4B:AA:B1:43:8F:25:BC Authority key identifier: 69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49 Certificate issuer: /CN=A91879AC/serialNumber=69DAFCC7DE3ED1C09F4C366A4CA4E17FFB11A849 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft Manifest number: 03 Signing time: Sat 23 Nov 2024 06:10:22 +0000 Manifest this update: Sat 23 Nov 2024 06:10:22 +0000 Manifest next update: Sat 30 Nov 2024 06:10:22 +0000 Files and hashes: 1: adr8x94-0cCfTDZqTKThf_sRqEk.crl (hash: 42YTZIJ9bBlPI49D7YqK/3+FndsbwC4WbStXY32+8d0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.crl rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91879AC/serialNumber=69DAFCC7DE3ED1C09F4C366A4CA4E17FFB11A849 Validity Not Before: Nov 23 06:10:22 2024 GMT Not After : Nov 30 06:10:22 2024 GMT Subject: CN=674171ce-8d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:41:34:f9:3b:e0:4f:b1:cc:ed:8d:df:0e: 07:a7:9d:d9:83:16:92:6d:f2:ba:51:f6:c6:b1:a9: c2:75:ce:02:5f:0b:32:f3:e5:c9:d2:9e:f0:b9:4b: 69:2d:d8:bc:f7:15:3a:22:5b:05:26:21:4f:b8:55: 10:23:cb:7d:94:bf:e1:7c:f4:65:1b:db:cd:77:40: 1d:c6:0a:87:be:5e:02:f8:00:90:f4:d3:5e:db:04: 76:7a:16:42:5d:0e:a9:61:28:56:21:04:4a:02:14: b2:31:ae:8a:7f:92:48:b6:45:65:cb:9c:41:06:6c: f3:7b:3f:41:aa:90:ab:e1:b3:90:6f:48:d4:13:6a: 53:bc:e5:ec:5b:c1:7e:7a:96:54:fc:9a:06:a1:3d: 66:09:18:dc:83:e4:d4:0a:59:81:2e:44:d8:fb:df: 8f:7f:5e:ab:94:03:20:32:1d:5a:f1:a8:97:11:11: 00:34:3d:06:9b:40:e3:19:d7:a4:23:0e:ac:e5:1e: 1a:54:c4:fa:ca:f5:6e:8f:c1:ac:78:05:8c:10:4e: e9:72:f7:41:9e:4a:da:1c:0c:79:95:44:5d:5a:76: 68:25:32:cb:c5:d4:91:02:b7:58:6a:17:ef:50:5c: 06:f2:bc:79:e2:49:e1:df:e0:64:4d:b8:e6:00:da: 03:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D2:5F:D3:47:1B:59:59:0F:38:36:30:D4:4B:AA:B1:43:8F:25:BC X509v3 Authority Key Identifier: keyid:69:DA:FC:C7:DE:3E:D1:C0:9F:4C:36:6A:4C:A4:E1:7F:FB:11:A8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/adr8x94-0cCfTDZqTKThf_sRqEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/68F7922CA80111EFA406753BC4F9AE02/adr8x94-0cCfTDZqTKThf_sRqEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ab:df:be:c3:25:a9:de:97:83:c9:7c:34:bf:54:9b:0e:0b: c8:14:71:16:ce:87:f3:fe:9e:bc:04:93:07:c1:4e:16:09:9e: 6c:35:87:52:61:ee:d2:88:4c:d7:58:f1:a3:35:94:15:9b:9b: 2a:f8:b8:c2:49:60:a9:56:95:c5:e3:04:10:b3:fa:3c:cb:7c: 71:ff:13:a5:e4:47:cf:c0:11:7d:ff:67:75:b5:fa:2a:46:83: 94:7f:49:99:ff:a6:fe:35:5e:2b:b0:3b:32:38:41:ea:b4:65: e3:e6:18:4d:32:36:68:f0:96:71:72:2e:de:a3:75:24:87:98: 40:46:2f:c5:28:44:a4:ea:b2:18:ae:03:e8:99:8d:63:a7:7f: f5:6c:b3:fe:74:41:00:a1:20:0c:94:f7:c3:ac:66:98:fe:81: a7:18:ac:70:2e:b1:85:5b:45:ea:67:54:b6:33:b8:ff:49:7c: 1e:60:e2:ea:e8:57:66:11:d7:51:1e:4d:f3:53:78:54:c3:4b: 8a:b7:e1:42:be:61:d2:cd:8e:5c:2b:66:8a:a8:08:1d:41:6c: ff:12:33:2f:8b:0b:72:8f:29:0a:73:16:ad:d6:29:f9:79:cb: 8d:a4:55:5b:bf:5e:64:5b:ee:a5:65:81:65:d4:b1:29:28:70: c6:e7:d7:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzlBQzExMC8GA1UEBRMoNjlEQUZDQzdERTNFRDFDMDlGNEMzNjZBNENBNEUxN0ZG QjExQTg0OTAeFw0yNDExMjMwNjEwMjJaFw0yNDExMzAwNjEwMjJaMBgxFjAUBgNV BAMTDTY3NDE3MWNlLThkNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtHkE0+TvgT7HM7Y3fDgenndmDFpJt8rpR9saxqcJ1zgJfCzLz5cnSnvC5S2kt 2Lz3FToiWwUmIU+4VRAjy32Uv+F89GUb2813QB3GCoe+XgL4AJD0017bBHZ6FkJd DqlhKFYhBEoCFLIxrop/kki2RWXLnEEGbPN7P0GqkKvhs5BvSNQTalO85exbwX56 llT8mgahPWYJGNyD5NQKWYEuRNj7349/XquUAyAyHVrxqJcREQA0PQabQOMZ16Qj DqzlHhpUxPrK9W6Pwax4BYwQTuly90GeStocDHmVRF1admglMsvF1JECt1hqF+9Q XAbyvHniSeHf4GRNuOYA2gOlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa9Jf00cb WVkPODYw1EuqsUOPJbwwHwYDVR0jBBgwFoAUadr8x94+0cCfTDZqTKThf/sRqEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3OUFDLzY4Rjc5MjJDQTgw MTExRUZBNDA2NzUzQkM0RjlBRTAyL2Fkcjh4OTQtMGNDZlREWnFUS1RoZl9zUnFF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWRyOHg5NC0wY0NmVERacVRLVGhmX3NScUVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 OUFDLzY4Rjc5MjJDQTgwMTExRUZBNDA2NzUzQkM0RjlBRTAyL2Fkcjh4OTQtMGND ZlREWnFUS1RoZl9zUnFFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAar377DJanel4PJfDS/VJsOC8gUcRbOh/P+nrwEkwfBThYJnmw1h1Jh 7tKITNdY8aM1lBWbmyr4uMJJYKlWlcXjBBCz+jzLfHH/E6XkR8/AEX3/Z3W1+ipG g5R/SZn/pv41XiuwOzI4Qeq0ZePmGE0yNmjwlnFyLt6jdSSHmEBGL8UoRKTqshiu A+iZjWOnf/Vss/50QQChIAyU98OsZpj+gacYrHAusYVbRepnVLYzuP9JfB5g4uro V2YR11EeTfNTeFTDS4q34UK+YdLNjlwrZoqoCB1BbP8SMy+LC3KPKQpzFq3WKfl5 y42kVVu/XmRb7qVlgWXUsSkocMbn15U= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org