$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json) Hash identifier: KUUo7zLlVUACpPj299Tfqlk++a2DDSXXKQCsyXPAK28= Subject key identifier: 23:D3:9B:E5:63:1D:1A:61:61:B3:DB:9B:1C:B9:AC:2A:50:23:5D:36 Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft Manifest number: 85 Signing time: Sat 23 Nov 2024 04:35:59 +0000 Manifest this update: Sat 23 Nov 2024 04:35:59 +0000 Manifest next update: Sat 30 Nov 2024 04:35:59 +0000 Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: NkrY10ToLTyIiKM7CAi8WcDfV7288K3alf4RAsuaM7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Validity Not Before: Nov 23 04:35:59 2024 GMT Not After : Nov 30 04:35:59 2024 GMT Subject: CN=67415baf-5146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f6:d7:4b:a5:06:f3:4a:0f:05:d7:bf:b2:00: 4b:d4:63:26:5b:f6:d4:88:6d:cc:c5:cb:fe:c1:41: 4f:cd:aa:67:e7:a6:a9:52:9b:1d:84:c1:96:ce:44: 29:78:55:69:c7:ce:3d:1e:8b:d1:c1:b1:b8:32:9b: 0f:30:e5:22:87:cb:0e:a8:92:59:cd:9a:ce:ab:c3: c5:39:05:f5:8c:42:17:d7:8e:e9:b5:2d:d5:ab:b5: d3:2e:b5:93:25:65:31:d0:d1:c6:51:0e:05:19:77: d5:b0:21:ba:63:4b:c0:57:03:16:5a:dc:0e:e2:4b: a5:d5:fa:7b:b9:a4:15:fa:db:76:6b:51:17:76:84: 3b:5e:82:ba:ca:bf:28:ce:82:1d:91:76:c7:f3:49: 22:37:1a:4e:fe:4d:26:5f:6d:22:d1:1f:a9:a2:b9: 87:4a:05:08:2b:6d:23:22:9c:39:34:bf:a4:c0:f1: f7:e8:b0:66:27:a0:81:2e:47:dd:fe:29:93:cc:9c: 94:7b:4c:a7:ff:a8:35:10:62:82:9e:bd:d8:4d:10: 51:f1:9f:13:3b:3d:06:30:51:ee:60:75:f9:2b:80: 8e:85:f2:78:b3:42:af:cb:34:53:cf:95:51:2e:60: 45:79:4f:c9:33:ad:b0:29:62:16:8d:b8:17:3e:d4: ac:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D3:9B:E5:63:1D:1A:61:61:B3:DB:9B:1C:B9:AC:2A:50:23:5D:36 X509v3 Authority Key Identifier: keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:44:fc:7b:90:24:25:58:77:dd:de:9f:ff:7f:b9:f1:28:3c: 3b:89:3d:bb:80:bf:4d:17:6c:9d:0e:0d:ff:16:49:1d:a1:31: 40:2c:b0:c3:7c:a3:15:bf:41:45:21:56:f5:4d:90:b1:32:7e: f4:5a:82:f5:b7:21:09:98:ca:f3:81:47:36:71:37:06:49:eb: e9:cb:a3:80:e9:9c:9e:1b:03:67:7a:85:d3:cf:fb:2f:34:56: 10:88:79:b0:c7:a8:b5:48:70:d6:df:a6:f7:52:22:d3:0a:da: 56:17:63:1d:13:49:02:3d:73:5c:89:f6:0c:15:d6:8a:ce:dd: ee:dd:22:31:07:92:5b:d9:24:eb:c7:51:a5:78:95:3b:8f:0e: 28:93:ed:8f:8c:30:77:38:6f:70:79:8d:a2:35:73:84:9c:5e: 08:4c:08:7a:ef:12:ea:df:6d:21:42:57:bf:68:f6:70:35:e9: 00:12:0e:cf:48:a1:35:5a:15:6c:a9:18:e1:18:6a:50:a8:af: cd:a9:b9:ef:c8:a7:d9:7c:96:4c:90:06:11:48:5d:da:0d:98: d9:40:df:32:be:ba:43:0b:21:82:d1:56:e7:a2:b5:de:24:15: d4:e2:c4:a6:95:55:f2:0a:84:93:ba:be:bb:17:89:b5:17:07: 96:ea:e1:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDE2RDE0QUE1MTM0RDQxMTI0NjRENzk5MkRCRjFDNDUy RjdGQTI5QTAwHhcNMjQxMTIzMDQzNTU5WhcNMjQxMTMwMDQzNTU5WjAYMRYwFAYD VQQDEw02NzQxNWJhZi01MTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnfbXS6UG80oPBde/sgBL1GMmW/bUiG3Mxcv+wUFPzapn56apUpsdhMGWzkQp eFVpx849HovRwbG4MpsPMOUih8sOqJJZzZrOq8PFOQX1jEIX147ptS3Vq7XTLrWT JWUx0NHGUQ4FGXfVsCG6Y0vAVwMWWtwO4kul1fp7uaQV+tt2a1EXdoQ7XoK6yr8o zoIdkXbH80kiNxpO/k0mX20i0R+pormHSgUIK20jIpw5NL+kwPH36LBmJ6CBLkfd /imTzJyUe0yn/6g1EGKCnr3YTRBR8Z8TOz0GMFHuYHX5K4COhfJ4s0KvyzRTz5VR LmBFeU/JM62wKWIWjbgXPtSsewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPTm+Vj HRphYbPbmxy5rCpQI102MB8GA1UdIwQYMBaAFBbRSqUTTUESRk15ktvxxFL3+img MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zRTYyNEJBRURB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFSSkdUWG1TMl9IRVV2ZjZL YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z0RktwUk5OUVJKR1RYbVMyX0hFVXZmNkthQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zRTYyNEJBRURBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFS SkdUWG1TMl9IRVV2ZjZLYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVRPx7kCQlWHfd3p//f7nxKDw7iT27gL9NF2ydDg3/FkkdoTFALLDD fKMVv0FFIVb1TZCxMn70WoL1tyEJmMrzgUc2cTcGSevpy6OA6ZyeGwNneoXTz/sv NFYQiHmwx6i1SHDW36b3UiLTCtpWF2MdE0kCPXNcifYMFdaKzt3u3SIxB5Jb2STr x1GleJU7jw4ok+2PjDB3OG9weY2iNXOEnF4ITAh67xLq320hQle/aPZwNekAEg7P SKE1WhVsqRjhGGpQqK/NqbnvyKfZfJZMkAYRSF3aDZjZQN8yvrpDCyGC0VbnorXe JBXU4sSmlVXyCoSTur67F4m1FweW6uF3 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:18 2024 by rpki-client on console-ams.rpki-client.org