$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json) Hash identifier: 4oXCeam5G28xTxEfAr22EX3mfk30jjZsxSiDU0DWEn0= Subject key identifier: F1:E9:07:EF:18:7B:EE:7D:FB:16:05:3A:E6:57:68:FB:BC:EB:8C:6B Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft Manifest number: 06A5 Signing time: Fri 22 Nov 2024 20:36:20 +0000 Manifest this update: Fri 22 Nov 2024 20:36:19 +0000 Manifest next update: Fri 29 Nov 2024 20:36:19 +0000 Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: ZRgV2KY/5adZ0CGW4jjy6nKVZXzjzStEDaymkCZskXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Validity Not Before: Nov 22 20:36:19 2024 GMT Not After : Nov 29 20:36:19 2024 GMT Subject: CN=6740eb44-74a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:16:0f:c0:46:35:42:47:90:78:bf:58:77:75: 39:51:62:49:b6:02:d3:ec:7d:90:7c:82:c5:9c:fe: 39:94:98:1a:b1:06:64:dd:cf:08:7e:cc:3b:72:e1: 1c:2d:35:e7:ab:e3:7c:8a:6f:e5:5a:04:e6:dc:4f: a7:0a:70:58:01:ae:2c:a8:3d:e0:1d:fb:07:ed:61: f4:77:2a:48:4b:59:ba:c0:98:0b:5c:fe:02:37:63: 46:8d:84:0f:de:c8:66:2c:48:65:ed:31:17:86:cd: 2f:36:0a:a2:f1:af:0f:58:ad:8c:ed:56:e6:0a:9d: 06:6a:87:28:76:e6:94:5d:0b:51:05:ae:29:41:1a: bd:fe:9b:cb:0d:cd:ff:c2:72:ac:f9:46:79:7a:3b: a5:bd:9d:53:04:9c:07:d8:b5:1a:7d:22:1c:84:01: b6:ec:88:21:e6:59:b1:80:b7:9c:5d:22:77:8a:9b: a2:f8:14:37:3e:eb:74:ce:82:e2:74:b7:a4:1b:b6: eb:8f:0d:20:6c:8b:e3:17:1e:e0:bc:77:fb:82:3e: 23:bd:ba:87:f6:25:4d:ec:48:a1:aa:c9:57:92:d9: 74:0e:fa:3d:f9:fa:93:49:0c:df:ed:f0:9d:54:47: b7:7a:4a:03:49:b3:bb:c6:1c:6a:ad:4d:31:3e:48: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E9:07:EF:18:7B:EE:7D:FB:16:05:3A:E6:57:68:FB:BC:EB:8C:6B X509v3 Authority Key Identifier: keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c0:07:a1:01:79:b1:9f:66:c8:4e:64:c6:79:c7:01:b0:8c: e8:71:40:a0:11:70:de:cb:e5:de:76:7e:70:00:b4:29:49:b2: ab:46:80:d5:ea:ed:5d:61:e7:56:e5:6d:39:30:8d:d1:e7:a5: 5d:c4:b0:8b:7e:e6:b0:48:e7:98:54:3e:fc:74:8f:95:f1:0c: b6:bb:a9:c0:46:05:6e:d8:ec:eb:df:1f:ac:b7:65:32:09:aa: a9:9a:c3:d9:85:a0:01:20:b0:5d:6a:63:c7:c0:6c:19:33:d7: a2:b0:17:1c:7f:bb:b6:51:5e:d7:2d:f3:c7:4e:92:43:ff:84: f8:21:73:a4:90:3a:1c:78:4b:1d:35:89:77:95:70:4b:b1:db: 9d:7d:d9:5c:35:cd:c6:c4:1a:c5:26:63:64:b5:77:4f:cb:e3: 19:dd:fa:f5:96:39:32:35:0e:50:78:50:3e:27:fc:40:af:c0: 9c:f7:9c:c9:7d:f0:90:8b:b3:ff:c4:cf:8d:9d:09:05:78:1d: d6:a0:bb:eb:8f:82:0d:1b:f7:fd:60:61:99:2b:d9:fe:a5:85: 58:4f:7f:99:86:9c:fd:60:8d:ae:75:f6:50:50:11:46:41:2f: 82:fd:43:8e:04:91:32:d9:7a:32:98:4d:7d:73:38:0e:7a:b3: 89:fe:30:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND RUU5OUMxNjAwHhcNMjQxMTIyMjAzNjE5WhcNMjQxMTI5MjAzNjE5WjAYMRYwFAYD VQQDEw02NzQwZWI0NC03NGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRYPwEY1QkeQeL9Yd3U5UWJJtgLT7H2QfILFnP45lJgasQZk3c8Ifsw7cuEc LTXnq+N8im/lWgTm3E+nCnBYAa4sqD3gHfsH7WH0dypIS1m6wJgLXP4CN2NGjYQP 3shmLEhl7TEXhs0vNgqi8a8PWK2M7VbmCp0GaocoduaUXQtRBa4pQRq9/pvLDc3/ wnKs+UZ5ejulvZ1TBJwH2LUafSIchAG27Igh5lmxgLecXSJ3ipui+BQ3Put0zoLi dLekG7brjw0gbIvjFx7gvHf7gj4jvbqH9iVN7EihqslXktl0Dvo9+fqTSQzf7fCd VEe3ekoDSbO7xhxqrU0xPkibCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHpB+8Y e+59+xYFOuZXaPu864xrMB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1 ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwwAehAXmxn2bITmTGeccBsIzocUCgEXDey+Xedn5wALQpSbKrRoDV 6u1dYedW5W05MI3R56VdxLCLfuawSOeYVD78dI+V8Qy2u6nARgVu2Ozr3x+st2Uy CaqpmsPZhaABILBdamPHwGwZM9eisBccf7u2UV7XLfPHTpJD/4T4IXOkkDoceEsd NYl3lXBLsdudfdlcNc3GxBrFJmNktXdPy+MZ3fr1ljkyNQ5QeFA+J/xAr8Cc95zJ ffCQi7P/xM+NnQkFeB3WoLvrj4ING/f9YGGZK9n+pYVYT3+Zhpz9YI2udfZQUBFG QS+C/UOOBJEy2XoymE19czgOerOJ/jAW -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org