$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft File: rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft (raw, json) Hash identifier: TALYvEWyW3Rqjt+V3j9kWd3t982m22oVzE3U1gYXNgk= Subject key identifier: E3:3C:50:13:50:FB:7A:A8:1B:73:61:5F:EC:2D:61:9B:C3:EC:16:00 Authority key identifier: AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 Certificate issuer: /CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Certificate serial: 3439 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft Manifest number: 3C1C Signing time: Sun 24 Nov 2024 15:11:24 +0000 Manifest this update: Sun 24 Nov 2024 15:11:23 +0000 Manifest next update: Sun 01 Dec 2024 15:11:23 +0000 Files and hashes: 1: rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl (hash: zUinB/dd5a1Hg2g+XoRWGIQoiv+D1/aDhM6gZX1Cyvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13369 (0x3439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95AB/serialNumber=AD6A8568977EAF58EEAF1C8A97D6377C2E25E4B0 Validity Not Before: Nov 24 15:11:23 2024 GMT Not After : Dec 1 15:11:23 2024 GMT Subject: CN=6743421c-e04f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:05:d2:0b:de:08:f9:4a:a1:ea:94:43:5d: c2:f4:ec:a9:63:ba:bb:f1:18:f5:4b:3f:58:fe:e0: 53:13:a3:01:e0:ff:f3:f1:1c:e8:e1:7f:b9:52:85: a8:b8:bc:95:79:e3:7a:e2:47:2e:eb:01:bc:de:04: 3f:df:a0:45:a9:40:42:5b:72:75:2d:e7:97:24:80: 8c:93:56:bc:19:4c:95:ca:09:87:72:2a:71:81:e3: cc:99:27:1d:46:d6:e7:be:fb:05:0c:03:a5:35:1d: dc:73:c9:aa:8a:5f:13:08:80:65:5e:f2:d5:cd:d7: 8b:ee:40:59:38:3c:65:4b:49:e7:b8:0d:11:fd:20: 39:0e:fc:5a:b3:a7:dc:4d:d6:63:37:e6:bc:01:86: 65:44:1f:b6:6b:6c:d9:f5:34:df:d8:03:9a:d9:aa: f2:59:f7:89:fe:51:49:b9:22:bd:04:79:66:0f:a3: ce:75:1a:dc:7d:84:71:4c:78:8a:95:59:fc:c1:0b: b7:e7:de:14:c2:b0:47:f3:80:2b:63:6b:db:fe:3b: 21:ab:c0:77:b2:9c:14:88:b9:d3:0c:3f:39:07:b9: e9:c3:ba:f8:db:93:4d:eb:84:93:ce:f5:67:cd:89: 85:04:7f:f6:a2:32:9c:f6:42:4e:35:a4:b0:0e:98: 2a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3C:50:13:50:FB:7A:A8:1B:73:61:5F:EC:2D:61:9B:C3:EC:16:00 X509v3 Authority Key Identifier: keyid:AD:6A:85:68:97:7E:AF:58:EE:AF:1C:8A:97:D6:37:7C:2E:25:E4:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/rWqFaJd-r1jurxyKl9Y3fC4l5LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c6:07:af:63:63:e3:09:a4:b9:5c:e6:cc:9d:04:74:0f:7a: 76:e9:bf:4d:e1:3c:fa:46:a1:e1:bf:d6:79:b6:ea:ce:12:59: a6:d2:e9:2a:25:4e:2c:88:d1:87:9a:76:27:d8:41:fb:2c:d5: ed:88:92:59:e8:26:ea:f4:d0:36:c8:46:db:b2:5f:af:35:c5: 11:a0:33:51:a7:fb:03:fe:a1:61:ad:e4:b4:50:84:ad:06:a1: 62:8c:6d:53:32:34:fa:57:27:3f:9a:9f:e6:71:18:9f:22:a4: 72:76:48:62:48:d7:b9:53:0e:11:d1:7b:ba:87:72:b7:fc:58: 61:b5:56:69:d0:4d:f5:18:71:1d:4c:db:f8:ea:b4:37:f6:18: e8:6e:2b:de:05:0a:48:4b:d4:e3:33:f9:e0:b5:7e:ab:89:4f: 6f:32:58:f7:33:05:cf:6d:ab:f4:9a:a4:48:91:81:7c:88:4a: c3:6f:01:3a:98:20:34:99:c8:88:4c:37:5e:2d:97:f5:2c:43: 21:94:20:1e:14:55:be:a0:c4:81:92:68:b0:b7:16:0c:8b:de: 63:a7:98:87:07:14:71:ae:f2:b3:f8:d0:bd:54:6b:bc:0b:0e: 0d:d9:05:50:5b:e0:77:3c:e4:b5:ef:c5:41:bb:92:96:24:07: a3:7f:17:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QUIxMTAvBgNVBAUTKEFENkE4NTY4OTc3RUFGNThFRUFGMUM4QTk3RDYzNzdD MkUyNUU0QjAwHhcNMjQxMTI0MTUxMTIzWhcNMjQxMjAxMTUxMTIzWjAYMRYwFAYD VQQDEw02NzQzNDIxYy1lMDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv0F0gveCPlKoeqUQ13C9OypY7q78Rj1Sz9Y/uBTE6MB4P/z8Rzo4X+5UoWo uLyVeeN64kcu6wG83gQ/36BFqUBCW3J1LeeXJICMk1a8GUyVygmHcipxgePMmScd RtbnvvsFDAOlNR3cc8mqil8TCIBlXvLVzdeL7kBZODxlS0nnuA0R/SA5Dvxas6fc TdZjN+a8AYZlRB+2a2zZ9TTf2AOa2aryWfeJ/lFJuSK9BHlmD6POdRrcfYRxTHiK lVn8wQu3594UwrBH84ArY2vb/jshq8B3spwUiLnTDD85B7npw7r425NN64STzvVn zYmFBH/2ojKc9kJONaSwDpgqLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOM8UBNQ +3qoG3NhX+wtYZvD7BYAMB8GA1UdIwQYMBaAFK1qhWiXfq9Y7q8cipfWN3wuJeSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIxanVyeHlLbDlZM2ZDNGw1 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JXcUZhSmQtcjFqdXJ4eUtsOVkzZkM0bDVMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi9yV3FGYUpkLXIx anVyeHlLbDlZM2ZDNGw1TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfxgevY2PjCaS5XObMnQR0D3p26b9N4Tz6RqHhv9Z5turOElmm0ukq JU4siNGHmnYn2EH7LNXtiJJZ6Cbq9NA2yEbbsl+vNcURoDNRp/sD/qFhreS0UISt BqFijG1TMjT6Vyc/mp/mcRifIqRydkhiSNe5Uw4R0Xu6h3K3/FhhtVZp0E31GHEd TNv46rQ39hjobiveBQpIS9TjM/ngtX6riU9vMlj3MwXPbav0mqRIkYF8iErDbwE6 mCA0mciITDdeLZf1LEMhlCAeFFW+oMSBkmiwtxYMi95jp5iHBxRxrvKz+NC9VGu8 Cw4N2QVQW+B3POS178VBu5KWJAejfxdU -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:54 2024 by rpki-client on console-ams.rpki-client.org