$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json) Hash identifier: oWe0HZmH10iYM6a0aRgIMG04lJLc5Wf7tTBj25DnYak= Subject key identifier: 73:29:D6:81:0E:D8:AB:12:02:60:0B:B7:7A:CC:3B:2E:90:74:FB:E0 Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft Manifest number: 43 Signing time: Sat 23 Nov 2024 05:20:15 +0000 Manifest this update: Sat 23 Nov 2024 05:20:15 +0000 Manifest next update: Sat 30 Nov 2024 05:20:15 +0000 Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: EFSE/pMMtwFsmFIlIOjAzQZ0AxVdkcivSnAEUaE/HJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Validity Not Before: Nov 23 05:20:15 2024 GMT Not After : Nov 30 05:20:15 2024 GMT Subject: CN=6741660f-942d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a7:95:07:d4:16:f8:d8:4b:41:c3:14:55:ae: 93:54:05:b2:b6:9b:d1:6a:4a:b8:ef:91:4b:2d:33: 56:97:00:6e:2f:da:bb:c2:35:9d:77:83:f3:c1:63: 41:9b:bd:e5:f2:f3:cb:bc:11:c9:61:3a:ea:75:a3: 8b:ef:78:bf:ce:4e:cd:e5:b3:f9:50:33:2b:e3:15: c3:9f:48:6f:d6:9f:a1:4f:ba:cc:15:60:b9:f7:b8: a3:54:cd:99:e8:58:2e:2a:49:85:9f:a3:40:d4:66: 9f:73:44:df:94:a8:7c:65:22:a2:1e:89:32:1a:2f: 38:78:f7:a2:17:dc:d9:cc:ad:89:eb:54:a1:ac:fd: 74:45:68:bf:f2:8c:15:ef:ba:27:f9:a0:42:95:87: 67:a7:10:a7:03:d1:86:ab:50:91:94:82:5e:87:db: db:c6:2f:6a:c1:10:f1:20:0c:ed:3c:b7:b6:e5:67: 98:42:39:01:b0:d3:b5:b6:5b:70:2b:ef:f9:f2:89: 4c:5d:e3:4d:84:77:db:cd:09:d4:63:5a:5a:d5:13: da:03:96:e2:24:3a:fa:04:46:b3:fc:14:47:59:9a: 38:67:81:92:11:b0:f8:65:ce:c7:03:65:a1:c2:dc: f1:3c:21:65:76:78:ea:6c:54:75:c4:76:33:bf:32: ff:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:29:D6:81:0E:D8:AB:12:02:60:0B:B7:7A:CC:3B:2E:90:74:FB:E0 X509v3 Authority Key Identifier: keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:6d:7e:03:86:76:02:8f:9a:d1:76:f7:c3:37:87:70:d0:d6: 45:40:56:d5:b2:43:cb:5c:80:48:32:85:35:67:35:75:87:d5: 4e:c9:79:1f:e0:50:c7:0f:0f:9a:01:81:f7:62:cc:77:2d:f5: 77:e7:0e:d4:9d:16:e4:19:d6:e1:24:b7:85:5e:cd:69:bb:51: 95:ae:29:fb:25:cc:a9:c8:45:1a:09:d8:96:f0:f1:83:46:e4: 61:11:fd:2b:83:6a:e1:5d:63:0d:bb:dd:74:64:90:15:f4:23: 5f:1a:b1:b9:96:2c:e7:65:9c:b7:5c:68:23:18:a1:65:8e:75: d7:50:39:c5:e4:e7:a6:c0:05:b5:0f:1e:2a:c3:1f:62:63:c9: dc:e3:58:83:4d:71:b8:2c:52:e0:a3:35:71:6e:25:c4:db:44: fa:8c:88:bb:c2:7c:84:69:17:1d:76:87:ec:e1:a0:6b:f8:27: 82:fd:e8:60:c2:fb:e1:c8:75:9a:71:3e:a2:b9:2f:b6:ca:2c: e9:89:55:ea:5b:98:1f:d6:4b:af:3d:1b:a0:97:69:e5:89:e1: 00:0c:38:5c:a2:9b:cc:ef:7d:17:d2:03:63:6b:56:9d:6a:1a: 38:f0:e9:13:52:ec:be:e4:87:d5:59:7c:9e:5c:7e:fd:14:b1: f4:71:2e:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QjcyRjExMC8GA1UEBRMoMTI0NDc4NUQ0MEM1RUM1OERGQzRBMzI4NTQwRjFCMzkz REVBMjM3NTAeFw0yNDExMjMwNTIwMTVaFw0yNDExMzAwNTIwMTVaMBgxFjAUBgNV BAMTDTY3NDE2NjBmLTk0MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9p5UH1Bb42EtBwxRVrpNUBbK2m9FqSrjvkUstM1aXAG4v2rvCNZ13g/PBY0Gb veXy88u8EclhOup1o4vveL/OTs3ls/lQMyvjFcOfSG/Wn6FPuswVYLn3uKNUzZno WC4qSYWfo0DUZp9zRN+UqHxlIqIeiTIaLzh496IX3NnMrYnrVKGs/XRFaL/yjBXv uif5oEKVh2enEKcD0YarUJGUgl6H29vGL2rBEPEgDO08t7blZ5hCOQGw07W2W3Ar 7/nyiUxd402Ed9vNCdRjWlrVE9oDluIkOvoERrP8FEdZmjhngZIRsPhlzscDZaHC 3PE8IWV2eOpsVHXEdjO/Mv+BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcynWgQ7Y qxICYAu3esw7LpB0++AwHwYDVR0jBBgwFoAUEkR4XUDF7FjfxKMoVA8bOT3qI3Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCNzJGLzJGQjQ5QjNFNDNE MTExRUY4QkU4RDg3QkM0RjlBRTAyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWtSNFhVREY3RmpmeEtNb1ZBOGJPVDNxSTNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC NzJGLzJGQjQ5QjNFNDNEMTExRUY4QkU4RDg3QkM0RjlBRTAyL0VrUjRYVURGN0Zq ZnhLTW9WQThiT1QzcUkzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJFtfgOGdgKPmtF298M3h3DQ1kVAVtWyQ8tcgEgyhTVnNXWH1U7JeR/g UMcPD5oBgfdizHct9XfnDtSdFuQZ1uEkt4VezWm7UZWuKfslzKnIRRoJ2Jbw8YNG 5GER/SuDauFdYw273XRkkBX0I18asbmWLOdlnLdcaCMYoWWOdddQOcXk56bABbUP HirDH2JjydzjWINNcbgsUuCjNXFuJcTbRPqMiLvCfIRpFx12h+zhoGv4J4L96GDC ++HIdZpxPqK5L7bKLOmJVepbmB/WS689G6CXaeWJ4QAMOFyim8zvfRfSA2NrVp1q Gjjw6RNS7L7kh9VZfJ5cfv0UsfRxLlw= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:20 2024 by rpki-client on console-ams.rpki-client.org