$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft File: f_xaKedfnr4HnQUkfw3_DPmH8cI.mft (raw, json) Hash identifier: G67jPOSk2tFuER05AfScjEtKvif3GjWTVxUT2fwwSBs= Subject key identifier: DA:5F:0A:8C:60:73:2E:39:96:38:78:AD:69:A4:5E:E5:11:96:5D:1F Authority key identifier: 7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2 Certificate issuer: /CN=A91B4C67/serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2 Certificate serial: 3425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft Manifest number: 3425 Signing time: Fri 22 Nov 2024 15:07:21 +0000 Manifest this update: Fri 22 Nov 2024 15:07:21 +0000 Manifest next update: Fri 29 Nov 2024 15:07:21 +0000 Files and hashes: 1: f_xaKedfnr4HnQUkfw3_DPmH8cI.crl (hash: uxMMZYCVo8hPcqpmVL5tQOup0O/ko6sZr378Z8UPtFY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13349 (0x3425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C67/serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2 Validity Not Before: Nov 22 15:07:21 2024 GMT Not After : Nov 29 15:07:21 2024 GMT Subject: CN=67409e29-4e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:0e:97:64:7f:3b:f5:33:3c:cf:cb:0e:56: b9:1a:ce:72:07:63:ee:a0:8d:6c:d2:55:4f:3f:b0: 73:5c:17:ba:e8:14:a4:81:59:1b:fe:75:a5:54:5f: 92:e9:c4:41:eb:1a:2e:be:dd:4a:38:86:59:02:2e: dc:87:7f:8c:fe:cc:2e:46:1c:51:a1:b6:7a:2b:c0: 4d:dc:f2:27:5f:24:58:bf:60:17:49:9d:24:d8:5b: 5a:c1:9f:2a:60:94:7a:d7:44:a1:b6:87:3d:3c:63: 5d:7f:6a:e3:6d:2d:28:12:d6:98:9d:b4:c2:7a:10: 06:31:31:18:ff:e1:68:80:15:e2:4a:07:c3:44:5c: d7:0e:66:b1:c9:da:ac:5f:bb:a0:2b:f8:16:79:6c: bc:4d:a6:a7:fc:b3:e5:d3:6c:45:02:50:ee:cb:4b: 30:4c:dd:5b:5b:d3:14:6a:d4:8e:3e:5b:34:35:6c: 83:d3:e4:4b:6d:77:22:f8:dd:f6:b7:c2:16:f7:18: 59:3c:da:e7:5d:8b:44:32:fb:bb:bc:43:83:c4:7a: 91:8c:06:99:79:ce:d6:93:43:0f:70:1c:da:15:39: fe:5e:ba:6d:c1:cf:46:11:09:8e:29:e5:09:37:81: cc:7b:f5:af:78:10:11:3e:13:27:5f:73:26:a4:34: cb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5F:0A:8C:60:73:2E:39:96:38:78:AD:69:A4:5E:E5:11:96:5D:1F X509v3 Authority Key Identifier: keyid:7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:af:73:2f:06:2c:6a:93:65:85:6b:07:c0:a6:8a:53:ce:ee: 3c:92:7f:0e:96:d9:ef:53:e0:6c:04:25:fd:8e:b1:23:7d:08: 69:d8:75:86:72:dc:1e:47:66:a7:95:1f:7a:e9:8c:89:d2:c4: 93:4a:09:18:e4:a2:ae:b2:46:49:fd:84:d6:d6:42:d8:80:ec: 40:1e:4f:f3:e0:59:97:b9:36:c4:04:e5:2e:c6:bd:3e:b2:3c: ba:9d:5d:d2:ce:d0:fc:ac:3d:a2:d8:c6:d8:3f:4e:86:09:71: e9:df:07:46:ac:74:98:10:b3:e2:78:6e:42:e7:2b:6a:59:04: f1:ee:cf:85:64:a6:5c:4b:6e:c0:82:e9:20:dc:06:4d:d3:bf: 0f:e0:00:4a:18:35:d0:5a:4d:46:b8:2b:65:62:69:b8:f2:b5: 56:99:b1:ee:8f:da:4e:97:b7:4e:7b:ee:05:4e:db:26:71:d5: 61:a2:c9:c0:a2:16:a3:c2:79:6a:14:da:d0:41:9b:5c:1d:0c: ca:ef:7a:61:d4:43:f6:0f:dc:59:59:c3:11:21:53:a4:74:8d: 73:8d:5f:e6:5b:8f:c0:46:31:b2:7b:e1:46:9a:cf:ea:d5:8b: fb:73:c8:ad:bf:2c:29:67:d2:e9:ad:e9:c5:c1:97:ce:6e:e3: 18:40:bb:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDNjcxMTAvBgNVBAUTKDdGRkM1QTI5RTc1RjlFQkUwNzlEMDUyNDdGMERGRjBD Rjk4N0YxQzIwHhcNMjQxMTIyMTUwNzIxWhcNMjQxMTI5MTUwNzIxWjAYMRYwFAYD VQQDEw02NzQwOWUyOS00ZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj4Ol2R/O/UzPM/LDla5Gs5yB2PuoI1s0lVPP7BzXBe66BSkgVkb/nWlVF+S 6cRB6xouvt1KOIZZAi7ch3+M/swuRhxRobZ6K8BN3PInXyRYv2AXSZ0k2FtawZ8q YJR610Shtoc9PGNdf2rjbS0oEtaYnbTCehAGMTEY/+FogBXiSgfDRFzXDmaxydqs X7ugK/gWeWy8Taan/LPl02xFAlDuy0swTN1bW9MUatSOPls0NWyD0+RLbXci+N32 t8IW9xhZPNrnXYtEMvu7vEODxHqRjAaZec7Wk0MPcBzaFTn+Xrptwc9GEQmOKeUJ N4HMe/WveBARPhMnX3MmpDTLlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpfCoxg cy45ljh4rWmkXuURll0fMB8GA1UdIwQYMBaAFH/8WinnX56+B50FJH8N/wz5h/HC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEM2Ny9CRjNGQzJGQTFE QTExMUUyQjNFQzFGOTQwOEIwMkNEMi9mX3hhS2VkZm5yNEhuUVVrZnczX0RQbUg4 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeGFLZWRmbnI0SG5RVWtmdzNfRFBtSDhjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEM2Ny9CRjNGQzJGQTFEQTExMUUyQjNFQzFGOTQwOEIwMkNEMi9mX3hhS2VkZm5y NEhuUVVrZnczX0RQbUg4Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1r3MvBixqk2WFawfApopTzu48kn8OltnvU+BsBCX9jrEjfQhp2HWG ctweR2anlR966YyJ0sSTSgkY5KKuskZJ/YTW1kLYgOxAHk/z4FmXuTbEBOUuxr0+ sjy6nV3SztD8rD2i2MbYP06GCXHp3wdGrHSYELPieG5C5ytqWQTx7s+FZKZcS27A gukg3AZN078P4ABKGDXQWk1GuCtlYmm48rVWmbHuj9pOl7dOe+4FTtsmcdVhosnA ohajwnlqFNrQQZtcHQzK73ph1EP2D9xZWcMRIVOkdI1zjV/mW4/ARjGye+FGms/q 1Yv7c8itvywpZ9LprenFwZfObuMYQLsh -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org