$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/IQxJ-g9E8m3euJCS85ctrrKLAzs.mft File: IQxJ-g9E8m3euJCS85ctrrKLAzs.mft (raw, json) Hash identifier: iLZfgqNfe/n9LmcVRbH0eAxqeyu39YfseGxpFEfaANk= Subject key identifier: FA:18:3B:4A:2A:70:2F:A5:BE:17:54:2E:EB:5E:02:0D:74:66:E3:15 Authority key identifier: 21:0C:49:FA:0F:44:F2:6D:DE:B8:90:92:F3:97:2D:AE:B2:8B:03:3B Certificate issuer: /CN=A91B80AB/serialNumber=210C49FA0F44F26DDEB89092F3972DAEB28B033B Certificate serial: 0478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQxJ-g9E8m3euJCS85ctrrKLAzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/IQxJ-g9E8m3euJCS85ctrrKLAzs.mft Manifest number: 0478 Signing time: Fri 22 Nov 2024 23:36:46 +0000 Manifest this update: Fri 22 Nov 2024 23:36:46 +0000 Manifest next update: Fri 29 Nov 2024 23:36:46 +0000 Files and hashes: 1: IQxJ-g9E8m3euJCS85ctrrKLAzs.crl (hash: +Y8LNwRkNCdCyJPmOEURKTEFEolrArz9Lsc4b+PYXps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/IQxJ-g9E8m3euJCS85ctrrKLAzs.crl rsync://rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/IQxJ-g9E8m3euJCS85ctrrKLAzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQxJ-g9E8m3euJCS85ctrrKLAzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80AB/serialNumber=210C49FA0F44F26DDEB89092F3972DAEB28B033B Validity Not Before: Nov 22 23:36:46 2024 GMT Not After : Nov 29 23:36:46 2024 GMT Subject: CN=6741158e-576a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cd:b5:a1:f7:b1:fb:22:ef:a9:89:1e:1a:91: 4c:d8:d0:47:96:a2:a4:94:60:88:8c:d8:d7:94:77: de:7c:29:34:45:f8:d6:b5:cd:84:99:18:fb:a1:24: 8d:75:1c:1f:27:cf:4d:d0:9a:34:e3:b6:d4:43:01: df:b9:b2:38:61:2e:82:52:23:70:11:a6:97:36:da: 64:69:0f:5c:39:f9:f2:8d:8c:9d:69:6f:4a:9e:26: 1e:a6:e0:26:4d:1d:59:fa:c3:93:cf:77:99:a9:f7: a5:50:2e:3b:67:7f:9d:32:49:77:8a:a7:0b:6d:b6: 7b:02:e9:ee:1e:2f:21:ad:16:45:32:fc:f8:3d:32: fc:b6:7f:85:77:5c:d4:a0:76:21:52:c6:00:c5:03: 11:1a:19:22:61:82:54:81:f6:c9:2a:88:b1:97:b1: 46:cb:b4:15:be:70:14:8b:80:c0:7c:8c:2f:3d:31: 70:c3:e4:0d:97:d0:a7:5c:03:a1:4b:24:7c:9a:94: 42:41:d3:cb:6e:3c:37:01:8f:ac:35:51:18:3c:c7: 91:2c:df:66:bc:10:0c:cd:7a:ed:d6:41:c9:a6:3b: 77:fb:d9:1c:88:37:e8:40:6d:52:37:3a:0a:80:df: ab:6c:2e:f2:20:a7:97:86:e3:a1:70:40:36:73:b9: b0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:18:3B:4A:2A:70:2F:A5:BE:17:54:2E:EB:5E:02:0D:74:66:E3:15 X509v3 Authority Key Identifier: keyid:21:0C:49:FA:0F:44:F2:6D:DE:B8:90:92:F3:97:2D:AE:B2:8B:03:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/IQxJ-g9E8m3euJCS85ctrrKLAzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQxJ-g9E8m3euJCS85ctrrKLAzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80AB/023DD08C1BC311EC9846045DC4F9AE02/IQxJ-g9E8m3euJCS85ctrrKLAzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:e2:eb:72:ee:f1:10:37:8b:5c:60:04:a8:5c:32:ef:5e:c0: f3:83:cb:aa:08:94:4d:98:f5:a4:01:ee:78:ee:bb:bc:1a:9a: cf:96:1a:f5:39:8b:5c:b7:c2:be:2f:a8:de:ff:bd:d5:31:00: ed:d9:55:ca:1b:8f:43:55:d1:c4:13:90:b0:08:0a:c8:43:fe: 3e:6b:2f:c7:b7:8d:a9:f6:08:7a:b8:3c:3d:f1:38:b8:55:8f: 5c:8e:f9:dc:15:ae:1c:97:d2:5b:fd:b3:5c:3a:9b:8e:73:62: 53:8e:7b:0a:bf:7c:1f:05:e0:fa:bd:1b:38:5c:9c:6e:09:cd: 6d:4d:05:0f:cd:dc:23:7c:81:d4:df:af:c9:c8:3b:bf:7e:34: e8:3d:b3:cd:fe:5c:52:fb:d9:5e:6a:86:12:59:23:23:a6:49: 4a:59:f8:3d:47:3f:42:d6:ff:29:66:db:3a:96:c0:44:fa:3c: 7e:68:f0:3b:24:40:29:8e:ab:55:f7:8c:c9:1b:ff:c0:87:d3: a1:e7:bd:14:7e:7f:aa:a6:3b:6e:50:20:72:c5:ed:c3:9e:b8: 99:e6:62:83:06:cf:6d:78:a9:b6:96:39:b4:2e:68:da:5b:5f: e1:86:4b:75:9b:1a:fb:32:ac:87:2e:11:53:b8:52:18:2c:9a: 77:2a:39:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQUIxMTAvBgNVBAUTKDIxMEM0OUZBMEY0NEYyNkRERUI4OTA5MkYzOTcyREFF QjI4QjAzM0IwHhcNMjQxMTIyMjMzNjQ2WhcNMjQxMTI5MjMzNjQ2WjAYMRYwFAYD VQQDEw02NzQxMTU4ZS01NzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4821ofex+yLvqYkeGpFM2NBHlqKklGCIjNjXlHfefCk0RfjWtc2EmRj7oSSN dRwfJ89N0Jo047bUQwHfubI4YS6CUiNwEaaXNtpkaQ9cOfnyjYydaW9KniYepuAm TR1Z+sOTz3eZqfelUC47Z3+dMkl3iqcLbbZ7AunuHi8hrRZFMvz4PTL8tn+Fd1zU oHYhUsYAxQMRGhkiYYJUgfbJKoixl7FGy7QVvnAUi4DAfIwvPTFww+QNl9CnXAOh SyR8mpRCQdPLbjw3AY+sNVEYPMeRLN9mvBAMzXrt1kHJpjt3+9kciDfoQG1SNzoK gN+rbC7yIKeXhuOhcEA2c7mwRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoYO0oq cC+lvhdULuteAg10ZuMVMB8GA1UdIwQYMBaAFCEMSfoPRPJt3riQkvOXLa6yiwM7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBBQi8wMjNERDA4QzFC QzMxMUVDOTg0NjA0NURDNEY5QUUwMi9JUXhKLWc5RThtM2V1SkNTODVjdHJyS0xB enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lReEotZzlFOG0zZXVKQ1M4NWN0cnJLTEF6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBBQi8wMjNERDA4QzFCQzMxMUVDOTg0NjA0NURDNEY5QUUwMi9JUXhKLWc5RTht M2V1SkNTODVjdHJyS0xBenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBG4uty7vEQN4tcYASoXDLvXsDzg8uqCJRNmPWkAe547ru8GprPlhr1 OYtct8K+L6je/73VMQDt2VXKG49DVdHEE5CwCArIQ/4+ay/Ht42p9gh6uDw98Ti4 VY9cjvncFa4cl9Jb/bNcOpuOc2JTjnsKv3wfBeD6vRs4XJxuCc1tTQUPzdwjfIHU 36/JyDu/fjToPbPN/lxS+9leaoYSWSMjpklKWfg9Rz9C1v8pZts6lsBE+jx+aPA7 JEApjqtV94zJG//Ah9Oh570Ufn+qpjtuUCByxe3DnriZ5mKDBs9teKm2ljm0Lmja W1/hhkt1mxr7MqyHLhFTuFIYLJp3KjkO -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org