$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft File: fR7WtlFJDavaqEvZL81C5VPubHA.mft (raw, json) Hash identifier: WEiTdJszaLtgL+Iwmr53y62M3yk+Anr6+4HZ2+6v35c= Subject key identifier: 20:1B:E6:7D:82:D4:8E:C1:66:A3:36:3E:B9:F8:2B:8B:8F:AE:1F:E4 Authority key identifier: 7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 Certificate issuer: /CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Certificate serial: 3422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft Manifest number: 3422 Signing time: Sun 24 Nov 2024 15:06:48 +0000 Manifest this update: Sun 24 Nov 2024 15:06:47 +0000 Manifest next update: Sun 01 Dec 2024 15:06:47 +0000 Files and hashes: 1: fR7WtlFJDavaqEvZL81C5VPubHA.crl (hash: OpZxSYWJvFvkSvqyFp9stui4xqNKKEVlG65WdlHfN2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Validity Not Before: Nov 24 15:06:47 2024 GMT Not After : Dec 1 15:06:47 2024 GMT Subject: CN=67434107-4cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:96:0f:35:81:46:bf:66:fb:f5:fb:84:67: a7:b4:0d:9f:79:8b:31:bb:31:f2:bb:4c:21:f6:7e: ce:86:c6:65:62:48:7d:9c:b1:66:20:68:5e:bb:46: 96:5c:68:bc:5f:2e:19:bd:85:38:e6:06:22:a8:8f: 8a:14:19:1a:20:d4:18:3d:01:16:2a:90:31:48:fc: b1:91:50:8d:b8:d0:35:53:d9:53:5b:3b:92:47:a5: a3:f1:3a:c5:32:ac:7a:4a:94:0a:11:33:71:41:7d: 1e:9c:5d:4b:2d:e5:4a:1c:4f:66:a8:be:7e:fd:1e: 30:81:84:a2:8d:86:29:0d:c9:e3:ae:fa:81:fa:0d: 8e:e8:11:68:70:49:45:23:b2:43:b9:4e:29:15:f4: 77:e5:6c:42:dd:0e:61:26:e2:66:be:7e:c0:fb:84: 51:8f:df:9e:76:51:b1:2e:4b:4c:88:e4:91:a3:e3: b4:27:02:f6:d4:77:78:7f:7e:89:6c:e9:52:27:38: ab:4e:9e:08:80:7b:99:bb:34:25:7b:2f:a7:4a:01: b6:ec:be:76:6c:0b:58:91:23:93:8e:1b:86:cd:bc: 5d:dc:dc:0c:8c:3d:11:50:60:cc:7b:55:e0:06:51: 64:94:50:d6:23:a3:8a:a3:ce:57:9c:7c:a5:43:c7: e5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1B:E6:7D:82:D4:8E:C1:66:A3:36:3E:B9:F8:2B:8B:8F:AE:1F:E4 X509v3 Authority Key Identifier: keyid:7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:20:79:f8:2a:0f:5c:86:e8:ac:87:54:65:6a:8f:08:f7:b5: 29:fc:ba:75:6a:bd:4e:5b:f5:6c:47:8a:56:10:12:21:9f:50: d8:c7:05:39:9f:01:22:a3:af:11:39:17:69:a5:91:56:16:f3: 0a:7c:7c:fb:90:a9:56:e3:13:49:c3:98:0c:17:0c:e2:05:b2: ed:18:fa:3a:2d:20:bf:df:85:69:4a:0a:b6:0b:d6:79:6b:9a: 63:72:5e:7f:f9:b1:21:00:25:65:e3:34:77:81:b6:a5:47:d0: 60:7b:1a:52:69:54:7f:ea:36:a5:3f:ab:57:ef:58:50:08:a0: 55:6c:42:f4:f7:62:a7:cb:8a:dd:05:89:cd:c8:c6:67:16:f4: 70:51:0d:56:35:ec:f0:f7:56:75:4d:d0:78:c9:c1:79:ff:7d: c6:3b:55:1b:83:82:c7:8c:80:6f:3c:ee:c2:33:dd:c0:63:2a: 6f:68:26:e4:98:3b:1c:17:0b:f3:54:db:5b:15:c4:64:fc:b3: c1:5a:74:71:da:b5:21:2d:68:db:be:4a:dc:d0:98:26:ba:8d: c6:b5:5e:eb:3f:08:b6:2c:37:2a:df:94:b1:63:73:a7:5b:1c: b6:99:f8:e9:75:68:25:5f:08:f5:82:d0:14:31:3a:07:d3:64: b0:e8:d7:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDNkMxMTAvBgNVBAUTKDdEMUVENkI2NTE0OTBEQUJEQUE4NEJEOTJGQ0Q0MkU1 NTNFRTZDNzAwHhcNMjQxMTI0MTUwNjQ3WhcNMjQxMjAxMTUwNjQ3WjAYMRYwFAYD VQQDEw02NzQzNDEwNy00Y2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4SWDzWBRr9m+/X7hGentA2feYsxuzHyu0wh9n7OhsZlYkh9nLFmIGheu0aW XGi8Xy4ZvYU45gYiqI+KFBkaINQYPQEWKpAxSPyxkVCNuNA1U9lTWzuSR6Wj8TrF Mqx6SpQKETNxQX0enF1LLeVKHE9mqL5+/R4wgYSijYYpDcnjrvqB+g2O6BFocElF I7JDuU4pFfR35WxC3Q5hJuJmvn7A+4RRj9+edlGxLktMiOSRo+O0JwL21Hd4f36J bOlSJzirTp4IgHuZuzQley+nSgG27L52bAtYkSOTjhuGzbxd3NwMjD0RUGDMe1Xg BlFklFDWI6OKo85XnHylQ8flrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAb5n2C 1I7BZqM2Prn4K4uPrh/kMB8GA1UdIwQYMBaAFH0e1rZRSQ2r2qhL2S/NQuVT7mxw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEM2Qy9DMTQ4RDFDQTFE QTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRhdmFxRXZaTDgxQzVWUHVi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSN1d0bEZKRGF2YXFFdlpMODFDNVZQdWJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEM2Qy9DMTQ4RDFDQTFEQTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRh dmFxRXZaTDgxQzVWUHViSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJIHn4Kg9chuish1Rlao8I97Up/Lp1ar1OW/VsR4pWEBIhn1DYxwU5 nwEio68RORdppZFWFvMKfHz7kKlW4xNJw5gMFwziBbLtGPo6LSC/34VpSgq2C9Z5 a5pjcl5/+bEhACVl4zR3gbalR9BgexpSaVR/6jalP6tX71hQCKBVbEL092Kny4rd BYnNyMZnFvRwUQ1WNezw91Z1TdB4ycF5/33GO1Ubg4LHjIBvPO7CM93AYypvaCbk mDscFwvzVNtbFcRk/LPBWnRx2rUhLWjbvkrc0Jgmuo3GtV7rPwi2LDcq35SxY3On Wxy2mfjpdWglXwj1gtAUMToH02Sw6NcR -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:55 2024 by rpki-client on console-ams.rpki-client.org