$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft File: e9ZuQtUwkEC0dRqcKySR1818FLg.mft (raw, json) Hash identifier: 4hhnhe8Mo6VoMh4LsVoBOoOusIdRW4XJRLC+0XH/2/g= Subject key identifier: E5:DD:E2:B3:82:74:C8:B1:E3:FC:DB:9C:70:FC:4B:05:96:DB:56:55 Authority key identifier: 7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 Certificate issuer: /CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Certificate serial: 342D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft Manifest number: 342C Signing time: Fri 22 Nov 2024 14:19:37 +0000 Manifest this update: Fri 22 Nov 2024 14:19:36 +0000 Manifest next update: Fri 29 Nov 2024 14:19:36 +0000 Files and hashes: 1: e9ZuQtUwkEC0dRqcKySR1818FLg.crl (hash: PDiZKpVeXs1yfxklVQzlBmhvOpHnZK6FsJgaBQymesk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13357 (0x342d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA5AD/serialNumber=7BD66E42D5309040B4751A9C2B2491D7CD7C14B8 Validity Not Before: Nov 22 14:19:36 2024 GMT Not After : Nov 29 14:19:36 2024 GMT Subject: CN=674092f8-f91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:c9:62:ac:35:03:52:99:ec:ab:3c:d5:09: 3a:b7:79:18:ad:d7:49:0f:f0:c2:22:33:37:aa:9e: 0c:36:93:f8:62:c2:62:09:d1:1f:d1:2d:5b:51:ab: d9:44:fb:7a:06:65:34:70:af:a5:90:d6:67:df:e4: e8:af:8c:c6:81:e5:65:3a:e2:39:a2:63:4e:56:28: 41:11:16:55:a5:d4:ef:ac:ec:bc:10:fa:24:24:2d: 5b:ab:f7:a3:2f:f9:8b:9d:f4:97:04:a0:d8:11:46: 60:a7:a0:aa:61:58:b8:32:ea:bf:4d:71:fe:60:26: 00:29:46:68:b9:14:3b:de:88:05:d4:62:5d:d5:4e: 79:25:2f:95:77:eb:3b:87:13:6a:d9:e1:95:0b:ea: 0a:17:61:2e:bf:f3:d0:10:0f:7d:c1:ab:08:07:33: ae:4d:c3:68:d4:cc:19:46:b4:b2:94:f1:3a:1f:e9: 4c:cc:04:c0:a4:d6:76:dd:d6:37:86:24:d8:fd:a0: 4e:5f:ec:e4:09:5a:98:6f:bd:77:c2:39:5b:58:bf: a4:9d:51:d1:a8:b0:52:dd:e0:1c:ac:e2:67:d5:da: ef:66:b1:72:99:15:6e:bc:cc:5d:78:a6:c9:75:07: d5:92:f8:db:d7:f6:d1:87:58:fa:4d:5a:b1:a7:2e: 23:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DD:E2:B3:82:74:C8:B1:E3:FC:DB:9C:70:FC:4B:05:96:DB:56:55 X509v3 Authority Key Identifier: keyid:7B:D6:6E:42:D5:30:90:40:B4:75:1A:9C:2B:24:91:D7:CD:7C:14:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9ZuQtUwkEC0dRqcKySR1818FLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA5AD/366C442E1D7111E2AB54E2B508B02CD2/e9ZuQtUwkEC0dRqcKySR1818FLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:44:9d:01:e8:7a:7d:26:48:bb:84:0f:9a:e2:07:6c:fb:3b: 85:46:a4:7f:97:8d:34:7f:b5:12:1a:70:eb:1f:ec:30:45:be: 6b:94:4f:f4:ae:36:c6:b6:0a:0b:8a:5f:f5:f8:6d:cd:b3:94: c6:47:1a:ae:b3:a5:00:98:71:43:2f:c3:27:0b:7e:96:b1:e7: 69:f9:23:a6:13:fe:7d:a5:76:2a:28:26:c8:3a:a1:de:cc:be: 19:19:98:c6:7d:56:42:08:7c:4f:08:40:9b:44:1f:a5:5c:6b: cc:70:24:53:87:aa:0b:da:d5:0b:75:b0:5d:44:31:5d:98:c7: ed:43:61:a4:64:22:08:49:93:99:3c:91:ec:b5:49:29:2d:29: de:8f:1a:1a:6c:cc:48:d3:71:17:6d:22:c8:84:c1:e0:6a:55: 34:cf:e8:c5:e5:a5:77:20:62:5b:e7:f2:39:59:b6:eb:50:9c: 25:e5:b4:22:ee:d3:0f:64:3c:03:ab:81:49:0b:18:33:dd:1d: df:2a:a3:a4:38:cf:65:5d:1b:87:23:0c:2d:12:fb:96:21:c4: 4b:dd:0f:7d:a5:66:fc:7d:0e:5c:1b:46:b3:ea:72:1a:9f:9f: 40:d8:84:2f:c9:4d:42:f1:e1:a6:99:10:3d:7f:4c:c4:40:9b: b0:98:73:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E1QUQxMTAvBgNVBAUTKDdCRDY2RTQyRDUzMDkwNDBCNDc1MUE5QzJCMjQ5MUQ3 Q0Q3QzE0QjgwHhcNMjQxMTIyMTQxOTM2WhcNMjQxMTI5MTQxOTM2WjAYMRYwFAYD VQQDEw02NzQwOTJmOC1mOTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn83JYqw1A1KZ7Ks81Qk6t3kYrddJD/DCIjM3qp4MNpP4YsJiCdEf0S1bUavZ RPt6BmU0cK+lkNZn3+Tor4zGgeVlOuI5omNOVihBERZVpdTvrOy8EPokJC1bq/ej L/mLnfSXBKDYEUZgp6CqYVi4Muq/TXH+YCYAKUZouRQ73ogF1GJd1U55JS+Vd+s7 hxNq2eGVC+oKF2Euv/PQEA99wasIBzOuTcNo1MwZRrSylPE6H+lMzATApNZ23dY3 hiTY/aBOX+zkCVqYb713wjlbWL+knVHRqLBS3eAcrOJn1drvZrFymRVuvMxdeKbJ dQfVkvjb1/bRh1j6TVqxpy4j4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXd4rOC dMix4/zbnHD8SwWW21ZVMB8GA1UdIwQYMBaAFHvWbkLVMJBAtHUanCskkdfNfBS4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTVBRC8zNjZDNDQyRTFE NzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tFQzBkUnFjS3lTUjE4MThG TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U5WnVRdFV3a0VDMGRScWNLeVNSMTgxOEZMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTVBRC8zNjZDNDQyRTFENzExMUUyQUI1NEUyQjUwOEIwMkNEMi9lOVp1UXRVd2tF QzBkUnFjS3lTUjE4MThGTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAURJ0B6Hp9Jki7hA+a4gds+zuFRqR/l400f7USGnDrH+wwRb5rlE/0 rjbGtgoLil/1+G3Ns5TGRxqus6UAmHFDL8MnC36Wsedp+SOmE/59pXYqKCbIOqHe zL4ZGZjGfVZCCHxPCECbRB+lXGvMcCRTh6oL2tULdbBdRDFdmMftQ2GkZCIISZOZ PJHstUkpLSnejxoabMxI03EXbSLIhMHgalU0z+jF5aV3IGJb5/I5WbbrUJwl5bQi 7tMPZDwDq4FJCxgz3R3fKqOkOM9lXRuHIwwtEvuWIcRL3Q99pWb8fQ5cG0az6nIa n59A2IQvyU1C8eGmmRA9f0zEQJuwmHMD -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:44 2024 by rpki-client on console-fra.rpki-client.org