$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: 4lEfK3GoTHX2NS5ucarRW/HDLiny+mAZ/JJ8rYkNoxE= Subject key identifier: 47:E2:84:67:36:23:7E:EF:D3:96:3C:B6:DF:1D:01:14:E5:21:72:CA Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 07B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0A36 Signing time: Fri 22 Nov 2024 20:44:23 +0000 Manifest this update: Fri 22 Nov 2024 20:44:22 +0000 Manifest next update: Fri 29 Nov 2024 20:44:22 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: OZ3G6RRT6xflW1xbB51AafW3gTVdqCrmSAMj5aJ5McU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1972 (0x7b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: Nov 22 20:44:22 2024 GMT Not After : Nov 29 20:44:22 2024 GMT Subject: CN=6740ed26-61e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b5:08:06:8b:56:9a:71:a1:43:c9:be:86:05: df:3e:0a:f8:86:8c:de:c0:3c:c8:f5:01:20:e8:89: de:51:1c:db:f7:fc:ac:1a:dc:7f:ff:a3:ff:d9:87: 16:c7:c2:c6:5f:3f:06:55:bd:b0:94:cd:6b:d0:f1: 7a:9b:fe:20:33:0e:f5:2a:ad:44:3e:8a:18:31:18: 4f:ad:23:32:85:07:ba:52:25:5c:6a:1b:0b:9d:33: 78:35:19:9a:73:09:f7:a0:d3:35:08:3c:a3:1b:26: de:b6:47:4f:57:8d:2f:92:f0:39:28:12:3b:fa:a5: 69:d1:e7:b2:9d:5e:62:1e:c2:38:ee:99:c5:4d:bc: e5:ed:7b:43:f5:af:6d:6a:55:ca:60:7d:64:54:28: 4f:6d:36:2a:74:c2:2b:73:20:55:23:17:cf:50:fd: 8f:d2:51:0e:17:82:d0:2b:bb:c2:91:53:db:a2:11: dc:e4:ae:28:de:a9:4e:21:93:ef:1a:fc:81:f3:aa: 7b:54:97:ad:c8:c0:42:b2:db:58:e2:b1:53:6c:d6: ee:7b:3a:45:dd:28:f4:18:98:2f:11:e9:1c:e8:5a: 2b:4f:04:d5:ca:15:82:78:62:af:e1:90:08:d3:98: c1:e4:24:04:bd:5c:21:fa:b9:84:33:84:06:8a:f8: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E2:84:67:36:23:7E:EF:D3:96:3C:B6:DF:1D:01:14:E5:21:72:CA X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a1:53:57:7d:8f:a1:33:9c:0e:67:4b:55:30:17:3d:e9:21: 8c:74:9e:d1:4b:91:2f:52:e1:8b:2f:69:8d:60:81:c5:35:05: 98:83:1a:87:35:60:cf:7b:ae:81:5b:6a:27:dd:85:1b:69:a1: 2f:0d:a2:59:be:23:40:d7:e0:61:03:95:03:94:cf:b2:f1:87: d6:24:0c:ac:f3:ae:14:d3:dc:b9:f9:c9:ca:f7:25:45:68:c5: 21:43:39:a3:af:ca:16:53:56:9e:71:4f:57:d7:1a:d4:01:1f: 25:59:ed:ad:ff:71:42:32:82:05:5d:ac:34:04:74:20:1c:4d: 62:c0:40:1b:55:d5:6b:61:4a:f3:a6:a8:47:30:69:72:03:64: 8f:f3:72:d2:1a:e8:fd:e2:bb:4d:54:25:8d:f0:7b:6f:0f:c6: f4:13:be:a4:61:d4:f9:5e:4e:7a:70:43:71:fa:6c:f2:e0:b7: 29:32:e0:fe:79:9b:88:80:f7:30:a6:1a:e1:7f:0d:1b:2e:ac: 38:eb:98:ae:9f:a2:02:68:cf:0b:44:fa:2b:db:5f:d4:7a:a4: fc:78:ff:e7:bb:ef:78:83:cb:25:0f:6e:b5:fa:65:51:eb:e5: d5:70:3b:ae:80:fa:44:b3:96:a6:94:73:a2:b3:63:c7:40:87: eb:69:58:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjQxMTIyMjA0NDIyWhcNMjQxMTI5MjA0NDIyWjAYMRYwFAYD VQQDEw02NzQwZWQyNi02MWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57UIBotWmnGhQ8m+hgXfPgr4hozewDzI9QEg6IneURzb9/ysGtx//6P/2YcW x8LGXz8GVb2wlM1r0PF6m/4gMw71Kq1EPooYMRhPrSMyhQe6UiVcahsLnTN4NRma cwn3oNM1CDyjGybetkdPV40vkvA5KBI7+qVp0eeynV5iHsI47pnFTbzl7XtD9a9t alXKYH1kVChPbTYqdMIrcyBVIxfPUP2P0lEOF4LQK7vCkVPbohHc5K4o3qlOIZPv GvyB86p7VJetyMBCsttY4rFTbNbuezpF3Sj0GJgvEekc6ForTwTVyhWCeGKv4ZAI 05jB5CQEvVwh+rmEM4QGivhx3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfihGc2 I37v05Y8tt8dARTlIXLKMB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdoVNXfY+hM5wOZ0tVMBc96SGMdJ7RS5EvUuGLL2mNYIHFNQWYgxqH NWDPe66BW2on3YUbaaEvDaJZviNA1+BhA5UDlM+y8YfWJAys864U09y5+cnK9yVF aMUhQzmjr8oWU1aecU9X1xrUAR8lWe2t/3FCMoIFXaw0BHQgHE1iwEAbVdVrYUrz pqhHMGlyA2SP83LSGuj94rtNVCWN8HtvD8b0E76kYdT5Xk56cENx+mzy4LcpMuD+ eZuIgPcwphrhfw0bLqw465iun6ICaM8LRPor21/UeqT8eP/nu+94g8slD261+mVR 6+XVcDuugPpEs5amlHOis2PHQIfraVip -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org