$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft File: MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft (raw, json) Hash identifier: Me1GwLkboWBNPs+fQ2lEjGobmfHw0Cs6HwzjDVydcQ0= Subject key identifier: 86:F4:EB:A3:36:44:39:24:57:BF:30:E6:19:74:A6:E2:33:F9:78:92 Authority key identifier: 30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE Certificate issuer: /CN=A91D560D/serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Certificate serial: 0AAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft Manifest number: 12BF Signing time: Fri 22 Nov 2024 19:15:22 +0000 Manifest this update: Fri 22 Nov 2024 19:15:22 +0000 Manifest next update: Fri 29 Nov 2024 19:15:22 +0000 Files and hashes: 1: MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl (hash: tSCvJplmldnu+2lAWemaUtfXoSx6FMDGbAoFwkqfwGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2731 (0xaab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D/serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Validity Not Before: Nov 22 19:15:22 2024 GMT Not After : Nov 29 19:15:22 2024 GMT Subject: CN=6740d84a-3cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2f:e4:4a:86:19:e7:34:8a:cc:d6:60:31:96: 74:43:72:85:20:d3:f7:b7:58:ae:6f:97:ad:37:03: 88:37:f3:7d:08:3d:dd:95:ce:0d:42:18:bb:ab:97: 6c:b8:02:84:77:0a:da:9d:88:d5:7a:e3:1a:b8:e4: 7e:d4:a8:7b:0c:a8:9b:5c:91:fd:b7:48:17:12:7b: ba:f9:c0:ed:75:7d:91:07:a2:d1:9c:f6:d2:ec:8a: aa:df:69:da:aa:37:8b:11:cb:28:d9:c8:c4:81:80: b9:8f:61:ab:00:25:1f:6d:ec:03:7a:96:30:40:8b: 2a:29:51:ff:ea:5e:83:a5:f6:74:96:21:0f:06:a3: d7:79:eb:fc:f8:83:69:20:cd:e8:95:62:12:36:21: 74:eb:23:9a:a2:a5:aa:20:4a:d6:c0:a7:3a:52:65: 95:d6:f3:df:73:7e:80:a2:8d:c2:8e:e3:44:17:84: e5:3e:ba:f8:19:81:df:2a:61:f5:e9:7b:eb:b4:40: da:8c:01:7e:55:9b:4b:df:37:d9:d3:dd:d7:80:18: df:5d:68:0d:aa:c4:14:13:bd:3e:af:90:c2:cd:3f: c5:26:ee:40:7c:4f:7a:3a:d8:b5:ce:6c:41:8c:ce: 90:c2:7c:a5:f0:39:48:1c:bb:04:d2:d7:64:ad:b5: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F4:EB:A3:36:44:39:24:57:BF:30:E6:19:74:A6:E2:33:F9:78:92 X509v3 Authority Key Identifier: keyid:30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:7f:e3:6a:cf:0d:c7:86:28:05:25:6b:13:e5:f8:76:e2:e5: fd:e6:0b:db:f3:fa:b3:66:4e:0c:9f:c3:46:46:00:98:53:dd: e1:9f:9a:2b:0e:bd:3d:d5:46:40:1c:21:88:ba:7a:80:17:9c: a6:80:8a:d5:c7:6d:17:36:f7:ae:40:b3:15:eb:37:d5:c4:fd: e9:89:80:64:70:12:19:c7:b6:68:f1:e8:e9:f3:b9:e2:98:70: c3:6b:2f:0a:b2:04:84:10:d8:ed:60:62:da:52:2d:88:c1:1a: 95:b6:02:67:71:98:d5:db:e7:f9:8b:1a:6b:6a:17:ee:56:4c: 39:10:bc:36:e3:7f:f6:73:42:d7:81:42:d2:90:5b:ef:34:97: 2c:27:aa:fa:4f:95:b9:4c:82:db:00:d3:f5:d3:11:79:96:a1: 40:45:20:1a:f7:42:72:18:84:3e:95:8b:35:d9:e0:1c:0c:7d: c0:19:ea:73:9b:42:e3:25:39:70:b6:e9:3d:86:d1:99:43:42: c9:d7:10:77:97:8a:16:5c:01:5b:37:40:ae:19:21:17:ae:69: ab:06:f2:f5:fb:c5:2b:60:e9:6b:ff:a6:bf:9c:75:85:89:6a: 30:7d:7a:28:d7:6e:40:6c:cb:27:08:3f:8c:25:f6:d1:8e:d7: a1:34:da:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKDMwQjVERTVFODc4NjI4ODJGOEZEQTJCNjkwQzJGMzA3 MDk5NUY1RkUwHhcNMjQxMTIyMTkxNTIyWhcNMjQxMTI5MTkxNTIyWjAYMRYwFAYD VQQDEw02NzQwZDg0YS0zY2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3i/kSoYZ5zSKzNZgMZZ0Q3KFINP3t1iub5etNwOIN/N9CD3dlc4NQhi7q5ds uAKEdwranYjVeuMauOR+1Kh7DKibXJH9t0gXEnu6+cDtdX2RB6LRnPbS7Iqq32na qjeLEcso2cjEgYC5j2GrACUfbewDepYwQIsqKVH/6l6DpfZ0liEPBqPXeev8+INp IM3olWISNiF06yOaoqWqIErWwKc6UmWV1vPfc36Aoo3CjuNEF4TlPrr4GYHfKmH1 6XvrtEDajAF+VZtL3zfZ093XgBjfXWgNqsQUE70+r5DCzT/FJu5AfE96Oti1zmxB jM6Qwnyl8DlIHLsE0tdkrbU+bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIb066M2 RDkkV78w5hl0puIz+XiSMB8GA1UdIwQYMBaAFDC13l6HhiiC+P2itpDC8wcJlfX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJTDRfYUsya01MekJ3bVY5 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01MWGVYb2VHS0lMNF9hSzJrTUx6QndtVjlmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJ TDRfYUsya01MekJ3bVY5ZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8f+Nqzw3HhigFJWsT5fh24uX95gvb8/qzZk4Mn8NGRgCYU93hn5or Dr091UZAHCGIunqAF5ymgIrVx20XNveuQLMV6zfVxP3piYBkcBIZx7Zo8ejp87ni mHDDay8KsgSEENjtYGLaUi2IwRqVtgJncZjV2+f5ixprahfuVkw5ELw243/2c0LX gULSkFvvNJcsJ6r6T5W5TILbANP10xF5lqFARSAa90JyGIQ+lYs12eAcDH3AGepz m0LjJTlwtuk9htGZQ0LJ1xB3l4oWXAFbN0CuGSEXrmmrBvL1+8UrYOlr/6a/nHWF iWowfXoo125AbMsnCD+MJfbRjtehNNoU -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org