$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft File: L-aHDoJAvxJ46pnCMRal4KjSCZA.mft (raw, json) Hash identifier: lAnsl1fe0FRSD10AhxhzQyan2HBz7Em2k/8p8DYG5gI= Subject key identifier: 80:BF:0A:AA:4F:A9:2F:14:42:06:75:D5:C2:77:BA:36:80:61:B2:70 Authority key identifier: 2F:E6:87:0E:82:40:BF:12:78:EA:99:C2:31:16:A5:E0:A8:D2:09:90 Certificate issuer: /CN=A91D8B2B/serialNumber=2FE6870E8240BF1278EA99C23116A5E0A8D20990 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-aHDoJAvxJ46pnCMRal4KjSCZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft Manifest number: 8D Signing time: Sat 23 Nov 2024 04:31:44 +0000 Manifest this update: Sat 23 Nov 2024 04:31:44 +0000 Manifest next update: Sat 30 Nov 2024 04:31:44 +0000 Files and hashes: 1: L-aHDoJAvxJ46pnCMRal4KjSCZA.crl (hash: /0cvy1Fcyr4+L3+Pb4MqNmXAH2JyUSXttD/whJfatHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.crl rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-aHDoJAvxJ46pnCMRal4KjSCZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B2B/serialNumber=2FE6870E8240BF1278EA99C23116A5E0A8D20990 Validity Not Before: Nov 23 04:31:44 2024 GMT Not After : Nov 30 04:31:44 2024 GMT Subject: CN=67415ab0-fc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:44:c5:fd:36:a2:ce:22:ef:0a:d6:1f:22: 0c:6d:a4:48:4e:7f:11:ae:1c:4a:04:28:e8:0d:88: 99:5c:61:a8:07:97:35:c4:ee:f1:a6:69:4c:0e:38: 4d:97:70:19:5f:e9:a6:06:fa:8a:a9:00:41:0c:3e: 5a:52:f4:5c:ab:89:a3:5d:7a:49:5f:18:da:40:77: fb:3b:80:a6:d7:4c:ea:db:a3:bf:28:1f:58:14:70: 66:2a:57:29:f0:be:7f:9a:93:7d:09:4b:96:ef:eb: be:af:56:4d:7e:64:3a:3c:d4:41:59:5b:84:77:f5: d7:f5:66:90:16:5e:e4:a7:eb:1d:89:72:de:4d:99: 34:4f:06:f7:db:80:84:05:a5:a2:e1:dc:4e:80:d4: 1b:48:cc:7c:bf:ef:19:43:17:a3:c5:b4:19:05:77: f7:3e:8e:3e:39:c6:14:ab:12:80:5c:76:b0:dd:2c: a5:38:7c:a7:72:0d:ff:04:bf:ca:9c:ac:7f:40:64: a5:86:1c:32:9a:7f:2c:f1:fb:31:b8:73:69:d2:27: 79:88:3f:27:b8:5e:9c:f5:5a:b9:cb:57:ed:ef:eb: ca:e4:ce:31:1d:cb:22:e3:da:5f:2b:e2:c3:8b:57: 37:ba:a7:b7:9e:f9:aa:63:82:af:ad:35:e4:5c:84: 53:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BF:0A:AA:4F:A9:2F:14:42:06:75:D5:C2:77:BA:36:80:61:B2:70 X509v3 Authority Key Identifier: keyid:2F:E6:87:0E:82:40:BF:12:78:EA:99:C2:31:16:A5:E0:A8:D2:09:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-aHDoJAvxJ46pnCMRal4KjSCZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B2B/A465A49ACF9C11EEAF34465FC4F9AE02/L-aHDoJAvxJ46pnCMRal4KjSCZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:29:d6:2e:3e:42:f7:36:e7:ed:00:df:93:13:57:8d:60:bc: 47:5d:77:c0:7c:25:5c:80:12:76:80:2e:9c:a9:61:cf:70:4b: 6d:b0:91:09:60:8c:b3:9c:41:fe:93:d0:0f:c9:ca:c2:ec:e8: 96:21:17:31:64:d8:53:ed:c9:72:48:19:d2:32:a2:7e:16:67: 84:78:7b:0c:ae:bf:56:59:52:0a:2b:6a:93:c3:89:2c:6c:c9: c6:91:c2:ad:0c:5a:24:16:59:26:c2:77:aa:b1:83:93:ef:75: 6f:6d:91:43:cc:72:70:fa:4f:5f:96:42:83:9c:f4:24:6e:7f: db:63:7a:12:10:0b:a9:af:92:c5:09:3c:7d:6a:f3:37:e9:97: 29:8a:81:fd:b7:bd:e7:11:ea:c5:ff:44:c3:f2:b1:7d:9d:10: 72:b5:42:f5:51:26:28:06:2b:cb:2f:c3:72:26:06:7a:58:61: 8b:64:32:9d:cf:35:57:c6:ff:4b:81:e9:dd:4c:77:6e:69:b1: 46:53:d4:14:b7:fe:6d:15:c7:cb:db:35:2c:eb:7d:86:40:3b: 66:cf:22:f9:0c:0c:03:c9:17:f0:d3:97:a2:16:43:40:88:8b: 97:62:00:7a:d1:44:51:81:4b:d1:38:3d:3d:e6:13:62:45:b6: d5:b9:45:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCMkIxMTAvBgNVBAUTKDJGRTY4NzBFODI0MEJGMTI3OEVBOTlDMjMxMTZBNUUw QThEMjA5OTAwHhcNMjQxMTIzMDQzMTQ0WhcNMjQxMTMwMDQzMTQ0WjAYMRYwFAYD VQQDEw02NzQxNWFiMC1mYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2ZExf02os4i7wrWHyIMbaRITn8RrhxKBCjoDYiZXGGoB5c1xO7xpmlMDjhN l3AZX+mmBvqKqQBBDD5aUvRcq4mjXXpJXxjaQHf7O4Cm10zq26O/KB9YFHBmKlcp 8L5/mpN9CUuW7+u+r1ZNfmQ6PNRBWVuEd/XX9WaQFl7kp+sdiXLeTZk0Twb324CE BaWi4dxOgNQbSMx8v+8ZQxejxbQZBXf3Po4+OcYUqxKAXHaw3SylOHyncg3/BL/K nKx/QGSlhhwymn8s8fsxuHNp0id5iD8nuF6c9Vq5y1ft7+vK5M4xHcsi49pfK+LD i1c3uqe3nvmqY4KvrTXkXIRTNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIC/CqpP qS8UQgZ11cJ3ujaAYbJwMB8GA1UdIwQYMBaAFC/mhw6CQL8SeOqZwjEWpeCo0gmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEIyQi9BNDY1QTQ5QUNG OUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi9MLWFIRG9KQXZ4SjQ2cG5DTVJhbDRLalND WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYUhEb0pBdnhKNDZwbkNNUmFsNEtqU0NaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEIyQi9BNDY1QTQ5QUNGOUMxMUVFQUYzNDQ2NUZDNEY5QUUwMi9MLWFIRG9KQXZ4 SjQ2cG5DTVJhbDRLalNDWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaKdYuPkL3NuftAN+TE1eNYLxHXXfAfCVcgBJ2gC6cqWHPcEttsJEJ YIyznEH+k9APycrC7OiWIRcxZNhT7clySBnSMqJ+FmeEeHsMrr9WWVIKK2qTw4ks bMnGkcKtDFokFlkmwneqsYOT73VvbZFDzHJw+k9flkKDnPQkbn/bY3oSEAupr5LF CTx9avM36ZcpioH9t73nEerF/0TD8rF9nRBytUL1USYoBivLL8NyJgZ6WGGLZDKd zzVXxv9LgendTHduabFGU9QUt/5tFcfL2zUs632GQDtmzyL5DAwDyRfw05eiFkNA iIuXYgB60URRgUvROD095hNiRbbVuUVE -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:30 2024 by rpki-client on console-fra.rpki-client.org