$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: vHRdkPMwU8tDdmqvZdOmocMANVyPZRQfq++Oo+UsPaQ= Subject key identifier: AB:72:0E:07:65:45:1A:D2:1D:61:0E:78:19:2A:4D:8B:7B:D9:7F:43 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0C88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0C88 Signing time: Fri 22 Nov 2024 18:06:41 +0000 Manifest this update: Fri 22 Nov 2024 18:06:41 +0000 Manifest next update: Fri 29 Nov 2024 18:06:41 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: 7clzboOGf8aL5XrB8wN2ztwlr0GNC7l8KrBC0iw5HMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3208 (0xc88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Nov 22 18:06:41 2024 GMT Not After : Nov 29 18:06:41 2024 GMT Subject: CN=6740c831-b9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:da:57:a3:15:af:70:17:51:05:77:c5:09:cb: 21:99:0a:c2:57:d5:1d:d0:95:81:c0:4f:9d:b0:d5: c1:72:9e:49:8f:4f:5b:a4:3b:db:c7:7f:76:63:6a: 73:45:65:4f:0c:22:2f:cf:c2:10:02:e3:50:43:6e: 0d:28:77:1c:f1:30:81:c7:08:b9:10:d0:04:42:2f: 6e:6c:c1:f2:63:5e:86:5b:b0:42:1f:47:cb:41:55: e2:e8:8d:47:f2:af:ee:1c:8a:10:a3:49:8c:cd:9b: 4e:fd:cb:96:84:62:7a:1f:7c:42:a3:ae:c4:c5:58: 4a:1a:c2:33:4f:b4:b3:67:b4:58:8b:3c:e8:24:e6: 6c:5b:f5:94:3b:46:ff:56:2d:73:58:90:33:8e:a7: fd:d0:83:48:27:17:3b:ad:e2:8e:09:bb:90:ab:db: e1:fc:38:b4:ba:aa:58:73:be:76:45:01:9b:d7:30: cf:8e:25:db:2c:d7:a2:fb:93:1f:ad:63:6a:b0:bd: 3c:27:8a:1e:12:b8:f1:7e:c3:75:be:6e:12:d2:49: 81:19:1d:ac:34:bd:86:0d:90:0c:bf:4e:6a:3d:ea: c2:71:6e:8f:a1:98:13:12:7a:d5:fe:87:e3:f1:af: d7:45:1d:c3:2c:af:10:f6:d0:89:40:21:e9:8d:59: f1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:72:0E:07:65:45:1A:D2:1D:61:0E:78:19:2A:4D:8B:7B:D9:7F:43 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:dd:20:4f:79:20:59:61:87:d4:a4:b6:45:5b:2c:71:99:38: 78:9a:d7:8a:ae:30:7c:f3:6c:87:69:cb:5c:72:9f:bd:cf:8e: 37:e8:e9:d4:8d:68:09:5c:7e:60:9c:1a:4f:49:f0:b7:76:03: f6:d8:14:ad:88:33:fc:e9:66:83:4c:0f:a9:59:45:73:5d:df: 0f:18:ea:c8:7c:85:26:66:87:20:ef:58:0f:c0:4e:28:88:95: 4d:4f:41:b0:9c:d4:ff:8e:5c:2c:4d:9b:02:27:3b:74:57:40: 97:06:ea:9f:22:8b:b9:cc:97:5c:93:8f:73:fd:43:9f:da:28: a7:26:27:6f:e2:ce:e8:45:e3:06:c4:c2:0a:ad:bb:76:68:40: 82:be:7a:d8:5c:97:e9:c4:10:9c:1a:3f:70:62:78:c9:1f:5e: aa:8e:3a:19:0d:fa:6a:d7:ce:83:5e:99:a2:a2:c4:10:b3:f3: 00:f1:71:3d:71:67:17:cc:d0:0c:32:fb:be:6d:cd:a5:de:8c: 48:24:36:96:c4:63:25:d9:85:ff:d7:5e:a5:cd:d6:65:9d:df: 33:f1:9c:d9:30:7d:e3:5d:2c:48:25:fd:c9:39:48:10:98:41: fd:81:24:f8:31:53:ff:3e:94:a8:fd:a7:dd:09:7e:e2:c4:10: a1:3f:00:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjQxMTIyMTgwNjQxWhcNMjQxMTI5MTgwNjQxWjAYMRYwFAYD VQQDEw02NzQwYzgzMS1iOWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dpXoxWvcBdRBXfFCcshmQrCV9Ud0JWBwE+dsNXBcp5Jj09bpDvbx392Y2pz RWVPDCIvz8IQAuNQQ24NKHcc8TCBxwi5ENAEQi9ubMHyY16GW7BCH0fLQVXi6I1H 8q/uHIoQo0mMzZtO/cuWhGJ6H3xCo67ExVhKGsIzT7SzZ7RYizzoJOZsW/WUO0b/ Vi1zWJAzjqf90INIJxc7reKOCbuQq9vh/Di0uqpYc752RQGb1zDPjiXbLNei+5Mf rWNqsL08J4oeErjxfsN1vm4S0kmBGR2sNL2GDZAMv05qPerCcW6PoZgTEnrV/ofj 8a/XRR3DLK8Q9tCJQCHpjVnxOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtyDgdl RRrSHWEOeBkqTYt72X9DMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ3SBPeSBZYYfUpLZFWyxxmTh4mteKrjB882yHactccp+9z4436OnU jWgJXH5gnBpPSfC3dgP22BStiDP86WaDTA+pWUVzXd8PGOrIfIUmZocg71gPwE4o iJVNT0GwnNT/jlwsTZsCJzt0V0CXBuqfIou5zJdck49z/UOf2iinJidv4s7oReMG xMIKrbt2aECCvnrYXJfpxBCcGj9wYnjJH16qjjoZDfpq186DXpmiosQQs/MA8XE9 cWcXzNAMMvu+bc2l3oxIJDaWxGMl2YX/116lzdZlnd8z8ZzZMH3jXSxIJf3JOUgQ mEH9gST4MVP/PpSo/afdCX7ixBChPwDl -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org