$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft File: fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json) Hash identifier: 9oPbmSdVeI9fkhTxeh2+Q5lde8U2UGeW9Nb9PwXBY8M= Subject key identifier: 67:5D:2C:76:35:99:2C:8E:21:E2:A1:7C:85:78:70:D1:DB:47:EC:15 Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 Certificate issuer: /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Certificate serial: 3420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft Manifest number: 98FD Signing time: Fri 22 Nov 2024 15:18:28 +0000 Manifest this update: Fri 22 Nov 2024 15:18:27 +0000 Manifest next update: Fri 29 Nov 2024 15:18:27 +0000 Files and hashes: 1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: vZZ/ub+/z4nVvqKFBY1iTBC6QiDaYe9mIJFvf9xW17Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13344 (0x3420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8 Validity Not Before: Nov 22 15:18:27 2024 GMT Not After : Nov 29 15:18:27 2024 GMT Subject: CN=6740a0c3-1945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:eb:4f:71:7e:8e:c5:45:28:d8:87:30:fc: 1c:36:ce:bc:63:48:3c:c5:34:51:c4:fc:ea:e3:ff: 28:54:0f:d6:f4:81:48:f7:79:45:f2:91:aa:52:5c: 5d:f0:64:d3:42:be:e2:c6:b8:11:14:65:d9:42:4d: 19:20:95:df:6c:14:2e:d0:f3:40:48:37:a3:83:c7: 0c:fc:a7:46:9e:5b:6f:26:3b:a7:9f:2f:f5:ba:8d: 10:7e:e1:bf:43:ab:cb:e0:99:c4:18:66:b1:cf:ed: d4:4a:04:b5:e0:8c:bd:17:7f:44:5e:99:57:a6:9e: 38:58:5a:6f:b4:3c:f1:99:ef:18:8e:22:19:1c:96: 20:50:ed:68:84:db:01:42:ae:41:cf:31:88:9f:0d: da:f8:55:68:d3:b5:16:fc:fb:69:ac:c3:ee:9d:7f: 1a:e8:36:f0:bf:5b:96:3c:67:ce:2a:4f:00:53:07: 29:a8:70:69:c8:79:67:33:ff:b4:7d:9f:5e:8f:3a: d6:74:71:27:d8:c7:e4:88:b8:c7:1e:67:41:39:74: 94:cb:75:11:63:3a:2f:b1:1c:f7:31:af:88:1a:c8: ab:9c:2f:9a:c9:26:e0:17:e0:5c:51:7a:95:ba:3d: 76:43:15:db:2c:c9:f6:e6:c5:7a:f6:6f:32:4e:5a: de:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5D:2C:76:35:99:2C:8E:21:E2:A1:7C:85:78:70:D1:DB:47:EC:15 X509v3 Authority Key Identifier: keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:18:70:55:97:7e:5a:52:91:3a:60:8f:86:ea:f7:65:53:db: 46:25:14:c4:2f:ad:52:d2:0b:54:0f:a5:85:f3:ef:e3:89:26: e0:c4:43:94:71:f8:1e:c5:63:a1:65:33:fa:50:7e:d7:03:79: c3:44:7e:6e:7d:30:7e:79:4d:22:0d:23:91:18:07:10:ed:00: d4:34:42:9f:04:d6:d7:93:3c:28:49:ac:43:26:11:41:7b:61: 34:42:6b:9a:41:62:c9:c5:7a:47:f1:ec:8f:c4:ae:79:97:0d: af:44:59:a8:7c:46:70:8a:5d:a3:1d:1d:39:0b:9f:64:f6:59: 94:d1:fe:1a:f9:eb:8a:54:e6:6c:a2:fb:4a:1a:28:9f:56:11: 20:be:c9:0e:6b:30:d0:f9:a1:b8:bc:1d:9c:e4:60:cc:0b:b5: 4a:59:7f:21:08:a5:6c:1f:b9:11:5d:55:e4:0f:d4:f0:e9:ae: 75:e8:98:c4:9d:ad:6c:a9:82:7d:ca:66:3b:ac:5e:cd:a1:f7: 61:4f:00:da:51:ea:c4:cc:a8:dc:f1:71:1a:05:ac:8a:45:5e: b3:2c:8f:08:4f:06:69:bd:2f:1b:c3:70:37:e6:45:04:3a:c1: c3:88:c2:eb:73:b1:9d:97:d7:5c:55:b3:0e:b6:d2:4e:db:61: e3:d4:f7:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3NUIxMTAvBgNVBAUTKDdGMTYxQUNGMTY0MDA3RThGN0Q4Qzc3MTE1QTVBMzlE MDQzNjQ4RjgwHhcNMjQxMTIyMTUxODI3WhcNMjQxMTI5MTUxODI3WjAYMRYwFAYD VQQDEw02NzQwYTBjMy0xOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRHrT3F+jsVFKNiHMPwcNs68Y0g8xTRRxPzq4/8oVA/W9IFI93lF8pGqUlxd 8GTTQr7ixrgRFGXZQk0ZIJXfbBQu0PNASDejg8cM/KdGnltvJjunny/1uo0QfuG/ Q6vL4JnEGGaxz+3USgS14Iy9F39EXplXpp44WFpvtDzxme8YjiIZHJYgUO1ohNsB Qq5BzzGInw3a+FVo07UW/PtprMPunX8a6Dbwv1uWPGfOKk8AUwcpqHBpyHlnM/+0 fZ9ejzrWdHEn2MfkiLjHHmdBOXSUy3URYzovsRz3Ma+IGsirnC+aySbgF+BcUXqV uj12QxXbLMn25sV69m8yTlreJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGddLHY1 mSyOIeKhfIV4cNHbR+wVMB8GA1UdIwQYMBaAFH8WGs8WQAfo99jHcRWlo50ENkj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUItajMyTWR4RmFXam5RUTJT UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z4WWF6eFpBQi1qMzJNZHhGYVdqblFRMlNQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUIt ajMyTWR4RmFXam5RUTJTUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIGHBVl35aUpE6YI+G6vdlU9tGJRTEL61S0gtUD6WF8+/jiSbgxEOU cfgexWOhZTP6UH7XA3nDRH5ufTB+eU0iDSORGAcQ7QDUNEKfBNbXkzwoSaxDJhFB e2E0QmuaQWLJxXpH8eyPxK55lw2vRFmofEZwil2jHR05C59k9lmU0f4a+euKVOZs ovtKGiifVhEgvskOazDQ+aG4vB2c5GDMC7VKWX8hCKVsH7kRXVXkD9Tw6a516JjE na1sqYJ9ymY7rF7NofdhTwDaUerEzKjc8XEaBayKRV6zLI8ITwZpvS8bw3A35kUE OsHDiMLrc7Gdl9dcVbMOttJO22Hj1Pfc -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org