$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft File: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json) Hash identifier: pe1BWl/UkIg0LphQBvlilg7+uLfizPywZMGm8LdmJxU= Subject key identifier: DA:C8:A9:1C:CD:D3:28:05:43:B6:7F:DF:C5:C0:1A:7A:63:A7:47:4B Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 Certificate issuer: /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft Manifest number: 02A5 Signing time: Wed 27 Nov 2024 01:05:17 +0000 Manifest this update: Wed 27 Nov 2024 01:05:17 +0000 Manifest next update: Wed 04 Dec 2024 01:05:17 +0000 Files and hashes: 1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: ynmIpNmG+7GFv47nJsQ3dAqUDzCADdHrbKJzzw5yiSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 01:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Validity Not Before: Nov 27 01:05:17 2024 GMT Not After : Dec 4 01:05:17 2024 GMT Subject: CN=6746704d-9358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ad:fb:42:56:cb:6f:05:1f:e4:f4:24:76:6d: ac:e3:81:66:67:31:4a:71:bd:31:13:f8:40:fc:e6: 3b:6c:1a:98:cd:66:da:66:48:ad:f5:5e:e9:b6:32: 8f:d9:4c:c8:b6:17:69:25:eb:41:09:df:56:02:65: d7:c0:26:f8:75:82:76:c1:03:99:ec:84:b3:5a:be: 57:d7:00:fd:af:c9:7e:1c:1d:51:a7:70:56:fa:fb: 40:72:53:ca:b0:6f:d8:25:7a:d3:ce:10:1a:95:e2: be:f8:a2:8a:b7:79:06:15:ab:62:92:5b:99:7c:54: a6:a7:ca:ad:39:d2:72:a5:20:5e:3d:67:86:65:47: f7:58:be:eb:86:22:11:ca:1f:55:51:63:d9:06:59: f8:2e:e1:78:8d:1d:29:cd:9a:a2:85:ed:8d:b1:a4: d7:38:5a:54:e7:4c:5f:7a:b4:e0:01:b3:fe:80:cc: 21:00:ce:ba:8e:ec:c5:8a:ca:d8:95:4f:43:25:cb: f9:05:3e:42:df:3e:71:c1:1e:fc:5a:db:5d:bb:37: f8:ae:bd:cc:8a:31:a1:23:fb:8a:03:69:6f:cd:5d: a1:93:a4:00:b8:af:92:9a:ae:25:61:10:37:1d:19: d1:28:b6:ce:70:9a:fb:8b:35:f8:ad:32:72:43:b4: a2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C8:A9:1C:CD:D3:28:05:43:B6:7F:DF:C5:C0:1A:7A:63:A7:47:4B X509v3 Authority Key Identifier: keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:90:91:19:53:68:f4:e1:65:b7:88:a6:c6:03:26:d1:e7:24: 90:46:f7:44:54:6d:11:c1:04:50:37:2b:96:f8:54:dd:11:04: 18:d0:c0:ec:25:be:76:2d:dc:f4:14:87:6b:ba:fc:79:90:27: a7:58:aa:45:93:82:49:46:f8:d3:8c:e5:f0:8e:f0:40:27:83: 7e:71:99:db:7a:14:23:9c:cc:78:24:7e:81:d2:c7:da:9a:5d: a0:ea:79:cf:43:d4:05:a6:37:fa:40:d1:7d:e7:8c:6b:67:5f: 14:b6:db:c2:8f:5f:82:ce:46:74:8f:1c:61:2d:9b:dc:d5:44: f2:c5:bc:4d:b0:a4:63:02:bd:21:32:20:0c:b3:de:d4:62:99: 63:68:58:87:51:97:78:dd:e1:30:2e:16:aa:38:46:da:5d:92: 95:e9:5a:75:39:01:78:3d:04:30:db:1e:c0:77:66:f8:c0:36: 5f:7e:d7:19:3b:91:b1:5a:4a:d5:5c:4b:8b:b2:1a:93:ed:15: 0a:00:7a:b6:cf:94:c8:c8:6a:8a:f3:a9:74:aa:d0:7b:cd:22: e7:8c:36:f6:8d:b4:bf:74:45:bc:21:7a:fd:93:ae:b2:6e:c2: 95:84:64:71:0e:b5:28:54:a3:8c:1f:50:d2:b0:c5:d2:0d:9b: e2:05:42:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNGMjExMTAvBgNVBAUTKEY2N0RBOUYxNUU1RTkzNEQ5MEU0OEZFNTBFN0RDODU3 MUREOTM3QTUwHhcNMjQxMTI3MDEwNTE3WhcNMjQxMjA0MDEwNTE3WjAYMRYwFAYD VQQDEw02NzQ2NzA0ZC05MzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8q37QlbLbwUf5PQkdm2s44FmZzFKcb0xE/hA/OY7bBqYzWbaZkit9V7ptjKP 2UzIthdpJetBCd9WAmXXwCb4dYJ2wQOZ7ISzWr5X1wD9r8l+HB1Rp3BW+vtAclPK sG/YJXrTzhAaleK++KKKt3kGFatikluZfFSmp8qtOdJypSBePWeGZUf3WL7rhiIR yh9VUWPZBln4LuF4jR0pzZqihe2NsaTXOFpU50xferTgAbP+gMwhAM66juzFisrY lU9DJcv5BT5C3z5xwR78Wttduzf4rr3MijGhI/uKA2lvzV2hk6QAuK+Smq4lYRA3 HRnRKLbOcJr7izX4rTJyQ7SiZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrIqRzN 0ygFQ7Z/38XAGnpjp0dLMB8GA1UdIwQYMBaAFPZ9qfFeXpNNkOSP5Q59yFcd2Tel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0YyMS9GMkVCRUIzNEQ1 MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWswMlE1SV9sRG4zSVZ4M1pO NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluMnA4VjVlazAyUTVJX2xEbjNJVngzWk42VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0YyMS9GMkVCRUIzNEQ1MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWsw MlE1SV9sRG4zSVZ4M1pONlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBkJEZU2j04WW3iKbGAybR5ySQRvdEVG0RwQRQNyuW+FTdEQQY0MDs Jb52Ldz0FIdruvx5kCenWKpFk4JJRvjTjOXwjvBAJ4N+cZnbehQjnMx4JH6B0sfa ml2g6nnPQ9QFpjf6QNF954xrZ18UttvCj1+CzkZ0jxxhLZvc1UTyxbxNsKRjAr0h MiAMs97UYpljaFiHUZd43eEwLhaqOEbaXZKV6Vp1OQF4PQQw2x7Ad2b4wDZfftcZ O5GxWkrVXEuLshqT7RUKAHq2z5TIyGqK86l0qtB7zSLnjDb2jbS/dEW8IXr9k66y bsKVhGRxDrUoVKOMH1DSsMXSDZviBUKS -----END CERTIFICATE-----Generated at Wed Nov 27 02:04:30 2024 by rpki-client on console-ams.rpki-client.org