$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft File: RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json) Hash identifier: VHvNrdng8UgB5cBVORXOVtrV8MwE+Bi8qaS1gADLGvc= Subject key identifier: 60:38:74:86:0D:93:C9:D4:F0:04:65:20:A7:E9:59:87:C4:36:14:71 Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 Certificate issuer: /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft Manifest number: 7A Signing time: Sat 23 Nov 2024 04:44:14 +0000 Manifest this update: Sat 23 Nov 2024 04:44:14 +0000 Manifest next update: Sat 30 Nov 2024 04:44:14 +0000 Files and hashes: 1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: orgO3OMeX+K/Gwk1u/WIaG+2dTH507ErMA92aza6BUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Validity Not Before: Nov 23 04:44:14 2024 GMT Not After : Nov 30 04:44:14 2024 GMT Subject: CN=67415d9e-35ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:71:fe:33:df:77:7d:49:1c:ee:68:c7:1d:0c: a6:e5:07:f9:94:c3:ed:81:f2:c6:7a:38:d1:ea:19: f8:6a:e0:0a:54:6b:24:8d:0b:7e:d9:1c:c1:a8:59: 74:87:5b:91:0e:74:10:c3:eb:a1:e2:95:4b:4f:63: c4:1b:fe:e2:b9:07:5e:cc:95:bc:4b:a8:b9:05:86: 6a:31:79:e3:83:70:97:fe:1f:4a:41:da:24:0d:b4: 77:78:5a:22:e0:c4:1a:13:1d:88:a9:cd:96:b6:41: ca:37:99:00:b6:6c:c2:d6:72:0d:9f:9d:74:11:79: e7:a4:4f:ad:0a:9f:fd:21:5e:b6:78:43:4e:2b:0b: 0f:57:61:00:82:a6:e4:bf:bf:66:b6:20:66:3a:79: 96:d6:a4:4e:20:45:d7:1e:8e:f1:45:48:8d:13:f9: da:28:96:56:95:b6:10:94:59:5e:2b:21:bf:10:fb: 40:d7:5b:27:f7:53:0d:df:c9:74:71:80:02:e3:ff: 3b:5a:85:c1:6e:d1:d3:8a:b8:9d:81:78:7d:14:4b: e8:63:6a:e6:96:f2:76:1a:bd:2d:b5:9b:6f:6d:f2: fe:dc:32:ac:ac:46:28:f7:ea:1f:51:cd:ef:46:da: ae:73:70:5c:65:48:47:e9:c2:00:49:20:e6:b0:71: ab:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:38:74:86:0D:93:C9:D4:F0:04:65:20:A7:E9:59:87:C4:36:14:71 X509v3 Authority Key Identifier: keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:04:d2:73:ba:dc:9b:0c:7a:49:ec:8c:14:3b:c3:40:01:c3: 0f:6c:64:ac:4e:9e:80:85:a0:6f:99:68:25:f0:1d:eb:1a:3c: b3:2b:d2:d1:09:63:e4:5c:5a:85:00:35:c6:51:72:a6:64:58: 56:2c:ee:bc:4f:cf:ed:4b:17:d0:7b:9b:a8:71:e9:11:b5:08: 1b:50:f1:ef:80:03:92:40:fa:8d:fe:14:97:d2:06:5b:bf:4a: 8b:4e:6d:cb:ce:4f:3e:53:4b:c0:01:72:ad:eb:4b:a6:92:cb: 9b:51:73:86:15:13:06:f6:66:95:54:76:65:01:70:74:c4:79: 74:31:a0:dd:0e:f0:53:75:58:fe:42:92:69:ef:2e:52:37:c6: 6a:5e:19:fe:cb:83:0e:cb:62:8e:69:ae:4e:8d:d5:23:95:95: 75:5b:c2:20:6b:7e:b1:cc:8a:52:61:60:0d:d7:8e:cf:e0:cf: 1c:e3:ff:06:50:49:c5:9f:d8:64:36:1f:8a:c3:d6:7d:8d:50: 36:c6:f8:a1:68:46:d4:3e:22:83:85:2a:12:e3:de:07:73:aa: 5d:9b:72:e6:d0:d4:07:8e:c5:f0:ae:d2:43:a9:e6:6f:0d:d4: c1:c9:0e:ce:19:fa:0c:6f:1e:64:88:05:18:07:18:9d:3b:44: 73:6b:a2:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Mzk4OTExMC8GA1UEBRMoNDZEN0UzQjI0MjY1MEY3NUY4NUM0NTgxMzU4NThEQ0Q4 Qzk5QzIwMzAeFw0yNDExMjMwNDQ0MTRaFw0yNDExMzAwNDQ0MTRaMBgxFjAUBgNV BAMTDTY3NDE1ZDllLTM1YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDccf4z33d9SRzuaMcdDKblB/mUw+2B8sZ6ONHqGfhq4ApUaySNC37ZHMGoWXSH W5EOdBDD66HilUtPY8Qb/uK5B17MlbxLqLkFhmoxeeODcJf+H0pB2iQNtHd4WiLg xBoTHYipzZa2Qco3mQC2bMLWcg2fnXQReeekT60Kn/0hXrZ4Q04rCw9XYQCCpuS/ v2a2IGY6eZbWpE4gRdcejvFFSI0T+doollaVthCUWV4rIb8Q+0DXWyf3Uw3fyXRx gALj/ztahcFu0dOKuJ2BeH0US+hjauaW8nYavS21m29t8v7cMqysRij36h9Rze9G 2q5zcFxlSEfpwgBJIOawcautAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYDh0hg2T ydTwBGUgp+lZh8Q2FHEwHwYDVR0jBBgwFoAURtfjskJlD3X4XEWBNYWNzYyZwgMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzOTg5LzNBQUMwRTU4RUNE MDExRUU4QTIyNEQ0OUM0RjlBRTAyL1J0Zmpza0psRDNYNFhFV0JOWVdOell5Wndn TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUnRmanNrSmxEM1g0WEVXQk5ZV056WXlad2dNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz OTg5LzNBQUMwRTU4RUNEMDExRUU4QTIyNEQ0OUM0RjlBRTAyL1J0Zmpza0psRDNY NFhFV0JOWVdOell5WndnTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABsE0nO63JsMeknsjBQ7w0ABww9sZKxOnoCFoG+ZaCXwHesaPLMr0tEJ Y+RcWoUANcZRcqZkWFYs7rxPz+1LF9B7m6hx6RG1CBtQ8e+AA5JA+o3+FJfSBlu/ SotObcvOTz5TS8ABcq3rS6aSy5tRc4YVEwb2ZpVUdmUBcHTEeXQxoN0O8FN1WP5C kmnvLlI3xmpeGf7Lgw7LYo5prk6N1SOVlXVbwiBrfrHMilJhYA3Xjs/gzxzj/wZQ ScWf2GQ2H4rD1n2NUDbG+KFoRtQ+IoOFKhLj3gdzql2bcubQ1AeOxfCu0kOp5m8N 1MHJDs4Z+gxvHmSIBRgHGJ07RHNrork= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org