$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json) Hash identifier: rRMftV67Seo5rWQyjUMa5OAaROH1YF4Ay/tbUJefXXo= Subject key identifier: 5F:FA:58:B4:50:83:43:98:09:FC:EC:35:6D:A6:D1:DA:00:E0:26:AC Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Certificate serial: 0924 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft Manifest number: 0924 Signing time: Sun 24 Nov 2024 14:58:32 +0000 Manifest this update: Sun 24 Nov 2024 14:58:31 +0000 Manifest next update: Sun 01 Dec 2024 14:58:31 +0000 Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: G58SuVjZ14/k/RihULU14xpOOZspQUS3ryuVptz2ppc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2340 (0x924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Validity Not Before: Nov 24 14:58:31 2024 GMT Not After : Dec 1 14:58:31 2024 GMT Subject: CN=67433f17-e796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:ae:ba:c3:16:14:71:14:58:a3:6e:7b:58: 53:55:0c:00:87:3d:29:e3:3b:b4:ea:25:ce:da:ab: 91:91:3c:20:eb:28:4b:d8:17:fc:9f:8d:dc:02:2e: c0:78:f3:69:46:54:74:70:f6:24:f0:01:01:dc:b9: 59:04:dc:a3:ff:d6:f1:c5:e8:5e:1b:12:85:be:ef: 8d:28:d4:e3:ad:da:ac:73:bf:01:b4:64:06:bb:fb: c1:5b:04:88:8d:c8:ee:b0:0b:4e:1f:b7:de:88:d0: 65:35:9c:92:eb:44:a1:52:79:45:19:da:ac:3a:cf: da:5d:1f:46:04:d4:fc:71:62:8d:50:30:b2:cd:29: bf:10:9e:76:9d:04:a3:fb:33:5e:78:7a:b5:ae:27: 79:ce:5a:5b:08:3b:c0:1f:32:3c:60:74:a8:a6:51: d8:88:bc:6e:9c:25:6e:91:f6:b1:6a:85:1d:b9:0f: 9c:ac:b1:3c:0f:8a:2c:2b:9a:69:eb:13:01:d1:20: 43:cc:76:aa:b5:3a:f0:b0:c5:32:8e:88:f1:49:78: 33:a8:93:fd:92:c7:1e:f9:a3:d1:ea:29:31:45:e0: ca:ad:ea:15:63:b9:b4:5c:7a:54:81:b4:fc:f2:43: 1e:f9:a3:26:3b:db:c3:11:e5:0a:69:31:bf:e3:df: 03:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FA:58:B4:50:83:43:98:09:FC:EC:35:6D:A6:D1:DA:00:E0:26:AC X509v3 Authority Key Identifier: keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:bf:9f:f4:51:08:73:b6:0b:7a:fe:d8:cb:e3:f6:57:c7:ea: 19:be:51:17:35:e7:42:37:c1:dd:d4:6b:c3:f8:4b:d4:58:09: fd:97:13:b3:d7:ed:b1:73:7c:27:03:c0:86:eb:2c:d0:e0:d8: 3b:10:7e:32:6a:2d:68:89:65:88:bf:56:76:69:00:d2:f8:03: e1:39:44:04:a8:2d:6b:e4:6b:b3:66:31:54:4c:72:ae:5c:c5: 16:32:b9:be:2b:0e:f3:b3:57:ad:be:4a:2e:c7:1c:57:0e:10: 17:0f:57:a5:7f:c6:ab:6d:d8:5a:f4:d5:af:3b:6a:d6:06:97: bb:6e:d0:e2:54:70:f5:09:1a:86:4e:0d:35:6e:3f:fa:24:21: fb:b0:46:ed:d7:f7:50:07:ad:ef:34:2e:aa:4b:6c:95:0a:9d: 0d:9a:bc:e0:9a:1d:76:ae:df:de:c9:52:78:9a:60:83:82:58: c3:77:94:43:75:01:ff:5d:1f:51:f2:76:86:a5:e8:0f:31:d4: 30:cd:05:0c:11:da:91:bc:86:34:07:51:73:45:45:d6:18:c0: f7:66:ec:ee:27:5b:7b:21:67:93:2c:87:99:c3:7e:05:45:93: ea:88:bf:ae:3b:e7:2f:db:7f:45:cf:75:f3:20:37:27:22:b4: 5d:a0:9f:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDMTExMTAvBgNVBAUTKDQ0RjhEMTUzQjc3QjA5MkIxMUVERjAwQTkzRTRCQjY0 MDkxQzI0NDcwHhcNMjQxMTI0MTQ1ODMxWhcNMjQxMjAxMTQ1ODMxWjAYMRYwFAYD VQQDEw02NzQzM2YxNy1lNzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLiuusMWFHEUWKNue1hTVQwAhz0p4zu06iXO2quRkTwg6yhL2Bf8n43cAi7A ePNpRlR0cPYk8AEB3LlZBNyj/9bxxeheGxKFvu+NKNTjrdqsc78BtGQGu/vBWwSI jcjusAtOH7feiNBlNZyS60ShUnlFGdqsOs/aXR9GBNT8cWKNUDCyzSm/EJ52nQSj +zNeeHq1rid5zlpbCDvAHzI8YHSoplHYiLxunCVukfaxaoUduQ+crLE8D4osK5pp 6xMB0SBDzHaqtTrwsMUyjojxSXgzqJP9ksce+aPR6ikxReDKreoVY7m0XHpUgbT8 8kMe+aMmO9vDEeUKaTG/498DHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/6WLRQ g0OYCfzsNW2m0doA4CasMB8GA1UdIwQYMBaAFET40VO3ewkrEe3wCpPku2QJHCRH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0MxMS81MTk4RkI5NjhG N0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NTc1I3ZkFLay1TN1pBa2NK RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQalJVN2Q3Q1NzUjdmQUtrLVM3WkFrY0pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0MxMS81MTk4RkI5NjhGN0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NT c1I3ZkFLay1TN1pBa2NKRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0v5/0UQhztgt6/tjL4/ZXx+oZvlEXNedCN8Hd1GvD+EvUWAn9lxOz 1+2xc3wnA8CG6yzQ4Ng7EH4yai1oiWWIv1Z2aQDS+APhOUQEqC1r5GuzZjFUTHKu XMUWMrm+Kw7zs1etvkouxxxXDhAXD1elf8arbdha9NWvO2rWBpe7btDiVHD1CRqG Tg01bj/6JCH7sEbt1/dQB63vNC6qS2yVCp0Nmrzgmh12rt/eyVJ4mmCDgljDd5RD dQH/XR9R8naGpegPMdQwzQUMEdqRvIY0B1FzRUXWGMD3ZuzuJ1t7IWeTLIeZw34F RZPqiL+uO+cv239Fz3XzIDcnIrRdoJ8l -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:59 2024 by rpki-client on console-ams.rpki-client.org