$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: Ady96qupSeU78fcnZEH+uvQq3Dq+wjU1aNuN/CmFx58= Subject key identifier: D3:2E:BA:3F:41:25:F7:84:FD:44:0C:40:9C:4D:B7:97:12:99:60:44 Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 3421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 3421 Signing time: Fri 22 Nov 2024 15:10:38 +0000 Manifest this update: Fri 22 Nov 2024 15:10:38 +0000 Manifest next update: Fri 29 Nov 2024 15:10:38 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: 9HMR/9TuC6GLH65tXdUbdJiASNe+QbNb7QlLOA10/ww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13345 (0x3421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Nov 22 15:10:38 2024 GMT Not After : Nov 29 15:10:38 2024 GMT Subject: CN=67409eee-c858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:c4:54:d7:bf:ff:d5:dd:cd:f5:b5:6d:76: 29:7d:35:fa:7e:cc:d5:88:1b:e8:d1:eb:e0:fc:c8: 5c:13:40:b7:df:80:cd:1c:36:c9:2a:56:3a:04:6a: 57:0a:f9:c8:4f:e3:48:7d:83:6d:a7:b0:0d:b4:ab: 50:7c:d2:72:03:3c:a8:51:68:59:e2:fe:c5:1b:b0: 4a:ca:25:15:bb:12:d3:a3:01:59:cf:3e:38:87:f9: d3:5f:e8:c5:63:1b:14:dc:26:b7:e1:14:87:6b:30: 8f:59:1c:98:f8:ca:2c:96:3b:01:ce:7e:16:08:7d: aa:50:b1:c7:64:f1:02:70:d6:7a:6c:88:29:4f:65: 7c:45:70:5b:2a:57:9b:d3:46:91:91:ff:da:87:69: f4:17:13:fa:d4:a4:0a:3e:58:26:e0:e5:a1:3c:1a: ce:45:bb:47:42:f4:bf:7b:58:98:3b:93:4c:e4:7c: 0d:38:36:55:99:31:73:25:ce:43:3d:3d:46:50:5a: 03:5b:2f:54:ee:7d:4b:47:3e:ad:2f:03:d3:3a:57: 73:f4:2f:44:f3:9b:0e:b9:ef:8d:11:86:df:d8:10: 30:c4:fd:b7:98:78:7d:db:3d:c6:19:e0:fe:e4:bd: 76:d0:83:94:c5:9e:5e:ac:6a:d4:b9:2a:11:26:04: f5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2E:BA:3F:41:25:F7:84:FD:44:0C:40:9C:4D:B7:97:12:99:60:44 X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:29:ab:fe:33:29:07:8f:13:dc:0e:2c:c8:d5:7e:e2:de:36: fd:d8:75:22:8d:29:3b:e4:f7:ec:7a:de:44:aa:53:d0:e0:14: c0:f7:d7:44:5c:1b:de:a9:19:14:b9:bc:b2:ce:fc:33:9a:f4: 00:da:f4:6b:ac:eb:cd:77:eb:e1:b2:07:b3:c8:35:82:31:4a: d7:2d:9b:68:7f:8a:e1:c8:b7:d0:10:e3:d7:16:55:84:f4:3a: d3:8c:47:6b:e0:66:41:2f:ee:e0:a4:03:56:a9:51:aa:56:d0: d6:ac:8a:24:7f:f9:78:c3:c2:2c:a6:df:23:1a:38:50:75:a1: 22:81:5e:e3:96:ef:3e:db:2d:d9:f2:a4:cd:8b:69:b4:32:12: 1e:d5:d9:e3:e4:d3:65:16:c3:36:d4:31:27:d6:5b:9d:7b:e6: 4e:a3:cf:a3:20:28:20:ae:70:f9:ca:8b:4a:5a:13:15:94:01: 38:5c:62:00:94:76:0d:70:0d:42:bc:65:d8:d7:3e:90:51:b9: cd:1f:4b:3f:f6:aa:a3:a9:85:8f:83:fc:dc:fa:0c:ca:36:d1: eb:87:e3:d5:2e:d7:e4:0a:bc:23:8f:1d:5e:cb:4d:48:0e:ba: df:28:0e:4a:f7:28:f9:57:0f:4e:aa:ff:69:62:a6:0e:92:de: 95:6a:71:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjQxMTIyMTUxMDM4WhcNMjQxMTI5MTUxMDM4WjAYMRYwFAYD VQQDEw02NzQwOWVlZS1jODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLjEVNe//9XdzfW1bXYpfTX6fszViBvo0evg/MhcE0C334DNHDbJKlY6BGpX CvnIT+NIfYNtp7ANtKtQfNJyAzyoUWhZ4v7FG7BKyiUVuxLTowFZzz44h/nTX+jF YxsU3Ca34RSHazCPWRyY+MosljsBzn4WCH2qULHHZPECcNZ6bIgpT2V8RXBbKleb 00aRkf/ah2n0FxP61KQKPlgm4OWhPBrORbtHQvS/e1iYO5NM5HwNODZVmTFzJc5D PT1GUFoDWy9U7n1LRz6tLwPTOldz9C9E85sOue+NEYbf2BAwxP23mHh92z3GGeD+ 5L120IOUxZ5erGrUuSoRJgT1MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMuuj9B JfeE/UQMQJxNt5cSmWBEMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNKav+MykHjxPcDizI1X7i3jb92HUijSk75Pfset5EqlPQ4BTA99dE XBveqRkUubyyzvwzmvQA2vRrrOvNd+vhsgezyDWCMUrXLZtof4rhyLfQEOPXFlWE 9DrTjEdr4GZBL+7gpANWqVGqVtDWrIokf/l4w8Ispt8jGjhQdaEigV7jlu8+2y3Z 8qTNi2m0MhIe1dnj5NNlFsM21DEn1lude+ZOo8+jICggrnD5yotKWhMVlAE4XGIA lHYNcA1CvGXY1z6QUbnNH0s/9qqjqYWPg/zc+gzKNtHrh+PVLtfkCrwjjx1ey01I DrrfKA5K9yj5Vw9Oqv9pYqYOkt6VanGw -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:12 2024 by rpki-client on console-ams.rpki-client.org