$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft File: fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft (raw, json) Hash identifier: sH3mKjExXBtRWGm3kI0GA7MXNB/XEZceAkXVJrYkQRw= Subject key identifier: 56:8D:60:12:F6:96:26:90:BA:8B:DD:43:86:8D:40:58:F6:32:A2:5F Authority key identifier: 7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04 Certificate issuer: /CN=A911ABF4/serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04 Certificate serial: 0ED7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft Manifest number: 16A8 Signing time: Fri 22 Nov 2024 17:39:18 +0000 Manifest this update: Fri 22 Nov 2024 17:39:17 +0000 Manifest next update: Fri 29 Nov 2024 17:39:17 +0000 Files and hashes: 1: fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl (hash: fDnYZmMpALWfUyV2zsjxbuMziUJDr5vzeHkCOYWerWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3799 (0xed7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4/serialNumber=7D8309C5F22EF38C9F52C9CB7E3AFF5848EFBE04 Validity Not Before: Nov 22 17:39:17 2024 GMT Not After : Nov 29 17:39:17 2024 GMT Subject: CN=6740c1c6-4e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:8e:3b:ea:16:86:96:e7:30:6a:27:d8:9f: c8:68:4e:0c:35:1d:04:4d:07:41:e7:57:1d:92:dc: 22:4e:43:02:a9:7d:be:a7:64:81:2d:98:ef:a7:24: ef:84:7e:3c:b5:57:45:5b:b6:91:2d:e2:70:b8:a8: 77:0a:32:99:5a:b5:2e:eb:dd:c0:27:fa:a9:53:a7: b4:56:d9:9e:80:62:eb:7b:bb:5f:1f:3d:2d:88:c8: ba:06:13:04:bb:4e:e9:8f:10:7c:ae:67:7b:f8:b7: 9c:7f:50:50:47:e8:e9:f7:a4:54:e8:b8:a8:08:d7: 96:c5:e9:6c:2c:99:c6:b5:32:a9:b0:a9:a2:ef:21: a6:2c:ea:7e:13:63:68:9a:36:74:cc:d5:f4:80:b1: 9c:9c:7d:e8:f2:91:0f:00:04:b9:33:42:be:ac:98: 9a:85:5c:d3:fd:7a:ab:fc:89:5f:8d:0e:13:d4:4f: c6:79:c8:a9:d8:2e:d8:e5:7e:aa:6f:a1:63:72:93: 0e:cd:1e:0b:70:68:57:be:79:40:ed:aa:8a:22:a0: 39:79:47:1c:ac:e6:9b:66:06:7d:f3:73:46:6a:a3: f8:b1:3d:b6:29:a3:57:05:71:b3:2d:3a:4a:8b:57: 88:59:52:b7:b1:ea:da:a4:3a:63:0b:c8:f9:33:2b: d2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8D:60:12:F6:96:26:90:BA:8B:DD:43:86:8D:40:58:F6:32:A2:5F X509v3 Authority Key Identifier: keyid:7D:83:09:C5:F2:2E:F3:8C:9F:52:C9:CB:7E:3A:FF:58:48:EF:BE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fYMJxfIu84yfUsnLfjr_WEjvvgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/fYMJxfIu84yfUsnLfjr_WEjvvgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:ef:55:a8:18:e7:1b:5e:b2:46:e4:fd:b7:22:cd:b8:e6:00: 74:1c:92:57:92:54:4d:ef:20:38:ba:2b:9c:5f:4b:16:93:32: 67:87:84:3c:07:ef:e8:a5:ee:5c:04:f9:61:02:bc:9a:3f:e4: ce:29:35:a6:97:c0:13:83:ab:8f:f7:ad:28:71:85:65:28:5a: 0b:5a:57:2f:43:0c:4c:78:44:b9:83:c5:62:49:11:03:91:db: b8:25:6e:75:80:6f:9d:94:ca:a9:42:da:6b:76:6e:27:1a:01: 73:9a:92:4f:1f:eb:64:62:e3:f8:15:29:71:b0:28:9c:fa:4a: 8b:25:d4:1d:65:0d:54:fd:e1:6a:c2:d0:63:ce:88:41:62:14: 6c:bb:54:95:e4:c5:88:94:70:85:e5:f1:fe:10:f8:85:64:e4: 7a:37:3b:1e:a6:59:ec:ef:3d:5b:4e:84:1a:6f:6a:dd:26:eb: 77:ce:9b:63:3e:d3:ce:6b:19:98:cf:b4:9d:44:a1:8b:f6:f5: 6e:36:a4:ac:0c:d7:2d:e5:b0:8b:08:b1:84:3d:77:64:06:c0: dd:0c:89:13:05:43:e4:3b:2c:20:a0:a4:f8:3e:5d:ba:db:8c: 25:85:b3:ad:0b:5b:38:f3:c3:9f:0e:76:7e:2a:26:47:9f:8e: 45:8f:2c:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKDdEODMwOUM1RjIyRUYzOEM5RjUyQzlDQjdFM0FGRjU4 NDhFRkJFMDQwHhcNMjQxMTIyMTczOTE3WhcNMjQxMTI5MTczOTE3WjAYMRYwFAYD VQQDEw02NzQwYzFjNi00ZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso6OO+oWhpbnMGon2J/IaE4MNR0ETQdB51cdktwiTkMCqX2+p2SBLZjvpyTv hH48tVdFW7aRLeJwuKh3CjKZWrUu693AJ/qpU6e0VtmegGLre7tfHz0tiMi6BhME u07pjxB8rmd7+Lecf1BQR+jp96RU6LioCNeWxelsLJnGtTKpsKmi7yGmLOp+E2No mjZ0zNX0gLGcnH3o8pEPAAS5M0K+rJiahVzT/Xqr/IlfjQ4T1E/Gecip2C7Y5X6q b6FjcpMOzR4LcGhXvnlA7aqKIqA5eUccrOabZgZ983NGaqP4sT22KaNXBXGzLTpK i1eIWVK3serapDpjC8j5MyvSPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaNYBL2 liaQuovdQ4aNQFj2MqJfMB8GA1UdIwQYMBaAFH2DCcXyLvOMn1LJy346/1hI774E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9mWU1KeGZJdTg0eWZVc25MZmpyX1dFanZ2 Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZZTUp4Zkl1ODR5ZlVzbkxmanJfV0VqdnZnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi9mWU1KeGZJdTg0 eWZVc25MZmpyX1dFanZ2Z1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO71WoGOcbXrJG5P23Is245gB0HJJXklRN7yA4uiucX0sWkzJnh4Q8 B+/ope5cBPlhAryaP+TOKTWml8ATg6uP960ocYVlKFoLWlcvQwxMeES5g8ViSRED kdu4JW51gG+dlMqpQtprdm4nGgFzmpJPH+tkYuP4FSlxsCic+kqLJdQdZQ1U/eFq wtBjzohBYhRsu1SV5MWIlHCF5fH+EPiFZOR6Nzseplns7z1bToQab2rdJut3zptj PtPOaxmYz7SdRKGL9vVuNqSsDNct5bCLCLGEPXdkBsDdDIkTBUPkOywgoKT4Pl26 24wlhbOtC1s488OfDnZ+KiZHn45Fjyyp -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:56 2024 by rpki-client on console-ams.rpki-client.org