$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft File: u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json) Hash identifier: SZ4vwfBnEl6m71Fu7gn/UQkkZ6f26kT8JllGNKPiIxU= Subject key identifier: 3C:57:BE:F4:DC:9E:87:ED:C0:A5:F5:9F:FD:C1:03:58:69:33:15:BB Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 Certificate issuer: /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Certificate serial: 07BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft Manifest number: 16A9 Signing time: Fri 22 Nov 2024 17:39:20 +0000 Manifest this update: Fri 22 Nov 2024 17:39:19 +0000 Manifest next update: Fri 29 Nov 2024 17:39:19 +0000 Files and hashes: 1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: lq5NKQOovO1A+25UNMaFblt4Op6W9+t82How5KIrnRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Validity Not Before: Nov 22 17:39:19 2024 GMT Not After : Nov 29 17:39:19 2024 GMT Subject: CN=6740c1c8-4f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:94:75:d2:e3:29:c4:f1:77:06:10:35:73: 5b:e8:cc:b0:c4:88:18:cf:bc:ff:c0:d2:24:b5:49: cf:3d:4e:cf:58:66:ea:b8:9e:71:22:69:ea:bb:77: 75:3b:58:05:74:e7:47:b2:d7:58:70:03:a9:cb:1d: dd:6c:87:12:87:de:bf:79:7d:56:db:b4:dc:65:fd: f3:a2:7c:a5:d4:9c:c6:92:2c:d4:e3:88:11:ef:fa: 5a:35:23:d7:62:84:98:c9:eb:5d:91:fa:38:92:74: e1:d4:ab:5e:ac:14:61:5f:de:1f:c5:ba:e5:20:cb: 1e:2b:34:94:a1:86:9f:55:4b:2b:9f:c7:19:15:2f: 96:89:ed:4b:37:07:a2:d7:dd:2f:c7:e6:39:92:25: ca:68:f9:dd:b6:49:20:e2:67:99:d4:13:e2:ad:16: 0e:5f:dd:b3:fb:8c:a1:6e:89:70:73:4c:a5:81:6a: 6b:8e:9d:d9:39:cd:5c:0c:b1:16:24:52:7b:75:5f: f8:e4:e8:ec:5b:e2:f2:f3:ac:ee:85:cc:25:18:49: cc:08:ae:4c:ca:c5:36:8a:c8:25:78:d2:af:83:71: 46:5f:03:b8:65:c1:42:80:17:f9:a9:72:5c:03:08: 97:1b:78:88:a6:e6:70:f8:32:1c:3e:42:b4:c9:91: 09:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:57:BE:F4:DC:9E:87:ED:C0:A5:F5:9F:FD:C1:03:58:69:33:15:BB X509v3 Authority Key Identifier: keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:82:cd:31:89:b5:09:a9:60:b6:5c:ad:d6:9a:b1:a6:4b:0a: 5f:b2:1b:6e:ff:2a:d6:2e:13:fb:5a:cc:f9:f6:7d:69:7e:f0: 0d:3f:d1:97:9c:75:2e:0a:2d:cf:e6:04:86:1b:2a:6b:b7:df: a4:e1:21:9d:45:55:f3:bc:bc:ed:3e:96:3a:96:aa:9b:78:fd: be:c3:8d:d2:23:8d:fc:4e:b9:33:d1:9f:b6:65:96:e1:8d:ea: 5d:c8:bf:0d:7a:0d:44:b3:f6:86:3c:11:76:0c:c1:72:89:50: 1f:ad:90:ad:1d:3e:0c:70:ad:89:be:c8:cd:69:b4:ff:2d:bc: 0e:11:e5:6e:16:aa:6a:77:62:6e:38:9c:01:3f:52:8a:d9:1e: 8c:44:d5:15:a8:3c:fc:49:d1:74:1d:7d:5a:c3:bf:a1:8f:cc: 72:20:6c:55:ec:37:df:e5:0f:54:fb:74:cf:68:f1:2b:6a:0c: 3b:8e:74:95:66:6a:31:02:11:73:50:39:4a:fc:f9:57:27:4f: 25:db:4c:15:2b:b1:c0:8b:b5:22:10:e8:43:40:78:50:1e:e9: 9e:59:f1:fc:0f:cf:2e:06:85:f9:d6:74:40:19:72:e9:6a:f2: ba:89:73:5e:fe:df:66:25:d3:b4:26:14:b8:76:d7:26:a9:90: ce:66:69:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKEJCRTIzMzU2MEVGRDQwOUIzOENEQjgwQTAwNTc1QTM3 QkE4OTY0MzUwHhcNMjQxMTIyMTczOTE5WhcNMjQxMTI5MTczOTE5WjAYMRYwFAYD VQQDEw02NzQwYzFjOC00ZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmyUddLjKcTxdwYQNXNb6MywxIgYz7z/wNIktUnPPU7PWGbquJ5xImnqu3d1 O1gFdOdHstdYcAOpyx3dbIcSh96/eX1W27TcZf3zonyl1JzGkizU44gR7/paNSPX YoSYyetdkfo4knTh1KterBRhX94fxbrlIMseKzSUoYafVUsrn8cZFS+Wie1LNwei 190vx+Y5kiXKaPndtkkg4meZ1BPirRYOX92z+4yhbolwc0ylgWprjp3ZOc1cDLEW JFJ7dV/45OjsW+Ly86zuhcwlGEnMCK5MysU2isgleNKvg3FGXwO4ZcFCgBf5qXJc AwiXG3iIpuZw+DIcPkK0yZEJuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxXvvTc noftwKX1n/3BA1hpMxW7MB8GA1UdIwQYMBaAFLviM1YO/UCbOM24CgBXWje6iWQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFKczR6YmdLQUZkYU43cUpa RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtSXpWZzc5UUpzNHpiZ0tBRmRhTjdxSlpEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFK czR6YmdLQUZkYU43cUpaRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChgs0xibUJqWC2XK3WmrGmSwpfshtu/yrWLhP7Wsz59n1pfvANP9GX nHUuCi3P5gSGGyprt9+k4SGdRVXzvLztPpY6lqqbeP2+w43SI438Trkz0Z+2ZZbh jepdyL8Neg1Es/aGPBF2DMFyiVAfrZCtHT4McK2JvsjNabT/LbwOEeVuFqpqd2Ju OJwBP1KK2R6MRNUVqDz8SdF0HX1aw7+hj8xyIGxV7Dff5Q9U+3TPaPEragw7jnSV ZmoxAhFzUDlK/PlXJ08l20wVK7HAi7UiEOhDQHhQHumeWfH8D88uBoX51nRAGXLp avK6iXNe/t9mJdO0JhS4dtcmqZDOZmmu -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org