$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft File: A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json) Hash identifier: G7yntZpbaT32wlo6saGB0oH/C3DqMBBhbeohFV2yR2s= Subject key identifier: 0F:CC:8C:D2:B7:26:7F:44:D3:4E:0C:2E:0D:EE:05:3F:1B:5B:26:4D Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE Certificate issuer: /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft Manifest number: 34 Signing time: Mon 25 Nov 2024 05:32:21 +0000 Manifest this update: Mon 25 Nov 2024 05:32:21 +0000 Manifest next update: Mon 02 Dec 2024 05:32:21 +0000 Files and hashes: 1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: gllx5U8KxxxhZPuBYUSRxQUZhFUZI2S3m9TBQIoV/cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE Validity Not Before: Nov 25 05:32:21 2024 GMT Not After : Dec 2 05:32:21 2024 GMT Subject: CN=67440be5-aad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b2:73:8a:33:1a:6a:31:3d:9c:21:98:81:ad: 84:66:d6:65:c9:16:16:aa:f9:86:33:5f:6d:5e:99: ef:f1:99:d3:e7:92:95:f1:14:f4:6f:33:77:ae:a4: fb:e9:ab:64:ce:80:d7:c4:f6:65:32:8b:f7:99:ac: 49:ca:fe:92:0c:cc:af:32:6b:87:e0:61:ed:27:19: 23:eb:76:ab:e9:d8:91:cd:e3:cc:db:dc:aa:16:7f: 58:35:e6:cd:4d:a5:1c:83:06:74:e9:b4:74:b4:58: 74:58:ba:f6:a4:58:2b:00:d7:98:bc:97:b4:24:32: 02:12:f2:0e:79:71:06:dc:5e:1f:5b:35:7d:90:f0: 16:22:06:b6:75:3e:a4:84:69:1f:a9:3d:e9:dc:57: 7e:f3:d5:b8:e5:40:d1:3e:ce:59:a9:a7:3c:6c:bd: 1b:3e:46:8f:1d:2e:40:e9:47:0c:a4:c5:66:b3:72: 81:40:0e:02:49:15:7a:aa:a5:3d:2a:49:90:0d:05: 20:9a:88:43:19:c3:e9:3a:93:18:04:3a:f2:9a:00: a8:45:82:eb:09:b6:62:b8:78:3b:ac:3e:23:a8:17: 0c:27:39:e9:3c:ba:54:07:f8:df:ca:66:ba:2f:0b: 75:bf:66:fe:01:9a:a0:69:e5:8b:6b:34:bb:4a:41: e1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CC:8C:D2:B7:26:7F:44:D3:4E:0C:2E:0D:EE:05:3F:1B:5B:26:4D X509v3 Authority Key Identifier: keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:32:87:f0:9a:c0:f5:d0:91:f4:91:96:da:8a:d7:94:fb:16: b8:58:aa:fe:2f:cb:1d:89:5a:85:da:8e:a1:b3:0f:fa:4d:e7: 12:7b:86:8f:1d:1d:33:77:4e:17:b0:1c:02:48:a0:8b:46:22: a1:6b:1a:a9:e7:8e:a1:7f:b0:94:3d:af:ec:29:13:77:ec:b0: 47:80:c6:0e:1b:33:dd:42:44:70:a1:fa:65:84:4e:29:62:bd: 72:dc:46:85:73:a3:4a:26:ae:c0:32:a9:b1:cd:3f:9b:f4:45: 8c:8e:41:c2:f6:99:58:8c:dc:59:c0:84:36:71:22:84:53:b0: c9:08:a4:50:19:c6:d8:46:79:cc:d1:14:8a:b7:88:dd:17:4d: 18:04:61:93:3d:16:5d:94:b5:a9:d0:27:ee:72:bf:8f:3a:64: be:9d:76:4a:f9:ec:f7:d6:48:1b:68:2a:cd:ce:f0:14:19:b8: dc:7e:70:c8:fc:74:0f:34:da:98:68:c6:51:cf:9c:2a:c7:3a: 65:03:35:63:ac:17:45:b7:59:af:f2:5d:6e:ab:5d:1a:eb:40: 1c:94:2c:9e:60:1e:6d:3b:e4:80:a6:94:7a:c7:bc:75:a6:97: b4:e2:0b:85:16:91:66:02:9b:8e:a5:27:d5:44:57:1b:ef:10: 8c:a7:11:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzdDRDExMC8GA1UEBRMoMDNGNERFMDNBMUM5ODVDMzREQzY4MjcyRjlENzczNUIz M0ZBNkFERTAeFw0yNDExMjUwNTMyMjFaFw0yNDEyMDIwNTMyMjFaMBgxFjAUBgNV BAMTDTY3NDQwYmU1LWFhZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjsnOKMxpqMT2cIZiBrYRm1mXJFhaq+YYzX21eme/xmdPnkpXxFPRvM3eupPvp q2TOgNfE9mUyi/eZrEnK/pIMzK8ya4fgYe0nGSPrdqvp2JHN48zb3KoWf1g15s1N pRyDBnTptHS0WHRYuvakWCsA15i8l7QkMgIS8g55cQbcXh9bNX2Q8BYiBrZ1PqSE aR+pPencV37z1bjlQNE+zlmppzxsvRs+Ro8dLkDpRwykxWazcoFADgJJFXqqpT0q SZANBSCaiEMZw+k6kxgEOvKaAKhFgusJtmK4eDusPiOoFwwnOek8ulQH+N/KZrov C3W/Zv4BmqBp5YtrNLtKQeHTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD8yM0rcm f0TTTgwuDe4FPxtbJk0wHwYDVR0jBBgwFoAUA/TeA6HJhcNNxoJy+ddzWzP6at4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDN0NEL0RGMEI2ODZBNUVB MjExRUZCMTY3NzI0M0M0RjlBRTAyL0FfVGVBNkhKaGNOTnhvSnktZGR6V3pQNmF0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQV9UZUE2SEpoY05OeG9KeS1kZHpXelA2YXQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD N0NEL0RGMEI2ODZBNUVBMjExRUZCMTY3NzI0M0M0RjlBRTAyL0FfVGVBNkhKaGNO TnhvSnktZGR6V3pQNmF0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD0yh/CawPXQkfSRltqK15T7FrhYqv4vyx2JWoXajqGzD/pN5xJ7ho8d HTN3ThewHAJIoItGIqFrGqnnjqF/sJQ9r+wpE3fssEeAxg4bM91CRHCh+mWETili vXLcRoVzo0omrsAyqbHNP5v0RYyOQcL2mViM3FnAhDZxIoRTsMkIpFAZxthGeczR FIq3iN0XTRgEYZM9Fl2UtanQJ+5yv486ZL6ddkr57PfWSBtoKs3O8BQZuNx+cMj8 dA802phoxlHPnCrHOmUDNWOsF0W3Wa/yXW6rXRrrQByULJ5gHm075ICmlHrHvHWm l7TiC4UWkWYCm46lJ9VEVxvvEIynEZo= -----END CERTIFICATE-----Generated at Mon Nov 25 07:19:46 2024 by rpki-client on console-ams.rpki-client.org