$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft File: A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json) Hash identifier: g+aUmy5vuCsVobzA2TOYIb7xzgMMQcz9xOvFk2UI1ok= Subject key identifier: 46:9D:08:AF:95:F5:96:58:86:4B:44:BD:38:80:A3:E4:64:C9:17:39 Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE Certificate issuer: /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft Manifest number: 23 Signing time: Wed 23 Oct 2024 06:28:46 +0000 Manifest this update: Wed 23 Oct 2024 06:28:46 +0000 Manifest next update: Wed 30 Oct 2024 06:28:46 +0000 Files and hashes: 1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: GN/+ExZCr0g+k3ZFFU9CAvB0c/S8Js3XzhHi4n6i/uE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE Validity Not Before: Oct 23 06:28:46 2024 GMT Not After : Oct 30 06:28:46 2024 GMT Subject: CN=6718979e-d5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:85:d4:6f:47:32:43:50:af:2e:a4:e8:2e: 3f:ee:6f:b6:30:6a:7d:40:1b:a2:76:ed:58:7f:9f: c4:af:f6:a8:96:59:54:c2:42:3b:19:31:8c:d2:1d: a1:81:10:94:45:7e:2e:97:87:6a:f3:79:95:17:dc: 97:63:f5:bb:6d:80:cd:cc:f0:84:47:08:c8:be:a1: 59:d3:22:09:ed:d3:7f:c3:9c:38:67:18:13:0b:5e: f4:2e:f1:b7:c1:47:8c:1d:69:61:ed:00:73:2e:ec: 53:bc:47:a8:7b:02:77:33:7f:29:8a:ea:7e:77:24: 64:cf:21:0f:5f:16:9f:64:b7:d4:90:81:a9:ba:1c: 4f:6e:a2:03:7f:ea:32:c9:0c:9b:3b:c5:63:29:3a: 77:e8:02:2d:53:c3:fe:ea:13:08:e3:19:f1:c8:59: 71:4c:b9:6a:3e:b9:a0:f8:ea:0a:7e:0e:24:fd:e5: 99:50:49:e2:5b:f7:6f:08:9c:b1:99:41:a2:65:a7: 59:14:b0:3b:44:41:c8:ed:9c:46:ca:c5:2e:90:9b: 29:24:37:92:ee:c6:4d:8b:c7:a9:15:5d:20:2d:67: 45:11:9c:b4:55:f3:2a:43:c4:c6:39:ad:f2:b7:da: cb:5c:af:0c:d5:5f:26:53:1d:ae:5f:77:85:22:73: 82:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9D:08:AF:95:F5:96:58:86:4B:44:BD:38:80:A3:E4:64:C9:17:39 X509v3 Authority Key Identifier: keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:bc:9e:19:51:b7:be:70:f9:6b:f8:5b:8c:32:e2:68:f9:67: 31:b0:7a:ce:a7:81:f5:b6:90:9a:7a:d4:3b:04:7b:62:24:e1: 2a:42:ca:be:79:b9:da:f8:3c:00:dc:d2:68:62:77:a6:c4:0a: dd:08:5e:c7:d8:44:c0:fe:2d:c9:a6:2b:dd:e7:6b:c7:ba:a4: 3b:6e:c7:52:ff:c3:1a:4a:d8:26:5b:a4:d4:e3:17:2a:a2:d9: a1:89:17:b7:63:80:a8:e1:b4:cd:b0:86:a4:7b:f3:b7:d7:1a: 6b:0e:aa:81:32:cd:5e:97:82:2a:95:7f:aa:0c:3c:4c:22:dd: ed:31:c2:db:29:1c:aa:29:26:66:03:ec:4f:e0:a5:ac:fd:15: a8:77:60:c0:48:03:f2:e1:a9:83:06:98:fa:5d:59:5d:25:39: bb:2e:4f:80:ec:b0:b2:c4:8e:5d:16:b6:a0:83:c6:07:99:6d: 1b:74:ea:d3:b0:51:bd:20:62:a4:90:56:03:c1:6d:bf:2d:d7: 26:49:55:7b:89:1d:a7:ee:4c:53:e7:2d:14:b8:14:b5:06:ca: bc:7b:bc:30:52:14:21:3e:d1:9c:f3:fb:a9:32:d6:b9:1b:19: 9e:0e:c4:f1:66:e8:e4:31:16:c3:0f:76:f4:75:3e:e3:f9:4f: ce:2d:93:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzdDRDExMC8GA1UEBRMoMDNGNERFMDNBMUM5ODVDMzREQzY4MjcyRjlENzczNUIz M0ZBNkFERTAeFw0yNDEwMjMwNjI4NDZaFw0yNDEwMzAwNjI4NDZaMBgxFjAUBgNV BAMTDTY3MTg5NzllLWQ1YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3NYXUb0cyQ1CvLqToLj/ub7Ywan1AG6J27Vh/n8Sv9qiWWVTCQjsZMYzSHaGB EJRFfi6Xh2rzeZUX3Jdj9bttgM3M8IRHCMi+oVnTIgnt03/DnDhnGBMLXvQu8bfB R4wdaWHtAHMu7FO8R6h7AnczfymK6n53JGTPIQ9fFp9kt9SQgam6HE9uogN/6jLJ DJs7xWMpOnfoAi1Tw/7qEwjjGfHIWXFMuWo+uaD46gp+DiT95ZlQSeJb928InLGZ QaJlp1kUsDtEQcjtnEbKxS6QmykkN5Luxk2Lx6kVXSAtZ0URnLRV8ypDxMY5rfK3 2stcrwzVXyZTHa5fd4Uic4KXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURp0Ir5X1 lliGS0S9OICj5GTJFzkwHwYDVR0jBBgwFoAUA/TeA6HJhcNNxoJy+ddzWzP6at4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDN0NEL0RGMEI2ODZBNUVB MjExRUZCMTY3NzI0M0M0RjlBRTAyL0FfVGVBNkhKaGNOTnhvSnktZGR6V3pQNmF0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQV9UZUE2SEpoY05OeG9KeS1kZHpXelA2YXQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD N0NEL0RGMEI2ODZBNUVBMjExRUZCMTY3NzI0M0M0RjlBRTAyL0FfVGVBNkhKaGNO TnhvSnktZGR6V3pQNmF0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEm8nhlRt75w+Wv4W4wy4mj5ZzGwes6ngfW2kJp61DsEe2Ik4SpCyr55 udr4PADc0mhid6bECt0IXsfYRMD+LcmmK93na8e6pDtux1L/wxpK2CZbpNTjFyqi 2aGJF7djgKjhtM2whqR787fXGmsOqoEyzV6XgiqVf6oMPEwi3e0xwtspHKopJmYD 7E/gpaz9Fah3YMBIA/LhqYMGmPpdWV0lObsuT4DssLLEjl0WtqCDxgeZbRt06tOw Ub0gYqSQVgPBbb8t1yZJVXuJHafuTFPnLRS4FLUGyrx7vDBSFCE+0Zzz+6ky1rkb GZ4OxPFm6OQxFsMPdvR1PuP5T84tkwY= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:48 2024 by rpki-client on console-ams.rpki-client.org