$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft File: B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json) Hash identifier: wmaXm0MMO/8ytJCj/OhEBmFOResW5KG1JesrOZ5l224= Subject key identifier: 4C:41:49:5C:B6:B4:B1:4A:6B:D7:56:11:35:C3:89:0E:F2:9C:25:AE Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18 Certificate issuer: /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft Manifest number: 17 Signing time: Mon 25 Nov 2024 05:53:33 +0000 Manifest this update: Mon 25 Nov 2024 05:53:33 +0000 Manifest next update: Mon 02 Dec 2024 05:53:33 +0000 Files and hashes: 1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: C6sASTXeUZDrzIBZKQw3gxBllCcteZhUQxdZf9tCkdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818 Validity Not Before: Nov 25 05:53:33 2024 GMT Not After : Dec 2 05:53:33 2024 GMT Subject: CN=674410dd-afeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:66:84:13:6b:a7:d3:66:db:97:a4:49:98: c3:e8:f8:48:d7:31:f5:e6:28:af:3c:d4:88:20:80: da:42:07:e0:dc:58:64:1c:43:c8:55:be:73:e6:6e: 2f:ae:43:9e:4d:af:20:f4:e1:fb:d6:b1:c7:8e:5e: e2:f2:ca:c4:31:d9:60:27:1a:b2:22:7e:1f:24:4e: b3:0b:1a:6d:3f:4b:e6:c5:e7:62:50:21:80:55:7d: 20:08:f9:66:43:d5:fb:0a:50:06:e8:0c:2e:cd:8f: bb:3a:31:8a:e4:41:85:9a:b4:50:b6:06:0d:f8:fe: 08:11:2d:c8:87:4f:fb:bc:95:fb:6c:66:4a:c9:8f: d8:75:ff:18:6f:66:4d:62:68:8e:b0:0a:dc:68:a5: 52:07:bc:2f:04:17:18:1f:83:a0:19:92:6e:49:7b: 7b:0e:f2:6b:fd:36:05:ab:00:d8:77:2f:df:21:cb: a1:e0:9b:82:0b:9b:ad:01:9e:3e:bc:56:94:49:ac: 97:65:2a:01:14:90:ef:e0:0a:7e:c4:fc:47:aa:f9: 23:1c:24:bf:e1:38:18:1e:9f:c3:01:98:f6:f8:cb: 97:4d:a2:f2:2a:f6:8a:8b:53:4a:72:87:78:20:29: 7d:c2:49:b7:cc:ee:45:fe:84:6d:74:54:3f:f1:a2: c9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:41:49:5C:B6:B4:B1:4A:6B:D7:56:11:35:C3:89:0E:F2:9C:25:AE X509v3 Authority Key Identifier: keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:15:e2:92:17:a1:88:3b:9f:13:a2:2c:f7:6e:f4:2f:36:f5: c5:0b:93:e9:be:e9:04:5d:b2:99:67:0e:73:40:70:b2:bd:be: f4:3c:1c:34:a5:47:c6:df:d8:d7:63:34:7f:d5:20:17:9c:be: 4f:ca:25:f9:15:68:ef:fe:a0:85:64:87:cd:27:43:46:e9:e8: c6:83:f2:59:1c:80:8a:78:34:1c:ca:ae:b2:53:e2:da:bd:8c: 3e:68:91:5c:38:ab:a1:f2:7a:60:e0:01:70:a0:f0:04:6a:17: 33:76:77:ea:3e:8e:4d:1e:ea:59:6e:52:d9:df:84:3e:41:26: 65:ab:07:e9:f5:6d:a4:ae:64:46:e8:f3:40:8a:d6:cf:b8:38: 74:7e:af:8e:de:8e:d0:8b:17:a7:ae:5d:7c:2b:b7:81:1e:cb: b4:f0:ed:0a:97:05:85:bf:9f:57:fa:91:db:25:f3:d8:7f:b9: e8:b0:b0:5a:25:90:02:ef:5a:ba:18:78:50:dc:ac:5c:4d:28: 56:d4:a7:71:36:f0:96:d2:f5:9e:a3:32:e4:25:2f:29:96:2f: 6e:50:63:95:58:a0:85:66:7c:9b:ef:47:1d:35:27:d7:47:30: de:9b:e1:c2:4b:80:4f:64:73:9a:73:21:e1:64:02:25:0f:32: eb:56:88:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0IwNTExMC8GA1UEBRMoMDdCMjVGN0U2NUNCNjI3MTA4QjBEOTRDMThGN0Y1NzlE MzM0NzgxODAeFw0yNDExMjUwNTUzMzNaFw0yNDEyMDIwNTUzMzNaMBgxFjAUBgNV BAMTDTY3NDQxMGRkLWFmZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKj2aEE2un02bbl6RJmMPo+EjXMfXmKK881IgggNpCB+DcWGQcQ8hVvnPmbi+u Q55NryD04fvWsceOXuLyysQx2WAnGrIifh8kTrMLGm0/S+bF52JQIYBVfSAI+WZD 1fsKUAboDC7Nj7s6MYrkQYWatFC2Bg34/ggRLciHT/u8lftsZkrJj9h1/xhvZk1i aI6wCtxopVIHvC8EFxgfg6AZkm5Je3sO8mv9NgWrANh3L98hy6Hgm4ILm60Bnj68 VpRJrJdlKgEUkO/gCn7E/Eeq+SMcJL/hOBgen8MBmPb4y5dNovIq9oqLU0pyh3gg KX3CSbfM7kX+hG10VD/xosnpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTEFJXLa0 sUpr11YRNcOJDvKcJa4wHwYDVR0jBBgwFoAUB7JffmXLYnEIsNlMGPf1edM0eBgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQjA1L0ZBNTJERUMyOEE5 QTExRUZCOEFBNTY0OEM0RjlBRTAyL0I3SmZmbVhMWW5FSXNObE1HUGYxZWRNMGVC Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQjdKZmZtWExZbkVJc05sTUdQZjFlZE0wZUJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD QjA1L0ZBNTJERUMyOEE5QTExRUZCOEFBNTY0OEM0RjlBRTAyL0I3SmZmbVhMWW5F SXNObE1HUGYxZWRNMGVCZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEoV4pIXoYg7nxOiLPdu9C829cULk+m+6QRdsplnDnNAcLK9vvQ8HDSl R8bf2NdjNH/VIBecvk/KJfkVaO/+oIVkh80nQ0bp6MaD8lkcgIp4NBzKrrJT4tq9 jD5okVw4q6HyemDgAXCg8ARqFzN2d+o+jk0e6lluUtnfhD5BJmWrB+n1baSuZEbo 80CK1s+4OHR+r47ejtCLF6euXXwrt4Eey7Tw7QqXBYW/n1f6kdsl89h/ueiwsFol kALvWroYeFDcrFxNKFbUp3E28JbS9Z6jMuQlLymWL25QY5VYoIVmfJvvRx01J9dH MN6b4cJLgE9kc5pzIeFkAiUPMutWiHA= -----END CERTIFICATE-----Generated at Mon Nov 25 07:14:53 2024 by rpki-client on console-fra.rpki-client.org