$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json) Hash identifier: XcHekPI56/CacgSmhzNBy9Aii8QsfLlIZF3xSWHmW04= Subject key identifier: 68:DF:FC:01:A3:7C:A7:32:DB:C6:F4:82:BA:79:D7:F7:B2:8E:70:8B Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft Manifest number: 0E Signing time: Wed 25 Dec 2024 06:08:42 +0000 Manifest this update: Wed 25 Dec 2024 06:08:42 +0000 Manifest next update: Wed 01 Jan 2025 06:08:42 +0000 Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: JwiawXAoagEfBxrqmymIP6n6bkJ3XlrGFSx4pVlRlcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Validity Not Before: Dec 25 06:08:42 2024 GMT Not After : Jan 1 06:08:42 2025 GMT Subject: CN=676ba16a-f1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:16:ae:ab:96:53:3b:a8:59:a1:f8:37:5e:99: 41:90:6c:e6:d1:01:e6:7a:8c:18:62:51:da:93:cf: a8:02:ca:5c:48:8a:06:e1:ab:60:a8:0c:cb:56:4e: 9d:b3:51:b5:d6:09:74:27:f5:f1:df:61:b0:f9:f3: 38:a3:90:5c:12:e0:81:cd:2d:cf:29:ae:03:ad:bf: c5:e8:c6:4b:85:dd:0e:85:6b:c7:0b:d7:67:8e:f8: bf:89:29:8a:52:01:17:af:51:b9:f2:1a:15:60:c9: 9f:58:35:3d:e6:a8:91:99:d7:23:c4:2f:d3:6e:bb: 0e:d9:b5:ff:9e:0b:70:e1:59:b7:29:d1:02:74:b4: 0f:aa:c9:9c:f2:a9:ac:7c:3e:23:54:bb:c9:d0:cd: dc:51:c0:d9:41:e0:50:5e:e9:6a:88:33:86:69:da: b6:e4:c7:06:3e:41:45:70:07:aa:1b:db:e9:b3:be: 89:66:74:30:27:f9:b9:0c:da:25:41:6f:31:3e:0b: eb:e2:f1:cc:cd:92:80:59:7e:7e:cd:b2:7f:10:7c: d8:1d:7d:00:09:44:b2:75:75:29:49:c6:d9:66:b5: a3:a4:1f:3b:18:58:ae:95:48:55:36:78:3a:ab:9d: 56:72:fe:da:c2:f7:54:6a:8b:93:16:ad:87:80:db: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DF:FC:01:A3:7C:A7:32:DB:C6:F4:82:BA:79:D7:F7:B2:8E:70:8B X509v3 Authority Key Identifier: keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:91:65:e9:20:4d:97:91:b8:30:80:81:f0:75:38:a0:c3:87: db:1b:41:34:b5:7d:4d:7e:a1:fa:d6:ee:7d:3c:24:77:e0:09: c3:a7:0b:6f:3f:1e:9b:0d:ab:0e:4c:21:0c:12:69:8b:5d:01: 79:a8:d6:b2:f0:a1:8c:5e:38:2c:bb:07:54:25:43:c5:ed:7a: 7e:05:2f:d1:6d:a9:33:aa:f2:8e:37:17:3c:4b:ef:a8:1f:cd: e9:3a:0d:e8:7d:02:9c:de:0d:dd:1c:6f:c3:ed:c7:f9:0c:73: 3a:8c:19:c4:ac:03:1d:ad:b9:ac:70:ca:a2:dc:cc:5c:fe:89: 9a:f4:a1:55:f8:ff:a7:cf:ba:bf:04:77:c4:68:ed:75:73:ca: d4:a0:4d:16:a2:96:95:5a:0a:a9:ca:94:4c:f9:a5:c4:ed:7f: c0:e7:29:b3:1e:93:dc:f3:7f:bc:fb:8e:9f:18:ed:b8:fe:5f: 1d:82:bc:e3:02:f0:c4:ae:50:b1:33:ab:64:33:58:51:12:e0: 4b:da:49:7d:47:e8:95:ba:bf:aa:85:bd:45:03:0d:59:11:3d: 66:9e:a0:37:89:d2:75:75:5f:ef:7c:01:35:94:33:59:a7:89: 70:3e:96:a4:d4:36:2d:9b:65:5f:38:8e:0e:06:63:8d:11:d1: da:49:f7:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTBCNDExMC8GA1UEBRMoMjMwMzc4MTY3NzA3OUMyRkJCNDc0OTY0MEYwNjU3QTFD ODhFREI0NDAeFw0yNDEyMjUwNjA4NDJaFw0yNTAxMDEwNjA4NDJaMBgxFjAUBgNV BAMTDTY3NmJhMTZhLWYxZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgFq6rllM7qFmh+DdemUGQbObRAeZ6jBhiUdqTz6gCylxIigbhq2CoDMtWTp2z UbXWCXQn9fHfYbD58zijkFwS4IHNLc8prgOtv8XoxkuF3Q6Fa8cL12eO+L+JKYpS ARevUbnyGhVgyZ9YNT3mqJGZ1yPEL9Nuuw7Ztf+eC3DhWbcp0QJ0tA+qyZzyqax8 PiNUu8nQzdxRwNlB4FBe6WqIM4Zp2rbkxwY+QUVwB6ob2+mzvolmdDAn+bkM2iVB bzE+C+vi8czNkoBZfn7Nsn8QfNgdfQAJRLJ1dSlJxtlmtaOkHzsYWK6VSFU2eDqr nVZy/trC91Rqi5MWrYeA29/fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaN/8AaN8 pzLbxvSCunnX97KOcIswHwYDVR0jBBgwFoAUIwN4FncHnC+7R0lkDwZXociO20Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFMEI0L0YyMjMxREU0QUYz ODExRUZBMjBERDAxM0M0RjlBRTAyL0l3TjRGbmNIbkMtN1IwbGtEd1pYb2NpTzIw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSXdONEZuY0huQy03UjBsa0R3WlhvY2lPMjBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF MEI0L0YyMjMxREU0QUYzODExRUZBMjBERDAxM0M0RjlBRTAyL0l3TjRGbmNIbkMt N1IwbGtEd1pYb2NpTzIwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFeRZekgTZeRuDCAgfB1OKDDh9sbQTS1fU1+ofrW7n08JHfgCcOnC28/ HpsNqw5MIQwSaYtdAXmo1rLwoYxeOCy7B1QlQ8Xten4FL9FtqTOq8o43FzxL76gf zek6Deh9ApzeDd0cb8Ptx/kMczqMGcSsAx2tuaxwyqLczFz+iZr0oVX4/6fPur8E d8Ro7XVzytSgTRailpVaCqnKlEz5pcTtf8DnKbMek9zzf7z7jp8Y7bj+Xx2CvOMC 8MSuULEzq2QzWFES4EvaSX1H6JW6v6qFvUUDDVkRPWaeoDeJ0nV1X+98ATWUM1mn iXA+lqTUNi2bZV84jg4GY40R0dpJ9wU= -----END CERTIFICATE-----Generated at Wed Dec 25 08:01:06 2024 by rpki-client on console-fra.rpki-client.org