$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: DHn+5NBggPmBnqewpvymKRlRR3NZqOKiThcs7F8tyXI= Subject key identifier: AF:51:6A:4A:89:3C:21:8E:3F:B7:08:7D:0D:45:95:66:A7:65:9F:8E Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0A66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0B79 Signing time: Fri 22 Nov 2024 19:26:19 +0000 Manifest this update: Fri 22 Nov 2024 19:26:19 +0000 Manifest next update: Fri 29 Nov 2024 19:26:19 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: iTsV/8oyF8PydOItXSf7PE0ywicXqY87R0NCPV7OaIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2662 (0xa66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: Nov 22 19:26:19 2024 GMT Not After : Nov 29 19:26:19 2024 GMT Subject: CN=6740dadb-5f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:82:c6:e1:97:73:ce:f7:01:6f:0a:aa:07:e2: 83:76:e8:e4:84:bf:6c:1c:17:5c:9c:2e:99:8b:ca: 06:70:1c:c6:83:da:b5:be:f2:19:f4:f7:bc:4d:52: e4:37:8c:98:3c:01:51:03:85:34:43:8b:6b:5b:b2: ef:02:37:ff:e6:c8:e9:f8:45:f9:f5:44:bf:47:ac: eb:d0:ab:18:7e:80:c4:97:72:63:62:ef:64:86:6d: 04:16:04:b9:32:32:4b:86:79:3b:a8:42:e4:f2:a6: 8b:9d:39:93:c9:79:1f:94:00:be:db:10:99:75:47: 12:8c:f3:7d:f5:23:c4:14:51:af:be:cf:c9:9f:e0: 09:50:3b:58:1c:09:ed:4a:d2:02:87:d3:d9:88:84: a3:3a:4f:c2:9c:14:1d:fd:94:f8:5e:e4:75:97:18: d9:e8:0a:c4:fa:ae:50:23:de:cc:8a:f2:e9:a7:33: 98:31:c1:84:53:29:1e:9a:46:95:ee:40:ab:df:53: 1a:52:49:4f:02:3b:68:d3:2d:b1:76:73:4f:9c:47: 33:2f:51:68:2d:af:e3:e8:f8:7c:51:90:e4:97:28: 2c:ee:36:56:65:4b:4a:05:20:ce:c9:ea:33:d7:27: 1a:2f:01:bc:ca:c7:33:12:c1:5c:f2:6a:13:4e:4f: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:51:6A:4A:89:3C:21:8E:3F:B7:08:7D:0D:45:95:66:A7:65:9F:8E X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:3e:fd:8f:dd:0f:59:a7:03:8f:d5:a0:bc:54:8f:2b:3e:a1: ec:32:d5:db:85:03:90:df:64:00:10:cf:34:26:05:49:ec:af: ad:be:67:2f:98:36:fd:d5:05:8c:79:cd:65:2d:37:81:a3:f0: 1d:47:e2:8a:27:49:c2:1f:ca:ae:8a:9d:ea:28:31:0d:11:b3: 56:70:f3:5a:29:97:00:15:42:f2:59:09:39:00:b7:95:0e:e9: 06:55:67:be:45:61:6c:fa:7c:f2:34:eb:48:5f:4f:5f:5b:db: 15:3e:db:7b:76:5b:59:54:3a:ed:e5:69:61:b5:5e:27:c8:6c: c1:f9:39:93:dc:3f:10:78:dc:60:2d:1e:f0:2d:7d:47:0c:30: 95:a6:54:7c:dc:a3:52:80:25:05:c5:7a:1a:81:c5:e0:0a:5b: 1a:e4:b8:b6:a7:68:9f:3b:cc:ec:2a:e7:03:3c:74:54:47:55: 3d:f1:91:60:26:69:0d:61:46:5c:e6:45:7f:02:ba:2c:3c:a0: 8e:87:36:13:30:61:c7:b1:14:bb:1e:73:27:69:1d:8f:33:35: 96:e1:29:dc:07:56:72:a7:09:17:b1:12:76:4b:48:0c:67:1b: a3:14:d7:1a:77:95:95:42:4c:45:3c:e0:b9:34:bb:48:f8:3a: c1:e1:ea:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjQxMTIyMTkyNjE5WhcNMjQxMTI5MTkyNjE5WjAYMRYwFAYD VQQDEw02NzQwZGFkYi01ZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoLG4ZdzzvcBbwqqB+KDdujkhL9sHBdcnC6Zi8oGcBzGg9q1vvIZ9Pe8TVLk N4yYPAFRA4U0Q4trW7LvAjf/5sjp+EX59US/R6zr0KsYfoDEl3JjYu9khm0EFgS5 MjJLhnk7qELk8qaLnTmTyXkflAC+2xCZdUcSjPN99SPEFFGvvs/Jn+AJUDtYHAnt StICh9PZiISjOk/CnBQd/ZT4XuR1lxjZ6ArE+q5QI97MivLppzOYMcGEUykemkaV 7kCr31MaUklPAjto0y2xdnNPnEczL1FoLa/j6Ph8UZDklygs7jZWZUtKBSDOyeoz 1ycaLwG8ysczEsFc8moTTk9H+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9RakqJ PCGOP7cIfQ1FlWanZZ+OMB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWPv2P3Q9ZpwOP1aC8VI8rPqHsMtXbhQOQ32QAEM80JgVJ7K+tvmcv mDb91QWMec1lLTeBo/AdR+KKJ0nCH8quip3qKDENEbNWcPNaKZcAFULyWQk5ALeV DukGVWe+RWFs+nzyNOtIX09fW9sVPtt7dltZVDrt5WlhtV4nyGzB+TmT3D8QeNxg LR7wLX1HDDCVplR83KNSgCUFxXoagcXgClsa5Li2p2ifO8zsKucDPHRUR1U98ZFg JmkNYUZc5kV/ArosPKCOhzYTMGHHsRS7HnMnaR2PMzWW4SncB1ZypwkXsRJ2S0gM ZxujFNcad5WVQkxFPOC5NLtI+DrB4eqL -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org