$ rpki-client -vvf rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft File: AZoGU7P4x3djt9819lZFFY3wWoo.mft (raw, json) Hash identifier: 2rbd0ylcwZvRPvGUVcvOsCYcUgcjCCyfJ4TAJAGl04k= Subject key identifier: 0F:A1:BB:FE:89:98:21:BA:93:34:5F:97:CB:88:10:52:23:9C:0D:89 Authority key identifier: 01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A Certificate issuer: /CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft Manifest number: 05DF Signing time: Fri 22 Nov 2024 23:36:37 +0000 Manifest this update: Fri 22 Nov 2024 23:36:36 +0000 Manifest next update: Fri 29 Nov 2024 23:36:36 +0000 Files and hashes: 1: AZoGU7P4x3djt9819lZFFY3wWoo.crl (hash: LWZAmEJ0/U5gXlOdehZ92apgFZHRIdQNH52wBaQrO/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233F8/serialNumber=019A0653B3F8C77763B7DF35F65645158DF05A8A Validity Not Before: Nov 22 23:36:36 2024 GMT Not After : Nov 29 23:36:36 2024 GMT Subject: CN=67411585-cdbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5c:57:2b:5e:7c:a9:92:2d:85:ed:2b:f5:a0: ee:73:4f:78:0f:56:3d:01:c4:e6:34:a4:28:0c:19: 69:b7:a1:d2:c6:4e:0a:33:8e:a1:cb:17:27:44:8b: 7e:df:97:e0:82:40:26:48:0a:f7:d3:f6:8f:0c:a7: bb:65:e7:60:17:d7:0c:0e:4b:1d:32:72:64:75:b8: 58:54:57:c9:57:da:e8:47:24:6b:cc:b1:76:08:d5: bb:51:61:69:81:0b:ea:ef:80:af:df:3d:5d:46:9c: 87:69:2d:45:b5:87:45:93:95:cd:54:6c:8e:38:0e: a2:65:45:9e:6b:2b:53:eb:8e:48:90:96:2d:66:2a: 49:d6:f2:6a:bf:41:71:60:51:d0:87:09:e0:3b:dc: 48:21:04:4c:16:d1:e3:5c:e3:b0:95:a5:23:25:7f: 0c:81:4e:be:0d:88:0e:5a:6d:9a:6f:9a:6b:64:7a: 21:a6:f2:b2:45:3c:3f:f1:d7:7f:ae:12:21:42:cc: a9:71:45:51:0b:68:ed:c1:a3:f3:c9:a4:8c:60:2d: 21:66:44:6e:75:62:c9:6e:0b:2f:11:98:a9:0c:70: e9:02:dd:a8:df:c8:e3:3c:8e:f6:de:7f:bd:ac:61: ab:c3:76:7b:1d:07:aa:f6:89:3e:dd:75:31:14:4d: e4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A1:BB:FE:89:98:21:BA:93:34:5F:97:CB:88:10:52:23:9C:0D:89 X509v3 Authority Key Identifier: keyid:01:9A:06:53:B3:F8:C7:77:63:B7:DF:35:F6:56:45:15:8D:F0:5A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZoGU7P4x3djt9819lZFFY3wWoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233F8/F09019D61BB711EC903D8A4CC4F9AE02/AZoGU7P4x3djt9819lZFFY3wWoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:1a:05:6f:0c:4a:3e:a8:ce:e1:4f:03:bf:c9:81:36:b3:c6: c0:d6:cd:7d:79:b6:4e:f0:f7:f2:6a:e0:10:4b:17:65:05:9b: 0d:82:d4:bb:e7:b8:a2:74:73:06:55:c7:4d:b9:03:c5:dd:7c: c6:fc:7e:07:b1:7a:d5:e8:77:1b:47:62:07:68:45:0f:ba:2d: e7:cc:03:7a:9f:5a:72:10:fa:bb:af:f7:42:89:d1:93:5a:1d: 61:77:a4:04:bf:f1:bf:fe:fc:1c:87:f1:63:af:b5:89:e1:d4: a5:0a:d3:80:c6:0e:73:19:70:c4:e0:65:00:48:9f:b7:32:19: d7:d8:3f:9a:73:5c:43:5c:71:b9:dd:ed:90:91:7b:29:7d:6d: b9:8c:8f:74:ae:a8:25:c3:2b:48:ee:68:c4:db:ae:53:1f:36: c4:89:32:7c:54:c4:1b:5a:63:51:53:de:db:0a:de:a5:d0:1b: 63:b1:4c:12:6a:da:0f:84:60:c2:c4:e0:22:43:d0:54:f4:47: 40:1e:7d:f3:70:a8:76:f4:5b:9f:19:8f:bd:de:e7:01:55:6e: 7a:78:64:fc:06:2d:d4:2a:eb:de:d0:d1:be:00:1e:0b:9b:e0: 04:7b:fc:e3:90:0e:bf:66:82:a9:3a:d4:a3:a9:b3:5e:64:af: 9b:7f:7d:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRjgxMTAvBgNVBAUTKDAxOUEwNjUzQjNGOEM3Nzc2M0I3REYzNUY2NTY0NTE1 OERGMDVBOEEwHhcNMjQxMTIyMjMzNjM2WhcNMjQxMTI5MjMzNjM2WjAYMRYwFAYD VQQDEw02NzQxMTU4NS1jZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFxXK158qZIthe0r9aDuc094D1Y9AcTmNKQoDBlpt6HSxk4KM46hyxcnRIt+ 35fggkAmSAr30/aPDKe7ZedgF9cMDksdMnJkdbhYVFfJV9roRyRrzLF2CNW7UWFp gQvq74Cv3z1dRpyHaS1FtYdFk5XNVGyOOA6iZUWeaytT645IkJYtZipJ1vJqv0Fx YFHQhwngO9xIIQRMFtHjXOOwlaUjJX8MgU6+DYgOWm2ab5prZHohpvKyRTw/8dd/ rhIhQsypcUVRC2jtwaPzyaSMYC0hZkRudWLJbgsvEZipDHDpAt2o38jjPI723n+9 rGGrw3Z7HQeq9ok+3XUxFE3knQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA+hu/6J mCG6kzRfl8uIEFIjnA2JMB8GA1UdIwQYMBaAFAGaBlOz+Md3Y7ffNfZWRRWN8FqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNGOC9GMDkwMTlENjFC QjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgzZGp0OTgxOWxaRkZZM3dX b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Fab0dVN1A0eDNkanQ5ODE5bFpGRlkzd1dvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNGOC9GMDkwMTlENjFCQjcxMUVDOTAzRDhBNENDNEY5QUUwMi9BWm9HVTdQNHgz ZGp0OTgxOWxaRkZZM3dXb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHGgVvDEo+qM7hTwO/yYE2s8bA1s19ebZO8PfyauAQSxdlBZsNgtS7 57iidHMGVcdNuQPF3XzG/H4HsXrV6HcbR2IHaEUPui3nzAN6n1pyEPq7r/dCidGT Wh1hd6QEv/G//vwch/Fjr7WJ4dSlCtOAxg5zGXDE4GUASJ+3MhnX2D+ac1xDXHG5 3e2QkXspfW25jI90rqglwytI7mjE265THzbEiTJ8VMQbWmNRU97bCt6l0BtjsUwS atoPhGDCxOAiQ9BU9EdAHn3zcKh29FufGY+93ucBVW56eGT8Bi3UKuve0NG+AB4L m+AEe/zjkA6/ZoKpOtSjqbNeZK+bf30F -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org