$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft File: y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json) Hash identifier: O7Dg2LOSi2kyQE8wnKBnv/jdo/aqYLSMS+L274pIcrg= Subject key identifier: 9C:F4:47:2D:7F:BF:34:7B:1B:11:B4:2E:4E:5F:4D:D3:EE:63:4C:B4 Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E Certificate issuer: /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft Manifest number: 1A Signing time: Wed 23 Oct 2024 06:35:56 +0000 Manifest this update: Wed 23 Oct 2024 06:35:55 +0000 Manifest next update: Wed 30 Oct 2024 06:35:55 +0000 Files and hashes: 1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: hvvM4kWDjAXbgdN3lqF3TqnmuyiLCYHybHiMB1WJZjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E Validity Not Before: Oct 23 06:35:55 2024 GMT Not After : Oct 30 06:35:55 2024 GMT Subject: CN=6718994b-47b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:1c:89:58:ae:50:47:1d:ab:b7:96:ac:4d: a3:04:b7:55:98:1a:64:27:ce:8e:27:57:4a:66:05: f7:de:84:d4:90:8a:52:8a:31:86:38:27:0a:db:66: d1:5b:68:de:80:db:63:25:d3:3a:e0:f9:76:25:56: c0:8b:87:de:39:7a:b4:2d:eb:53:6c:b6:76:6b:67: 53:3a:a5:9b:c1:90:de:4e:d3:cc:e1:98:c9:8f:3a: 7f:ad:5f:4f:6a:4f:51:ea:55:99:91:9c:af:57:e7: d7:6d:31:f6:12:48:39:e3:3c:92:d0:e7:24:be:d7: af:90:58:71:08:cb:1e:56:ef:fa:84:2c:9f:45:82: 21:bb:7a:ba:1f:57:2a:94:60:83:32:4d:19:7d:f3: f7:f4:70:29:ce:0e:b9:84:a4:9d:e8:e4:21:7c:47: 79:7d:86:f9:78:85:77:f3:91:cb:e3:0c:75:75:81: 86:09:f3:2e:4d:72:9e:8d:8d:60:16:78:b4:5d:0c: 41:47:0a:6f:95:c7:02:70:bb:8c:2c:5d:d8:04:5c: 1b:4b:9a:b5:62:7c:15:2f:81:35:e9:71:aa:48:71: 7a:c6:ce:9a:11:ff:ae:dd:fb:d0:f4:56:3f:b1:1b: 95:ea:df:cd:03:c4:15:72:5e:2d:78:6a:54:c9:7e: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F4:47:2D:7F:BF:34:7B:1B:11:B4:2E:4E:5F:4D:D3:EE:63:4C:B4 X509v3 Authority Key Identifier: keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:ae:b8:40:f4:85:86:ea:0e:28:82:6b:82:1c:b0:b1:a7:af: 64:16:fa:3d:00:f0:dc:44:9b:f2:b3:e3:61:19:6a:f0:0f:db: 13:80:1f:10:65:a0:10:a8:0c:83:81:f1:ad:79:5e:7a:9e:51: 7c:20:bf:e9:e4:e0:04:f3:da:db:a8:5a:42:ec:a5:a7:70:72: 9f:8c:1d:b4:44:90:89:c1:2f:31:3a:07:68:2c:1f:4f:1e:b8: 25:fc:eb:ca:a4:86:5a:2c:0b:34:17:ab:93:0f:67:97:88:dc: 7a:9a:b3:37:6c:b6:3d:d2:5e:f4:f2:3e:01:94:3e:9e:6d:85: 64:be:94:df:4c:b5:72:14:9b:53:ca:64:4d:d8:b3:09:7a:d8: d0:9a:de:74:e0:08:13:94:22:63:37:10:1c:b0:99:88:a8:8f: 12:7a:54:21:3e:19:94:ff:36:5c:1e:50:ff:f3:8a:49:73:80: 53:0d:25:54:e5:2e:0e:cc:37:a6:94:57:74:ec:e1:61:dc:05: 67:85:0d:c1:37:df:24:58:67:e5:dc:2d:49:4a:23:14:87:f1: 62:27:63:4b:1b:6d:21:b0:e8:19:53:cd:9f:50:07:04:f9:e4: 08:34:2d:b9:35:09:6b:96:78:dd:65:e4:61:76:92:16:f5:ec: 2f:3e:b3:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzU2RDExMC8GA1UEBRMoQ0I3OUQ5QkUxMERDRjcwMjQ2RkM2OTQ2MzQ1OEFFQ0Ey NDI1Q0I4RTAeFw0yNDEwMjMwNjM1NTVaFw0yNDEwMzAwNjM1NTVaMBgxFjAUBgNV BAMTDTY3MTg5OTRiLTQ3YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdghyJWK5QRx2rt5asTaMEt1WYGmQnzo4nV0pmBffehNSQilKKMYY4JwrbZtFb aN6A22Ml0zrg+XYlVsCLh945erQt61NstnZrZ1M6pZvBkN5O08zhmMmPOn+tX09q T1HqVZmRnK9X59dtMfYSSDnjPJLQ5yS+16+QWHEIyx5W7/qELJ9FgiG7erofVyqU YIMyTRl98/f0cCnODrmEpJ3o5CF8R3l9hvl4hXfzkcvjDHV1gYYJ8y5Ncp6NjWAW eLRdDEFHCm+VxwJwu4wsXdgEXBtLmrVifBUvgTXpcapIcXrGzpoR/67d+9D0Vj+x G5Xq380DxBVyXi14alTJfmZ9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnPRHLX+/ NHsbEbQuTl9N0+5jTLQwHwYDVR0jBBgwFoAUy3nZvhDc9wJG/GlGNFiuyiQly44w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NTZELzhEQ0EzMkNFNkI1 NDExRUZCOEE4QTYxQUM0RjlBRTAyL3kzblp2aERjOXdKR19HbEdORml1eWlRbHk0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveTNuWnZoRGM5d0pHX0dsR05GaXV5aVFseTQ0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NTZELzhEQ0EzMkNFNkI1NDExRUZCOEE4QTYxQUM0RjlBRTAyL3kzblp2aERjOXdK R19HbEdORml1eWlRbHk0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM2uuED0hYbqDiiCa4IcsLGnr2QW+j0A8NxEm/Kz42EZavAP2xOAHxBl oBCoDIOB8a15XnqeUXwgv+nk4ATz2tuoWkLspadwcp+MHbREkInBLzE6B2gsH08e uCX868qkhlosCzQXq5MPZ5eI3Hqaszdstj3SXvTyPgGUPp5thWS+lN9MtXIUm1PK ZE3Yswl62NCa3nTgCBOUImM3EBywmYiojxJ6VCE+GZT/NlweUP/ziklzgFMNJVTl Lg7MN6aUV3Ts4WHcBWeFDcE33yRYZ+XcLUlKIxSH8WInY0sbbSGw6BlTzZ9QBwT5 5Ag0Lbk1CWuWeN1l5GF2khb17C8+s3w= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:48 2024 by rpki-client on console-ams.rpki-client.org