$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: g+4vudGrmE3ai5A/cfRaJshuixLvam5iIEHSfFlhe7U= Subject key identifier: 66:68:E8:36:1C:C1:E0:35:B2:FF:D0:90:29:7D:B5:6C:50:86:C5:7E Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: 3C Signing time: Mon 25 Nov 2024 05:24:33 +0000 Manifest this update: Mon 25 Nov 2024 05:24:32 +0000 Manifest next update: Mon 02 Dec 2024 05:24:32 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: nmf5b0/TOSJA4vvXelDilLUhHnTXQwIpy4dYi7V9R+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Nov 25 05:24:32 2024 GMT Not After : Dec 2 05:24:32 2024 GMT Subject: CN=67440a10-cffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:ff:b3:43:94:15:fd:c1:fa:da:07:6b:bf: 1b:21:d4:4e:f4:14:a5:f3:87:e0:3d:68:f2:2a:54: 80:0b:18:82:6e:bc:ea:92:3e:72:85:6b:b7:1b:7f: 5a:b5:02:01:a4:9f:0b:18:6f:49:14:12:9b:e6:1e: 34:ba:6a:3b:6a:59:c0:22:f2:72:5c:2f:e8:7a:c7: 18:6c:88:9a:8f:7e:4b:d3:e8:0e:4e:62:d0:2c:4c: 27:b0:89:f5:d2:ff:9d:f0:85:6f:e7:18:33:8b:b8: 4d:f9:ee:a4:53:ec:6a:d5:7f:53:df:59:3e:ff:c1: 2e:6c:4b:b4:50:5a:7e:03:b1:ff:29:12:27:67:37: 5e:80:df:55:80:4d:cb:57:39:d5:79:6a:42:e0:a3: 97:24:8d:06:ac:8b:93:2e:24:0c:a9:5d:26:56:cd: 10:35:a0:10:99:46:8a:9b:82:bf:80:ef:63:89:3e: 16:a1:fb:aa:46:84:3e:61:c8:5b:c1:5d:27:44:ea: c9:f1:b1:ff:33:12:6e:d2:9b:0c:b7:5e:ee:1a:39: 87:f7:bb:e5:29:83:b2:61:b6:63:12:62:ae:d1:12: 5f:c0:a2:17:10:3a:1f:b8:57:05:ed:0c:76:ff:fc: e1:36:7c:22:01:ac:90:97:1f:69:6c:9d:22:bb:b0: 57:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:68:E8:36:1C:C1:E0:35:B2:FF:D0:90:29:7D:B5:6C:50:86:C5:7E X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ee:bc:2b:66:e7:47:e7:42:37:a2:3b:cb:c4:6d:ad:93:c8: b3:52:ea:67:c5:0c:b5:17:64:99:7c:00:fb:54:de:9f:16:55: e4:11:13:9a:81:b5:3f:6f:dc:9b:32:5b:6a:de:90:4e:3d:0c: 91:e3:30:9b:48:20:d4:33:fb:02:83:76:b8:e7:ba:0c:01:0b: 01:d3:d5:49:6c:4f:d9:0a:c9:33:84:2c:b5:31:53:b6:45:b5: 2a:a4:a8:b5:7e:9d:21:fd:f2:8a:8b:47:00:73:9e:06:75:fc: 9f:87:a9:44:71:93:f6:3b:d2:75:78:7a:51:39:d2:07:61:6b: 45:a0:e5:b2:b0:f0:72:6c:ac:21:c9:a2:8c:a1:df:5f:4f:2e: 8b:fe:e4:8f:b3:c9:ae:73:2a:11:40:d3:26:33:3f:65:51:08: a8:cc:67:0b:7c:f3:bc:03:b4:b3:1c:44:0a:c7:2f:cd:70:7a: 56:1b:a5:e1:a9:6d:90:df:06:57:32:67:33:d5:49:54:e2:f1: 84:b4:6d:c4:09:70:2d:f8:ed:cb:6f:e3:12:ed:f0:e5:ce:07: 78:39:fd:c6:8b:60:11:93:00:0d:e8:49:b1:0c:b4:ca:a3:36: 34:87:13:75:2f:16:7b:58:24:ac:e4:67:6d:28:e5:aa:40:c8: e7:97:49:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RkNCQjExMC8GA1UEBRMoNUNBRkU4QTgzRjA5MEFFMTQ2QTQwM0FGQTU1N0M1Q0ZB QTg4Q0Q4NDAeFw0yNDExMjUwNTI0MzJaFw0yNDEyMDIwNTI0MzJaMBgxFjAUBgNV BAMTDTY3NDQwYTEwLWNmZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLAf+zQ5QV/cH62gdrvxsh1E70FKXzh+A9aPIqVIALGIJuvOqSPnKFa7cbf1q1 AgGknwsYb0kUEpvmHjS6ajtqWcAi8nJcL+h6xxhsiJqPfkvT6A5OYtAsTCewifXS /53whW/nGDOLuE357qRT7GrVf1PfWT7/wS5sS7RQWn4Dsf8pEidnN16A31WATctX OdV5akLgo5ckjQasi5MuJAypXSZWzRA1oBCZRoqbgr+A72OJPhah+6pGhD5hyFvB XSdE6snxsf8zEm7Smwy3Xu4aOYf3u+Upg7JhtmMSYq7REl/AohcQOh+4VwXtDHb/ /OE2fCIBrJCXH2lsnSK7sFc9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZmjoNhzB 4DWy/9CQKX21bFCGxX4wHwYDVR0jBBgwFoAUXK/oqD8JCuFGpAOvpVfFz6qIzYQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGQ0JCLzVDQUM2MDQ4NTMw RjExRUY5OUM4OEQwRkM0RjlBRTAyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEtfb3FEOEpDdUZHcEFPdnBWZkZ6NnFJellRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG Q0JCLzVDQUM2MDQ4NTMwRjExRUY5OUM4OEQwRkM0RjlBRTAyL1hLX29xRDhKQ3VG R3BBT3ZwVmZGejZxSXpZUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG/uvCtm50fnQjeiO8vEba2TyLNS6mfFDLUXZJl8APtU3p8WVeQRE5qB tT9v3JsyW2rekE49DJHjMJtIINQz+wKDdrjnugwBCwHT1UlsT9kKyTOELLUxU7ZF tSqkqLV+nSH98oqLRwBzngZ1/J+HqURxk/Y70nV4elE50gdha0Wg5bKw8HJsrCHJ ooyh319PLov+5I+zya5zKhFA0yYzP2VRCKjMZwt887wDtLMcRArHL81welYbpeGp bZDfBlcyZzPVSVTi8YS0bcQJcC347ctv4xLt8OXOB3g5/caLYBGTAA3oSbEMtMqj NjSHE3UvFntYJKzkZ20o5apAyOeXSXQ= -----END CERTIFICATE-----Generated at Mon Nov 25 06:05:04 2024 by rpki-client on console-fra.rpki-client.org