$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: 246NFkfmjPSvTwD4lqwu9RDcJO1UFBCkZKdCvkbNZtY= Subject key identifier: 06:64:1F:4E:4A:F1:D8:05:F7:72:89:F1:C4:DA:FE:C4:97:8A:B0:60 Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: 2B Signing time: Wed 23 Oct 2024 06:20:22 +0000 Manifest this update: Wed 23 Oct 2024 06:20:21 +0000 Manifest next update: Wed 30 Oct 2024 06:20:21 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: dhmC7XGCLQxsPPziqp+CZf3rIQPLSYSukk8k0NB1rqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Oct 23 06:20:21 2024 GMT Not After : Oct 30 06:20:21 2024 GMT Subject: CN=671895a6-aee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:04:e4:58:fa:c2:21:2a:00:13:01:6f:b8: 53:0e:c3:c6:76:34:e8:b9:42:41:19:1d:b8:ea:dd: 97:21:aa:75:f4:c7:95:c4:bf:89:d8:55:1f:a8:6a: 5b:5c:7f:5d:16:ef:a9:42:aa:61:29:ff:48:a4:53: 08:67:75:59:81:17:9f:a8:43:a2:0e:cb:10:bb:35: 5c:f0:04:b5:cc:03:9e:90:36:e3:06:a6:ef:81:e7: 5f:18:b8:70:e6:1d:1e:5e:21:e8:46:b9:0a:79:8b: 04:26:c8:cb:5b:8f:4e:65:df:13:d2:91:fc:1b:e6: ab:1b:da:b0:86:50:68:fc:49:f0:8b:6e:59:6d:8f: c5:45:fd:4d:97:2d:24:4d:75:78:96:3e:f8:93:3d: d1:fc:78:1a:af:07:f1:60:69:98:8b:09:ec:38:e3: b6:aa:9b:81:fe:e0:f5:67:0d:47:97:13:fd:38:1a: bd:97:8b:a8:b4:06:9c:1e:e2:f0:08:69:fc:9a:13: 0e:c6:a7:36:d9:3b:1b:ff:b6:9e:2a:a6:14:73:9c: 70:8d:51:a5:f8:10:e3:62:5b:be:87:73:f4:ad:03: 5c:dd:78:f1:49:26:3e:ec:88:dc:c2:d9:43:7f:86: 8a:6b:a5:93:ae:21:72:ce:43:1e:4c:c7:d1:f0:0d: 69:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:64:1F:4E:4A:F1:D8:05:F7:72:89:F1:C4:DA:FE:C4:97:8A:B0:60 X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c0:e8:5d:b9:8e:c1:26:2f:97:7e:a9:02:f0:f4:d3:bc:15: b7:61:5b:cf:5f:a3:c9:50:7e:bb:f9:64:24:70:c6:f3:06:8b: 75:e7:c1:0c:85:5e:dc:cd:a6:32:b3:62:5c:c5:4a:2b:69:65: d8:44:88:04:9f:45:de:11:19:55:24:34:59:32:72:22:7a:fd: cc:ab:a6:c6:87:e6:eb:75:08:3c:3b:83:5f:60:fb:60:3f:ae: be:4e:89:89:54:a5:87:52:24:85:1c:4e:65:59:2b:e7:0a:5e: 6b:c2:88:03:a6:9e:9b:bf:2c:33:b4:fd:02:d6:b1:d3:fe:55: f1:2d:bd:74:b8:9e:98:a4:de:13:ee:b9:e5:d0:03:a6:5e:0b: ca:d2:51:60:73:0f:33:fb:af:6c:41:10:4b:46:03:af:90:be: c9:7b:c1:26:fd:f4:85:ec:57:38:18:48:bd:09:6d:9b:92:68: 0c:d8:35:76:c5:c5:9d:1c:f6:5f:26:98:a8:ca:e0:9a:e3:89: 80:89:e4:a0:c8:dd:45:b6:5b:50:2a:6a:fb:e4:44:fc:82:48: 57:ab:c3:c7:e9:ed:0b:25:49:85:59:09:02:1f:a9:8c:84:f8: 4d:00:85:6e:02:79:af:5a:87:d8:bc:08:b9:9f:db:ad:8c:a7: b6:d7:d5:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RkNCQjExMC8GA1UEBRMoNUNBRkU4QTgzRjA5MEFFMTQ2QTQwM0FGQTU1N0M1Q0ZB QTg4Q0Q4NDAeFw0yNDEwMjMwNjIwMjFaFw0yNDEwMzAwNjIwMjFaMBgxFjAUBgNV BAMTDTY3MTg5NWE2LWFlZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEdwTkWPrCISoAEwFvuFMOw8Z2NOi5QkEZHbjq3ZchqnX0x5XEv4nYVR+oaltc f10W76lCqmEp/0ikUwhndVmBF5+oQ6IOyxC7NVzwBLXMA56QNuMGpu+B518YuHDm HR5eIehGuQp5iwQmyMtbj05l3xPSkfwb5qsb2rCGUGj8SfCLblltj8VF/U2XLSRN dXiWPviTPdH8eBqvB/FgaZiLCew447aqm4H+4PVnDUeXE/04Gr2Xi6i0Bpwe4vAI afyaEw7GpzbZOxv/tp4qphRznHCNUaX4EONiW76Hc/StA1zdePFJJj7siNzC2UN/ hoprpZOuIXLOQx5Mx9HwDWlbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBmQfTkrx 2AX3conxxNr+xJeKsGAwHwYDVR0jBBgwFoAUXK/oqD8JCuFGpAOvpVfFz6qIzYQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGQ0JCLzVDQUM2MDQ4NTMw RjExRUY5OUM4OEQwRkM0RjlBRTAyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEtfb3FEOEpDdUZHcEFPdnBWZkZ6NnFJellRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG Q0JCLzVDQUM2MDQ4NTMwRjExRUY5OUM4OEQwRkM0RjlBRTAyL1hLX29xRDhKQ3VG R3BBT3ZwVmZGejZxSXpZUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALDA6F25jsEmL5d+qQLw9NO8FbdhW89fo8lQfrv5ZCRwxvMGi3XnwQyF XtzNpjKzYlzFSitpZdhEiASfRd4RGVUkNFkyciJ6/cyrpsaH5ut1CDw7g19g+2A/ rr5OiYlUpYdSJIUcTmVZK+cKXmvCiAOmnpu/LDO0/QLWsdP+VfEtvXS4npik3hPu ueXQA6ZeC8rSUWBzDzP7r2xBEEtGA6+Qvsl7wSb99IXsVzgYSL0JbZuSaAzYNXbF xZ0c9l8mmKjK4JrjiYCJ5KDI3UW2W1AqavvkRPyCSFerw8fp7QslSYVZCQIfqYyE +E0AhW4Cea9ah9i8CLmf262Mp7bX1dE= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:48 2024 by rpki-client on console-ams.rpki-client.org