$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft File: mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json) Hash identifier: tupnuEKL//8uUzIujYnF1S5MWfItJPe3l8yzn0IKiZo= Subject key identifier: 87:D4:69:43:D9:0E:71:78:AA:2D:75:9A:6F:91:6B:CA:47:16:89:B7 Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E Certificate issuer: /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E Certificate serial: 3423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft Manifest number: 3423 Signing time: Fri 22 Nov 2024 14:55:26 +0000 Manifest this update: Fri 22 Nov 2024 14:55:25 +0000 Manifest next update: Fri 29 Nov 2024 14:55:25 +0000 Files and hashes: 1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: TsmxFsTEElUt4Jm2cFY+vh2wc0a3275mH/KNozG27Rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13347 (0x3423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E Validity Not Before: Nov 22 14:55:25 2024 GMT Not After : Nov 29 14:55:25 2024 GMT Subject: CN=67409b5e-7a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:c9:c8:60:58:a1:27:f9:95:34:d5:db:54: f7:ce:ac:d4:4b:a1:bf:3d:52:e1:2e:18:7f:09:c7: 71:a0:ea:df:42:9a:ec:34:0b:13:19:2d:45:5c:2d: 09:77:49:36:b9:4a:f3:c6:b3:3d:c5:4d:58:3d:0c: 4e:a1:a3:3a:71:d2:0a:64:31:b2:61:17:2a:ab:0b: 2d:fa:fe:67:af:fc:b0:e1:a3:73:25:d8:06:99:ce: b0:d3:e3:3d:c0:f3:09:10:60:60:50:2a:83:66:04: 9e:5f:3a:98:a7:48:55:a3:91:33:e0:8b:35:45:2b: a6:81:df:4a:16:bb:d5:64:05:0c:f9:99:a9:14:21: b1:0b:17:eb:a3:b8:11:f1:50:23:ae:e7:b0:d1:3d: dc:ce:65:0c:8c:1b:14:59:ce:81:0f:a0:95:0d:72: 72:77:af:85:fe:42:0d:20:82:b0:53:b0:55:78:0e: c5:a8:87:36:31:48:28:5f:5c:c2:3b:81:c0:df:08: b4:be:b0:8a:c7:5c:27:a8:1b:79:52:55:50:37:96: e3:e9:3d:65:8e:4c:c1:06:73:af:72:10:c2:58:12: dd:a3:74:7d:65:0b:93:19:ed:cf:41:f1:12:48:6a: 84:f9:1e:54:25:b2:2a:fc:94:be:d0:cf:65:de:b8: 0e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D4:69:43:D9:0E:71:78:AA:2D:75:9A:6F:91:6B:CA:47:16:89:B7 X509v3 Authority Key Identifier: keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:5a:02:ac:13:d5:bf:fa:7a:46:24:7f:cd:bb:8b:06:f9:32: 14:4d:91:d5:08:b6:2f:db:e0:d8:01:49:f5:8d:82:93:6e:a9: 67:a0:3c:28:46:42:07:7c:c2:6e:1f:54:fa:05:b6:d2:46:29: bb:b0:52:77:a9:f0:b0:e5:eb:75:1d:a4:41:18:56:72:ca:dd: f8:45:47:68:ff:04:7f:ff:2c:4a:26:94:31:d6:70:6b:7f:06: 7e:c1:5a:3a:9e:e5:f0:07:40:c4:c4:21:88:03:f7:7d:75:10: ef:1e:64:2d:e5:9b:8b:f3:dd:93:ba:0a:40:28:1a:d8:45:b4: e5:a8:bb:1e:ea:25:98:fa:5e:bd:14:0a:d0:4c:69:ba:34:66: 6a:8e:25:28:1e:d0:5e:2f:a1:29:f6:b1:53:31:aa:02:38:82: d5:4c:44:f9:57:17:94:df:7c:b4:df:c8:94:5f:d0:8c:78:aa: 0b:90:bc:33:de:2a:95:61:85:ac:4d:da:be:2d:75:aa:f6:4a: 3c:f5:38:ac:37:d1:88:d4:ce:ae:71:42:ee:4a:a6:0d:e5:6f: db:3f:04:9e:7a:53:26:1a:ab:ca:db:2f:22:10:92:4e:9c:41: ab:0c:89:21:11:1a:9c:73:3a:ad:4f:65:13:b2:5f:a9:96:9e: a7:37:22:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDk4NTI2QUYxOEE4M0EzMzRGNTc5OTgyQTMxNzlCNkRE MUU5N0RFMkUwHhcNMjQxMTIyMTQ1NTI1WhcNMjQxMTI5MTQ1NTI1WjAYMRYwFAYD VQQDEw02NzQwOWI1ZS03YTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpXJyGBYoSf5lTTV21T3zqzUS6G/PVLhLhh/CcdxoOrfQprsNAsTGS1FXC0J d0k2uUrzxrM9xU1YPQxOoaM6cdIKZDGyYRcqqwst+v5nr/yw4aNzJdgGmc6w0+M9 wPMJEGBgUCqDZgSeXzqYp0hVo5Ez4Is1RSumgd9KFrvVZAUM+ZmpFCGxCxfro7gR 8VAjruew0T3czmUMjBsUWc6BD6CVDXJyd6+F/kINIIKwU7BVeA7FqIc2MUgoX1zC O4HA3wi0vrCKx1wnqBt5UlVQN5bj6T1ljkzBBnOvchDCWBLdo3R9ZQuTGe3PQfES SGqE+R5UJbIq/JS+0M9l3rgOgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfUaUPZ DnF4qi11mm+Ra8pHFom3MB8GA1UdIwQYMBaAFJhSavGKg6M09XmYKjF5tt0el94u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8yNTdDRjcyNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9tRkpxOFlxRG96VDFlWmdxTVhtMjNSNlgz aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GSnE4WXFEb3pUMWVaZ3FNWG0yM1I2WDNpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8yNTdDRjcyNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9tRkpxOFlxRG96 VDFlWmdxTVhtMjNSNlgzaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxWgKsE9W/+npGJH/Nu4sG+TIUTZHVCLYv2+DYAUn1jYKTbqlnoDwo RkIHfMJuH1T6BbbSRim7sFJ3qfCw5et1HaRBGFZyyt34RUdo/wR//yxKJpQx1nBr fwZ+wVo6nuXwB0DExCGIA/d9dRDvHmQt5ZuL892TugpAKBrYRbTlqLse6iWY+l69 FArQTGm6NGZqjiUoHtBeL6Ep9rFTMaoCOILVTET5VxeU33y038iUX9CMeKoLkLwz 3iqVYYWsTdq+LXWq9ko89TisN9GI1M6ucULuSqYN5W/bPwSeelMmGqvK2y8iEJJO nEGrDIkhERqcczqtT2UTsl+plp6nNyK6 -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:15 2024 by rpki-client on console-ams.rpki-client.org