$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft File: G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json) Hash identifier: Dj//1hSiILLGPH6Iv25TgVaG1oMVoDB2oHv4MnfOHJA= Subject key identifier: B8:13:C4:CB:4F:79:66:B3:38:16:3D:6D:79:44:4E:03:B3:7C:AD:AE Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 Certificate issuer: /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Certificate serial: 0883 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft Manifest number: 0883 Signing time: Wed 20 Nov 2024 20:16:53 +0000 Manifest this update: Wed 20 Nov 2024 20:16:53 +0000 Manifest next update: Wed 27 Nov 2024 20:16:53 +0000 Files and hashes: 1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: d5Fy878giTLtiP88tzWcKuseO1lvXMcRcxi1/sflCk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616 Validity Not Before: Nov 20 20:16:53 2024 GMT Not After : Nov 27 20:16:53 2024 GMT Subject: CN=673e43b5-e72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:ea:6d:ff:ea:9f:77:ef:fb:86:37:2c:7b: 7e:3e:88:35:1a:32:5f:40:63:0d:ea:6c:e0:8d:6c: 80:16:4c:23:04:3b:2d:d6:6b:0c:6b:bc:91:ef:07: 13:13:7f:c0:d5:7e:ae:a9:c2:0f:ea:f8:4f:a3:4d: c4:df:ef:59:e2:99:36:9a:ea:60:08:f6:28:fd:fe: 46:77:cf:31:ce:12:84:4d:10:c3:11:22:d1:10:19: f2:3b:d2:88:d5:da:52:28:1a:3c:46:21:a8:3c:38: b0:29:80:27:bb:39:84:43:47:57:23:b4:02:04:5d: 17:9d:0f:f5:3e:65:e6:5b:00:85:c6:1a:ea:fa:9a: 5a:75:e3:06:37:47:3a:d6:5b:78:c8:34:d8:d2:b3: 4c:59:86:37:ff:79:d0:82:58:f4:70:fe:26:a7:df: 0b:ef:e6:4d:6b:a9:d3:99:3c:f4:25:3b:32:fb:7e: 46:0a:3c:79:37:e9:ad:25:cc:5a:2d:f7:57:50:28: f3:6b:b0:6a:5f:d3:f3:a7:f1:6f:3a:38:bb:90:27: bf:da:e9:bd:0b:57:17:15:8a:fd:82:3e:f3:bb:4f: 89:d9:01:cc:f3:41:3f:ee:7d:98:9c:f5:b2:e2:f0: da:a5:8f:34:81:f9:4e:a9:12:c9:42:f5:a8:98:85: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:13:C4:CB:4F:79:66:B3:38:16:3D:6D:79:44:4E:03:B3:7C:AD:AE X509v3 Authority Key Identifier: keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:a5:08:64:57:53:7a:8c:a4:d6:a0:6f:cd:05:5c:29:3e:56: 56:c3:db:ba:f5:88:27:01:db:b6:a7:49:ee:3e:0b:4b:de:5a: cb:a6:fd:d6:82:83:91:a3:25:49:ef:3e:3f:c4:e8:2b:53:2c: 1f:a8:b6:58:42:bc:97:a4:c9:1d:fe:c4:99:e7:4b:10:e7:e8: a7:2c:33:c5:64:31:92:7d:b0:66:88:47:39:a6:b5:b3:2b:62: 02:7f:41:c1:d1:70:90:d6:67:e8:13:68:37:a9:c4:8b:7d:5b: 0c:4b:e0:52:bb:92:71:99:52:b1:a1:ac:3b:dc:48:41:db:d2: a5:9d:44:49:5c:cf:5d:ba:cd:97:85:ee:31:ae:cd:2f:aa:11: 60:f0:0f:8a:3c:7b:bd:e0:55:7e:03:87:06:b2:d1:dc:7f:d7: 23:ea:79:8c:2a:6a:df:af:1e:20:94:b5:d9:22:47:ae:15:c1: c9:c0:e3:69:93:79:ef:27:c9:49:5e:90:d6:6e:2e:02:65:28: 2b:52:38:73:c2:e9:9e:68:7d:29:da:91:9d:5a:d5:b4:da:38: f4:3c:38:7b:a2:e2:d1:61:24:09:0e:44:c0:e2:d4:69:05:a0: 5c:fb:77:e8:55:7c:a2:91:26:a0:8d:72:77:b6:63:23:41:65: a7:ed:08:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDFCOTAyMjY2MzIyMUQ4Q0U3QUVFQjAzRjNGNTc5OUYw RDU3RUE2MTYwHhcNMjQxMTIwMjAxNjUzWhcNMjQxMTI3MjAxNjUzWjAYMRYwFAYD VQQDEw02NzNlNDNiNS1lNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsHqbf/qn3fv+4Y3LHt+Pog1GjJfQGMN6mzgjWyAFkwjBDst1msMa7yR7wcT E3/A1X6uqcIP6vhPo03E3+9Z4pk2mupgCPYo/f5Gd88xzhKETRDDESLREBnyO9KI 1dpSKBo8RiGoPDiwKYAnuzmEQ0dXI7QCBF0XnQ/1PmXmWwCFxhrq+ppadeMGN0c6 1lt4yDTY0rNMWYY3/3nQglj0cP4mp98L7+ZNa6nTmTz0JTsy+35GCjx5N+mtJcxa LfdXUCjza7BqX9Pzp/FvOji7kCe/2um9C1cXFYr9gj7zu0+J2QHM80E/7n2YnPWy 4vDapY80gflOqRLJQvWomIWGmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgTxMtP eWazOBY9bXlETgOzfK2uMB8GA1UdIwQYMBaAFBuQImYyIdjOeu6wPz9XmfDVfqYW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9GNDdCNkNENEFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJNNTY3ckFfUDFlWjhOVi1w aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0c1QWlaakloMk01NjdyQV9QMWVaOE5WLXBoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9GNDdCNkNENEFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9HNUFpWmpJaDJN NTY3ckFfUDFlWjhOVi1waFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEpQhkV1N6jKTWoG/NBVwpPlZWw9u69YgnAdu2p0nuPgtL3lrLpv3W goORoyVJ7z4/xOgrUywfqLZYQryXpMkd/sSZ50sQ5+inLDPFZDGSfbBmiEc5prWz K2ICf0HB0XCQ1mfoE2g3qcSLfVsMS+BSu5JxmVKxoaw73EhB29KlnURJXM9dus2X he4xrs0vqhFg8A+KPHu94FV+A4cGstHcf9cj6nmMKmrfrx4glLXZIkeuFcHJwONp k3nvJ8lJXpDWbi4CZSgrUjhzwumeaH0p2pGdWtW02jj0PDh7ouLRYSQJDkTA4tRp BaBc+3foVXyikSagjXJ3tmMjQWWn7Qih -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:46 2024 by rpki-client on console-ams.rpki-client.org