$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft File: xqIW5CMmizknfcEi8-Gq2GxtmkM.mft (raw, json) Hash identifier: Lr8Bx09QOY6JaOkPs0PirsjsLWbVOqEr4qiJaGBp/aY= Subject key identifier: 6B:B7:B1:D9:33:7E:FC:29:97:84:91:55:2F:F8:BE:7F:73:CC:D4:67 Authority key identifier: C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 Certificate issuer: /CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft Manifest number: 10 Signing time: Wed 25 Dec 2024 06:07:10 +0000 Manifest this update: Wed 25 Dec 2024 06:07:10 +0000 Manifest next update: Wed 01 Jan 2025 06:07:10 +0000 Files and hashes: 1: xqIW5CMmizknfcEi8-Gq2GxtmkM.crl (hash: ZuEFb7QxkKJsUCIIO2eEKGe1gIpGZmNVQkUFMjGifYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Validity Not Before: Dec 25 06:07:10 2024 GMT Not After : Jan 1 06:07:10 2025 GMT Subject: CN=676ba10e-c95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ff:56:1b:bb:bf:45:b8:9f:a9:c6:0f:91:fa: cb:2d:47:d9:ff:86:4d:5a:b4:ef:af:86:8a:49:59: d0:74:cf:81:d2:e9:19:c4:d4:f0:88:de:39:9e:8c: 10:71:ce:00:23:ef:55:7d:66:21:ea:b4:82:cb:70: 5b:a8:17:a9:40:cd:f1:59:ff:c3:ea:3b:e5:19:df: b0:cc:df:66:d2:3a:c8:bc:4b:96:b3:08:db:3b:6e: bf:35:e5:8d:56:1d:5e:22:40:fa:a4:fc:03:59:bb: d6:7f:69:b3:87:53:d8:e6:b0:ce:0b:56:36:67:9b: e4:a0:00:be:1d:2b:20:29:5d:7a:91:d7:b0:90:b2: 27:1d:05:32:f1:0a:5e:f4:ac:84:51:b1:64:58:15: 08:3b:34:93:0b:e7:af:9e:ba:58:5d:49:11:e4:3a: 72:0d:a2:7a:46:34:96:4c:80:9e:97:7f:36:f9:e1: 37:c4:11:2c:a8:02:4e:ae:5b:8c:9f:69:d3:90:b1: 8c:be:6c:6a:dd:d5:a1:9c:f7:88:68:1e:83:97:7d: b2:bf:50:1d:3b:be:b1:43:c9:d9:83:a3:75:6d:cf: c0:c8:fa:19:dc:54:a2:d5:11:2d:55:f0:55:5f:1f: 40:22:27:1a:2b:81:dc:3a:2c:3e:71:56:15:b6:32: e7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B7:B1:D9:33:7E:FC:29:97:84:91:55:2F:F8:BE:7F:73:CC:D4:67 X509v3 Authority Key Identifier: keyid:C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:83:b0:7c:f7:11:36:e2:0c:ab:6a:2d:67:e6:dd:be:f4:9d: c2:e2:1c:4f:4b:22:e8:e9:ec:a9:a2:86:8b:ef:6d:b1:cf:08: 28:66:19:37:fa:5b:ba:84:cc:54:9d:b2:ea:af:e4:ae:4c:22: 35:15:2a:a7:28:22:3f:b4:b8:0a:1d:cd:aa:79:f0:0b:55:14: 63:90:fd:3c:6a:a2:03:20:48:8f:1f:e8:9f:91:73:ae:2e:11: f0:b2:92:49:4d:0e:bf:04:50:48:a6:91:4b:2c:e4:4c:2f:d5: 58:1e:7f:e9:c3:3d:15:70:c1:9d:5c:f6:c7:de:bb:df:8c:8e: 3a:81:40:21:44:36:b1:de:b6:4d:90:45:a1:c9:d0:eb:eb:e1: d2:89:b5:29:b8:eb:6c:9a:34:4a:df:09:38:ab:13:84:a7:78: 79:7f:bb:3c:40:dc:28:e4:9a:03:7f:70:0e:91:6a:5c:08:3f: 43:82:9d:82:8e:53:6d:21:8a:db:58:22:c2:b6:67:37:2e:23: 77:58:a8:64:67:44:e9:b3:58:ef:61:49:a0:39:23:93:c6:8c: 98:20:da:dd:6d:06:3f:37:73:36:cb:e5:91:7d:78:43:48:d3: a0:4f:e9:88:1b:bd:2e:7c:99:93:c1:6b:28:1f:e1:aa:76:38: 1f:50:7e:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUZCNjExMC8GA1UEBRMoQzZBMjE2RTQyMzI2OEIzOTI3N0RDMTIyRjNFMUFBRDg2 QzZEOUE0MzAeFw0yNDEyMjUwNjA3MTBaFw0yNTAxMDEwNjA3MTBaMBgxFjAUBgNV BAMTDTY3NmJhMTBlLWM5NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX/1Ybu79FuJ+pxg+R+sstR9n/hk1atO+vhopJWdB0z4HS6RnE1PCI3jmejBBx zgAj71V9ZiHqtILLcFuoF6lAzfFZ/8PqO+UZ37DM32bSOsi8S5azCNs7br815Y1W HV4iQPqk/ANZu9Z/abOHU9jmsM4LVjZnm+SgAL4dKyApXXqR17CQsicdBTLxCl70 rIRRsWRYFQg7NJML56+eulhdSRHkOnINonpGNJZMgJ6Xfzb54TfEESyoAk6uW4yf adOQsYy+bGrd1aGc94hoHoOXfbK/UB07vrFDydmDo3Vtz8DI+hncVKLVES1V8FVf H0AiJxorgdw6LD5xVhW2MucHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa7ex2TN+ /CmXhJFVL/i+f3PM1GcwHwYDVR0jBBgwFoAUxqIW5CMmizknfcEi8+Gq2GxtmkMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RkI2LzhFQzM1REU0QUM2 NDExRUZCNjg0MjY3QkM0RjlBRTAyL3hxSVc1Q01taXprbmZjRWk4LUdxMkd4dG1r TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHFJVzVDTW1pemtuZmNFaTgtR3EyR3h0bWtNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RkI2LzhFQzM1REU0QUM2NDExRUZCNjg0MjY3QkM0RjlBRTAyL3hxSVc1Q01taXpr bmZjRWk4LUdxMkd4dG1rTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJuDsHz3ETbiDKtqLWfm3b70ncLiHE9LIujp7KmihovvbbHPCChmGTf6 W7qEzFSdsuqv5K5MIjUVKqcoIj+0uAodzap58AtVFGOQ/TxqogMgSI8f6J+Rc64u EfCykklNDr8EUEimkUss5Ewv1Vgef+nDPRVwwZ1c9sfeu9+MjjqBQCFENrHetk2Q RaHJ0Ovr4dKJtSm462yaNErfCTirE4SneHl/uzxA3CjkmgN/cA6RalwIP0OCnYKO U20hittYIsK2ZzcuI3dYqGRnROmzWO9hSaA5I5PGjJgg2t1tBj83czbL5ZF9eENI 06BP6YgbvS58mZPBaygf4ap2OB9QfsI= -----END CERTIFICATE-----Generated at Wed Dec 25 08:01:09 2024 by rpki-client on console-fra.rpki-client.org