$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json) Hash identifier: xY8Fu2joKciGDv6KOaoTWTh2yWCVHqKGNfhpGjT3wog= Subject key identifier: 51:2D:E0:2F:B5:83:83:9F:3B:E8:E5:8A:81:0B:1C:F3:4C:6F:1F:8E Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Certificate serial: 2B46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft Manifest number: 2B46 Signing time: Fri 22 Nov 2024 15:34:17 +0000 Manifest this update: Fri 22 Nov 2024 15:34:17 +0000 Manifest next update: Fri 29 Nov 2024 15:34:17 +0000 Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: sRyTva1CwkSVkAA6BiuK6y0QLwFCp20OAGJ64KEMOl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11078 (0x2b46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Validity Not Before: Nov 22 15:34:17 2024 GMT Not After : Nov 29 15:34:17 2024 GMT Subject: CN=6740a479-70d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:12:06:8c:92:66:bd:16:01:2e:83:61:b8:b8: 8a:c7:6a:a0:b9:0c:43:7d:77:0e:9b:eb:8b:5a:45: f3:e3:3c:f8:4b:f0:f8:d2:bf:83:47:4c:83:e5:36: 6f:f5:70:0c:3e:de:88:c2:0b:65:d6:3f:34:5f:da: 42:61:37:92:92:0e:f4:d5:2f:4a:ec:1b:a8:22:5d: 05:9f:44:4e:c4:2e:88:9c:bb:06:3b:32:63:7e:f5: b5:bf:17:a6:be:9c:43:83:f3:7d:ec:75:8c:4c:c7: 4f:fa:4d:d6:a6:d8:c4:85:b8:20:c1:2d:0d:e7:e7: 40:12:a2:5d:fa:32:a0:db:3f:8e:14:4a:cf:ec:e7: c2:d0:de:05:9e:a0:4f:21:1a:d8:01:bd:43:b3:92: d0:6a:c2:1e:74:57:91:39:7d:72:bd:5e:5e:38:63: e2:c7:04:8e:fc:25:1d:ea:e1:ec:14:75:31:31:53: 92:ab:5d:13:d4:02:16:f1:42:96:36:39:dd:b7:2b: 27:2c:5b:d6:2e:20:d6:ef:64:49:f0:ef:44:a3:c0: 40:08:bd:6b:02:f2:b6:62:9e:66:ae:bd:a4:f4:b3: 15:a5:18:87:8d:3c:a9:99:4d:d8:d1:79:07:32:01: d1:7c:9e:e7:f5:10:aa:07:d9:8d:72:d0:e4:e0:36: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2D:E0:2F:B5:83:83:9F:3B:E8:E5:8A:81:0B:1C:F3:4C:6F:1F:8E X509v3 Authority Key Identifier: keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:aa:ff:49:2f:8d:22:27:ac:25:38:46:15:f4:a8:d3:5e:09: aa:c6:fc:49:2c:b1:be:4e:bb:de:4a:2c:aa:a3:72:f3:81:ca: 41:31:98:56:ec:62:9a:24:d2:f6:67:21:8f:43:52:93:d3:15: 3c:72:b4:f9:4f:31:3c:cf:50:c3:a4:cf:59:b1:7b:c5:20:c9: 8e:c8:e1:09:08:dc:f2:fd:5d:19:37:4b:36:67:56:63:e5:ab: 83:6e:28:94:59:82:33:b4:3f:bb:fa:2f:75:40:1a:b6:31:d8: ea:3b:ab:74:fd:8b:f6:62:2c:36:bb:d1:1e:97:71:fc:aa:90: 0b:ed:6b:9e:d0:03:12:47:e0:a1:64:73:e1:f4:41:db:c3:8f: e3:20:dd:d7:30:b7:73:f1:66:c3:8b:eb:3a:1b:da:f5:3f:78: d8:12:0d:67:2a:70:88:2c:a4:8a:46:52:78:c9:5c:f6:90:97: 8d:2d:50:9b:d6:39:5d:f4:90:5d:91:1c:5f:06:90:18:21:a6: 6d:cf:42:30:60:fb:0b:5f:02:cf:26:16:ea:04:34:32:ca:b5: 10:0f:60:08:99:27:d3:a2:b7:7d:d1:20:40:b5:9a:5e:1c:ce: a2:ed:df:35:ab:d4:35:4c:59:8d:9d:b6:c2:c6:d9:6a:f1:2d: e4:43:e6:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD N0EwOURDMTMwHhcNMjQxMTIyMTUzNDE3WhcNMjQxMTI5MTUzNDE3WjAYMRYwFAYD VQQDEw02NzQwYTQ3OS03MGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hIGjJJmvRYBLoNhuLiKx2qguQxDfXcOm+uLWkXz4zz4S/D40r+DR0yD5TZv 9XAMPt6Iwgtl1j80X9pCYTeSkg701S9K7BuoIl0Fn0ROxC6InLsGOzJjfvW1vxem vpxDg/N97HWMTMdP+k3WptjEhbggwS0N5+dAEqJd+jKg2z+OFErP7OfC0N4FnqBP IRrYAb1Ds5LQasIedFeROX1yvV5eOGPixwSO/CUd6uHsFHUxMVOSq10T1AIW8UKW NjndtysnLFvWLiDW72RJ8O9Eo8BACL1rAvK2Yp5mrr2k9LMVpRiHjTypmU3Y0XkH MgHRfJ7n9RCqB9mNctDk4Da/YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEt4C+1 g4OfO+jlioELHPNMbx+OMB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFqv9JL40iJ6wlOEYV9KjTXgmqxvxJLLG+TrveSiyqo3LzgcpBMZhW 7GKaJNL2ZyGPQ1KT0xU8crT5TzE8z1DDpM9ZsXvFIMmOyOEJCNzy/V0ZN0s2Z1Zj 5auDbiiUWYIztD+7+i91QBq2MdjqO6t0/Yv2Yiw2u9Eel3H8qpAL7Wue0AMSR+Ch ZHPh9EHbw4/jIN3XMLdz8WbDi+s6G9r1P3jYEg1nKnCILKSKRlJ4yVz2kJeNLVCb 1jld9JBdkRxfBpAYIaZtz0IwYPsLXwLPJhbqBDQyyrUQD2AImSfTord90SBAtZpe HM6i7d81q9Q1TFmNnbbCxtlq8S3kQ+Y9 -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:41 2024 by rpki-client on console-fra.rpki-client.org