$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft File: oC73fAXKEwwiKYXNdK6TjaeaT78.mft (raw, json) Hash identifier: Y1YPIci2N9fv/QiCOmoN0AVvbrW9fDZcM+FWHerGddw= Subject key identifier: E1:20:8D:07:35:B4:98:D7:3E:5A:E8:74:82:A0:5E:72:BC:CE:69:5F Authority key identifier: A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF Certificate issuer: /CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF Certificate serial: 08DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft Manifest number: 1F89 Signing time: Fri 22 Nov 2024 16:40:13 +0000 Manifest this update: Fri 22 Nov 2024 16:40:13 +0000 Manifest next update: Fri 29 Nov 2024 16:40:13 +0000 Files and hashes: 1: oC73fAXKEwwiKYXNdK6TjaeaT78.crl (hash: WJYYkK4MybzvGuI76KvOE4tNfV/R8Zp3/rwUDHQ2/b0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2267 (0x8db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF Validity Not Before: Nov 22 16:40:13 2024 GMT Not After : Nov 29 16:40:13 2024 GMT Subject: CN=6740b3ed-ff0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:02:0d:17:a6:e0:57:09:4f:62:3f:48:ab: 44:33:93:6f:2a:73:9c:3d:64:c6:c0:65:50:66:30: 49:51:b8:00:4b:45:cd:5a:14:10:b4:7f:69:fb:1c: bb:13:09:36:7a:ef:d1:35:58:5f:59:c3:93:4c:13: 71:7e:01:eb:f7:d5:a0:e0:62:30:d5:d3:aa:88:f5: c3:8d:53:c1:2a:3b:f4:f3:72:80:bc:81:71:db:8e: f9:ee:a5:3b:e8:7a:4f:52:bf:2e:ce:80:0b:bd:f9: d9:c5:47:21:24:20:27:c8:69:cb:a2:90:54:c5:13: 8b:f2:05:ba:af:92:0c:96:65:36:df:af:6b:d0:94: e5:82:5a:73:c2:b3:aa:a6:39:11:a8:40:e0:71:44: 2f:78:02:c7:97:f2:62:80:da:03:7a:72:f8:12:5c: d6:b8:e5:45:0b:7c:ca:03:b2:59:8c:87:12:e7:46: 22:47:f1:66:ac:4d:1f:20:33:e1:a7:e1:65:bf:d6: 6a:8a:bb:47:f2:a8:e4:35:31:f2:5e:e8:e8:93:f7: 3d:62:eb:88:f9:fd:42:2c:ab:3d:30:4b:c0:ef:e6: 05:c8:8e:87:34:58:c9:a8:20:07:fe:94:88:ae:65: 5f:de:22:98:86:7b:c6:31:90:bb:4e:6d:35:0f:4e: 82:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:20:8D:07:35:B4:98:D7:3E:5A:E8:74:82:A0:5E:72:BC:CE:69:5F X509v3 Authority Key Identifier: keyid:A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:a6:08:00:32:ae:e1:95:ea:33:9f:cb:1f:06:b3:2d:87:04: dc:18:34:d3:dd:a9:be:2b:46:77:0e:cd:8c:f2:21:f2:24:73: b1:37:1b:ce:59:09:59:bb:ed:69:dc:15:17:14:d0:5e:b2:c7: 46:d9:b4:7f:d9:bb:8d:75:d3:c7:24:d7:6b:8a:bc:c5:c6:68: ce:30:73:83:87:45:02:19:3c:ac:13:8e:3f:26:9a:a2:39:0b: 36:1b:f6:a2:5c:46:4d:98:94:04:ce:7f:a1:c4:d5:74:b9:11: 51:a2:a9:1e:99:86:a8:8a:6e:a6:ed:39:74:ee:b8:19:2b:03: 30:a1:6a:de:41:ae:49:37:12:b8:ee:5a:48:97:81:43:16:80: 59:ad:0d:a5:47:3f:d2:85:46:de:ff:a9:29:b6:b4:35:60:86: 59:dd:8a:72:2a:f1:7d:c8:08:13:b0:3f:62:1b:c0:d3:03:1a: 90:76:f6:b7:42:5f:96:a8:29:41:52:27:9e:d4:e0:b4:63:2f: 97:bd:65:48:1d:2c:90:8f:c6:6d:99:70:84:08:c0:ce:60:4b: d1:f4:7a:3e:3a:24:8a:cb:5e:bf:0c:17:f7:34:40:e2:bd:b5: d4:ad:6b:84:2f:2d:b9:5d:cc:0f:c0:e0:8f:04:1a:88:a2:8f: b7:d2:22:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4RTUxMTAvBgNVBAUTKEEwMkVGNzdDMDVDQTEzMEMyMjI5ODVDRDc0QUU5MzhE QTc5QTRGQkYwHhcNMjQxMTIyMTY0MDEzWhcNMjQxMTI5MTY0MDEzWjAYMRYwFAYD VQQDEw02NzQwYjNlZC1mZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzF4CDRem4FcJT2I/SKtEM5NvKnOcPWTGwGVQZjBJUbgAS0XNWhQQtH9p+xy7 Ewk2eu/RNVhfWcOTTBNxfgHr99Wg4GIw1dOqiPXDjVPBKjv083KAvIFx24757qU7 6HpPUr8uzoALvfnZxUchJCAnyGnLopBUxROL8gW6r5IMlmU2369r0JTlglpzwrOq pjkRqEDgcUQveALHl/JigNoDenL4ElzWuOVFC3zKA7JZjIcS50YiR/FmrE0fIDPh p+Flv9ZqirtH8qjkNTHyXujok/c9YuuI+f1CLKs9MEvA7+YFyI6HNFjJqCAH/pSI rmVf3iKYhnvGMZC7Tm01D06CIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEgjQc1 tJjXPlrodIKgXnK8zmlfMB8GA1UdIwQYMBaAFKAu93wFyhMMIimFzXSuk42nmk+/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThFNS83ODQwRDk1RUU0 OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3d2lLWVhOZEs2VGphZWFU NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29DNzNmQVhLRXd3aUtZWE5kSzZUamFlYVQ3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThFNS83ODQwRDk1RUU0OTExMUU3OTFCRTE4NjlDNEY5QUUwMi9vQzczZkFYS0V3 d2lLWVhOZEs2VGphZWFUNzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDpggAMq7hleozn8sfBrMthwTcGDTT3am+K0Z3Ds2M8iHyJHOxNxvO WQlZu+1p3BUXFNBessdG2bR/2buNddPHJNdrirzFxmjOMHODh0UCGTysE44/Jpqi OQs2G/aiXEZNmJQEzn+hxNV0uRFRoqkemYaoim6m7Tl07rgZKwMwoWreQa5JNxK4 7lpIl4FDFoBZrQ2lRz/ShUbe/6kptrQ1YIZZ3YpyKvF9yAgTsD9iG8DTAxqQdva3 Ql+WqClBUiee1OC0Yy+XvWVIHSyQj8ZtmXCECMDOYEvR9Ho+OiSKy16/DBf3NEDi vbXUrWuELy25XcwPwOCPBBqIoo+30iJ5 -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:59 2024 by rpki-client on console-ams.rpki-client.org