$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json) Hash identifier: JjHiTia7n6L4fPrgEdlKASXK1QdWmAeK23OkG/TndFw= Subject key identifier: DB:CA:89:4A:50:52:93:C6:31:C0:B2:91:58:2A:BA:A0:83:53:60:37 Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Certificate serial: 0AF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft Manifest number: 0AF0 Signing time: Fri 22 Nov 2024 19:04:57 +0000 Manifest this update: Fri 22 Nov 2024 19:04:57 +0000 Manifest next update: Fri 29 Nov 2024 19:04:57 +0000 Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: nYBgqQpwVzWLWePW+K1qr+bcyMTWbV+EbnxjRbaVJ3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2803 (0xaf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Validity Not Before: Nov 22 19:04:57 2024 GMT Not After : Nov 29 19:04:57 2024 GMT Subject: CN=6740d5d9-422c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7a:54:15:17:a6:85:b7:ae:08:fe:54:e7:ec: bb:e6:43:7a:25:95:d6:14:31:0b:c8:e8:7a:af:04: 27:77:d3:2a:30:51:ed:ce:44:22:d2:34:06:9b:4e: 23:bb:9e:08:bd:a0:4f:da:17:45:79:eb:74:1e:72: c4:15:d6:7a:26:93:82:e2:ef:74:f1:da:e3:0d:1e: e3:9d:e1:58:7d:3f:ba:3b:af:e7:85:8a:e9:6c:50: cc:da:29:17:3b:f0:ba:df:06:39:4b:0b:38:95:49: e8:20:8d:b1:db:0f:e1:b1:c3:7b:33:4f:d8:6c:8a: f1:51:25:da:33:a1:ee:95:80:16:2c:58:4a:1d:2f: b0:03:f1:ce:f0:ed:ad:c8:9a:c4:6d:ed:61:bf:67: d8:08:2e:c1:6b:6a:c8:18:b5:e0:c5:75:90:98:b9: 0b:8e:09:de:5a:7c:a0:c6:f1:39:a6:d3:88:ae:bf: 2a:fd:26:3d:a6:53:c4:21:dc:d9:7d:70:62:85:b0: d1:58:8c:a1:72:7c:f9:ed:12:a5:c8:cd:2a:65:80: e5:4d:6d:dc:b1:fd:a1:76:cc:63:c1:16:e6:bf:dc: f9:fd:e8:34:d1:b8:0b:7d:70:31:e3:8e:5f:80:fe: 05:9b:00:92:18:25:05:01:74:19:20:bc:dc:aa:ce: d5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:CA:89:4A:50:52:93:C6:31:C0:B2:91:58:2A:BA:A0:83:53:60:37 X509v3 Authority Key Identifier: keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ba:94:a7:61:72:48:5a:45:64:a8:c7:35:52:fd:2e:e7:0e: 4d:e8:6f:61:b1:cd:f6:d5:70:5e:8d:d0:01:50:08:1c:57:2c: 3e:f1:e6:a7:03:4d:61:b2:0e:aa:cc:12:f6:62:8e:a4:14:2c: 6a:cd:fd:de:3e:30:8a:9f:ed:b7:4a:2b:a3:b5:b8:d4:12:a1: 16:77:85:1e:0b:2e:f9:8d:97:79:fd:0d:8a:0b:26:e2:cc:bc: dc:5b:c0:47:a4:39:d4:74:04:5c:d9:c8:22:02:94:f1:f4:61: 32:cf:1d:c7:33:23:57:9d:0c:94:30:7e:2b:53:43:72:28:56: 9b:c7:82:8c:04:a6:1a:be:f1:5a:72:5c:fe:86:5f:c6:d5:21: 42:ba:a7:e0:36:bd:9d:a8:5c:8a:37:43:f4:72:c1:f9:d4:5c: 75:c7:fe:81:9f:f8:01:21:4b:b0:9f:83:bd:bc:93:1c:04:61: db:45:1c:aa:f6:37:44:32:f3:f7:c9:52:42:21:15:5b:3a:cb: bb:63:6d:ab:8d:f6:37:52:aa:2b:5f:7b:d8:13:b5:b4:f6:a0: 5e:de:b4:2d:55:c2:29:35:a7:b3:34:f8:3e:a7:83:67:82:f6: 2c:1f:b1:bc:dd:6a:af:4f:ab:cd:9a:1a:8e:42:6e:8d:b2:f0: 38:ac:e4:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx QzEwNkIzNzgwHhcNMjQxMTIyMTkwNDU3WhcNMjQxMTI5MTkwNDU3WjAYMRYwFAYD VQQDEw02NzQwZDVkOS00MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3XpUFRemhbeuCP5U5+y75kN6JZXWFDELyOh6rwQnd9MqMFHtzkQi0jQGm04j u54IvaBP2hdFeet0HnLEFdZ6JpOC4u908drjDR7jneFYfT+6O6/nhYrpbFDM2ikX O/C63wY5Sws4lUnoII2x2w/hscN7M0/YbIrxUSXaM6HulYAWLFhKHS+wA/HO8O2t yJrEbe1hv2fYCC7Ba2rIGLXgxXWQmLkLjgneWnygxvE5ptOIrr8q/SY9plPEIdzZ fXBihbDRWIyhcnz57RKlyM0qZYDlTW3csf2hdsxjwRbmv9z5/eg00bgLfXAx445f gP4FmwCSGCUFAXQZILzcqs7VYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvKiUpQ UpPGMcCykVgquqCDU2A3MB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2 QUdsekVMT1VYLW9jRUdzM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQupSnYXJIWkVkqMc1Uv0u5w5N6G9hsc321XBejdABUAgcVyw+8ean A01hsg6qzBL2Yo6kFCxqzf3ePjCKn+23SiujtbjUEqEWd4UeCy75jZd5/Q2KCybi zLzcW8BHpDnUdARc2cgiApTx9GEyzx3HMyNXnQyUMH4rU0NyKFabx4KMBKYavvFa clz+hl/G1SFCuqfgNr2dqFyKN0P0csH51Fx1x/6Bn/gBIUuwn4O9vJMcBGHbRRyq 9jdEMvP3yVJCIRVbOsu7Y22rjfY3UqorX3vYE7W09qBe3rQtVcIpNaezNPg+p4Nn gvYsH7G83WqvT6vNmhqOQm6NsvA4rOSJ -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org