$ rpki-client -vvf rpki.apnic.net/member_repository/A913D657/58898186B4C611EEB1E8780BC4F9AE02/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.mft File: k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.mft (raw, json) Hash identifier: v7asli6yTm4+mC7L1woKj+3/V4SzqHZrBgpBDBBmDOE= Subject key identifier: 56:BD:06:72:5E:E7:C7:C1:05:76:23:E1:5E:77:47:54:0B:4A:97:87 Authority key identifier: 93:96:61:02:16:F7:51:5B:3A:5D:AE:22:1F:7B:E4:77:72:87:A3:20 Certificate issuer: /CN=A913D657/serialNumber=9396610216F7515B3A5DAE221F7BE4777287A320 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D657/58898186B4C611EEB1E8780BC4F9AE02/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.mft Manifest number: A0 Signing time: Wed 20 Nov 2024 19:14:29 +0000 Manifest this update: Wed 20 Nov 2024 19:14:28 +0000 Manifest next update: Wed 27 Nov 2024 19:14:28 +0000 Files and hashes: 1: k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.crl (hash: AFaN0mJb89a5hDrkbssTMbozrjrxsvo2MDtpko2Ah3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D657/58898186B4C611EEB1E8780BC4F9AE02/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.crl rsync://rpki.apnic.net/member_repository/A913D657/58898186B4C611EEB1E8780BC4F9AE02/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D657/serialNumber=9396610216F7515B3A5DAE221F7BE4777287A320 Validity Not Before: Nov 20 19:14:28 2024 GMT Not After : Nov 27 19:14:28 2024 GMT Subject: CN=673e3515-4621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:71:3a:f4:30:22:fe:fc:c1:79:c4:28:77:ee: 85:a7:c0:5b:5d:0f:55:cb:bd:18:18:5e:91:f8:d1: 7b:c3:9b:16:65:1a:58:69:70:58:6c:e7:2d:99:9a: ca:7b:02:96:cc:07:38:71:3e:92:58:1b:a9:1f:28: 21:34:85:ad:db:ac:ed:b8:16:d7:ee:cd:e9:53:04: 73:0d:99:e6:79:e9:c6:53:a0:cf:63:18:1b:da:2c: 6c:7f:f2:f6:59:22:67:1b:b7:f4:41:54:7d:3f:c8: f5:04:65:e6:ad:c8:d5:64:4b:bd:60:8e:15:52:c4: cb:3f:0d:a0:72:d4:23:f6:56:dc:d4:c5:79:bb:e4: 61:b9:75:e2:8a:dd:b7:37:56:b7:49:d7:4b:0f:f4: cd:68:b8:a9:84:5a:7b:62:f2:bb:fb:de:13:bb:4e: f9:8d:d1:44:8f:db:f8:2d:ed:27:67:12:13:dd:5e: 12:22:6a:d7:d3:a1:79:9c:bf:a6:5c:b0:9d:47:8c: 20:72:e7:aa:8f:bd:b1:c2:8c:b7:0a:97:3b:21:46: b1:30:66:b4:41:d6:70:7e:2e:6a:dc:d9:19:a2:c4: 17:07:d4:98:14:ec:0c:bb:77:0a:ae:18:02:b5:cf: b0:64:2f:6f:75:37:9a:27:7b:9c:5a:b8:22:0f:b7: 8f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BD:06:72:5E:E7:C7:C1:05:76:23:E1:5E:77:47:54:0B:4A:97:87 X509v3 Authority Key Identifier: keyid:93:96:61:02:16:F7:51:5B:3A:5D:AE:22:1F:7B:E4:77:72:87:A3:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D657/58898186B4C611EEB1E8780BC4F9AE02/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D657/58898186B4C611EEB1E8780BC4F9AE02/k5ZhAhb3UVs6Xa4iH3vkd3KHoyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:5f:42:41:30:a0:6a:bd:92:e3:ac:8a:b2:17:84:5d:b6:92: 84:09:8b:06:68:76:30:f7:0a:38:d2:4d:52:b5:02:23:8c:55: 79:41:15:f4:55:57:40:f1:74:b0:a8:8f:1b:db:47:15:47:d0: 38:94:4b:23:cc:41:ea:83:49:e1:44:e2:1e:0a:a3:40:30:c9: 93:0b:fd:63:f3:82:90:11:d7:1e:3d:ab:c3:b6:7e:ea:5a:6d: 5c:ba:fb:d6:ba:10:bd:3c:4e:05:85:d2:7c:da:d9:0e:62:f5: d0:60:80:2a:53:ac:09:7f:9f:cc:33:41:6f:fd:37:19:39:44: b6:a9:ef:a0:12:7b:f8:1c:23:ef:14:be:4e:de:66:e0:fc:18: 4d:9e:c4:df:cb:cd:c7:ed:8f:1a:67:c8:46:5f:03:60:92:e4: 6a:a6:76:5f:fe:72:cd:12:60:5b:1f:d8:6e:51:c7:76:4b:af: 4e:cb:75:42:d5:1b:93:3c:7f:a0:aa:08:3b:60:c2:84:7e:c1: f5:c1:88:ae:0e:3a:06:5f:4e:42:55:6b:90:26:fb:b9:1d:21: 8f:cb:33:51:59:24:9d:ef:55:47:40:67:be:a8:08:35:c3:01: 62:f1:f5:83:d1:2a:f1:0d:f1:7a:95:ef:8d:1d:19:4c:ec:50: ae:19:99:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2NTcxMTAvBgNVBAUTKDkzOTY2MTAyMTZGNzUxNUIzQTVEQUUyMjFGN0JFNDc3 NzI4N0EzMjAwHhcNMjQxMTIwMTkxNDI4WhcNMjQxMTI3MTkxNDI4WjAYMRYwFAYD VQQDEw02NzNlMzUxNS00NjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63E69DAi/vzBecQod+6Fp8BbXQ9Vy70YGF6R+NF7w5sWZRpYaXBYbOctmZrK ewKWzAc4cT6SWBupHyghNIWt26ztuBbX7s3pUwRzDZnmeenGU6DPYxgb2ixsf/L2 WSJnG7f0QVR9P8j1BGXmrcjVZEu9YI4VUsTLPw2gctQj9lbc1MV5u+RhuXXiit23 N1a3SddLD/TNaLiphFp7YvK7+94Tu075jdFEj9v4Le0nZxIT3V4SImrX06F5nL+m XLCdR4wgcueqj72xwoy3Cpc7IUaxMGa0QdZwfi5q3NkZosQXB9SYFOwMu3cKrhgC tc+wZC9vdTeaJ3ucWrgiD7ePLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFa9BnJe 58fBBXYj4V53R1QLSpeHMB8GA1UdIwQYMBaAFJOWYQIW91FbOl2uIh975Hdyh6Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDY1Ny81ODg5ODE4NkI0 QzYxMUVFQjFFODc4MEJDNEY5QUUwMi9rNVpoQWhiM1VWczZYYTRpSDN2a2QzS0hv eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2s1WmhBaGIzVVZzNlhhNGlIM3ZrZDNLSG95QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDY1Ny81ODg5ODE4NkI0QzYxMUVFQjFFODc4MEJDNEY5QUUwMi9rNVpoQWhiM1VW czZYYTRpSDN2a2QzS0hveUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGX0JBMKBqvZLjrIqyF4RdtpKECYsGaHYw9wo40k1StQIjjFV5QRX0 VVdA8XSwqI8b20cVR9A4lEsjzEHqg0nhROIeCqNAMMmTC/1j84KQEdcePavDtn7q Wm1cuvvWuhC9PE4FhdJ82tkOYvXQYIAqU6wJf5/MM0Fv/TcZOUS2qe+gEnv4HCPv FL5O3mbg/BhNnsTfy83H7Y8aZ8hGXwNgkuRqpnZf/nLNEmBbH9huUcd2S69Oy3VC 1RuTPH+gqgg7YMKEfsH1wYiuDjoGX05CVWuQJvu5HSGPyzNRWSSd71VHQGe+qAg1 wwFi8fWD0SrxDfF6le+NHRlM7FCuGZmV -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:47 2024 by rpki-client on console-ams.rpki-client.org