$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft File: E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft (raw, json) Hash identifier: 8cmJBrc8acsAnkOHsVAjHcqDaeBlfPXxplp8lwW/POw= Subject key identifier: 01:91:84:6F:CD:1B:69:7E:CD:56:AA:79:71:FD:F6:60:81:15:2F:BA Authority key identifier: 13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C Certificate issuer: /CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft Manifest number: 04C5 Signing time: Fri 22 Nov 2024 23:24:44 +0000 Manifest this update: Fri 22 Nov 2024 23:24:44 +0000 Manifest next update: Fri 29 Nov 2024 23:24:44 +0000 Files and hashes: 1: E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl (hash: 4r9Rruj/h1p1HhjR8ZXqKzUVgP2ej6nIrsuUX4WKaDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F8B5/serialNumber=138F9A8CF207DA008B401C6DE8D91310FE25EA4C Validity Not Before: Nov 22 23:24:44 2024 GMT Not After : Nov 29 23:24:44 2024 GMT Subject: CN=674112bc-9866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:09:87:e3:0f:57:bb:5d:5c:9e:bc:c1:5e:41: a5:e9:4f:25:83:61:cf:34:ac:78:0e:93:68:28:bb: b7:11:23:9f:47:04:f4:b5:34:d4:3e:c4:82:48:9e: f0:0b:48:f7:29:b4:cb:af:2c:5a:81:29:42:5d:86: b3:8b:cb:84:e3:aa:cf:fe:96:f1:f8:55:e7:5b:cb: 3a:73:e9:6d:0e:74:34:93:88:76:e3:2d:09:09:d9: 58:9d:29:4d:9b:a6:f9:c8:4d:05:c1:a8:73:30:39: b7:93:39:ad:4d:af:69:26:41:f7:d6:4d:f2:b0:5a: 78:12:30:a2:6c:13:dd:de:4f:d6:c3:86:4b:d9:79: 47:f0:25:9d:99:6c:0b:39:ef:f8:34:f8:6a:b7:a9: cf:a4:00:38:83:32:77:ef:5c:30:5f:39:11:9b:e9: 9e:21:54:63:3d:3c:c2:ef:cc:4e:cd:4a:7d:15:18: de:1f:9d:62:3f:85:fa:5d:54:da:65:fb:34:fe:95: 3a:d2:50:73:96:03:c0:48:98:ae:83:bb:79:b4:6c: f0:10:70:60:da:96:10:ae:82:c5:05:2e:39:e2:53: 89:8e:5f:5f:ba:eb:d5:ce:2a:26:11:97:0d:d6:9d: 6d:16:79:69:04:f5:14:25:08:db:b1:58:39:5d:8f: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:91:84:6F:CD:1B:69:7E:CD:56:AA:79:71:FD:F6:60:81:15:2F:BA X509v3 Authority Key Identifier: keyid:13:8F:9A:8C:F2:07:DA:00:8B:40:1C:6D:E8:D9:13:10:FE:25:EA:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4-ajPIH2gCLQBxt6NkTEP4l6kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8B5/239D2A42FFF911EBA8F74360C4F9AE02/E4-ajPIH2gCLQBxt6NkTEP4l6kw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:aa:0e:8c:c2:cb:99:f4:69:a3:71:24:69:de:c6:40:03:b8: 68:cf:45:f0:c4:8a:1a:dd:5d:e5:ab:0f:2c:14:12:62:ff:76: 64:97:2f:b1:24:21:1a:2f:35:cf:3d:1d:95:53:fd:fa:38:45: 1c:3d:a0:21:a3:7d:f2:bc:8f:34:64:bf:63:44:4d:4a:8e:b3: a8:67:ef:6d:fa:1e:58:0d:32:71:68:0c:8b:da:68:96:75:19: 75:f3:a6:e7:52:99:78:6b:d8:10:34:7f:e0:60:81:68:a9:ca: 16:7e:ec:46:4d:1d:f2:56:7f:4e:f6:9c:06:4f:e9:ea:4e:fa: 43:19:41:d4:79:cf:bd:c2:d0:8e:7f:52:d6:b4:c5:80:0e:df: 24:10:27:8a:1c:54:8c:c9:b4:01:d9:1f:02:1b:d6:da:7c:96: 56:99:0a:f9:26:6b:53:0e:c5:41:0d:1d:4e:0e:c5:2f:fd:ec: a8:7f:e0:c0:ea:6d:34:46:d6:79:4a:7a:9c:13:e7:cb:4e:a1: 64:32:a7:27:65:62:27:75:4c:7a:6c:bf:03:5b:43:f8:8b:8b: 84:90:5b:8e:e4:d6:ce:66:d8:5b:b8:82:12:97:85:8b:9e:37: 70:43:ce:cc:86:67:cd:64:68:90:ac:bf:b0:b3:06:b5:d0:51: 1d:12:54:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y4QjUxMTAvBgNVBAUTKDEzOEY5QThDRjIwN0RBMDA4QjQwMUM2REU4RDkxMzEw RkUyNUVBNEMwHhcNMjQxMTIyMjMyNDQ0WhcNMjQxMTI5MjMyNDQ0WjAYMRYwFAYD VQQDEw02NzQxMTJiYy05ODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlAmH4w9Xu11cnrzBXkGl6U8lg2HPNKx4DpNoKLu3ESOfRwT0tTTUPsSCSJ7w C0j3KbTLryxagSlCXYazi8uE46rP/pbx+FXnW8s6c+ltDnQ0k4h24y0JCdlYnSlN m6b5yE0FwahzMDm3kzmtTa9pJkH31k3ysFp4EjCibBPd3k/Ww4ZL2XlH8CWdmWwL Oe/4NPhqt6nPpAA4gzJ371wwXzkRm+meIVRjPTzC78xOzUp9FRjeH51iP4X6XVTa Zfs0/pU60lBzlgPASJiug7t5tGzwEHBg2pYQroLFBS454lOJjl9fuuvVziomEZcN 1p1tFnlpBPUUJQjbsVg5XY9R1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGRhG/N G2l+zVaqeXH99mCBFS+6MB8GA1UdIwQYMBaAFBOPmozyB9oAi0AcbejZExD+JepM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCNS8yMzlEMkE0MkZG RjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJnQ0xRQnh0Nk5rVEVQNGw2 a3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0LWFqUElIMmdDTFFCeHQ2TmtURVA0bDZrdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjhCNS8yMzlEMkE0MkZGRjkxMUVCQThGNzQzNjBDNEY5QUUwMi9FNC1halBJSDJn Q0xRQnh0Nk5rVEVQNGw2a3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/qg6MwsuZ9GmjcSRp3sZAA7hoz0XwxIoa3V3lqw8sFBJi/3Zkly+x JCEaLzXPPR2VU/36OEUcPaAho33yvI80ZL9jRE1KjrOoZ+9t+h5YDTJxaAyL2miW dRl186bnUpl4a9gQNH/gYIFoqcoWfuxGTR3yVn9O9pwGT+nqTvpDGUHUec+9wtCO f1LWtMWADt8kECeKHFSMybQB2R8CG9bafJZWmQr5JmtTDsVBDR1ODsUv/eyof+DA 6m00RtZ5SnqcE+fLTqFkMqcnZWIndUx6bL8DW0P4i4uEkFuO5NbOZthbuIISl4WL njdwQ87MhmfNZGiQrL+wswa10FEdElRo -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org