$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json) Hash identifier: 5vzfSrNEI1Wpdn1EAIBvT0vJ815GgX2ozcXYiZuiFlk= Subject key identifier: DC:39:25:11:85:35:EE:0B:65:6E:E9:C1:EF:1F:BF:EC:A6:01:95:A8 Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Certificate serial: 0BD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft Manifest number: 13AE Signing time: Fri 22 Nov 2024 18:33:07 +0000 Manifest this update: Fri 22 Nov 2024 18:33:06 +0000 Manifest next update: Fri 29 Nov 2024 18:33:06 +0000 Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: 1+LN+rGpKotWu+h3C8Jwt9g4dR37fPQNm3Dao9pYWac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3026 (0xbd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Validity Not Before: Nov 22 18:33:06 2024 GMT Not After : Nov 29 18:33:06 2024 GMT Subject: CN=6740ce63-3d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:b9:98:7a:b3:25:ab:ba:93:e4:23:91:57: 64:0f:d7:6d:ad:ca:d8:9b:eb:f7:f7:69:0f:d5:28: 43:71:6b:1f:1c:a0:2a:58:e4:57:48:7d:af:44:11: 7f:48:bb:53:60:46:ea:de:fe:81:0a:40:22:d0:d7: d2:37:bc:4a:55:85:1d:e7:7d:5a:cd:82:98:b9:4f: 26:1f:d8:34:6c:22:64:10:bf:a2:8c:3d:37:a5:ff: c8:04:40:41:ef:11:58:78:8e:17:a6:53:43:57:c1: a9:e8:36:c0:e5:77:39:8a:65:47:f6:6e:64:67:9d: 0c:f4:0a:1e:a6:87:65:40:f5:12:3c:02:cc:f5:9f: 3b:34:e0:61:74:a1:ef:8e:ec:4f:7d:88:54:13:4b: 45:f8:35:3f:d4:2d:5d:6f:28:fb:e4:b4:5e:9d:b4: c6:82:d4:1d:0a:8d:8f:d4:80:dc:54:2a:5d:cf:55: fc:7c:29:19:ce:e7:52:b2:a4:ee:6a:34:76:db:f8: 11:b2:95:71:24:c0:f1:a5:e0:81:26:1b:4d:39:81: 78:81:a1:1d:f6:63:4c:d4:87:4a:0d:dc:4f:f2:de: db:dd:3f:82:4a:27:6b:7c:cd:52:d2:01:d5:02:fd: f8:4c:ea:fc:6c:9c:13:bc:01:33:a4:06:4e:03:4b: 31:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:39:25:11:85:35:EE:0B:65:6E:E9:C1:EF:1F:BF:EC:A6:01:95:A8 X509v3 Authority Key Identifier: keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6b:94:fc:cc:c0:16:72:f2:91:c6:26:18:2a:94:e5:f0:39: 91:89:9f:7e:43:db:a8:70:60:36:70:b4:40:71:33:02:40:fc: 37:91:b4:07:27:cd:99:7d:5d:80:d4:53:67:8a:01:12:a3:67: d6:bd:d5:9f:99:fc:7c:69:42:1a:fd:79:8e:cc:29:ad:02:60: 1b:1e:b6:8f:c9:88:58:7e:f0:67:29:ae:05:27:5b:a3:06:f6: df:3f:44:8b:a4:17:d4:88:d1:49:e8:c2:7f:3a:3f:ef:0f:96: a5:11:98:46:7f:1f:82:c0:20:98:be:36:36:1f:c4:d7:46:6d: db:80:99:68:fc:d8:bd:d0:c2:61:fd:c0:2c:1d:2a:f7:69:e7: 27:6d:d5:27:47:68:12:43:7a:27:0a:99:04:f8:5e:8d:bb:7c: 12:cb:d9:8e:0d:bc:e3:1b:2d:f1:d4:2a:82:b4:bd:e8:e6:8b: 20:d2:0d:c5:89:03:bf:9f:25:f6:b1:d7:d6:b3:8d:d1:62:65: 0a:a6:59:5a:c0:38:21:00:ff:38:13:12:7f:67:f4:5f:e1:59: 92:b2:d4:33:7a:b3:9b:10:45:59:34:f8:b8:32:88:f6:01:89: 91:01:ba:50:f9:ad:03:5e:59:e1:cc:0e:09:0f:da:f9:2e:35: 31:d3:95:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD NDY1MEZDRDMwHhcNMjQxMTIyMTgzMzA2WhcNMjQxMTI5MTgzMzA2WjAYMRYwFAYD VQQDEw02NzQwY2U2My0zZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDG5mHqzJau6k+QjkVdkD9dtrcrYm+v392kP1ShDcWsfHKAqWORXSH2vRBF/ SLtTYEbq3v6BCkAi0NfSN7xKVYUd531azYKYuU8mH9g0bCJkEL+ijD03pf/IBEBB 7xFYeI4XplNDV8Gp6DbA5Xc5imVH9m5kZ50M9AoepodlQPUSPALM9Z87NOBhdKHv juxPfYhUE0tF+DU/1C1dbyj75LRenbTGgtQdCo2P1IDcVCpdz1X8fCkZzudSsqTu ajR22/gRspVxJMDxpeCBJhtNOYF4gaEd9mNM1IdKDdxP8t7b3T+CSidrfM1S0gHV Av34TOr8bJwTvAEzpAZOA0sx7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNw5JRGF Ne4LZW7pwe8fv+ymAZWoMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2 bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqa5T8zMAWcvKRxiYYKpTl8DmRiZ9+Q9uocGA2cLRAcTMCQPw3kbQH J82ZfV2A1FNnigESo2fWvdWfmfx8aUIa/XmOzCmtAmAbHraPyYhYfvBnKa4FJ1uj BvbfP0SLpBfUiNFJ6MJ/Oj/vD5alEZhGfx+CwCCYvjY2H8TXRm3bgJlo/Ni90MJh /cAsHSr3aecnbdUnR2gSQ3onCpkE+F6Nu3wSy9mODbzjGy3x1CqCtL3o5osg0g3F iQO/nyX2sdfWs43RYmUKpllawDghAP84ExJ/Z/Rf4VmSstQzerObEEVZNPi4Moj2 AYmRAbpQ+a0DXlnhzA4JD9r5LjUx05VE -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org