$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json) Hash identifier: 9z70OGmfwePvj4iy5uNZwc5y5z9cbgg0p3ked4rX3b4= Subject key identifier: FE:8D:82:91:C7:A5:AC:7A:F1:5B:21:B7:73:ED:30:91:67:61:CC:1A Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Certificate serial: 0A0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft Manifest number: 121F Signing time: Fri 22 Nov 2024 19:36:13 +0000 Manifest this update: Fri 22 Nov 2024 19:36:13 +0000 Manifest next update: Fri 29 Nov 2024 19:36:13 +0000 Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: N4oO8gS08d+WG54W/4P0R3eN6D5U6K+PxtJ004h3Dhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2571 (0xa0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Validity Not Before: Nov 22 19:36:13 2024 GMT Not After : Nov 29 19:36:13 2024 GMT Subject: CN=6740dd2d-8569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:a0:64:73:49:01:e8:3a:a2:34:d1:88:b5: 79:17:82:7e:54:27:e8:d5:58:54:ab:02:7b:e5:7a: 49:9f:bd:e7:8c:64:e7:e9:9f:4f:c3:65:82:34:7b: 14:9a:fb:7c:99:79:7c:bd:42:37:1c:4c:25:34:8e: 6a:54:c5:81:ae:4a:90:79:d9:34:95:6a:e7:99:4a: ef:90:e7:2d:10:2a:ab:ca:45:22:1a:d9:b4:9b:ed: 0e:58:25:31:1d:7a:b2:5a:40:be:f5:8a:3b:38:9e: 43:f3:0b:c1:b8:bf:2b:17:33:9c:bd:be:c3:08:bb: 7d:dd:d2:d4:78:cc:21:f2:7a:50:df:92:c9:3a:fb: 1a:ea:ca:a5:25:6d:54:47:72:a5:4e:61:4f:10:e4: b5:63:34:30:ff:15:6e:e1:18:d3:c8:00:a2:52:13: ef:71:96:72:b3:61:e1:a1:ab:ba:87:6d:fc:06:c4: bc:50:34:01:c6:f2:fd:8d:f5:f9:07:df:88:70:ec: 37:98:cd:dd:0c:bd:31:54:7a:f8:fd:86:17:a4:17: 6e:63:d5:eb:8c:8d:fe:f4:3b:9f:2d:15:da:30:e8: 8e:b1:d5:24:bf:67:42:a5:3d:75:ab:0c:33:21:06: 23:ed:48:27:61:34:eb:ae:28:66:ad:2f:f3:8f:9c: a5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8D:82:91:C7:A5:AC:7A:F1:5B:21:B7:73:ED:30:91:67:61:CC:1A X509v3 Authority Key Identifier: keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f9:c7:ff:81:da:2a:c0:75:61:08:d3:ed:1c:8a:68:e7:79: a0:0e:3f:4c:3a:39:d7:83:33:af:66:d9:91:a7:e1:9b:bc:30: 45:b3:66:06:28:3d:11:2a:e8:e0:76:8d:f4:89:8e:b0:16:9c: 3e:d9:1e:d6:4c:fd:a7:f9:a4:3e:f9:b4:21:3f:08:2b:6b:3f: 5d:c0:aa:ea:31:a7:8b:7f:09:90:bb:6a:46:52:64:58:e2:bf: 2e:f5:3a:bd:31:7f:a1:97:de:c6:16:78:52:fc:fa:2a:78:54: 99:af:60:36:a8:fa:b6:13:72:29:e6:a5:a7:69:d9:47:ef:7a: 6e:65:4a:96:ca:d7:b2:82:fa:fb:3d:2c:21:c2:a0:ad:88:5f: 6e:b3:78:d1:d3:a0:d3:db:03:24:5a:86:ac:50:56:29:e7:6b: c4:a9:ad:60:b4:73:e5:d6:a7:6d:57:84:85:78:e8:f7:f1:f0: 2f:0a:5b:66:fb:00:1c:81:5e:b9:32:e8:7e:4a:b6:92:31:ee: 0c:42:13:88:2d:35:f0:aa:fe:6e:5c:76:62:66:2f:a6:59:d0: f9:e9:1c:29:e8:00:2f:a1:a3:25:55:ee:bf:c8:79:5c:6c:fe: b3:88:a1:37:e2:6e:85:62:77:43:5e:b0:8c:07:0e:81:f5:ee: 4f:ad:47:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKEYzMjhENzlDQUVDQjE0NUYyMkRGREY4Q0RFQzJEMDU2 OUM2OTc2N0MwHhcNMjQxMTIyMTkzNjEzWhcNMjQxMTI5MTkzNjEzWjAYMRYwFAYD VQQDEw02NzQwZGQyZC04NTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA2gZHNJAeg6ojTRiLV5F4J+VCfo1VhUqwJ75XpJn73njGTn6Z9Pw2WCNHsU mvt8mXl8vUI3HEwlNI5qVMWBrkqQedk0lWrnmUrvkOctECqrykUiGtm0m+0OWCUx HXqyWkC+9Yo7OJ5D8wvBuL8rFzOcvb7DCLt93dLUeMwh8npQ35LJOvsa6sqlJW1U R3KlTmFPEOS1YzQw/xVu4RjTyACiUhPvcZZys2Hhoau6h238BsS8UDQBxvL9jfX5 B9+IcOw3mM3dDL0xVHr4/YYXpBduY9XrjI3+9DufLRXaMOiOsdUkv2dCpT11qwwz IQYj7UgnYTTrrihmrS/zj5ylxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6NgpHH pax68Vsht3PtMJFnYcwaMB8GA1UdIwQYMBaAFPMo15yuyxRfIt/fjN7C0FacaXZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZGOGkzOS1NM3NMUVZweHBk bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh5alhuSzdMRkY4aTM5LU0zc0xRVnB4cGRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZG OGkzOS1NM3NMUVZweHBkbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT+cf/gdoqwHVhCNPtHIpo53mgDj9MOjnXgzOvZtmRp+GbvDBFs2YG KD0RKujgdo30iY6wFpw+2R7WTP2n+aQ++bQhPwgraz9dwKrqMaeLfwmQu2pGUmRY 4r8u9Tq9MX+hl97GFnhS/PoqeFSZr2A2qPq2E3Ip5qWnadlH73puZUqWyteygvr7 PSwhwqCtiF9us3jR06DT2wMkWoasUFYp52vEqa1gtHPl1qdtV4SFeOj38fAvCltm +wAcgV65Muh+SraSMe4MQhOILTXwqv5uXHZiZi+mWdD56Rwp6AAvoaMlVe6/yHlc bP6ziKE34m6FYndDXrCMBw6B9e5PrUd3 -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org