$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft File: mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json) Hash identifier: VIAFaLs3kK8jL/IXpdiKqdR5B7AIworvK0h7GeMSf4c= Subject key identifier: CD:7B:1A:2B:35:03:80:59:6B:69:B0:D0:25:A6:DF:CD:4A:AB:5D:4B Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE Certificate issuer: /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Certificate serial: 3425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft Manifest number: 3425 Signing time: Fri 22 Nov 2024 14:56:23 +0000 Manifest this update: Fri 22 Nov 2024 14:56:22 +0000 Manifest next update: Fri 29 Nov 2024 14:56:22 +0000 Files and hashes: 1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: vx3TKrfWPIp/mDkD1avAHrmYom6pOf1/92Pu9GMYx0s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13349 (0x3425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Validity Not Before: Nov 22 14:56:22 2024 GMT Not After : Nov 29 14:56:22 2024 GMT Subject: CN=67409b97-3bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:ba:77:26:6b:31:c5:19:72:47:f1:b2:fd: 77:19:3c:50:28:f9:07:b0:bb:e9:30:71:ca:9d:ba: bd:d2:c0:48:e3:f8:f4:ae:39:1e:71:e5:b2:1f:f6: c6:3d:4c:1c:d4:77:ba:f3:7a:d6:11:49:1c:0e:83: 6f:7b:d8:a6:81:4b:d6:b5:ee:7e:30:54:6d:c5:75: e6:e3:db:fb:14:48:0a:a1:d7:10:a2:ea:ff:fa:fa: 3d:e4:5c:e5:dc:c3:05:f7:cd:89:f4:13:eb:c8:d4: e8:c7:3e:ba:2f:9a:2f:d7:64:63:53:36:dc:e4:a7: 90:43:4a:60:bd:c5:8a:6e:45:98:9f:e1:21:7b:c7: 1e:7e:0f:38:8e:a2:df:27:97:94:cd:d8:91:4c:0f: ae:b6:4e:f1:d2:13:0d:b4:4d:e5:37:61:e9:dc:25: a2:b7:71:e7:cb:45:88:6b:28:f5:18:7f:3d:c0:2e: fa:d8:a3:fc:f4:28:93:71:97:9e:d8:61:1d:e5:f8: a4:13:ed:22:47:a0:b8:82:29:ea:09:aa:62:d8:4e: ff:32:6f:db:79:dd:4f:c6:96:9e:af:5e:9b:6a:c1: 24:fe:97:af:be:82:01:9e:16:8d:6e:3d:84:f4:60: d3:da:06:ee:44:38:de:4b:74:fe:70:fc:d7:19:99: 3c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7B:1A:2B:35:03:80:59:6B:69:B0:D0:25:A6:DF:CD:4A:AB:5D:4B X509v3 Authority Key Identifier: keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:40:ab:64:02:62:ae:84:ce:f7:45:de:06:13:b3:7e:50:89: cf:c7:57:ab:70:7e:3c:41:79:ea:60:ef:e0:54:c1:d7:4c:a4: 46:4e:86:dc:52:6f:b5:3a:f8:1a:1a:53:73:14:8b:65:46:61: 11:b4:97:01:44:52:73:c0:90:11:23:f2:f5:4e:76:40:ef:b0: 3a:ca:07:4a:df:88:47:cb:be:e2:57:4f:77:a8:9a:72:f3:ea: be:ef:21:db:e3:b5:22:3d:ac:0a:86:ec:26:5a:6f:3a:69:6c: bd:dd:95:36:43:30:a6:45:89:d6:90:91:16:f8:8e:bc:b6:d2: dd:cb:30:5c:62:e5:c8:81:33:84:15:23:c1:a9:12:e3:51:34: d2:9b:67:a9:8d:89:35:f3:ea:99:df:c2:dc:40:49:67:55:bd: 63:b3:18:8c:d4:5d:77:b9:13:c8:bc:f9:60:a2:9c:17:2a:e8: 12:ff:88:db:fb:7c:bd:fd:d6:df:43:36:99:7c:04:41:fd:e4: dc:f7:89:5b:86:97:5f:b3:32:d4:ea:12:66:da:15:d7:70:1f: 69:ee:0c:9b:be:b8:b7:ba:1f:0c:a7:44:86:14:64:41:f2:3b: cc:95:e9:16:4d:88:08:44:4d:ff:75:d0:aa:7b:d8:66:be:3a: 4e:fd:67:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNjQxMTAvBgNVBAUTKDlBNTY2QTEyRTFCQzQ2MzUzMjZGNUUwMkFFRTlEQjcx ODFERDNCREUwHhcNMjQxMTIyMTQ1NjIyWhcNMjQxMTI5MTQ1NjIyWjAYMRYwFAYD VQQDEw02NzQwOWI5Ny0zYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq+6dyZrMcUZckfxsv13GTxQKPkHsLvpMHHKnbq90sBI4/j0rjkeceWyH/bG PUwc1He683rWEUkcDoNve9imgUvWte5+MFRtxXXm49v7FEgKodcQour/+vo95Fzl 3MMF982J9BPryNToxz66L5ov12RjUzbc5KeQQ0pgvcWKbkWYn+Ehe8cefg84jqLf J5eUzdiRTA+utk7x0hMNtE3lN2Hp3CWit3Hny0WIayj1GH89wC762KP89CiTcZee 2GEd5fikE+0iR6C4ginqCapi2E7/Mm/bed1Pxpaer16basEk/pevvoIBnhaNbj2E 9GDT2gbuRDjeS3T+cPzXGZk8VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM17Gis1 A4BZa2mw0CWm381Kq11LMB8GA1UdIwQYMBaAFJpWahLhvEY1Mm9eAq7p23GB3Tve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI2NC9FQTU5QTg1QTFE OTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJqVXliMTRDcnVuYmNZSGRP OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sWnFFdUc4UmpVeWIxNENydW5iY1lIZE85NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI2NC9FQTU5QTg1QTFEOTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJq VXliMTRDcnVuYmNZSGRPOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBQKtkAmKuhM73Rd4GE7N+UInPx1ercH48QXnqYO/gVMHXTKRGTobc Um+1OvgaGlNzFItlRmERtJcBRFJzwJARI/L1TnZA77A6ygdK34hHy77iV093qJpy 8+q+7yHb47UiPawKhuwmWm86aWy93ZU2QzCmRYnWkJEW+I68ttLdyzBcYuXIgTOE FSPBqRLjUTTSm2epjYk18+qZ38LcQElnVb1jsxiM1F13uRPIvPlgopwXKugS/4jb +3y9/dbfQzaZfARB/eTc94lbhpdfszLU6hJm2hXXcB9p7gybvri3uh8Mp0SGFGRB 8jvMlekWTYgIRE3/ddCqe9hmvjpO/Wcf -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:42 2024 by rpki-client on console-fra.rpki-client.org