$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft File: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft (raw, json) Hash identifier: Wgn/A17H7fH0Bjus/0riqapefiZWC9Hmcy+AZGlwSh8= Subject key identifier: EE:54:1F:03:44:8F:3E:02:E7:49:7A:2B:7F:02:EF:E0:F0:03:E9:A9 Authority key identifier: D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 Certificate issuer: /CN=A91443DC/serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft Manifest number: 50 Signing time: Sat 23 Nov 2024 05:10:44 +0000 Manifest this update: Sat 23 Nov 2024 05:10:43 +0000 Manifest next update: Sat 30 Nov 2024 05:10:43 +0000 Files and hashes: 1: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl (hash: fxdWzbYjg9eUxOHGN90VJGHjTF2NG+JSR7YeW/9On0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC/serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Validity Not Before: Nov 23 05:10:43 2024 GMT Not After : Nov 30 05:10:43 2024 GMT Subject: CN=674163d4-da63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:97:14:19:bc:3a:6c:76:2b:d1:ca:51:22: 69:ba:97:45:26:4d:f6:c6:0d:02:e6:6e:c0:02:87: 1a:c0:75:58:44:3d:45:96:42:b4:8b:76:62:29:5a: cc:ab:22:04:2a:4b:e0:0b:65:39:dd:20:f0:f8:60: 6d:60:19:92:35:77:fd:b3:45:10:f4:85:31:17:7b: 31:ed:6a:53:af:34:d4:b2:1e:54:8c:27:4b:bb:84: 99:15:46:4b:00:d0:35:9a:fc:fa:33:43:dc:86:64: 06:3c:34:82:90:28:a0:d0:cd:eb:63:af:f9:99:0b: fc:85:cf:98:1a:92:1d:b2:5e:80:88:54:78:51:d3: df:78:f5:6c:69:b1:18:1a:6b:df:51:c3:20:ba:89: 04:28:65:32:37:c4:a4:18:41:89:1b:44:61:14:c3: d2:f4:44:dd:0c:69:e4:57:8e:39:25:a6:c8:df:07: 0c:f4:7e:25:d4:b9:10:86:7d:5e:88:bb:b6:62:47: c1:a7:c4:15:7a:3e:1c:28:eb:19:da:75:5a:71:e4: 35:00:f0:99:e1:c0:52:38:af:b7:25:93:9f:9a:0e: 98:2d:70:74:17:8c:19:73:67:61:1e:b5:6f:8e:7d: cb:0c:fd:00:1a:19:8a:cb:f4:4d:89:70:ac:0b:7d: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:54:1F:03:44:8F:3E:02:E7:49:7A:2B:7F:02:EF:E0:F0:03:E9:A9 X509v3 Authority Key Identifier: keyid:D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:4a:65:04:56:30:f5:1a:c2:17:11:ce:3f:02:f1:83:fa:14: 86:9b:34:a8:b4:38:d7:9b:cd:25:fe:ff:de:0b:f2:19:9b:40: 7d:25:03:65:d1:c1:6f:d4:9d:d7:13:65:7b:2e:2c:f7:56:ca: 53:54:24:65:2b:5e:4e:7b:19:ba:9e:b0:2d:31:76:35:f7:e4: 6c:83:5e:db:3d:1f:bc:df:41:d6:fa:49:6d:ef:34:d6:1b:ad: 66:40:70:61:b3:32:60:a3:65:cc:06:21:57:a0:55:4a:08:0c: 30:04:49:9d:d1:e7:c1:53:f3:23:91:58:0a:b5:f0:eb:a7:a2: be:31:b5:23:2d:17:2f:80:13:e8:cc:00:a3:be:92:a0:fc:82: fd:7d:01:35:3a:fa:a7:ed:70:3c:6e:f7:77:4a:ed:3c:45:e8: 30:d1:a6:9c:01:0e:0c:cf:77:89:af:86:5d:b4:69:11:4f:7c: d2:7f:96:78:49:92:e2:80:4a:5f:43:14:de:2b:d1:6b:f4:8d: 3b:a6:6b:09:16:1f:ee:94:44:9b:4f:f0:88:4b:51:44:37:01: f8:e7:34:30:da:43:03:09:b2:0a:94:9c:73:3b:ad:2d:ed:44: 89:17:59:30:95:e0:cd:57:ab:62:66:78:30:de:0c:f4:3e:b0: 8c:8d:f0:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NDNEQzExMC8GA1UEBRMoRDE4RkZDQzUwNEQzNjkzRDdGOEEzOEQ4NkRDMTJFODhD RDk2MEU1NjAeFw0yNDExMjMwNTEwNDNaFw0yNDExMzAwNTEwNDNaMBgxFjAUBgNV BAMTDTY3NDE2M2Q0LWRhNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDISZcUGbw6bHYr0cpRImm6l0UmTfbGDQLmbsAChxrAdVhEPUWWQrSLdmIpWsyr IgQqS+ALZTndIPD4YG1gGZI1d/2zRRD0hTEXezHtalOvNNSyHlSMJ0u7hJkVRksA 0DWa/PozQ9yGZAY8NIKQKKDQzetjr/mZC/yFz5gakh2yXoCIVHhR09949WxpsRga a99RwyC6iQQoZTI3xKQYQYkbRGEUw9L0RN0MaeRXjjklpsjfBwz0fiXUuRCGfV6I u7ZiR8GnxBV6Phwo6xnadVpx5DUA8JnhwFI4r7clk5+aDpgtcHQXjBlzZ2EetW+O fcsM/QAaGYrL9E2JcKwLfaPhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7lQfA0SP PgLnSXorfwLv4PAD6akwHwYDVR0jBBgwFoAU0Y/8xQTTaT1/ijjYbcEuiM2WDlYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0M0RDL0EwNjVEMUVBMzA2 MjExRUY5NzhCNDc2NEM0RjlBRTAyLzBZXzh4UVRUYVQxX2lqalliY0V1aU0yV0Rs WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMFlfOHhRVFRhVDFfaWpqWWJjRXVpTTJXRGxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0 M0RDL0EwNjVEMUVBMzA2MjExRUY5NzhCNDc2NEM0RjlBRTAyLzBZXzh4UVRUYVQx X2lqalliY0V1aU0yV0RsWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADhKZQRWMPUawhcRzj8C8YP6FIabNKi0ONebzSX+/94L8hmbQH0lA2XR wW/UndcTZXsuLPdWylNUJGUrXk57GbqesC0xdjX35GyDXts9H7zfQdb6SW3vNNYb rWZAcGGzMmCjZcwGIVegVUoIDDAESZ3R58FT8yORWAq18Ounor4xtSMtFy+AE+jM AKO+kqD8gv19ATU6+qftcDxu93dK7TxF6DDRppwBDgzPd4mvhl20aRFPfNJ/lnhJ kuKASl9DFN4r0Wv0jTumawkWH+6URJtP8IhLUUQ3AfjnNDDaQwMJsgqUnHM7rS3t RIkXWTCV4M1Xq2JmeDDeDPQ+sIyN8CQ= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org