$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft File: mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft (raw, json) Hash identifier: FycOb1824ZvXVe+wbrAmyiiYNqXsZjtl7ClZunqEElc= Subject key identifier: 77:F2:8D:52:92:EB:3C:C7:99:18:EE:83:C6:43:31:37:FA:EA:27:6B Authority key identifier: 99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 Certificate issuer: /CN=A914B1DB/serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft Manifest number: 45 Signing time: Mon 25 Nov 2024 05:18:07 +0000 Manifest this update: Mon 25 Nov 2024 05:18:07 +0000 Manifest next update: Mon 02 Dec 2024 05:18:07 +0000 Files and hashes: 1: mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl (hash: D0ESCanqCVSfigzcKgahjZx+w9ydKeQfLUqwNrWJ+8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB/serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Validity Not Before: Nov 25 05:18:07 2024 GMT Not After : Dec 2 05:18:07 2024 GMT Subject: CN=6744088f-b0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:c3:58:67:79:aa:79:32:0a:76:25:1f:13: c8:e1:a9:7a:ad:99:bc:b5:04:50:60:2d:57:e9:f0: 8c:d2:3e:e9:b0:61:55:12:41:04:ff:66:b0:17:e7: 75:60:7f:c2:ef:f2:3b:9c:30:d8:5a:ac:b9:8f:8c: aa:d3:04:1d:f1:63:9d:8c:7d:c4:13:c7:74:a5:23: 62:49:18:e6:78:e9:09:87:06:84:91:a9:15:b9:8f: 40:e4:16:7d:cc:81:cb:31:d3:d2:47:9b:8b:8b:bf: 09:d7:4b:a9:5a:f1:ad:62:44:59:df:57:c3:79:d4: 97:f5:2b:9d:3e:01:2d:74:eb:96:3a:c1:9e:39:b0: f7:19:60:91:d8:3f:ae:18:ec:d9:d7:3d:31:ee:5e: 5e:08:d9:67:81:d4:37:91:ef:8b:5d:b1:5c:8c:cf: e2:4e:94:b9:03:20:03:74:24:20:ff:de:20:79:52: 56:18:a7:e0:9d:52:7b:f6:1b:2f:28:84:70:4c:c0: c1:87:e4:09:74:71:51:d9:1f:e8:fe:d1:94:fe:33: b4:31:f6:89:ae:68:b8:2d:d2:65:b7:a2:4d:95:20: ef:5c:91:7f:ba:b0:f5:49:9e:b3:c0:9e:73:34:d7: 95:14:ae:fa:be:33:b4:a2:b4:21:8a:01:94:11:82: 1c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F2:8D:52:92:EB:3C:C7:99:18:EE:83:C6:43:31:37:FA:EA:27:6B X509v3 Authority Key Identifier: keyid:99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:28:e3:0e:32:d4:eb:6f:4d:59:1a:14:23:ee:05:07:45:20: ba:e8:63:94:4b:c5:62:ca:20:b5:75:0f:a7:d4:de:d0:71:77: a4:73:0c:be:e1:b7:3f:37:d5:86:b3:ec:51:c1:b9:38:0d:0b: 1f:03:34:e6:fc:c1:01:30:c9:48:0b:d9:d5:cd:4b:82:ed:a1: b4:f0:4d:e4:ab:25:fd:15:be:64:fb:7b:8c:20:5c:1c:aa:b4: 9b:79:fc:0b:df:06:ef:fc:fd:6c:bd:81:b8:91:83:8e:41:12: de:a0:60:2f:09:a9:8a:00:bf:7e:12:3b:6f:15:74:ac:94:88: 88:29:93:bf:f2:e9:06:b3:e4:b1:f8:40:84:e2:d3:5b:b8:2d: ab:2f:a7:86:47:cb:0e:3e:08:d9:7f:96:d9:29:9f:df:76:b8: 23:6e:7c:35:4e:6a:bc:fe:e3:c6:66:e9:5d:5d:9e:3e:a4:87: 20:51:8d:27:eb:7b:ec:dd:d9:b7:62:9b:82:c5:e5:30:f3:38: e9:72:a8:ad:9a:43:fd:6a:bb:d7:52:66:38:33:a9:5c:49:37: 6f:94:99:40:3a:55:c6:f2:74:04:e9:2f:80:32:d1:c6:e4:38: 95:48:d2:3b:8b:f2:c0:8c:12:4d:10:95:9f:4d:59:c7:b1:bd: 85:0e:b8:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QjFEQjExMC8GA1UEBRMoOTlDMTA2RTg3RkUxRDY0MTFBRUM3MUY4MDM5NDYyMkM4 ODFBQUFEOTAeFw0yNDExMjUwNTE4MDdaFw0yNDEyMDIwNTE4MDdaMBgxFjAUBgNV BAMTDTY3NDQwODhmLWIwZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtmcNYZ3mqeTIKdiUfE8jhqXqtmby1BFBgLVfp8IzSPumwYVUSQQT/ZrAX53Vg f8Lv8jucMNharLmPjKrTBB3xY52MfcQTx3SlI2JJGOZ46QmHBoSRqRW5j0DkFn3M gcsx09JHm4uLvwnXS6la8a1iRFnfV8N51Jf1K50+AS1065Y6wZ45sPcZYJHYP64Y 7NnXPTHuXl4I2WeB1DeR74tdsVyMz+JOlLkDIAN0JCD/3iB5UlYYp+CdUnv2Gy8o hHBMwMGH5Al0cVHZH+j+0ZT+M7Qx9omuaLgt0mW3ok2VIO9ckX+6sPVJnrPAnnM0 15UUrvq+M7SitCGKAZQRghy1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd/KNUpLr PMeZGO6DxkMxN/rqJ2swHwYDVR0jBBgwFoAUmcEG6H/h1kEa7HH4A5RiLIgaqtkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCMURCLzM2NTE0MEVFNDMx MDExRUY4NjhCMkI4MUM0RjlBRTAyL21jRUc2SF9oMWtFYTdISDRBNVJpTElnYXF0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWNFRzZIX2gxa0VhN0hINEE1UmlMSWdhcXRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC MURCLzM2NTE0MEVFNDMxMDExRUY4NjhCMkI4MUM0RjlBRTAyL21jRUc2SF9oMWtF YTdISDRBNVJpTElnYXF0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIoo4w4y1OtvTVkaFCPuBQdFILroY5RLxWLKILV1D6fU3tBxd6RzDL7h tz831Yaz7FHBuTgNCx8DNOb8wQEwyUgL2dXNS4LtobTwTeSrJf0VvmT7e4wgXByq tJt5/AvfBu/8/Wy9gbiRg45BEt6gYC8JqYoAv34SO28VdKyUiIgpk7/y6Qaz5LH4 QITi01u4Lasvp4ZHyw4+CNl/ltkpn992uCNufDVOarz+48Zm6V1dnj6khyBRjSfr e+zd2bdim4LF5TDzOOlyqK2aQ/1qu9dSZjgzqVxJN2+UmUA6VcbydATpL4Ay0cbk OJVI0juL8sCMEk0QlZ9NWcexvYUOuB4= -----END CERTIFICATE-----Generated at Mon Nov 25 06:05:06 2024 by rpki-client on console-fra.rpki-client.org