$ rpki-client -vvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft File: fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json) Hash identifier: ARJBK1aak9AAo2rZrYNlfJ6lkT3qf0bGywWxupQGCZQ= Subject key identifier: 54:BB:7F:A5:5F:AE:51:CB:F3:96:4A:9E:E4:6B:2E:F7:80:B0:BD:7D Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F Certificate issuer: /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Certificate serial: 341F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft Manifest number: 341E Signing time: Fri 22 Nov 2024 15:14:57 +0000 Manifest this update: Fri 22 Nov 2024 15:14:57 +0000 Manifest next update: Fri 29 Nov 2024 15:14:57 +0000 Files and hashes: 1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: S3ybj7OlrAdwg2vGLUnW3kmolfU/OUO7RIWakWzygk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13343 (0x341f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Validity Not Before: Nov 22 15:14:57 2024 GMT Not After : Nov 29 15:14:57 2024 GMT Subject: CN=67409ff1-73ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:1a:05:df:28:8a:28:c9:5f:50:55:4d:5f: 96:41:ab:44:9a:e8:08:b9:bc:9c:69:81:cd:13:28: 81:c4:8b:3d:bc:c2:f3:19:4d:b3:05:c7:61:b3:3b: c1:15:8c:5f:20:cd:3b:fe:b3:7a:b9:de:b5:dc:51: c3:76:e8:b3:76:9a:c5:dd:cc:77:00:c7:72:f2:84: 31:dc:37:bb:a5:d4:ab:80:c6:cc:00:d4:70:eb:59: 3b:99:8c:ae:a2:46:66:a1:45:d3:5e:d6:99:72:ea: 6a:36:9c:de:35:5d:59:f3:b6:8f:64:4b:1d:2c:10: 45:4b:ac:29:e6:2b:97:ed:84:ef:da:8f:e1:ff:12: d5:28:a4:cd:1f:84:e0:45:54:b0:b5:8d:e4:4d:7e: 4d:91:5f:80:ff:fa:f2:1b:19:4b:a2:e8:29:30:bb: 4f:74:34:0e:95:c4:26:5c:97:13:6d:da:21:59:0a: 9b:3c:b1:35:43:8c:ef:a3:ba:5d:b1:5f:b2:14:17: ca:21:08:bb:9c:fd:b1:3c:f5:db:bb:1e:e9:ec:0f: 8c:fd:68:0a:3f:2c:f3:26:c1:79:41:33:bb:62:a2: c0:5c:b2:ec:a5:a6:6f:08:22:31:b2:57:4a:f4:77: 01:cf:41:30:9b:14:d7:40:b9:63:a4:d2:a2:f0:2b: 36:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BB:7F:A5:5F:AE:51:CB:F3:96:4A:9E:E4:6B:2E:F7:80:B0:BD:7D X509v3 Authority Key Identifier: keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4a:bc:dd:8a:89:72:32:49:88:e3:f9:be:d7:87:bd:67:16: 10:7e:2c:6d:ff:09:0e:83:69:07:70:c3:86:00:ce:26:37:ca: 4a:b0:82:76:ca:c2:77:ac:2a:fd:40:5e:06:b1:bf:f1:6c:1d: 2d:80:f2:cf:58:4a:b0:07:70:4e:93:9a:65:aa:6b:a0:22:68: fe:4d:8d:9d:0e:53:31:f3:e2:88:54:64:cc:f8:bf:f3:44:af: 24:d3:6a:81:b6:1a:3e:c7:41:3e:12:6c:4d:da:64:bc:a0:09: 9b:01:de:dd:b9:97:c2:11:d0:c5:c7:1b:83:46:a2:78:c1:78: 29:ba:da:57:48:01:b2:12:2b:ec:24:d5:ec:6f:8e:a5:91:8b: 5a:f0:06:46:f7:43:0f:3a:b7:be:8f:a2:36:c1:32:7e:93:63: 18:29:49:41:15:ba:52:74:70:fc:cb:d7:07:db:1e:d3:b1:83: 05:8b:b6:46:01:e7:b1:9d:19:dd:af:56:1e:d9:34:9b:39:8a: 79:8c:52:21:01:c0:6c:c0:be:32:84:eb:c9:cc:18:4f:ad:78: 47:5e:47:21:98:0d:da:53:67:85:2a:0d:11:9c:5f:67:86:49: ff:bd:b1:64:ce:4a:02:99:14:ed:c4:da:81:bd:7e:2a:42:cc: 4a:fc:65:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2MTAxMTAvBgNVBAUTKDdDNzI4Qjk3MDQyOUQ0NzAwOTc5NzhBMTZFNzY3QjIx REM2RTNCMUYwHhcNMjQxMTIyMTUxNDU3WhcNMjQxMTI5MTUxNDU3WjAYMRYwFAYD VQQDEw02NzQwOWZmMS03M2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpoaBd8oiijJX1BVTV+WQatEmugIubycaYHNEyiBxIs9vMLzGU2zBcdhszvB FYxfIM07/rN6ud613FHDduizdprF3cx3AMdy8oQx3De7pdSrgMbMANRw61k7mYyu okZmoUXTXtaZcupqNpzeNV1Z87aPZEsdLBBFS6wp5iuX7YTv2o/h/xLVKKTNH4Tg RVSwtY3kTX5NkV+A//ryGxlLougpMLtPdDQOlcQmXJcTbdohWQqbPLE1Q4zvo7pd sV+yFBfKIQi7nP2xPPXbux7p7A+M/WgKPyzzJsF5QTO7YqLAXLLspaZvCCIxsldK 9HcBz0EwmxTXQLljpNKi8Cs21wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFS7f6Vf rlHL85ZKnuRrLveAsL19MB8GA1UdIwQYMBaAFHxyi5cEKdRwCXl4oW52eyHcbjsf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjYxMC80MzkzRUFFMDFE QTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFIQUplWGloYm5aN0lkeHVP eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIS0xsd1FwMUhBSmVYaWhiblo3SWR4dU94OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjYxMC80MzkzRUFFMDFEQTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFI QUplWGloYm5aN0lkeHVPeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaSrzdiolyMkmI4/m+14e9ZxYQfixt/wkOg2kHcMOGAM4mN8pKsIJ2 ysJ3rCr9QF4Gsb/xbB0tgPLPWEqwB3BOk5plqmugImj+TY2dDlMx8+KIVGTM+L/z RK8k02qBtho+x0E+EmxN2mS8oAmbAd7duZfCEdDFxxuDRqJ4wXgputpXSAGyEivs JNXsb46lkYta8AZG90MPOre+j6I2wTJ+k2MYKUlBFbpSdHD8y9cH2x7TsYMFi7ZG AeexnRndr1Ye2TSbOYp5jFIhAcBswL4yhOvJzBhPrXhHXkchmA3aU2eFKg0RnF9n hkn/vbFkzkoCmRTtxNqBvX4qQsxK/GU3 -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:19 2024 by rpki-client on console-ams.rpki-client.org