$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json) Hash identifier: 4fwXti3xYea9ZFTZpcXT3wdzrq+zhbmmTcfkCAtyWho= Subject key identifier: 1C:DE:27:7F:92:32:E1:30:62:C9:03:6A:12:0B:B6:09:68:B5:73:18 Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Certificate serial: 342B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft Manifest number: 342B Signing time: Fri 22 Nov 2024 15:14:09 +0000 Manifest this update: Fri 22 Nov 2024 15:14:09 +0000 Manifest next update: Fri 29 Nov 2024 15:14:09 +0000 Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: O6eFrpyxfPnyU5qzprldafTnJN/lv2aCsJgTRX1q49c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13355 (0x342b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Validity Not Before: Nov 22 15:14:09 2024 GMT Not After : Nov 29 15:14:09 2024 GMT Subject: CN=67409fc1-2850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:45:62:34:fb:aa:84:c1:74:d0:b8:8e:82:2d: e1:d7:21:3f:5d:0c:35:08:b9:7d:b2:d2:fe:19:a5: 1e:cf:50:82:10:4d:4e:af:89:66:ef:26:8c:fc:e9: 42:90:96:57:fa:13:be:0e:b3:ad:e2:db:b4:6d:0c: 6d:3a:ba:c1:9e:98:5d:a8:bc:ff:cc:96:68:4a:ae: e9:9e:23:01:e6:de:8f:a2:a0:3b:8b:33:85:47:ae: d3:3e:6c:23:54:f2:38:5c:c7:44:ae:fb:8b:6f:f7: 03:4d:27:6f:3c:60:46:c0:95:8f:c6:9d:d1:26:83: d2:12:85:bf:49:da:db:8d:75:60:80:b8:70:2b:7a: 47:89:69:a6:6f:95:3c:75:b9:e4:77:74:79:c3:d2: b6:c8:cf:a9:23:69:aa:8a:8f:ad:68:81:a5:02:8d: d0:8f:51:55:e1:50:46:4c:87:eb:0c:a4:10:a9:24: 1f:78:d2:2f:e4:23:db:4b:ce:da:71:48:da:e9:10: 9c:1f:60:9e:66:5f:5e:e0:1e:a9:49:13:db:5f:5f: bc:a8:d6:f0:82:03:d0:38:88:64:04:ef:bf:52:4a: 73:92:b5:d5:81:9d:39:02:ea:40:4c:a3:2a:c9:34: 9c:7a:c2:7e:94:2d:58:c1:1b:2b:8a:1c:1c:79:d0: 0b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DE:27:7F:92:32:E1:30:62:C9:03:6A:12:0B:B6:09:68:B5:73:18 X509v3 Authority Key Identifier: keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e3:78:d9:01:a1:62:dc:01:7b:e4:c9:1b:e2:1b:43:70:5c: 85:11:be:68:ff:b0:c7:d7:6c:82:cb:c1:ec:3b:15:e0:f0:b7: 85:d3:78:50:26:9e:34:cb:4d:98:04:3b:95:82:d3:96:7e:e7: 5b:0c:a8:20:0a:69:83:c8:a6:0f:0d:dd:0a:24:f7:61:18:e3: fb:ee:2d:24:b9:a6:29:ab:47:39:ae:a9:6c:d5:a0:ed:4c:85: 8a:9f:19:77:4f:c4:c9:54:33:32:44:60:3c:14:e7:63:a3:62: bb:5e:9d:71:73:dc:f0:a6:82:f6:66:97:5a:53:b2:db:7c:9f: 98:2d:5b:f3:b4:db:37:50:2b:8c:54:b9:63:40:d6:88:1c:7b: 13:33:0a:87:c1:0f:71:83:0d:a6:0b:6c:4e:75:70:52:37:1f: 59:b7:fa:1e:a9:fb:8e:8f:10:36:74:bb:21:ed:97:d8:64:47: cf:37:84:d6:81:c2:fd:43:70:0a:45:76:0a:48:6a:b7:69:cd: d0:a5:63:87:b6:b5:89:04:e4:ea:2a:52:f8:07:29:2a:ff:d8: 04:24:90:34:1b:04:ae:7e:78:41:6c:48:c4:7f:22:a0:b7:55: c3:a9:b0:ce:6d:90:b5:9b:79:91:2e:30:46:1f:a8:63:34:fa: f5:02:5d:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0MDU1NTI0QjQ0 MkZCM0Q0M0IwHhcNMjQxMTIyMTUxNDA5WhcNMjQxMTI5MTUxNDA5WjAYMRYwFAYD VQQDEw02NzQwOWZjMS0yODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EViNPuqhMF00LiOgi3h1yE/XQw1CLl9stL+GaUez1CCEE1Or4lm7yaM/OlC kJZX+hO+DrOt4tu0bQxtOrrBnphdqLz/zJZoSq7pniMB5t6PoqA7izOFR67TPmwj VPI4XMdErvuLb/cDTSdvPGBGwJWPxp3RJoPSEoW/SdrbjXVggLhwK3pHiWmmb5U8 dbnkd3R5w9K2yM+pI2mqio+taIGlAo3Qj1FV4VBGTIfrDKQQqSQfeNIv5CPbS87a cUja6RCcH2CeZl9e4B6pSRPbX1+8qNbwggPQOIhkBO+/UkpzkrXVgZ05AupATKMq yTScesJ+lC1YwRsrihwcedALUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzeJ3+S MuEwYskDahILtglotXMYMB8GA1UdIwQYMBaAFOxOB5NUtk4FR+ufQFVSS0Qvs9Q7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9DODQ4Q0U2NDFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRnVkg2NTlBVlZKTFJDLXox RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFNEhrMVMyVGdWSDY1OUFWVkpMUkMtejFEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRn Vkg2NTlBVlZKTFJDLXoxRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb43jZAaFi3AF75Mkb4htDcFyFEb5o/7DH12yCy8HsOxXg8LeF03hQ Jp40y02YBDuVgtOWfudbDKggCmmDyKYPDd0KJPdhGOP77i0kuaYpq0c5rqls1aDt TIWKnxl3T8TJVDMyRGA8FOdjo2K7Xp1xc9zwpoL2ZpdaU7LbfJ+YLVvztNs3UCuM VLljQNaIHHsTMwqHwQ9xgw2mC2xOdXBSNx9Zt/oeqfuOjxA2dLsh7ZfYZEfPN4TW gcL9Q3AKRXYKSGq3ac3QpWOHtrWJBOTqKlL4Bykq/9gEJJA0GwSufnhBbEjEfyKg t1XDqbDObZC1m3mRLjBGH6hjNPr1Al3b -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:45 2024 by rpki-client on console-fra.rpki-client.org