$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft File: 8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json) Hash identifier: w6qZcLxNZ8k9NTgrLpKedcf3UhiiemxPIPlLAJkEjio= Subject key identifier: 45:02:BB:39:6D:96:D2:3F:A9:5B:D4:3E:3E:99:0A:D7:E9:C8:96:BE Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 Certificate issuer: /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft Manifest number: 0216 Signing time: Thu 21 Nov 2024 01:30:09 +0000 Manifest this update: Thu 21 Nov 2024 01:30:08 +0000 Manifest next update: Thu 28 Nov 2024 01:30:08 +0000 Files and hashes: 1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: soEDCH1quQ75i9kEPtcJ5iBLa4yD4/h2xygra3d9HAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Validity Not Before: Nov 21 01:30:08 2024 GMT Not After : Nov 28 01:30:08 2024 GMT Subject: CN=673e8d20-0fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c8:a6:47:1f:3c:8e:d4:c4:fa:05:f2:d2:50: 1f:7c:f7:eb:5f:fc:5b:b0:41:9f:c0:ec:a1:3a:58: 1a:00:32:e6:b4:5f:da:14:b8:95:ea:4f:92:0a:79: 33:6d:30:68:a3:05:8b:c7:b6:b6:5a:2a:91:92:ab: 00:44:14:1d:3a:20:9f:ab:3b:9c:52:b7:90:18:2b: 07:06:47:e0:e6:16:ac:35:c2:fc:45:4d:85:5c:74: af:8d:e4:e5:30:36:9d:4e:3e:67:77:f7:27:10:76: db:29:9d:a7:c3:c9:8b:40:d1:50:41:a2:f2:52:83: e6:c1:7b:cf:4b:69:be:83:1d:b1:3b:12:40:2d:05: fe:f1:61:76:bc:47:bc:97:94:13:e9:7f:a7:ac:8c: 3d:28:a5:3e:ac:ee:1a:dc:df:24:a6:e6:ce:51:ee: 8c:b2:5e:86:c0:b7:90:6e:76:11:35:d2:6a:94:f2: 9f:c3:61:51:3a:47:58:8f:5d:6d:0e:a9:8c:04:f2: ab:a2:7d:6d:97:03:b8:60:f0:ab:d6:f6:92:18:64: 98:4d:74:12:7c:cb:ff:e4:81:ea:09:ea:bf:db:cb: f2:f2:06:55:19:29:07:2e:46:5b:7d:a7:c9:f8:ae: 16:6d:ec:ba:9b:40:ca:14:79:1b:ee:4a:37:39:39: d4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:02:BB:39:6D:96:D2:3F:A9:5B:D4:3E:3E:99:0A:D7:E9:C8:96:BE X509v3 Authority Key Identifier: keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ea:39:0e:9a:f3:d7:04:fe:3f:bf:a2:bd:b0:55:52:ab:11: 9c:b4:e9:cc:84:de:60:59:c7:ce:c2:77:87:0d:f9:76:4b:9d: ab:99:ab:24:bc:84:0b:b7:26:c4:10:90:56:41:6f:4c:f3:77: 2f:32:00:22:a0:31:1c:0e:ff:c3:61:67:a3:50:99:06:9f:9d: 71:49:4b:ee:f9:77:32:be:a5:d1:f4:d7:65:e4:de:38:7f:b5: e9:2a:76:15:59:bd:a7:4c:58:68:11:2b:5d:f0:2c:40:a6:8f: 1d:32:45:ba:cf:68:e0:b9:f3:4e:8d:93:38:ae:aa:74:95:0c: be:cc:8b:22:a6:37:bd:63:ad:c4:d3:ab:83:9d:ca:68:8a:70: e2:71:bc:2f:29:43:c5:06:be:a8:79:7d:61:ab:0b:a8:d2:02: 84:3a:51:5f:33:d6:fa:fb:a5:79:10:3f:f1:d5:e6:0c:70:40: 32:78:4c:bf:4d:c7:57:a7:65:cf:a6:fa:50:c9:a1:a8:a0:19: 0b:a0:8c:49:32:ae:79:4a:88:3b:22:50:8d:a3:0c:41:fa:d6: 3c:79:5e:b5:b3:01:75:82:a6:48:65:b0:18:94:6e:b1:36:b9: 00:7b:98:fe:0d:c8:a5:59:05:98:0e:d6:81:a5:0e:df:bf:9e: 68:bf:e9:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKEYxMTZFOTEyQTk1MDlERTRCMkQ2QjNEOTNDQkMxOEY1 MDAzNkUxNjgwHhcNMjQxMTIxMDEzMDA4WhcNMjQxMTI4MDEzMDA4WjAYMRYwFAYD VQQDEw02NzNlOGQyMC0wZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1simRx88jtTE+gXy0lAffPfrX/xbsEGfwOyhOlgaADLmtF/aFLiV6k+SCnkz bTBoowWLx7a2WiqRkqsARBQdOiCfqzucUreQGCsHBkfg5hasNcL8RU2FXHSvjeTl MDadTj5nd/cnEHbbKZ2nw8mLQNFQQaLyUoPmwXvPS2m+gx2xOxJALQX+8WF2vEe8 l5QT6X+nrIw9KKU+rO4a3N8kpubOUe6Msl6GwLeQbnYRNdJqlPKfw2FROkdYj11t DqmMBPKron1tlwO4YPCr1vaSGGSYTXQSfMv/5IHqCeq/28vy8gZVGSkHLkZbfafJ +K4Wbey6m0DKFHkb7ko3OTnUkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUCuzlt ltI/qVvUPj6ZCtfpyJa+MB8GA1UdIwQYMBaAFPEW6RKpUJ3kstaz2Ty8GPUANuFo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC84NTI3RTRCNjBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5lU3kxclBaUEx3WTlRQTI0 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSYnBFcWxRbmVTeTFyUFpQTHdZOVFBMjRXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC84NTI3RTRCNjBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5l U3kxclBaUEx3WTlRQTI0V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA6jkOmvPXBP4/v6K9sFVSqxGctOnMhN5gWcfOwneHDfl2S52rmask vIQLtybEEJBWQW9M83cvMgAioDEcDv/DYWejUJkGn51xSUvu+XcyvqXR9Ndl5N44 f7XpKnYVWb2nTFhoEStd8CxApo8dMkW6z2jgufNOjZM4rqp0lQy+zIsipje9Y63E 06uDncpoinDicbwvKUPFBr6oeX1hqwuo0gKEOlFfM9b6+6V5ED/x1eYMcEAyeEy/ TcdXp2XPpvpQyaGooBkLoIxJMq55Sog7IlCNowxB+tY8eV61swF1gqZIZbAYlG6x NrkAe5j+DcilWQWYDtaBpQ7fv55ov+n9 -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:38 2024 by rpki-client on console-ams.rpki-client.org