$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft File: rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft (raw, json) Hash identifier: Ikpdvh1zb/3XI0Q1S5j7n3t0XYjcp48jHT8oufNj+v8= Subject key identifier: BA:C4:EB:5A:A6:45:3E:43:18:CA:80:27:87:6C:17:96:2F:38:BE:17 Authority key identifier: AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 Certificate issuer: /CN=A91580A1/serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Certificate serial: 0AE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft Manifest number: 127C Signing time: Fri 22 Nov 2024 19:06:49 +0000 Manifest this update: Fri 22 Nov 2024 19:06:48 +0000 Manifest next update: Fri 29 Nov 2024 19:06:48 +0000 Files and hashes: 1: rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl (hash: 83oQAdwYEpmMp39Nr9Fq7mHkHsPzjM/alm8PeCqARNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2791 (0xae7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580A1/serialNumber=AC5F6FEF08B22EF5FF6473DB3D56C8EB26E55038 Validity Not Before: Nov 22 19:06:48 2024 GMT Not After : Nov 29 19:06:48 2024 GMT Subject: CN=6740d648-60cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:d0:b1:06:0c:9e:bc:4c:0a:f6:7d:a5:f5: 1e:57:68:c5:0b:8d:be:3f:df:74:dd:33:80:c0:20: 89:a0:b9:34:00:66:2a:94:19:22:cf:98:29:b3:d4: fc:b6:ec:36:af:ff:47:f0:b2:a0:89:5f:ad:3a:43: f9:52:73:b6:ad:21:68:5f:d1:da:23:9a:93:26:e1: 0f:51:66:03:37:13:d8:9d:89:83:f0:41:a4:97:1a: 41:d6:65:15:f8:12:85:84:ac:d7:6e:aa:98:76:91: 9c:93:78:41:29:45:89:9d:ea:16:07:07:d8:69:94: 77:2e:1f:f5:a5:f2:05:e0:fb:10:94:07:32:ce:70: 36:d6:32:cc:5f:5c:8a:a9:d8:db:1e:b6:cc:94:40: c9:0b:67:40:c7:57:be:98:4c:e7:d9:35:4a:7c:91: b7:41:1b:ab:6b:cb:20:bc:88:70:e6:3c:67:34:49: e1:f7:9d:a4:ca:b1:87:60:ec:31:42:c9:63:f7:32: 89:1e:02:e8:bb:0d:6f:b2:11:8e:ff:c2:8e:f5:f1: 6d:20:d7:98:99:c6:6d:e8:22:a7:ba:00:60:ec:0d: fe:67:5c:da:5f:b4:10:42:7f:34:41:04:1c:30:bb: 59:e9:84:21:6e:fe:27:c2:b9:75:e7:db:09:d1:d5: ed:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C4:EB:5A:A6:45:3E:43:18:CA:80:27:87:6C:17:96:2F:38:BE:17 X509v3 Authority Key Identifier: keyid:AC:5F:6F:EF:08:B2:2E:F5:FF:64:73:DB:3D:56:C8:EB:26:E5:50:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rF9v7wiyLvX_ZHPbPVbI6yblUDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/rF9v7wiyLvX_ZHPbPVbI6yblUDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e7:c8:b7:01:52:2e:57:76:44:3e:26:19:7e:c4:a7:16:e8: 6c:ca:3e:5c:c7:b0:89:79:52:c2:f5:15:65:45:1a:60:75:78: f6:a6:95:31:b1:33:c5:1b:b5:75:c4:83:14:27:c3:1f:4d:46: 8e:ee:63:38:16:62:56:c3:6d:91:91:8e:56:fb:20:ea:e8:6b: 56:98:99:c6:05:2d:1c:22:29:6f:50:94:7f:a1:8f:e9:f4:7e: 3d:2b:15:ac:63:9a:6f:61:97:9d:74:2c:a2:07:06:37:cb:2d: 04:62:77:d4:19:09:aa:1f:06:3a:44:c9:6a:27:3c:b0:68:e7: 88:4e:07:8c:96:95:51:d7:14:11:3f:28:65:38:5b:f0:91:88: 99:4b:91:d9:76:fc:3f:98:d0:aa:98:b4:9b:5a:4e:fc:9b:25: 37:ec:56:85:9b:ce:c0:20:d2:4a:c8:1f:6b:6e:9f:84:ef:46: 86:d3:b7:07:7a:d2:20:2f:a1:14:73:d5:f4:26:3b:d8:a0:ee: 9e:f5:8b:92:0e:84:76:09:ba:81:10:fd:5e:42:b2:d4:5b:08: ab:ad:aa:5c:7d:89:d9:1b:62:15:58:00:96:5c:96:3d:d7:e0: 7a:65:a5:4a:31:3b:17:b6:4f:ca:b9:08:ca:38:7f:e7:b0:76: 44:0b:c0:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwQTExMTAvBgNVBAUTKEFDNUY2RkVGMDhCMjJFRjVGRjY0NzNEQjNENTZDOEVC MjZFNTUwMzgwHhcNMjQxMTIyMTkwNjQ4WhcNMjQxMTI5MTkwNjQ4WjAYMRYwFAYD VQQDEw02NzQwZDY0OC02MGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIjQsQYMnrxMCvZ9pfUeV2jFC42+P9903TOAwCCJoLk0AGYqlBkiz5gps9T8 tuw2r/9H8LKgiV+tOkP5UnO2rSFoX9HaI5qTJuEPUWYDNxPYnYmD8EGklxpB1mUV +BKFhKzXbqqYdpGck3hBKUWJneoWBwfYaZR3Lh/1pfIF4PsQlAcyznA21jLMX1yK qdjbHrbMlEDJC2dAx1e+mEzn2TVKfJG3QRura8sgvIhw5jxnNEnh952kyrGHYOwx Qslj9zKJHgLouw1vshGO/8KO9fFtINeYmcZt6CKnugBg7A3+Z1zaX7QQQn80QQQc MLtZ6YQhbv4nwrl159sJ0dXtAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrE61qm RT5DGMqAJ4dsF5YvOL4XMB8GA1UdIwQYMBaAFKxfb+8Isi71/2Rz2z1WyOsm5VA4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3 NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2WF9aSFBiUFZiSTZ5YmxV RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGOXY3d2l5THZYX1pIUGJQVmJJNnlibFVEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBBMS85MjU2MEE2QTM3NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9yRjl2N3dpeUx2 WF9aSFBiUFZiSTZ5YmxVRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF58i3AVIuV3ZEPiYZfsSnFuhsyj5cx7CJeVLC9RVlRRpgdXj2ppUx sTPFG7V1xIMUJ8MfTUaO7mM4FmJWw22RkY5W+yDq6GtWmJnGBS0cIilvUJR/oY/p 9H49KxWsY5pvYZeddCyiBwY3yy0EYnfUGQmqHwY6RMlqJzywaOeITgeMlpVR1xQR PyhlOFvwkYiZS5HZdvw/mNCqmLSbWk78myU37FaFm87AINJKyB9rbp+E70aG07cH etIgL6EUc9X0JjvYoO6e9YuSDoR2CbqBEP1eQrLUWwirrapcfYnZG2IVWACWXJY9 1+B6ZaVKMTsXtk/KuQjKOH/nsHZEC8Al -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org