$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft File: aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json) Hash identifier: 0t1tFW2jyaCJ0djWbthdGfFmGGxCvVnuTLtk2AP75CU= Subject key identifier: 04:42:C4:B7:FA:38:DE:14:72:55:1F:BF:10:63:0B:ED:0E:64:41:DC Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Certificate serial: 05AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft Manifest number: 066F Signing time: Fri 22 Nov 2024 22:52:28 +0000 Manifest this update: Fri 22 Nov 2024 22:52:28 +0000 Manifest next update: Fri 29 Nov 2024 22:52:28 +0000 Files and hashes: 1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: /eZa+L3S/z91oWKpulRQmPAZCbaviLuEAMsJwZo15E8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1454 (0x5ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Validity Not Before: Nov 22 22:52:28 2024 GMT Not After : Nov 29 22:52:28 2024 GMT Subject: CN=67410b2c-d3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8e:4b:1d:91:87:ec:39:7b:75:fb:bf:61:bc: dd:5c:c3:bc:4f:3e:3d:bb:85:ab:ff:78:1a:d2:13: 3e:a0:8e:96:59:0c:3a:80:4e:0a:01:f5:47:4b:08: 3f:14:04:4d:aa:aa:6c:01:7a:6a:39:fc:84:ee:cd: 9c:96:2d:af:fd:83:7f:56:54:75:2f:f7:c9:47:9f: 9d:d5:bd:1a:ce:a9:9a:92:4b:31:db:11:01:35:f2: cb:10:65:bf:e0:0d:74:61:41:21:a7:2a:59:12:a6: 32:53:e3:17:ab:80:81:3c:b6:dc:e6:30:b1:43:e4: d9:9a:ce:92:0e:8e:49:f5:b7:c9:6c:c7:1a:a8:16: a3:ac:a2:58:bd:a0:6c:57:c8:15:d5:65:47:5b:0e: dd:a9:d9:44:e6:cc:13:75:fe:d5:c3:11:f2:eb:71: 62:8e:0b:fe:8b:6c:6b:de:c7:5d:85:6c:3b:0f:e6: c8:14:10:91:23:1b:cc:30:d2:82:aa:0b:71:be:fc: 36:44:c1:56:5e:0d:72:0d:8e:5f:3d:cd:b7:59:dc: 4c:0e:61:c5:e3:15:a8:4c:98:41:80:65:f2:3b:a1: 7d:34:f9:f2:71:c4:8a:1f:d3:e0:d3:06:7f:ab:fc: 98:0e:5f:9d:1b:b7:2a:d4:6f:2a:2a:14:fb:ec:87: b5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:42:C4:B7:FA:38:DE:14:72:55:1F:BF:10:63:0B:ED:0E:64:41:DC X509v3 Authority Key Identifier: keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d6:41:23:34:34:8c:f3:9b:e5:b5:5f:ba:03:d5:cd:84:0f: 2a:91:3b:1b:74:38:a8:e9:ae:f8:6e:f4:4d:35:31:ad:42:34: c4:19:17:ec:a6:10:05:8a:34:f9:ec:f4:79:f1:d1:b5:4c:6f: 71:cf:ec:01:4b:17:fe:0d:a0:43:1a:d8:21:f1:e0:82:a4:a5: 8a:50:e6:62:50:fb:06:a6:26:1e:38:c3:82:63:c0:eb:00:71: af:1c:f9:c1:19:05:c7:09:d0:98:1d:9f:09:89:cd:49:0e:1a: 53:60:a0:38:c2:b0:2f:7e:d1:7d:ba:5b:a2:44:68:8c:6b:d0: 57:28:5c:a5:6f:60:56:e9:97:5f:05:b5:8c:33:84:3b:51:6f: a6:e2:41:42:a9:42:2d:0e:df:db:16:45:0f:05:cb:08:2d:88: b5:45:41:50:68:34:11:ec:49:37:5a:79:7c:ab:de:c4:d7:fb: 69:4b:85:c8:05:e2:86:cc:a4:ec:72:1e:b2:d9:b6:5d:e9:fc: 52:51:ad:08:ec:83:27:4a:ba:13:a3:50:a6:06:0a:1f:fa:97: d2:50:a6:5e:60:08:de:16:06:e9:8e:81:33:eb:af:6c:6c:4e: 05:d2:42:66:13:87:a7:1d:b0:c4:05:59:51:70:f7:f6:07:3b: 4f:fd:97:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKDY4ODBEMzIzQUEzRjJENTE0NjA1MDY0MEYzMjFBNjEy OTAwMERGMDMwHhcNMjQxMTIyMjI1MjI4WhcNMjQxMTI5MjI1MjI4WjAYMRYwFAYD VQQDEw02NzQxMGIyYy1kM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA245LHZGH7Dl7dfu/YbzdXMO8Tz49u4Wr/3ga0hM+oI6WWQw6gE4KAfVHSwg/ FARNqqpsAXpqOfyE7s2cli2v/YN/VlR1L/fJR5+d1b0azqmakksx2xEBNfLLEGW/ 4A10YUEhpypZEqYyU+MXq4CBPLbc5jCxQ+TZms6SDo5J9bfJbMcaqBajrKJYvaBs V8gV1WVHWw7dqdlE5swTdf7VwxHy63Fijgv+i2xr3sddhWw7D+bIFBCRIxvMMNKC qgtxvvw2RMFWXg1yDY5fPc23WdxMDmHF4xWoTJhBgGXyO6F9NPnyccSKH9Pg0wZ/ q/yYDl+dG7cq1G8qKhT77Ie1QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARCxLf6 ON4UclUfvxBjC+0OZEHcMB8GA1UdIwQYMBaAFGiA0yOqPy1RRgUGQPMhphKQAN8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xWRkdCUVpBOHlHbUVwQUEz d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJRFRJNm9fTFZGR0JRWkE4eUdtRXBBQTN3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xW RkdCUVpBOHlHbUVwQUEzd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA61kEjNDSM85vltV+6A9XNhA8qkTsbdDio6a74bvRNNTGtQjTEGRfs phAFijT57PR58dG1TG9xz+wBSxf+DaBDGtgh8eCCpKWKUOZiUPsGpiYeOMOCY8Dr AHGvHPnBGQXHCdCYHZ8Jic1JDhpTYKA4wrAvftF9uluiRGiMa9BXKFylb2BW6Zdf BbWMM4Q7UW+m4kFCqUItDt/bFkUPBcsILYi1RUFQaDQR7Ek3Wnl8q97E1/tpS4XI BeKGzKTsch6y2bZd6fxSUa0I7IMnSroTo1CmBgof+pfSUKZeYAjeFgbpjoEz669s bE4F0kJmE4enHbDEBVlRcPf2BztP/ZeZ -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:40 2024 by rpki-client on console-ams.rpki-client.org