$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft File: l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json) Hash identifier: 3+udl/S9MlQof6gFwvP+3sD3Qx7ueZqGeVOE0yuRyhk= Subject key identifier: D8:E4:23:2F:FC:BC:BE:AA:A7:01:31:4C:AB:AC:64:A8:BE:C3:4F:AA Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 Certificate issuer: /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft Manifest number: 0C Signing time: Mon 25 Nov 2024 06:02:26 +0000 Manifest this update: Mon 25 Nov 2024 06:02:25 +0000 Manifest next update: Mon 02 Dec 2024 06:02:25 +0000 Files and hashes: 1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: f3YfxEChTKl5AzIZg9oiDputSZ0pgbfRowGHJlDPCLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Validity Not Before: Nov 25 06:02:25 2024 GMT Not After : Dec 2 06:02:25 2024 GMT Subject: CN=674412f2-cc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:68:71:c9:5e:3d:13:56:5e:9e:93:76:dc:6b: f3:a0:39:05:61:95:61:3d:53:0e:82:3a:8b:65:eb: 28:f4:86:f3:f9:18:ad:58:39:92:c3:13:cc:19:50: dc:a6:70:b2:87:40:ca:c6:da:89:41:f5:8a:f2:99: 85:c8:99:f3:5b:7a:bd:80:70:54:5e:d4:cf:f7:c2: 94:03:68:9e:30:7f:84:e7:94:8a:ec:9b:a7:c2:2d: 2c:77:dd:e3:cd:1c:7d:7f:67:3e:40:61:f0:59:83: a5:1a:96:f3:ac:1e:a3:b4:cc:2e:f8:2e:88:fc:ac: 4a:dc:8e:6b:82:63:f2:ac:17:78:ee:0c:cb:ed:ab: 12:bb:5f:a9:ec:19:6b:da:e8:b9:fd:81:b6:61:43: b8:cb:4b:56:e4:73:b8:9b:36:29:60:6c:a9:1f:56: 61:48:7b:86:0c:c9:a4:e4:ef:8e:7c:96:60:46:f3: a3:04:63:a0:f3:3b:e0:91:4a:41:b7:ac:92:10:c0: 1e:eb:b4:fe:eb:7c:a3:61:5d:5d:ef:fe:55:c1:d9: 26:44:35:1b:9f:f7:96:2b:b2:ef:ae:09:02:cf:a4: 93:bc:16:4f:3c:83:de:b3:91:60:cc:98:0b:0f:2f: 1b:cb:5f:34:60:90:5b:8f:c4:ea:d1:5b:d4:af:80: 7f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E4:23:2F:FC:BC:BE:AA:A7:01:31:4C:AB:AC:64:A8:BE:C3:4F:AA X509v3 Authority Key Identifier: keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2d:6c:4b:2a:1d:50:71:5a:42:b7:50:8f:7d:e6:7e:37:b3: 16:16:3a:d5:e5:1f:4c:3e:5b:f3:25:7d:15:5d:cc:a7:d9:ff: 19:c1:4e:22:ee:1e:9d:18:50:1e:f9:5f:57:b9:8b:d6:63:5e: 80:18:44:e3:15:95:06:33:bd:63:58:a6:4a:af:e5:30:d8:60: c0:38:39:00:07:9b:9a:e1:35:94:bf:a3:24:6a:20:27:6e:52: 51:23:ef:45:49:be:71:c2:fd:db:6d:43:0b:48:c8:3b:48:a1: b5:a6:82:f3:21:ab:ab:6e:76:cf:cd:df:ca:1b:1e:19:93:1b: 7c:5a:a2:f0:1a:1d:29:4f:75:09:01:d5:ad:40:42:5e:34:0a: 60:70:2f:0f:6e:af:ae:d9:ab:d2:41:2d:f2:9b:2a:0b:97:97: 6c:e4:24:aa:c9:dc:84:25:db:1a:59:cc:b2:a2:09:2a:18:e3: cf:cc:89:b9:d3:86:67:5d:15:f9:0e:c6:37:a2:c4:de:3c:3c: 8c:1f:65:7a:16:ce:39:26:88:4a:ac:f6:62:3f:a8:44:74:7c: 0d:4f:82:98:bd:6f:36:45:49:ae:3b:d3:19:b3:1a:dd:9d:67: 6b:a0:4e:eb:a8:1c:2b:e2:13:54:17:a3:5a:b2:96:7e:40:2c: 6a:47:de:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDY5QTExMC8GA1UEBRMoOTc0QjRBNTY1NDg2RTA0OEQwQzE3Njk4RDcyMjc2NzBD RjNDOTlBNzAeFw0yNDExMjUwNjAyMjVaFw0yNDEyMDIwNjAyMjVaMBgxFjAUBgNV BAMTDTY3NDQxMmYyLWNjMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvaHHJXj0TVl6ek3bca/OgOQVhlWE9Uw6COotl6yj0hvP5GK1YOZLDE8wZUNym cLKHQMrG2olB9YrymYXImfNber2AcFRe1M/3wpQDaJ4wf4TnlIrsm6fCLSx33ePN HH1/Zz5AYfBZg6UalvOsHqO0zC74Loj8rErcjmuCY/KsF3juDMvtqxK7X6nsGWva 6Ln9gbZhQ7jLS1bkc7ibNilgbKkfVmFIe4YMyaTk7458lmBG86MEY6DzO+CRSkG3 rJIQwB7rtP7rfKNhXV3v/lXB2SZENRuf95Yrsu+uCQLPpJO8Fk88g96zkWDMmAsP LxvLXzRgkFuPxOrRW9SvgH8TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2OQjL/y8 vqqnATFMq6xkqL7DT6owHwYDVR0jBBgwFoAUl0tKVlSG4EjQwXaY1yJ2cM88macw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwNjlBLzM2RDVENjJDOUJG MDExRUY4MUM5MDI2N0M0RjlBRTAyL2wwdEtWbFNHNEVqUXdYYVkxeUoyY004OG1h Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDB0S1ZsU0c0RWpRd1hhWTF5SjJjTTg4bWFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw NjlBLzM2RDVENjJDOUJGMDExRUY4MUM5MDI2N0M0RjlBRTAyL2wwdEtWbFNHNEVq UXdYYVkxeUoyY004OG1hYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHstbEsqHVBxWkK3UI995n43sxYWOtXlH0w+W/MlfRVdzKfZ/xnBTiLu Hp0YUB75X1e5i9ZjXoAYROMVlQYzvWNYpkqv5TDYYMA4OQAHm5rhNZS/oyRqICdu UlEj70VJvnHC/dttQwtIyDtIobWmgvMhq6tuds/N38obHhmTG3xaovAaHSlPdQkB 1a1AQl40CmBwLw9ur67Zq9JBLfKbKguXl2zkJKrJ3IQl2xpZzLKiCSoY48/MibnT hmddFfkOxjeixN48PIwfZXoWzjkmiEqs9mI/qER0fA1Pgpi9bzZFSa470xmzGt2d Z2ugTuuoHCviE1QXo1qyln5ALGpH3gc= -----END CERTIFICATE-----Generated at Mon Nov 25 07:14:54 2024 by rpki-client on console-fra.rpki-client.org