$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft File: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft (raw, json) Hash identifier: 4pzvhKaD2gtXg7pWUt0XcNy4zBfExfmzZJEdKKO4xDA= Subject key identifier: 1A:B2:B0:B4:F5:30:87:80:07:31:DE:00:9A:DF:FE:A7:42:11:FF:E0 Authority key identifier: 78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4 Certificate issuer: /CN=A9163824/serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4 Certificate serial: 25A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft Manifest number: 2C3E Signing time: Fri 22 Nov 2024 15:43:29 +0000 Manifest this update: Fri 22 Nov 2024 15:43:29 +0000 Manifest next update: Fri 29 Nov 2024 15:43:29 +0000 Files and hashes: 1: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl (hash: kMDrc/i+k5gBTRu7skLwgYH9T1V5E+eW27NAd74L0Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9636 (0x25a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163824/serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4 Validity Not Before: Nov 22 15:43:29 2024 GMT Not After : Nov 29 15:43:29 2024 GMT Subject: CN=6740a6a1-0ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6b:92:7d:91:ab:2c:40:77:5b:b9:88:7a:52: ed:92:26:da:0c:4b:13:17:89:b9:81:88:aa:eb:2e: 37:85:7c:0e:2a:d7:13:a6:ed:e3:21:4a:8c:b9:58: c1:d1:1d:b2:99:73:e0:98:d5:d3:13:f1:77:8b:7b: 43:ae:0f:f6:ed:b6:b8:1b:86:b3:4c:ca:cf:5c:fd: d4:ae:82:db:66:f5:74:c3:8f:38:89:e9:7f:b3:97: 1a:3d:d2:83:a3:ec:58:26:79:a1:dc:4c:12:13:7e: 1f:a1:90:b2:6a:30:be:2a:11:ad:57:09:17:89:6e: 73:80:a9:ff:b5:b4:ec:4e:99:f7:71:67:a9:14:a7: 3f:d1:8a:f8:3d:02:85:8a:66:24:9d:ae:3a:37:90: 28:40:03:e1:42:06:a1:85:e6:cd:94:42:e7:b8:5b: 9a:81:fe:28:15:72:ac:5b:5b:b9:58:75:b3:3d:33: 5f:c3:77:71:3f:ce:f3:cd:f3:a6:4b:44:72:08:fa: 1e:4e:52:f0:c7:26:3f:39:73:ad:44:c2:84:d4:58: 02:82:fb:fc:ee:a4:55:af:ad:bc:7f:35:4c:3c:1f: 13:95:24:36:f2:8b:1c:b7:cb:bb:28:a4:45:f3:17: 36:71:7d:09:77:3b:13:64:31:6a:4b:d2:df:f0:51: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B2:B0:B4:F5:30:87:80:07:31:DE:00:9A:DF:FE:A7:42:11:FF:E0 X509v3 Authority Key Identifier: keyid:78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:92:7a:09:90:99:93:c8:d8:01:29:0c:b7:24:77:12:16:14: 96:43:b3:e3:56:c6:98:88:8a:85:cc:88:d8:aa:f9:72:2e:4a: f1:26:bc:79:32:16:76:7f:ad:2d:ff:1e:51:02:fb:23:d5:cc: 08:9b:0e:88:fa:93:bb:7e:ed:0b:db:ca:3f:08:a9:0b:5b:da: 51:f5:fc:e3:78:ea:38:8b:1e:0e:dc:4d:e0:e1:0f:a5:bb:15: 17:b1:31:61:4c:d1:df:61:3e:0d:9d:50:bf:e0:ab:7f:25:2f: e6:01:a1:72:6c:de:77:61:b7:77:ec:01:33:7d:c3:07:4d:f1: aa:70:ac:f6:4e:e9:06:c7:39:cc:76:ca:99:c6:e5:64:85:10: 04:8b:06:5e:b0:e5:8f:27:66:9d:55:12:10:54:21:e7:38:30: e8:c7:d4:20:52:99:26:b6:7c:cf:f1:9d:14:90:3a:36:97:ce: e2:4f:4f:c4:be:a0:95:a9:96:c0:01:ae:3e:cb:f0:fa:f5:3f: b5:56:10:75:7c:a3:ab:16:6f:39:7d:32:9d:46:3b:0b:0e:a4: 11:68:0a:7b:0c:60:36:44:2e:17:8a:a4:cd:81:f5:f1:9e:45: c4:d0:6d:2e:55:df:2a:fd:c9:e7:32:4d:1d:65:0a:98:fd:aa: 3a:92:44:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4MjQxMTAvBgNVBAUTKDc4QTk5MjY3RDdFRUYxMjdGNUZCNDUyNEY3OUM1OUFG MEFCQkMxRjQwHhcNMjQxMTIyMTU0MzI5WhcNMjQxMTI5MTU0MzI5WjAYMRYwFAYD VQQDEw02NzQwYTZhMS0wZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6GuSfZGrLEB3W7mIelLtkibaDEsTF4m5gYiq6y43hXwOKtcTpu3jIUqMuVjB 0R2ymXPgmNXTE/F3i3tDrg/27ba4G4azTMrPXP3UroLbZvV0w484iel/s5caPdKD o+xYJnmh3EwSE34foZCyajC+KhGtVwkXiW5zgKn/tbTsTpn3cWepFKc/0Yr4PQKF imYkna46N5AoQAPhQgahhebNlELnuFuagf4oFXKsW1u5WHWzPTNfw3dxP87zzfOm S0RyCPoeTlLwxyY/OXOtRMKE1FgCgvv87qRVr628fzVMPB8TlSQ28osct8u7KKRF 8xc2cX0JdzsTZDFqS9Lf8FHvzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqysLT1 MIeABzHeAJrf/qdCEf/gMB8GA1UdIwQYMBaAFHipkmfX7vEn9ftFJPecWa8Ku8H0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzgyNC9CQTBFRkU1MkZE MjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9lS21TWjlmdThTZjEtMFVrOTV4WnJ3cTd3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVNaOWZ1OFNmMS0wVWs5NXhacndxN3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzgyNC9CQTBFRkU1MkZEMjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9lS21TWjlmdThT ZjEtMFVrOTV4WnJ3cTd3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGknoJkJmTyNgBKQy3JHcSFhSWQ7PjVsaYiIqFzIjYqvlyLkrxJrx5 MhZ2f60t/x5RAvsj1cwImw6I+pO7fu0L28o/CKkLW9pR9fzjeOo4ix4O3E3g4Q+l uxUXsTFhTNHfYT4NnVC/4Kt/JS/mAaFybN53Ybd37AEzfcMHTfGqcKz2TukGxznM dsqZxuVkhRAEiwZesOWPJ2adVRIQVCHnODDox9QgUpkmtnzP8Z0UkDo2l87iT0/E vqCVqZbAAa4+y/D69T+1VhB1fKOrFm85fTKdRjsLDqQRaAp7DGA2RC4XiqTNgfXx nkXE0G0uVd8q/cnnMk0dZQqY/ao6kkTx -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:47 2024 by rpki-client on console-fra.rpki-client.org