$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft File: UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft (raw, json) Hash identifier: leET4+XIKWgUW50dGUY1O3T/M6CmnmWvpGw6RF9PSBU= Subject key identifier: A6:0E:4A:51:94:BD:8E:02:37:F4:FA:D9:D9:AA:55:4E:3B:9D:0A:D3 Authority key identifier: 52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 Certificate issuer: /CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft Manifest number: A1 Signing time: Thu 21 Nov 2024 04:22:46 +0000 Manifest this update: Thu 21 Nov 2024 04:22:46 +0000 Manifest next update: Thu 28 Nov 2024 04:22:46 +0000 Files and hashes: 1: UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl (hash: h1+/wwgdIVcGzx2gT1Oip5mhJ2NqPQv1wP4F07FJ2b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Validity Not Before: Nov 21 04:22:46 2024 GMT Not After : Nov 28 04:22:46 2024 GMT Subject: CN=673eb596-079d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:25:b9:6b:02:ca:18:a1:5d:fe:31:bd:98: 36:7c:e4:0d:46:37:2d:df:d1:aa:14:91:6f:ca:dc: dc:86:01:9c:46:fc:e6:d4:a4:00:54:15:82:ce:95: 36:2c:ca:a4:66:99:dd:af:53:c9:db:c5:df:f7:70: c4:78:9e:de:df:0e:26:62:a9:cc:bc:8a:d6:4c:c5: 33:89:4c:b0:98:21:5a:7c:17:78:4c:26:fa:41:2f: 22:92:4c:62:86:a3:1f:80:2f:59:3c:da:3f:10:36: 76:90:6c:aa:44:2b:14:a6:cf:90:fe:af:4e:ca:f7: de:a9:83:2a:0c:8f:9f:d2:59:15:75:f0:e0:0a:7b: a0:26:17:09:12:dc:74:a2:ea:7a:82:a6:73:62:3c: f4:01:d7:06:db:93:3c:b8:7d:0a:7d:e5:b6:c6:59: 53:53:2a:78:e3:c9:84:be:74:c1:73:9c:35:9b:1d: a7:5c:1b:1b:13:cf:3d:5c:e5:59:c6:2a:79:57:d1: 30:14:4b:71:15:c5:4b:b3:2c:c9:c1:5b:07:59:28: ca:b3:6c:fa:1e:a8:a1:32:f3:84:6f:88:c4:a0:31: 3a:f4:e0:7b:4c:60:30:cd:09:39:d7:67:83:1f:2b: 30:eb:46:25:c5:3e:0f:e2:86:0d:3a:30:db:a7:dc: cd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0E:4A:51:94:BD:8E:02:37:F4:FA:D9:D9:AA:55:4E:3B:9D:0A:D3 X509v3 Authority Key Identifier: keyid:52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c7:16:dd:e0:e3:f4:4b:a1:ea:ef:16:3c:44:81:cd:f5:63: 80:7e:6f:74:31:08:59:de:41:28:c8:de:85:5e:48:4f:45:94: c4:41:d3:f7:fa:d4:c2:30:1d:b8:e6:9e:1c:12:f9:d4:44:26: 3f:4a:51:dc:93:a1:6b:39:93:e0:3a:c4:f1:e7:cf:3b:88:d4: e0:fd:5a:fd:64:50:e5:87:d4:a7:48:e4:eb:f3:fb:f9:46:b9: f1:84:dc:6e:8f:76:4b:7e:f7:2c:f8:80:2c:bd:68:e9:df:72: 14:d3:e5:99:d7:40:b4:51:e6:c1:3a:3c:bc:4d:e0:7d:cf:7d: ae:cf:7e:38:d2:7c:05:b3:d9:01:46:71:d8:97:00:b4:09:6b: 80:05:0d:98:f9:1f:3a:2d:5f:c4:37:e8:5c:bc:0a:cc:9b:86: 0f:54:02:08:44:83:d6:19:4f:20:b4:49:77:b2:c7:6a:ef:8d: ae:bc:87:fc:f7:e6:73:d2:c4:2b:66:b3:03:7a:1c:38:1f:58: ba:d9:b5:f9:af:88:8b:d2:8f:1e:1d:30:cf:c8:e7:6e:ab:f5: be:87:7d:f3:a1:8a:90:51:62:4e:cf:f8:df:d6:40:fe:90:33: 58:d5:44:e5:b1:3a:a8:aa:95:7e:17:c5:d8:67:e6:2e:fd:f9: b0:06:0c:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzMEMxMTAvBgNVBAUTKDUyQjNFODNCMTYyMUFGQjNEQ0NGMEFDRjY3RjI3RUUw QjFENkM4MzYwHhcNMjQxMTIxMDQyMjQ2WhcNMjQxMTI4MDQyMjQ2WjAYMRYwFAYD VQQDEw02NzNlYjU5Ni0wNzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMEluWsCyhihXf4xvZg2fOQNRjct39GqFJFvytzchgGcRvzm1KQAVBWCzpU2 LMqkZpndr1PJ28Xf93DEeJ7e3w4mYqnMvIrWTMUziUywmCFafBd4TCb6QS8ikkxi hqMfgC9ZPNo/EDZ2kGyqRCsUps+Q/q9OyvfeqYMqDI+f0lkVdfDgCnugJhcJEtx0 oup6gqZzYjz0AdcG25M8uH0KfeW2xllTUyp448mEvnTBc5w1mx2nXBsbE889XOVZ xip5V9EwFEtxFcVLsyzJwVsHWSjKs2z6HqihMvOEb4jEoDE69OB7TGAwzQk512eD Hysw60YlxT4P4oYNOjDbp9zNtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYOSlGU vY4CN/T62dmqVU47nQrTMB8GA1UdIwQYMBaAFFKz6DsWIa+z3M8Kz2fyfuCx1sg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMwQy85QTg3NTQzQUIw NUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3UGN6d3JQWl9KLTRMSFd5 RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyUG9PeFlocjdQY3p3clBaX0otNExIV3lEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjMwQy85QTg3NTQzQUIwNUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3 UGN6d3JQWl9KLTRMSFd5RFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApxxbd4OP0S6Hq7xY8RIHN9WOAfm90MQhZ3kEoyN6FXkhPRZTEQdP3 +tTCMB245p4cEvnURCY/SlHck6FrOZPgOsTx5887iNTg/Vr9ZFDlh9SnSOTr8/v5 RrnxhNxuj3ZLfvcs+IAsvWjp33IU0+WZ10C0UebBOjy8TeB9z32uz3440nwFs9kB RnHYlwC0CWuABQ2Y+R86LV/EN+hcvArMm4YPVAIIRIPWGU8gtEl3ssdq742uvIf8 9+Zz0sQrZrMDehw4H1i62bX5r4iL0o8eHTDPyOduq/W+h33zoYqQUWJOz/jf1kD+ kDNY1UTlsTqoqpV+F8XYZ+Yu/fmwBgyl -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:58 2024 by rpki-client on console-fra.rpki-client.org