$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json) Hash identifier: RlXTr1GgxeXNKIE7sh3XH3c3V2NPGGUfISJO1sO+wXE= Subject key identifier: C6:09:73:51:04:51:F3:B3:C8:3A:E3:FA:70:91:AF:97:23:B4:FF:A1 Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft Manifest number: 018A Signing time: Sat 23 Nov 2024 01:55:14 +0000 Manifest this update: Sat 23 Nov 2024 01:55:14 +0000 Manifest next update: Sat 30 Nov 2024 01:55:14 +0000 Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: 5A+Fq2s8tRpNIwEychrt+nstuPbSiG2YapQQXzSEmX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Validity Not Before: Nov 23 01:55:14 2024 GMT Not After : Nov 30 01:55:14 2024 GMT Subject: CN=67413602-43f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:1f:bc:e1:01:25:07:e6:b0:41:7b:d1:0d: 17:16:5c:c7:b3:f3:91:03:2d:1c:eb:95:4f:e1:e7: 38:2a:67:be:f9:ec:0c:80:df:f7:e4:a9:9f:4e:9a: 16:7d:a5:85:00:9e:0a:14:c8:c8:02:33:80:5f:41: 35:e5:9e:02:91:2f:31:b2:4f:6c:09:ed:42:92:4b: be:f1:f8:5b:13:8f:66:70:d8:51:12:99:05:46:b9: 81:aa:32:bf:7e:8f:ef:86:e2:73:76:5a:a4:50:d8: d6:12:e2:75:cf:73:d0:10:35:a1:5a:d0:b0:a5:48: f1:8c:e2:20:25:d7:c3:2f:3c:b3:b4:ff:37:83:79: 70:9e:08:11:7f:03:f2:10:71:a2:38:6e:9d:57:cb: 63:f5:b6:27:86:65:d5:14:a6:e1:21:44:30:7b:65: a9:16:6b:d9:71:66:2d:ad:1b:d4:fc:07:cf:ba:a8: fd:ff:30:94:4e:47:94:85:87:73:25:3e:88:28:1c: f7:c1:02:fc:8d:46:94:ed:ce:90:cf:1a:23:fd:e4: df:9b:dd:72:5e:3a:56:3d:cf:4e:db:8b:9d:c0:57: a1:ec:df:d5:5d:72:5d:a0:0f:40:b4:83:96:34:55: d8:91:90:a1:83:d1:fd:2a:a8:d0:4d:27:c7:61:5f: 0e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:09:73:51:04:51:F3:B3:C8:3A:E3:FA:70:91:AF:97:23:B4:FF:A1 X509v3 Authority Key Identifier: keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2d:12:f1:59:30:a1:b6:b5:ba:6a:63:bd:67:94:8d:f7:8d: 67:0b:eb:f0:b9:25:70:2d:7f:53:3f:d5:fd:9a:f2:a4:01:71: 18:e0:77:0e:84:8f:eb:65:7a:6c:e3:c6:7d:d5:e1:f6:a6:5d: 65:00:d2:45:94:d3:33:ad:69:20:f7:ff:00:49:4e:80:cf:b9: 45:70:9c:ef:47:66:73:13:6f:8a:c0:44:55:44:5e:f4:77:cc: 24:50:0a:d5:51:88:94:87:82:ca:ec:9e:c1:6e:d4:57:a9:37: 10:dd:b7:4b:40:b8:64:0a:a8:eb:d0:fc:ff:35:dd:cd:2f:a4: 29:85:18:22:2e:28:ca:d2:b8:ee:cd:bf:bc:cc:20:fd:27:f0: f1:7a:5f:14:20:7f:45:50:32:77:be:66:6e:6a:b3:59:3c:21: fd:42:76:ec:b0:be:61:f5:a5:92:95:40:86:bb:55:0f:96:af: cd:6b:bd:21:3e:d6:8e:ea:f6:7e:11:fd:dd:d7:0c:46:5e:38: 2b:1e:66:2f:f0:85:61:05:fd:52:df:87:a0:93:aa:64:e9:6a: 54:90:f3:a5:51:52:22:29:07:a5:a4:b0:42:d5:8b:05:77:11: 11:5d:eb:ce:9b:23:5c:81:88:7c:cd:60:ce:89:d8:17:76:65: c7:84:07:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy OTQ0QjlFQzYwHhcNMjQxMTIzMDE1NTE0WhcNMjQxMTMwMDE1NTE0WjAYMRYwFAYD VQQDEw02NzQxMzYwMi00M2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhAfvOEBJQfmsEF70Q0XFlzHs/ORAy0c65VP4ec4Kme++ewMgN/35KmfTpoW faWFAJ4KFMjIAjOAX0E15Z4CkS8xsk9sCe1Ckku+8fhbE49mcNhREpkFRrmBqjK/ fo/vhuJzdlqkUNjWEuJ1z3PQEDWhWtCwpUjxjOIgJdfDLzyztP83g3lwnggRfwPy EHGiOG6dV8tj9bYnhmXVFKbhIUQwe2WpFmvZcWYtrRvU/AfPuqj9/zCUTkeUhYdz JT6IKBz3wQL8jUaU7c6Qzxoj/eTfm91yXjpWPc9O24udwFeh7N/VXXJdoA9AtIOW NFXYkZChg9H9KqjQTSfHYV8OCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYJc1EE UfOzyDrj+nCRr5cjtP+hMB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ UEhlX3hLNzRLTThwUkxuc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdLRLxWTChtrW6amO9Z5SN941nC+vwuSVwLX9TP9X9mvKkAXEY4HcO hI/rZXps48Z91eH2pl1lANJFlNMzrWkg9/8ASU6Az7lFcJzvR2ZzE2+KwERVRF70 d8wkUArVUYiUh4LK7J7BbtRXqTcQ3bdLQLhkCqjr0Pz/Nd3NL6QphRgiLijK0rju zb+8zCD9J/Dxel8UIH9FUDJ3vmZuarNZPCH9QnbssL5h9aWSlUCGu1UPlq/Na70h PtaO6vZ+Ef3d1wxGXjgrHmYv8IVhBf1S34egk6pk6WpUkPOlUVIiKQelpLBC1YsF dxERXevOmyNcgYh8zWDOidgXdmXHhAd3 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org