$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft File: cM0ClgpxFOH9f9syrJqj6NKuv0E.mft (raw, json) Hash identifier: vxdg1yLIQu5T9uvyNdJUWmDtrifr3oq/xgQuIVABwuI= Subject key identifier: 91:EA:85:E2:0E:D9:F7:D3:D5:DA:48:70:20:F0:08:6D:19:1C:D5:E5 Authority key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 Certificate issuer: /CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Certificate serial: 15D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft Manifest number: 2525 Signing time: Sun 24 Nov 2024 16:37:25 +0000 Manifest this update: Sun 24 Nov 2024 16:37:25 +0000 Manifest next update: Sun 01 Dec 2024 16:37:24 +0000 Files and hashes: 1: cM0ClgpxFOH9f9syrJqj6NKuv0E.crl (hash: 7BW9ohxObMunobuRxU8mbh4R/6ov5I3PrKciPyYXkXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5586 (0x15d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Validity Not Before: Nov 24 16:37:25 2024 GMT Not After : Dec 1 16:37:24 2024 GMT Subject: CN=67435645-261e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8c:e4:a5:7f:6a:ab:eb:c4:e1:ea:04:c2:c2: ce:fe:c6:de:3e:e8:c5:df:07:35:d6:41:80:50:71: a5:e3:79:0e:90:60:0e:50:02:e1:ad:c6:53:40:73: ed:61:b9:b0:44:48:e1:3b:34:02:e9:7e:b5:80:43: e9:ad:1b:25:d1:b2:1c:9f:cf:2a:f1:d5:36:8e:5c: 14:25:cb:6c:a3:18:35:23:78:c6:52:c4:ef:4d:30: 63:c2:67:59:c9:61:a8:dc:aa:4f:9d:27:56:1c:78: 08:37:f9:d7:51:4c:bf:c1:b6:42:35:20:3b:92:c6: 96:22:45:7e:65:ae:75:5a:86:5d:55:27:ba:51:c4: e6:e7:11:10:13:e9:52:da:98:a4:16:de:8a:b4:ac: 39:ff:3e:01:51:c5:d4:c0:9b:78:b5:79:df:9d:70: a4:39:28:e7:5e:a6:81:0d:4b:ff:af:8f:b7:9d:5f: e5:ae:c9:41:6d:79:28:7a:ec:c2:d1:a4:3d:e3:fb: 4a:be:75:e0:a5:c4:62:48:8a:5e:72:03:f7:c5:0f: a9:2d:75:9d:b5:2b:09:3b:ff:d9:44:37:97:85:4a: ed:2f:18:8e:58:32:2a:45:ac:bf:62:15:e9:87:2c: 18:1f:25:4e:02:f6:a2:e7:3f:19:8e:e8:2e:e6:72: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EA:85:E2:0E:D9:F7:D3:D5:DA:48:70:20:F0:08:6D:19:1C:D5:E5 X509v3 Authority Key Identifier: keyid:70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d0:2b:27:38:80:78:b4:d0:5d:6e:f8:31:9a:3b:47:35:b8: 2d:a1:c9:6b:c9:7d:31:aa:eb:d5:9b:92:1b:58:0d:47:ce:d7: 2e:5d:6b:43:9b:4a:b1:c3:af:fb:67:a8:1d:89:06:6f:46:93: 01:66:fe:45:93:da:de:97:c4:bd:f7:e0:7d:9c:83:48:1b:d0: 3e:ca:09:a4:a0:eb:e8:ad:1c:38:6f:b4:a8:32:23:20:fa:40: 8a:ed:81:88:a7:18:12:c4:53:92:4f:89:83:66:14:21:fb:a6: 65:4f:2e:00:a0:a5:f3:36:af:ae:44:1c:d7:c5:77:2e:79:04: 09:54:ab:7a:f3:c3:9a:0d:f6:dd:72:87:33:a3:c9:8d:dc:aa: 26:85:47:eb:e3:ea:79:19:d7:83:c5:d3:31:90:a0:0c:62:db: 32:73:2f:71:a1:cc:69:08:7c:b7:9c:e9:b8:d2:21:6a:95:76: 35:69:bd:e0:d8:77:02:db:7b:99:05:ce:90:40:34:a5:dc:ab: 19:5c:95:48:18:49:fe:a6:4b:80:e1:90:e4:78:9f:18:b6:9f: 3b:63:ac:76:fb:1c:d8:4f:02:59:12:09:48:03:03:8f:bd:13: 96:da:23:97:70:9f:4c:8c:f0:12:e6:47:71:1a:be:a6:6b:67: 1e:03:ec:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDcwQ0QwMjk2MEE3MTE0RTFGRDdGREIzMkFDOUFBM0U4 RDJBRUJGNDEwHhcNMjQxMTI0MTYzNzI1WhcNMjQxMjAxMTYzNzI0WjAYMRYwFAYD VQQDEw02NzQzNTY0NS0yNjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4zkpX9qq+vE4eoEwsLO/sbePujF3wc11kGAUHGl43kOkGAOUALhrcZTQHPt YbmwREjhOzQC6X61gEPprRsl0bIcn88q8dU2jlwUJctsoxg1I3jGUsTvTTBjwmdZ yWGo3KpPnSdWHHgIN/nXUUy/wbZCNSA7ksaWIkV+Za51WoZdVSe6UcTm5xEQE+lS 2pikFt6KtKw5/z4BUcXUwJt4tXnfnXCkOSjnXqaBDUv/r4+3nV/lrslBbXkoeuzC 0aQ94/tKvnXgpcRiSIpecgP3xQ+pLXWdtSsJO//ZRDeXhUrtLxiOWDIqRay/YhXp hywYHyVOAvai5z8Zjugu5nLXGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHqheIO 2ffT1dpIcCDwCG0ZHNXlMB8GA1UdIwQYMBaAFHDNApYKcRTh/X/bMqyao+jSrr9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZPSDlmOXN5ckpxajZOS3V2 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMENsZ3B4Rk9IOWY5c3lySnFqNk5LdXYwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZP SDlmOXN5ckpxajZOS3V2MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP0CsnOIB4tNBdbvgxmjtHNbgtoclryX0xquvVm5IbWA1HztcuXWtD m0qxw6/7Z6gdiQZvRpMBZv5Fk9rel8S99+B9nINIG9A+ygmkoOvorRw4b7SoMiMg +kCK7YGIpxgSxFOST4mDZhQh+6ZlTy4AoKXzNq+uRBzXxXcueQQJVKt688OaDfbd coczo8mN3KomhUfr4+p5GdeDxdMxkKAMYtsycy9xocxpCHy3nOm40iFqlXY1ab3g 2HcC23uZBc6QQDSl3KsZXJVIGEn+pkuA4ZDkeJ8Ytp87Y6x2+xzYTwJZEglIAwOP vROW2iOXcJ9MjPAS5kdxGr6ma2ceA+y8 -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:07 2024 by rpki-client on console-fra.rpki-client.org