$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json) Hash identifier: QLipGb+96Svy6Jb/uiCe2RlH8FC2L/0ziw2ETYBQ4Vc= Subject key identifier: 7A:2C:4C:8E:DC:67:12:3C:66:E3:C7:79:E2:F2:87:A3:76:FA:FA:AD Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft Manifest number: 28 Signing time: Wed 23 Oct 2024 06:24:55 +0000 Manifest this update: Wed 23 Oct 2024 06:24:55 +0000 Manifest next update: Wed 30 Oct 2024 06:24:55 +0000 Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: Vyb7reEBpKMR5M1reuC3xk8fRrhzBA3wQmo7nj//Bp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Validity Not Before: Oct 23 06:24:55 2024 GMT Not After : Oct 30 06:24:55 2024 GMT Subject: CN=671896b7-b007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:49:d5:2b:92:f0:e2:10:d7:55:1c:8c:51:b1: df:54:7a:9c:43:c6:7e:e6:e1:f6:60:b0:34:57:55: 06:ae:e7:9d:6d:d3:31:33:3b:d6:94:b9:ef:5c:47: 51:9b:57:3f:65:b9:7c:f7:d5:5e:e3:51:11:46:d2: af:0f:ee:6b:6b:6f:3f:3f:09:96:61:a9:7b:2e:cc: fe:7d:7a:23:58:67:7e:3c:72:80:33:fe:7b:f3:11: be:7c:af:6f:19:cc:d9:98:2b:9d:a5:fd:65:04:29: fc:fe:92:1d:8b:87:5f:4b:40:21:f2:7e:61:5c:e5: c1:89:5c:a5:34:61:d4:c7:4c:24:b1:46:49:53:b8: 19:97:43:8a:41:cb:ee:c6:37:e3:0c:8c:59:1a:77: a5:bc:4b:70:68:96:a6:35:44:f4:0e:97:c9:06:9e: 23:e4:05:d2:6e:26:d7:b0:c4:ee:22:9c:24:a2:a1: 3f:3a:97:5a:db:b4:b5:8b:42:26:94:a5:58:1a:5b: 5e:dc:79:2e:1c:50:6a:7f:a0:bc:c2:6b:99:9d:5f: 48:ce:c6:90:ab:98:6f:43:68:4b:ca:dc:00:c2:7d: 62:b4:80:a2:90:a8:86:f3:5a:a9:97:99:c3:ae:be: ba:5c:17:62:41:3b:ee:75:23:97:4b:68:f1:c0:d8: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2C:4C:8E:DC:67:12:3C:66:E3:C7:79:E2:F2:87:A3:76:FA:FA:AD X509v3 Authority Key Identifier: keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:83:dc:c7:cc:23:da:83:2c:f4:28:f5:f6:6b:c5:07:65:33: 2f:41:02:8f:3a:21:ff:54:e3:52:8b:10:e9:86:94:86:2c:42: 9c:6f:17:04:59:7f:5d:b4:f3:2c:40:76:41:1a:41:38:b9:80: a4:1b:2f:1a:20:6a:f4:14:1d:73:ee:fa:4d:ae:ad:7d:2b:ad: 3a:96:c6:10:8e:ac:82:d4:c3:13:09:ad:48:56:5d:a4:9a:e1: f1:69:1e:f9:5c:e6:c1:8b:f5:f2:56:67:87:22:5f:8f:8e:e1: 6e:5a:96:bd:c9:6a:29:c1:40:f8:84:87:c0:df:14:24:f4:ff: 6f:27:c6:e3:bf:9d:d3:46:08:21:c5:9f:7e:91:cc:be:a2:ac: 89:9a:a9:c4:17:7d:87:49:5a:69:7e:25:17:33:f9:5c:47:4b: 29:22:42:99:d6:7a:56:1e:64:d6:79:99:4b:7a:7c:c9:d0:e9: 23:4d:42:aa:87:ac:2b:b3:13:f9:0c:38:7c:59:90:23:bd:c6: f8:62:f3:4e:bd:c0:88:1a:1e:dc:72:e1:d0:0e:c4:af:1d:61: 1d:4e:2c:69:e0:dc:3d:ff:68:13:21:62:41:e6:5e:40:95:a0: 3b:d0:fd:53:91:74:aa:4c:03:2b:d6:8a:5a:52:d4:e7:3d:c9: 64:69:78:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzM2QTExMC8GA1UEBRMoRTBCNjA4QUY1MzQxNEI2RjU5N0QxOENBRTdBMjE0NDgz RThBNjU5RTAeFw0yNDEwMjMwNjI0NTVaFw0yNDEwMzAwNjI0NTVaMBgxFjAUBgNV BAMTDTY3MTg5NmI3LWIwMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDESdUrkvDiENdVHIxRsd9UepxDxn7m4fZgsDRXVQau551t0zEzO9aUue9cR1Gb Vz9luXz31V7jURFG0q8P7mtrbz8/CZZhqXsuzP59eiNYZ348coAz/nvzEb58r28Z zNmYK52l/WUEKfz+kh2Lh19LQCHyfmFc5cGJXKU0YdTHTCSxRklTuBmXQ4pBy+7G N+MMjFkad6W8S3BolqY1RPQOl8kGniPkBdJuJtewxO4inCSioT86l1rbtLWLQiaU pVgaW17ceS4cUGp/oLzCa5mdX0jOxpCrmG9DaEvK3ADCfWK0gKKQqIbzWqmXmcOu vrpcF2JBO+51I5dLaPHA2NG5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeixMjtxn Ejxm48d54vKHo3b6+q0wHwYDVR0jBBgwFoAU4LYIr1NBS29ZfRjK56IUSD6KZZ4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMzZBLzg2RDdCODYyNUFF QTExRUY5NEU5M0Q2RUM0RjlBRTAyLzRMWUlyMU5CUzI5WmZSaks1NklVU0Q2S1pa NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNExZSXIxTkJTMjlaZlJqSzU2SVVTRDZLWlo0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MzZBLzg2RDdCODYyNUFFQTExRUY5NEU5M0Q2RUM0RjlBRTAyLzRMWUlyMU5CUzI5 WmZSaks1NklVU0Q2S1paNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADKD3MfMI9qDLPQo9fZrxQdlMy9BAo86If9U41KLEOmGlIYsQpxvFwRZ f1208yxAdkEaQTi5gKQbLxogavQUHXPu+k2urX0rrTqWxhCOrILUwxMJrUhWXaSa 4fFpHvlc5sGL9fJWZ4ciX4+O4W5alr3JainBQPiEh8DfFCT0/28nxuO/ndNGCCHF n36RzL6irImaqcQXfYdJWml+JRcz+VxHSykiQpnWelYeZNZ5mUt6fMnQ6SNNQqqH rCuzE/kMOHxZkCO9xvhi8069wIgaHtxy4dAOxK8dYR1OLGng3D3/aBMhYkHmXkCV oDvQ/VORdKpMAyvWilpS1Oc9yWRpeJM= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:55 2024 by rpki-client on console-ams.rpki-client.org