$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft File: FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json) Hash identifier: 8ToetQolN03q0Dzi96ThQ0K0j0vMYS7NB5WoZubAnSc= Subject key identifier: A3:7D:83:DF:3F:0D:7E:38:A4:52:21:21:B4:53:DB:F5:2B:7E:67:AF Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 Certificate issuer: /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft Manifest number: 76 Signing time: Sat 23 Nov 2024 04:46:27 +0000 Manifest this update: Sat 23 Nov 2024 04:46:26 +0000 Manifest next update: Sat 30 Nov 2024 04:46:26 +0000 Files and hashes: 1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: UAR3dA4Vn7Z1p6V+TMrgvz1oJ+WYnotfSMxZIEpdfJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Validity Not Before: Nov 23 04:46:26 2024 GMT Not After : Nov 30 04:46:26 2024 GMT Subject: CN=67415e23-03ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:1b:8d:ba:59:ee:42:87:b0:3f:04:b2:12: f1:52:40:1b:43:e5:b5:97:0c:b3:47:90:47:de:4e: c4:35:cb:d6:5d:63:8f:2e:2a:80:f9:c1:a1:4f:71: a3:35:dd:fb:15:90:24:23:ca:91:25:96:ca:a5:52: 0e:5a:97:02:be:c9:02:ed:e7:78:a3:6d:e3:f1:54: 3d:62:f0:05:e6:1c:2b:d2:1e:05:a0:e8:2a:93:c9: 16:48:da:e8:9e:a1:42:c9:2a:91:49:60:44:53:cd: e1:12:e9:70:7d:04:df:ce:4d:3d:09:58:ad:f1:50: ee:74:a2:59:ee:3e:3d:22:6b:a0:f5:85:f9:a5:8e: 62:3d:43:8d:61:b7:bd:81:de:0e:46:29:1a:55:24: b6:c1:a6:3e:18:69:2b:4f:f5:8e:a3:4d:cb:5a:36: a3:58:2f:1e:c6:dd:31:b5:bd:13:8e:96:3d:5d:e0: 1a:21:21:51:02:6f:38:b1:54:83:1e:4e:0f:94:8f: 44:27:c1:d3:81:ac:f1:2a:35:52:33:b6:02:66:a0: 11:84:cb:b4:08:62:45:22:9e:e0:74:b2:12:ed:3c: f9:5a:ba:b6:52:d9:42:8c:12:dd:87:b4:52:e5:28: e0:a1:8c:92:98:4f:c0:5b:04:4e:62:aa:9a:ea:57: b0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:7D:83:DF:3F:0D:7E:38:A4:52:21:21:B4:53:DB:F5:2B:7E:67:AF X509v3 Authority Key Identifier: keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ad:9b:07:49:96:a3:9b:c1:93:aa:1f:e8:fe:c8:e0:8b:f2: 88:40:2b:8a:e2:39:32:1a:c0:58:a0:1e:f9:23:8e:10:86:24: 59:01:12:2a:1a:36:c5:ac:55:2c:d6:bf:ae:7a:21:77:f0:f9: 42:b3:f4:7b:9a:55:1e:e5:8a:66:c2:be:67:b9:fd:e2:27:a2: 9d:86:2b:f7:a5:74:ec:e5:00:94:55:c0:e9:8a:da:22:d6:c6: 96:d7:4f:c0:f6:96:f8:89:58:c8:04:2a:74:32:bd:13:50:3a: 49:f4:e4:90:29:77:57:b3:e8:47:71:d5:09:23:b0:e8:4b:8a: 9a:3c:c7:31:d2:5b:7a:66:b4:23:ed:a2:ee:c2:64:ef:21:f2: 50:d6:77:b1:f8:4d:70:fe:64:3a:d7:23:c9:f7:5a:31:0d:b9: 5e:35:47:8d:8d:b9:ea:1e:e0:08:c4:d2:e2:bd:e3:f1:00:87: 1d:19:b1:11:05:4d:e9:08:d3:4e:20:7f:40:27:c0:4a:5f:17: a6:6f:66:b3:89:18:1c:e8:90:e0:e5:41:33:29:41:e1:7e:ae: cb:7e:74:ba:46:ba:f6:cf:55:47:c5:a7:cb:6e:ca:47:28:36: 81:7f:27:1f:c8:b8:c1:2f:84:04:cb:5d:28:f6:2e:fa:22:b3: 68:05:5e:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTdDQjExMC8GA1UEBRMoMTczNUNCQTlFRTE2RkU4NUYzRDI4M0ZBNUJCOTQ3OUQ5 QUYyQ0M4NjAeFw0yNDExMjMwNDQ2MjZaFw0yNDExMzAwNDQ2MjZaMBgxFjAUBgNV BAMTDTY3NDE1ZTIzLTAzYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEKxuNulnuQoewPwSyEvFSQBtD5bWXDLNHkEfeTsQ1y9ZdY48uKoD5waFPcaM1 3fsVkCQjypEllsqlUg5alwK+yQLt53ijbePxVD1i8AXmHCvSHgWg6CqTyRZI2uie oULJKpFJYERTzeES6XB9BN/OTT0JWK3xUO50olnuPj0ia6D1hfmljmI9Q41ht72B 3g5GKRpVJLbBpj4YaStP9Y6jTctaNqNYLx7G3TG1vROOlj1d4BohIVECbzixVIMe Tg+Uj0QnwdOBrPEqNVIztgJmoBGEy7QIYkUinuB0shLtPPlaurZS2UKMEt2HtFLl KOChjJKYT8BbBE5iqprqV7CXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUo32D3z8N fjikUiEhtFPb9St+Z68wHwYDVR0jBBgwFoAUFzXLqe4W/oXz0oP6W7lHnZryzIYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1N0NCLzRFRDIxMkRDRjJG ODExRUVBMzUwNjczOEM0RjlBRTAyL0Z6WExxZTRXX29YejBvUDZXN2xIblpyeXpJ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRnpYTHFlNFdfb1h6MG9QNlc3bEhuWnJ5eklZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 N0NCLzRFRDIxMkRDRjJGODExRUVBMzUwNjczOEM0RjlBRTAyL0Z6WExxZTRXX29Y ejBvUDZXN2xIblpyeXpJWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEutmwdJlqObwZOqH+j+yOCL8ohAK4riOTIawFigHvkjjhCGJFkBEioa NsWsVSzWv656IXfw+UKz9HuaVR7limbCvme5/eInop2GK/eldOzlAJRVwOmK2iLW xpbXT8D2lviJWMgEKnQyvRNQOkn05JApd1ez6Edx1QkjsOhLipo8xzHSW3pmtCPt ou7CZO8h8lDWd7H4TXD+ZDrXI8n3WjENuV41R42Nueoe4AjE0uK94/EAhx0ZsREF TekI004gf0AnwEpfF6ZvZrOJGBzokODlQTMpQeF+rst+dLpGuvbPVUfFp8tuykco NoF/Jx/IuMEvhATLXSj2Lvois2gFXnw= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:09 2024 by rpki-client on console-ams.rpki-client.org