$ rpki-client -vvf rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft File: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft (raw, json) Hash identifier: F4jm6UXgKlwWJdD4Vd4wWeMoYuyyl0oC/5xQK8LbwMg= Subject key identifier: 65:83:0A:62:20:64:CF:01:F1:0D:CE:B0:0C:1A:F2:9B:45:5F:68:35 Authority key identifier: F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C Certificate issuer: /CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Certificate serial: 2710 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft Manifest number: 26E8 Signing time: Fri 22 Nov 2024 15:40:31 +0000 Manifest this update: Fri 22 Nov 2024 15:40:30 +0000 Manifest next update: Fri 29 Nov 2024 15:40:30 +0000 Files and hashes: 1: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl (hash: 8yIyJQfybOquAh12C9FHOpw7iepg5pOFAv70++dNDdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10000 (0x2710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Validity Not Before: Nov 22 15:40:30 2024 GMT Not After : Nov 29 15:40:30 2024 GMT Subject: CN=6740a5ef-fa47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:87:e8:a5:a9:a5:65:af:20:f1:21:58:2d: 60:d6:73:90:d8:1f:56:b8:5d:38:61:09:14:ac:cc: 54:05:8b:41:a0:8e:f2:52:b8:22:61:57:45:ad:6e: 9e:76:2c:3c:43:17:c1:db:48:34:51:0f:c0:c2:1b: 39:df:18:9a:d0:80:26:15:15:c3:de:c3:d0:24:13: 63:fa:bd:1d:fe:83:4e:06:5b:59:97:56:4b:40:e0: 21:8b:5e:76:b6:1e:38:66:b1:dd:ba:ec:42:86:40: 69:e4:48:9e:4f:f4:27:86:81:64:43:c0:73:bc:1e: 42:cd:88:fe:7d:1a:8a:5c:28:80:db:3a:c4:06:b4: 06:29:d1:28:0e:a4:c2:3f:a1:f9:de:59:f9:81:5c: a3:c0:3f:b7:d7:46:6b:3f:2e:6b:e1:75:fe:fe:7e: 1b:b4:9c:51:dd:a5:4b:66:da:e0:08:73:9d:a3:ce: 28:0c:b8:dc:e4:f1:b4:4b:47:34:98:41:33:be:c6: 3d:2c:b1:dc:6b:d2:60:3b:6c:29:f7:f8:9e:b6:90: 1d:73:ca:a5:b3:2f:d2:f4:e2:92:91:2f:9d:1a:14: 9e:cd:fa:87:89:22:58:89:3e:a8:6a:c2:a3:35:45: aa:00:c9:8d:f3:75:87:83:ae:e9:e9:f8:62:4f:88: 1f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:83:0A:62:20:64:CF:01:F1:0D:CE:B0:0C:1A:F2:9B:45:5F:68:35 X509v3 Authority Key Identifier: keyid:F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:44:57:be:2b:33:e1:92:3c:be:d6:27:c4:f0:0b:5b:7f:db: 4f:86:ef:0c:88:50:1d:af:52:58:f7:04:be:33:2e:d1:cc:eb: 18:c9:b5:ad:9c:9b:da:5b:61:6e:0d:03:d4:fa:50:db:c6:e1: 06:a7:7b:e9:74:4b:ee:d0:76:ce:3a:e5:71:b2:dd:5a:58:6b: 8f:19:0c:e9:cb:49:14:7a:45:c6:e7:b7:45:81:00:f2:c3:7b: 80:a1:a3:aa:03:41:45:3f:d3:2f:7a:ef:95:e6:db:f1:3f:ae: 71:78:ea:6d:4a:dd:ed:b5:8f:45:82:61:d0:f8:9d:2e:8d:c2: 55:4f:c9:c1:57:d2:16:38:37:5e:98:a2:a3:20:2d:35:e2:23: 35:1f:ef:1a:67:8b:c1:34:7b:3c:7b:fa:f7:52:b3:5c:86:66: 5b:bf:81:95:20:cf:f0:81:fa:d7:e7:d8:f0:f5:11:32:1e:79: 85:23:c7:16:15:a0:fa:e9:2d:62:1d:19:73:a5:73:9e:e7:a6: 2f:f1:61:c9:b1:9d:6c:b9:f8:bf:bd:0d:3b:6b:1c:1e:fd:00: 7c:06:2f:49:85:a8:83:aa:38:ab:90:d8:b4:f0:5c:33:64:e1: e3:8f:0e:69:2f:90:46:27:48:5b:43:1d:64:cd:f0:5a:cd:9c: 38:1f:45:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxMkIxMTAvBgNVBAUTKEYyNjkyMzQ1M0YwMTcwMzA5RkQ1OEJGM0IwQjVEQ0U0 M0ZGOUI0MUMwHhcNMjQxMTIyMTU0MDMwWhcNMjQxMTI5MTU0MDMwWjAYMRYwFAYD VQQDEw02NzQwYTVlZi1mYTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdSH6KWppWWvIPEhWC1g1nOQ2B9WuF04YQkUrMxUBYtBoI7yUrgiYVdFrW6e diw8QxfB20g0UQ/Awhs53xia0IAmFRXD3sPQJBNj+r0d/oNOBltZl1ZLQOAhi152 th44ZrHduuxChkBp5EieT/QnhoFkQ8BzvB5CzYj+fRqKXCiA2zrEBrQGKdEoDqTC P6H53ln5gVyjwD+310ZrPy5r4XX+/n4btJxR3aVLZtrgCHOdo84oDLjc5PG0S0c0 mEEzvsY9LLHca9JgO2wp9/ietpAdc8qlsy/S9OKSkS+dGhSezfqHiSJYiT6oasKj NUWqAMmN83WHg67p6fhiT4gfqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWDCmIg ZM8B8Q3OsAwa8ptFX2g1MB8GA1UdIwQYMBaAFPJpI0U/AXAwn9WL87C13OQ/+bQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjEyQi9BNTA5RUMxRUJE OUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNEQ2YxWXZ6c0xYYzVEXzV0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhta2pSVDhCY0RDZjFZdnpzTFhjNURfNXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjEyQi9BNTA5RUMxRUJEOUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNE Q2YxWXZ6c0xYYzVEXzV0QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7RFe+KzPhkjy+1ifE8Atbf9tPhu8MiFAdr1JY9wS+My7RzOsYybWt nJvaW2FuDQPU+lDbxuEGp3vpdEvu0HbOOuVxst1aWGuPGQzpy0kUekXG57dFgQDy w3uAoaOqA0FFP9Mveu+V5tvxP65xeOptSt3ttY9FgmHQ+J0ujcJVT8nBV9IWODde mKKjIC014iM1H+8aZ4vBNHs8e/r3UrNchmZbv4GVIM/wgfrX59jw9REyHnmFI8cW FaD66S1iHRlzpXOe56Yv8WHJsZ1sufi/vQ07axwe/QB8Bi9JhaiDqjirkNi08Fwz ZOHjjw5pL5BGJ0hbQx1kzfBazZw4H0VJ -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:50 2024 by rpki-client on console-fra.rpki-client.org