$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft File: i6r6xGXwjQR9LXCUulKA19OYg2Y.mft (raw, json) Hash identifier: uNBAIaItRe9HsUbUxriv8+UfO6KC3NrlIxk+I/2hp0k= Subject key identifier: 07:E1:76:95:80:5D:B4:CB:AD:96:B6:03:70:9F:6F:9D:89:7E:B5:02 Authority key identifier: 8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 Certificate issuer: /CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft Manifest number: 026E Signing time: Thu 21 Nov 2024 01:35:28 +0000 Manifest this update: Thu 21 Nov 2024 01:35:27 +0000 Manifest next update: Thu 28 Nov 2024 01:35:27 +0000 Files and hashes: 1: i6r6xGXwjQR9LXCUulKA19OYg2Y.crl (hash: kPcQCFoJno5IChUNJHbL4xfkyP1NSZJYg3KcqWFvf7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Validity Not Before: Nov 21 01:35:27 2024 GMT Not After : Nov 28 01:35:27 2024 GMT Subject: CN=673e8e5f-50fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:15:48:53:8d:55:27:48:c8:5d:89:ec:f0: 10:2b:0b:d2:88:b0:54:72:ff:b1:ea:0d:09:c1:d4: f7:72:0e:b6:fb:87:1f:83:43:4e:39:b6:b2:58:10: 4c:53:9b:e0:7f:4f:79:53:a1:71:a6:1a:a4:43:b2: 3b:f8:22:b7:5d:b3:af:ee:75:ca:4a:2e:35:6f:fe: f6:ac:9a:a3:46:f8:d2:90:88:6c:9d:e1:76:c7:04: 06:80:ff:19:a8:67:56:e8:30:a3:91:6c:ee:7c:42: ab:df:9a:49:13:aa:4d:55:88:a6:b4:fa:2a:38:89: a3:68:72:2c:13:c5:36:a6:c2:a6:cd:c3:22:08:db: 51:98:4b:da:50:97:61:a5:4c:1a:06:3a:b2:5d:67: 2a:93:6b:ed:f5:6a:fa:6a:39:a4:0c:c3:9b:60:e1: 95:ad:a1:a7:0a:5c:c1:b1:14:1c:aa:0a:87:76:f0: 81:8d:ea:b0:65:2b:9f:ed:5b:d0:50:69:d3:99:e9: e6:bf:56:22:84:b5:3e:90:ca:74:fd:6f:b0:75:52: 9c:e5:c5:e4:19:3c:82:e0:e5:a3:a4:0a:89:9d:f7: 41:37:85:0e:6d:7f:8a:1a:e9:67:94:d7:0d:90:7d: 79:ae:71:19:1a:33:d2:64:47:f7:3f:b1:33:41:c8: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E1:76:95:80:5D:B4:CB:AD:96:B6:03:70:9F:6F:9D:89:7E:B5:02 X509v3 Authority Key Identifier: keyid:8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:72:e2:28:79:b9:8a:a4:c5:ba:15:19:66:55:1e:0b:f1:2d: 68:c9:72:f8:76:6b:a6:58:d3:37:c6:98:d1:59:78:3f:2b:8d: 8f:4f:ea:c1:15:7d:1d:e9:bf:d2:fc:30:5b:6e:14:a7:d5:74: aa:ea:37:36:a4:c6:e9:b2:19:dc:a3:79:bc:95:6c:b8:18:7f: 79:3c:d8:f5:d9:fa:b5:9f:3f:44:1c:fe:56:69:59:7f:4a:e6: 4c:a1:e5:af:89:f8:a9:07:f5:33:e3:ba:ce:e4:d6:ca:65:16: b8:ba:0b:82:5e:97:ee:3b:90:61:c7:b7:b6:a8:af:94:84:64: 96:78:8d:b5:cb:b2:33:d6:e8:e8:0c:a5:79:9f:b5:16:d1:bd: 13:24:6e:54:7b:f8:14:0e:30:bf:80:c9:aa:cb:56:ed:f5:0a: 87:fb:46:ce:4a:a3:3f:6c:1c:0d:74:aa:50:b7:2a:2a:b2:46: 75:d3:5f:74:52:88:50:07:96:76:79:a8:70:11:a1:4d:22:88: 85:8f:59:db:de:36:1c:25:92:c8:ca:df:14:4b:51:83:30:d8: aa:c9:e7:7e:77:a7:a5:a0:87:e0:83:17:be:cc:3b:5a:df:ac: ae:51:ab:60:58:67:ad:60:c9:a6:87:a3:28:fb:d8:94:79:19: c9:42:92:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDhCQUFGQUM0NjVGMDhEMDQ3RDJENzA5NEJBNTI4MEQ3 RDM5ODgzNjYwHhcNMjQxMTIxMDEzNTI3WhcNMjQxMTI4MDEzNTI3WjAYMRYwFAYD VQQDEw02NzNlOGU1Zi01MGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2d0VSFONVSdIyF2J7PAQKwvSiLBUcv+x6g0JwdT3cg62+4cfg0NOObayWBBM U5vgf095U6FxphqkQ7I7+CK3XbOv7nXKSi41b/72rJqjRvjSkIhsneF2xwQGgP8Z qGdW6DCjkWzufEKr35pJE6pNVYimtPoqOImjaHIsE8U2psKmzcMiCNtRmEvaUJdh pUwaBjqyXWcqk2vt9Wr6ajmkDMObYOGVraGnClzBsRQcqgqHdvCBjeqwZSuf7VvQ UGnTmenmv1YihLU+kMp0/W+wdVKc5cXkGTyC4OWjpAqJnfdBN4UObX+KGulnlNcN kH15rnEZGjPSZEf3P7EzQcjD5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfhdpWA XbTLrZa2A3Cfb52JfrUCMB8GA1UdIwQYMBaAFIuq+sRl8I0EfS1wlLpSgNfTmINm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pRUjlMWENVdWxLQTE5T1ln MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2cjZ4R1h3alFSOUxYQ1V1bEtBMTlPWWcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pR UjlMWENVdWxLQTE5T1lnMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTcuIoebmKpMW6FRlmVR4L8S1oyXL4dmumWNM3xpjRWXg/K42PT+rB FX0d6b/S/DBbbhSn1XSq6jc2pMbpshnco3m8lWy4GH95PNj12fq1nz9EHP5WaVl/ SuZMoeWvifipB/Uz47rO5NbKZRa4uguCXpfuO5Bhx7e2qK+UhGSWeI21y7Iz1ujo DKV5n7UW0b0TJG5Ue/gUDjC/gMmqy1bt9QqH+0bOSqM/bBwNdKpQtyoqskZ10190 UohQB5Z2eahwEaFNIoiFj1nb3jYcJZLIyt8US1GDMNiqyed+d6eloIfggxe+zDta 36yuUatgWGetYMmmh6Mo+9iUeRnJQpLs -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:59 2024 by rpki-client on console-fra.rpki-client.org