$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft File: U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft (raw, json) Hash identifier: 7dV3uM/igPOl0aagk29ufiV0a9cRxSA7mxfpO4iAx9c= Subject key identifier: DB:25:A5:F8:17:BB:6B:A2:77:53:9E:22:68:BD:02:10:EB:81:60:38 Authority key identifier: 53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92 Certificate issuer: /CN=A9187325/serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft Manifest number: 11 Signing time: Wed 25 Dec 2024 06:06:00 +0000 Manifest this update: Wed 25 Dec 2024 06:06:00 +0000 Manifest next update: Wed 01 Jan 2025 06:06:00 +0000 Files and hashes: 1: U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl (hash: lNynspFrKjWw9LZwE2GJ3NJNfQ12oiLcgARm3IeU+FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187325/serialNumber=53C08BDA04BC053221EB273AA215CCD95C00C392 Validity Not Before: Dec 25 06:06:00 2024 GMT Not After : Jan 1 06:06:00 2025 GMT Subject: CN=676ba0c8-b774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:97:54:77:50:c2:34:7f:fb:be:83:fa:a7: a9:0d:d9:12:89:e8:25:98:43:bd:2e:4f:a6:6c:60: 8e:b1:28:57:9e:68:40:d3:9e:31:c1:05:15:66:9d: fd:8a:fb:9f:e8:d8:06:c1:74:9b:73:41:f6:e3:a2: 0b:82:36:22:4e:95:b1:ef:ab:c5:e9:a1:8a:fd:a3: f3:d6:24:24:6f:5f:c4:13:de:d3:6b:7c:1e:f1:68: bb:11:5a:e9:50:4e:50:24:2d:e3:97:9a:b3:60:03: 94:06:9b:08:e5:b5:a9:c2:7e:47:d2:48:7d:c2:f1: ec:2e:c2:ad:59:e0:40:98:03:65:9e:fe:47:19:24: 10:7b:70:2e:73:ab:ab:89:42:73:d0:1a:7d:71:3a: 37:86:7c:01:ab:4a:46:7d:26:85:1a:48:93:9c:29: de:5d:59:92:4b:b3:60:b7:59:2d:52:fb:f6:0a:34: a5:63:d8:88:2b:aa:19:e7:d4:2e:0c:1a:8c:0c:2d: 0e:d6:88:ca:da:67:42:97:46:6e:30:e5:aa:4a:57: 3a:a0:84:b5:27:6f:ff:e9:11:24:e3:d6:28:06:0b: 13:c1:77:f4:47:b9:a8:30:42:70:25:6f:96:79:d7: 57:29:4c:0a:c9:00:25:1b:7d:aa:7f:ab:56:b6:84: e0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:25:A5:F8:17:BB:6B:A2:77:53:9E:22:68:BD:02:10:EB:81:60:38 X509v3 Authority Key Identifier: keyid:53:C0:8B:DA:04:BC:05:32:21:EB:27:3A:A2:15:CC:D9:5C:00:C3:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8CL2gS8BTIh6yc6ohXM2VwAw5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/8338C4D6AAE911EFB721C25DC4F9AE02/U8CL2gS8BTIh6yc6ohXM2VwAw5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:e3:19:ba:fa:a5:3f:ba:b6:09:de:28:f5:5b:7d:2d:60:7a: 28:af:0f:4a:9a:9b:87:a6:74:e0:d9:81:73:c9:df:48:30:fe: 2e:8e:8a:dc:52:7f:34:28:1f:cd:41:a5:f7:7b:dc:67:fc:ab: db:75:5c:74:78:b5:32:4f:96:24:5b:ea:8a:80:f1:5e:74:00: 76:99:d9:aa:a6:28:9e:14:ff:36:0e:25:37:23:b3:b7:7e:ac: db:fc:a4:72:a7:93:76:cb:84:ba:98:71:ab:67:45:65:37:05: 04:33:b1:3e:19:3a:f7:a4:d9:7f:a1:d9:3a:3c:b9:ac:f0:27: c4:d6:5d:59:32:2e:88:a5:3c:27:93:45:2b:85:18:d1:8c:75: 5c:08:c1:2a:5b:f6:06:ee:6d:f4:25:89:5d:51:f5:5d:d5:7c: 33:62:6e:90:1d:8a:5b:a0:7c:34:0f:bf:8b:0f:60:65:85:18: e7:9e:75:f9:1b:41:fa:6f:eb:9f:80:1c:70:45:0d:05:48:44: 9a:0b:85:6e:f8:4e:e1:94:81:a1:5a:e5:42:1b:ec:85:57:20: 98:d0:b2:3c:87:39:dd:43:52:d9:90:06:e6:de:54:fc:41:a4: ed:6e:fd:06:e5:03:40:b7:60:0f:42:1a:00:56:19:82:59:60: 5f:61:7e:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzMyNTExMC8GA1UEBRMoNTNDMDhCREEwNEJDMDUzMjIxRUIyNzNBQTIxNUNDRDk1 QzAwQzM5MjAeFw0yNDEyMjUwNjA2MDBaFw0yNTAxMDEwNjA2MDBaMBgxFjAUBgNV BAMTDTY3NmJhMGM4LWI3NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChiZdUd1DCNH/7voP6p6kN2RKJ6CWYQ70uT6ZsYI6xKFeeaEDTnjHBBRVmnf2K +5/o2AbBdJtzQfbjoguCNiJOlbHvq8XpoYr9o/PWJCRvX8QT3tNrfB7xaLsRWulQ TlAkLeOXmrNgA5QGmwjltanCfkfSSH3C8ewuwq1Z4ECYA2We/kcZJBB7cC5zq6uJ QnPQGn1xOjeGfAGrSkZ9JoUaSJOcKd5dWZJLs2C3WS1S+/YKNKVj2Igrqhnn1C4M GowMLQ7WiMraZ0KXRm4w5apKVzqghLUnb//pESTj1igGCxPBd/RHuagwQnAlb5Z5 11cpTArJACUbfap/q1a2hOALAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2yWl+Be7 a6J3U54iaL0CEOuBYDgwHwYDVR0jBBgwFoAUU8CL2gS8BTIh6yc6ohXM2VwAw5Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3MzI1LzgzMzhDNEQ2QUFF OTExRUZCNzIxQzI1REM0RjlBRTAyL1U4Q0wyZ1M4QlRJaDZ5YzZvaFhNMlZ3QXc1 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVThDTDJnUzhCVEloNnljNm9oWE0yVndBdzVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 MzI1LzgzMzhDNEQ2QUFFOTExRUZCNzIxQzI1REM0RjlBRTAyL1U4Q0wyZ1M4QlRJ aDZ5YzZvaFhNMlZ3QXc1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACLjGbr6pT+6tgneKPVbfS1geiivD0qam4emdODZgXPJ30gw/i6OitxS fzQoH81Bpfd73Gf8q9t1XHR4tTJPliRb6oqA8V50AHaZ2aqmKJ4U/zYOJTcjs7d+ rNv8pHKnk3bLhLqYcatnRWU3BQQzsT4ZOvek2X+h2To8uazwJ8TWXVkyLoilPCeT RSuFGNGMdVwIwSpb9gbubfQliV1R9V3VfDNibpAdilugfDQPv4sPYGWFGOeedfkb Qfpv65+AHHBFDQVIRJoLhW74TuGUgaFa5UIb7IVXIJjQsjyHOd1DUtmQBubeVPxB pO1u/QblA0C3YA9CGgBWGYJZYF9hfnc= -----END CERTIFICATE-----Generated at Wed Dec 25 08:00:03 2024 by rpki-client on console-ams.rpki-client.org