$ rpki-client -vvf rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft File: 5tR4mVLfAG9kzr8PNVcqW5bktzc.mft (raw, json) Hash identifier: yONPz+5ylxxpwQLC/qgjX2jr9pZfhv8Yv3W2bPhdlpI= Subject key identifier: 8A:F5:DB:A4:FD:5B:CB:DA:1B:CD:13:34:66:5D:F2:14:79:7D:06:40 Authority key identifier: E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 Certificate issuer: /CN=A918E63A/serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Certificate serial: 073E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft Manifest number: 073E Signing time: Fri 22 Nov 2024 21:07:52 +0000 Manifest this update: Fri 22 Nov 2024 21:07:52 +0000 Manifest next update: Fri 29 Nov 2024 21:07:52 +0000 Files and hashes: 1: 5tR4mVLfAG9kzr8PNVcqW5bktzc.crl (hash: 73JfSgAHKsdw8QPnEjHVDGtQJqF4/Ep0nn2m18//Ceo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854 (0x73e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E63A/serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Validity Not Before: Nov 22 21:07:52 2024 GMT Not After : Nov 29 21:07:52 2024 GMT Subject: CN=6740f2a8-819f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6c:aa:26:01:85:1e:a3:f8:c7:6d:37:f4:64: 72:3a:db:de:8b:58:af:12:90:4f:1a:c1:81:c1:59: 33:fc:d4:86:b5:27:bd:6d:db:6d:15:18:2c:2c:2c: bd:d8:9b:ed:b9:81:df:cb:7e:9c:39:76:f8:2f:4b: 16:ab:0a:11:eb:ee:37:c3:2a:41:7e:e7:66:41:1a: eb:dd:fd:a9:f9:f0:84:ad:bb:44:fc:f9:dd:9b:1e: e8:f6:cc:19:9f:ba:db:de:25:b9:e0:19:36:f6:57: ce:0f:f0:2c:da:8f:f5:08:b4:fa:54:a4:d1:2d:43: d9:f2:2a:b2:33:18:c5:06:1b:59:da:25:48:85:be: 41:3e:42:93:d8:42:30:b1:75:1e:99:13:c3:ae:b5: 9d:57:41:d6:d6:f2:0c:91:4d:b1:bb:1b:f0:0e:cf: 89:44:ae:50:4e:1c:9d:c5:b8:d9:8b:71:a5:99:fc: b3:a3:15:cc:14:56:b6:07:83:e1:b2:34:0c:72:49: 45:bd:3c:9d:9c:50:c7:4a:a2:9d:eb:5f:fa:f4:1b: b1:c5:a2:54:84:85:e6:95:a6:89:5d:2d:09:bd:86: 9c:ba:7c:c7:d8:c8:8a:95:45:3d:e1:24:8f:54:11: a9:e4:b3:ec:d7:bd:be:1c:7b:37:82:df:f1:46:8a: bd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F5:DB:A4:FD:5B:CB:DA:1B:CD:13:34:66:5D:F2:14:79:7D:06:40 X509v3 Authority Key Identifier: keyid:E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b0:79:c3:2a:de:0e:c2:68:07:47:e1:24:c3:19:db:6d:7c: 61:c5:5a:a6:e5:7b:6d:82:52:78:36:f7:f1:84:2a:5d:3e:11: c9:20:65:91:9a:fe:8b:a9:60:bd:5f:5c:bb:cd:bc:d2:cd:60: 61:65:1a:b6:56:4a:82:5c:b8:db:cf:34:47:cc:1c:f3:0e:af: ff:81:e9:75:07:b3:e0:11:fa:e2:9d:c5:81:53:e9:58:af:be: 02:4c:a5:48:d0:4d:d7:78:c8:40:ad:05:9a:14:bf:97:97:b7: 83:a3:7f:af:b6:a4:8e:51:43:1e:05:c4:b9:54:82:b6:83:08: d9:66:aa:56:17:4f:f5:d1:56:4e:d7:09:a6:88:62:03:f9:e8: 05:bb:9f:d7:ed:9e:7d:fd:03:01:be:c2:1c:db:6f:8e:df:1a: e0:45:f5:b2:6f:62:a1:74:35:fe:dd:3c:8c:19:25:22:84:d8: 66:8e:be:d5:43:2b:04:12:90:ca:df:07:e9:45:33:da:34:8c: aa:76:1c:64:74:1a:88:3f:e0:1a:15:25:f3:7d:9c:bd:9c:37: 56:03:b4:2c:a1:b2:95:5b:55:03:9b:0b:da:be:40:02:6b:c6: 19:b0:a0:8f:2e:dc:75:d9:37:12:dd:bb:ea:3a:34:3f:cd:fc: 2c:93:44:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2M0ExMTAvBgNVBAUTKEU2RDQ3ODk5NTJERjAwNkY2NENFQkYwRjM1NTcyQTVC OTZFNEI3MzcwHhcNMjQxMTIyMjEwNzUyWhcNMjQxMTI5MjEwNzUyWjAYMRYwFAYD VQQDEw02NzQwZjJhOC04MTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGyqJgGFHqP4x2039GRyOtvei1ivEpBPGsGBwVkz/NSGtSe9bdttFRgsLCy9 2JvtuYHfy36cOXb4L0sWqwoR6+43wypBfudmQRrr3f2p+fCErbtE/Pndmx7o9swZ n7rb3iW54Bk29lfOD/As2o/1CLT6VKTRLUPZ8iqyMxjFBhtZ2iVIhb5BPkKT2EIw sXUemRPDrrWdV0HW1vIMkU2xuxvwDs+JRK5QThydxbjZi3GlmfyzoxXMFFa2B4Ph sjQMcklFvTydnFDHSqKd61/69BuxxaJUhIXmlaaJXS0JvYacunzH2MiKlUU94SSP VBGp5LPs172+HHs3gt/xRoq9uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIr126T9 W8vaG80TNGZd8hR5fQZAMB8GA1UdIwQYMBaAFObUeJlS3wBvZM6/DzVXKluW5Lc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTYzQS8zN0Q3QTVBRTAz MkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFHOWt6cjhQTlZjcVc1Ymt0 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV0UjRtVkxmQUc5a3pyOFBOVmNxVzVia3R6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTYzQS8zN0Q3QTVBRTAzMkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFH OWt6cjhQTlZjcVc1Ymt0emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNsHnDKt4OwmgHR+EkwxnbbXxhxVqm5XttglJ4NvfxhCpdPhHJIGWR mv6LqWC9X1y7zbzSzWBhZRq2VkqCXLjbzzRHzBzzDq//gel1B7PgEfrincWBU+lY r74CTKVI0E3XeMhArQWaFL+Xl7eDo3+vtqSOUUMeBcS5VIK2gwjZZqpWF0/10VZO 1wmmiGID+egFu5/X7Z59/QMBvsIc22+O3xrgRfWyb2KhdDX+3TyMGSUihNhmjr7V QysEEpDK3wfpRTPaNIyqdhxkdBqIP+AaFSXzfZy9nDdWA7QsobKVW1UDmwvavkAC a8YZsKCPLtx12TcS3bvqOjQ/zfwsk0TZ -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:34 2024 by rpki-client on console-ams.rpki-client.org