$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json) Hash identifier: ME4WhEDDNXTzL94uwIeo6DKCdM6rGhssk2xqekKfOYA= Subject key identifier: E9:FE:ED:47:9C:D5:CB:B1:5D:CE:C5:7E:A8:23:1C:F8:72:C8:9A:EB Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Certificate serial: 0460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft Manifest number: 0552 Signing time: Fri 22 Nov 2024 23:42:42 +0000 Manifest this update: Fri 22 Nov 2024 23:42:41 +0000 Manifest next update: Fri 29 Nov 2024 23:42:41 +0000 Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: b9McWV+NPiUdI4renAsPPlV9uPuXUshKYWlVQLLGZ5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Validity Not Before: Nov 22 23:42:41 2024 GMT Not After : Nov 29 23:42:41 2024 GMT Subject: CN=674116f1-c9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0c:4a:67:ed:b5:48:db:d7:34:b1:a5:0c:6d: b7:12:0f:eb:f5:d6:d6:d4:e1:93:a6:b8:bd:a5:23: c4:b9:cf:0e:43:a2:67:ba:31:21:06:48:34:29:14: 9c:f0:5f:4d:20:be:1e:97:48:38:9f:68:2d:6f:17: 30:a0:98:89:e5:44:f8:9e:b2:29:2e:60:cb:15:00: 7d:06:59:e7:f1:20:ec:0d:b9:f0:ac:b9:58:04:95: d6:9f:48:9a:4f:e2:bc:a0:30:4e:16:13:5a:ff:e2: 4b:8f:b4:4d:0f:e3:e4:5d:47:a2:f7:c6:67:a9:c5: d5:42:5a:64:2f:48:15:19:4b:e6:21:2f:04:99:1c: 70:4c:4d:fb:de:be:71:b0:db:cd:d2:b3:c4:a6:f0: d8:54:cc:df:d2:88:28:cb:04:e3:7d:93:8f:e3:2b: 57:bf:8d:b8:1e:26:21:38:79:b7:d2:71:ae:00:d8: 56:0c:84:df:8e:b5:4a:b1:0b:36:4b:b3:c2:91:d4: 4d:70:4b:63:58:19:a4:38:3b:d0:90:3e:ad:cd:fd: f8:6a:02:2d:4d:8a:c5:f0:ac:91:b6:cc:9f:6b:e1: de:69:69:d7:ac:18:c5:8f:e9:93:36:ed:d3:47:67: 5c:2b:00:f7:ae:00:a3:d7:a2:25:01:41:ca:95:62: 76:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FE:ED:47:9C:D5:CB:B1:5D:CE:C5:7E:A8:23:1C:F8:72:C8:9A:EB X509v3 Authority Key Identifier: keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:09:09:3a:5c:55:56:8e:ef:cd:27:34:4a:9f:a9:29:7d:96: a0:23:98:f8:85:31:16:9a:29:ae:92:eb:49:b0:3c:e7:97:47: e2:d2:50:cc:fe:a1:cd:0e:26:56:54:3c:0c:ba:dd:1f:ca:f2: 2a:d2:d2:54:25:cf:74:0c:dd:43:05:f0:d7:a8:43:f4:6d:f0: 0d:a9:39:b5:a6:b2:45:a1:d9:da:bd:90:e8:64:f3:b8:00:3e: 20:11:f5:05:d4:48:f7:df:9d:08:86:4f:4c:43:bc:68:a0:3e: 35:e7:36:d0:94:b4:29:d3:c6:a8:d3:b2:c0:7a:c7:05:3f:77: 26:17:24:39:65:bf:41:ee:63:4e:ca:65:34:c6:9b:13:a0:4c: 95:bc:16:ec:82:da:b1:a6:a2:59:a5:5c:58:4f:1c:8d:84:98: 27:b6:a7:1a:2e:e7:04:0f:35:c2:95:04:4a:a5:6f:72:e6:46: 64:13:05:13:73:a3:a6:85:a5:a8:2e:78:69:73:dc:52:11:c2: ee:fa:3e:3a:eb:ef:86:d9:06:4f:37:f0:20:90:19:c3:64:f5: ea:8b:ea:d1:59:60:a4:67:39:08:a1:2b:b7:ad:47:41:06:74: 83:ad:9b:50:31:e4:58:53:83:8d:cb:fe:c7:91:e0:f1:de:23: 56:5e:6c:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKDBBQkZENzdBNjg2OTJFRkVCNDMyNDAwRkZEREREN0FF MUIyM0JDMjcwHhcNMjQxMTIyMjM0MjQxWhcNMjQxMTI5MjM0MjQxWjAYMRYwFAYD VQQDEw02NzQxMTZmMS1jOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgxKZ+21SNvXNLGlDG23Eg/r9dbW1OGTpri9pSPEuc8OQ6JnujEhBkg0KRSc 8F9NIL4el0g4n2gtbxcwoJiJ5UT4nrIpLmDLFQB9Blnn8SDsDbnwrLlYBJXWn0ia T+K8oDBOFhNa/+JLj7RND+PkXUei98ZnqcXVQlpkL0gVGUvmIS8EmRxwTE373r5x sNvN0rPEpvDYVMzf0ogoywTjfZOP4ytXv424HiYhOHm30nGuANhWDITfjrVKsQs2 S7PCkdRNcEtjWBmkODvQkD6tzf34agItTYrF8KyRtsyfa+HeaWnXrBjFj+mTNu3T R2dcKwD3rgCj16IlAUHKlWJ2MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOn+7Uec 1cuxXc7FfqgjHPhyyJrrMB8GA1UdIwQYMBaAFAq/13poaS7+tDJAD/3d164bI7wn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2NjBNa0FQX2QzWHJoc2p2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyX1hlbWhwTHY2ME1rQVBfZDNYcmhzanZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2 NjBNa0FQX2QzWHJoc2p2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXCQk6XFVWju/NJzRKn6kpfZagI5j4hTEWmimukutJsDznl0fi0lDM /qHNDiZWVDwMut0fyvIq0tJUJc90DN1DBfDXqEP0bfANqTm1prJFodnavZDoZPO4 AD4gEfUF1Ej3350Ihk9MQ7xooD415zbQlLQp08ao07LAescFP3cmFyQ5Zb9B7mNO ymU0xpsToEyVvBbsgtqxpqJZpVxYTxyNhJgntqcaLucEDzXClQRKpW9y5kZkEwUT c6OmhaWoLnhpc9xSEcLu+j466++G2QZPN/AgkBnDZPXqi+rRWWCkZzkIoSu3rUdB BnSDrZtQMeRYU4ONy/7HkeDx3iNWXmyT -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:26 2024 by rpki-client on console-ams.rpki-client.org