$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft File: M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json) Hash identifier: pIP7Vf3/2av0HC7yfqnLnwHdLRHDQMq+iwlGOyVAvrk= Subject key identifier: E9:72:A6:D3:B6:0A:84:AB:C9:A0:CA:AC:1C:3A:AF:4B:02:97:60:7A Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 Certificate issuer: /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Certificate serial: 3425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft Manifest number: 3425 Signing time: Tue 26 Nov 2024 15:03:26 +0000 Manifest this update: Tue 26 Nov 2024 15:03:25 +0000 Manifest next update: Tue 03 Dec 2024 15:03:25 +0000 Files and hashes: 1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: gCP3TB7ziJnbDaJm/ulCdMzYTE0FiRa3mF2xenc7B0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 15:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13349 (0x3425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Validity Not Before: Nov 26 15:03:25 2024 GMT Not After : Dec 3 15:03:25 2024 GMT Subject: CN=6745e33d-966b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:46:e3:b5:38:27:8e:9b:10:17:fa:ca:cd: e9:03:f8:26:a2:85:18:86:bd:32:0b:5e:c6:8a:8d: 96:73:c3:db:c9:98:a1:81:c1:1c:e6:50:01:f9:f0: 05:06:af:b5:81:34:56:91:26:91:8a:f7:ca:7f:62: c3:2a:a5:a8:00:12:f1:33:c2:1c:1d:1c:8b:bd:a4: c0:8d:99:2b:d6:c4:9a:11:bb:c3:a8:e9:32:80:e8: 3f:77:e9:48:81:ee:77:46:34:04:62:e1:cd:44:79: fc:f7:6f:0a:d1:fc:5a:e7:4b:5b:09:13:cd:f9:82: d0:e7:75:ae:05:e7:a6:ed:9b:6c:17:b0:01:80:d2: 2d:97:06:1c:fe:26:4f:f6:38:17:8d:dc:ad:18:12: b4:61:be:0c:e4:b8:84:14:df:ed:55:60:53:63:ca: dc:7c:18:9e:d4:4b:85:88:db:c6:51:89:d6:d6:b7: 24:c1:1d:89:64:b6:1d:80:f2:f1:de:5a:0b:50:2d: 3e:af:fb:a3:53:ca:39:82:f5:0e:69:d0:84:e8:24: 3d:d7:79:97:a1:d9:f1:35:ee:52:e1:93:10:1e:c7: 0a:04:6e:df:37:6c:3a:57:bb:a5:73:97:c9:e1:ba: ce:6b:0c:6c:3c:6a:2f:5b:c7:31:98:bf:57:03:1f: 3c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:72:A6:D3:B6:0A:84:AB:C9:A0:CA:AC:1C:3A:AF:4B:02:97:60:7A X509v3 Authority Key Identifier: keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:72:17:5f:88:a0:fd:c8:5d:a1:37:9e:44:18:42:51:b3:2d: 0c:67:6e:4d:c5:c7:09:fd:7f:5c:b6:eb:c4:27:e9:e3:8e:64: a8:0c:fa:51:7f:2b:d3:18:61:5b:55:9a:fd:cc:9f:9c:d5:a2: f6:82:a5:c9:57:1f:fa:0f:d3:a0:53:69:2d:d4:95:87:68:62: 4a:a6:a1:36:62:c0:95:b0:fe:44:32:b6:cd:98:7e:6e:2c:95: 7d:f7:19:ce:9f:c5:5c:bb:44:0b:0b:33:91:99:0a:f0:24:17: db:34:82:de:64:3b:eb:00:3b:d2:35:51:44:93:bc:2b:03:39: 16:74:ab:b9:a3:02:6e:03:f5:68:ef:8c:a6:2c:c0:e2:c9:85: e6:11:52:e9:10:40:6c:96:40:ce:11:9b:31:c6:2f:92:24:3f: 1d:a4:38:0b:4f:ab:63:7e:ff:00:8f:d7:33:4e:75:54:62:b2: 84:55:6e:15:58:42:ae:a5:ec:16:c5:00:d3:4d:ae:98:bf:2f: f7:81:aa:20:0d:49:f1:3e:e2:ee:63:b2:b1:ce:30:23:6c:24: ff:0a:77:05:e8:2d:fd:ca:ec:a0:7c:d8:26:7a:e5:59:41:d6: e2:16:3a:9b:2e:15:35:90:fa:a5:ab:9d:cb:8c:1e:42:a3:60: 0d:68:b7:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBM0ExMTAvBgNVBAUTKDMzOTIxQjRFOUE4OTQxQTU4NkJCREQ5QUY4QjE4ODVB OEYyMjVGQTIwHhcNMjQxMTI2MTUwMzI1WhcNMjQxMjAzMTUwMzI1WjAYMRYwFAYD VQQDEw02NzQ1ZTMzZC05NjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHpG47U4J46bEBf6ys3pA/gmooUYhr0yC17Gio2Wc8PbyZihgcEc5lAB+fAF Bq+1gTRWkSaRivfKf2LDKqWoABLxM8IcHRyLvaTAjZkr1sSaEbvDqOkygOg/d+lI ge53RjQEYuHNRHn8928K0fxa50tbCRPN+YLQ53WuBeem7ZtsF7ABgNItlwYc/iZP 9jgXjdytGBK0Yb4M5LiEFN/tVWBTY8rcfBie1EuFiNvGUYnW1rckwR2JZLYdgPLx 3loLUC0+r/ujU8o5gvUOadCE6CQ913mXodnxNe5S4ZMQHscKBG7fN2w6V7ulc5fJ 4brOawxsPGovW8cxmL9XAx883QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlyptO2 CoSryaDKrBw6r0sCl2B6MB8GA1UdIwQYMBaAFDOSG06aiUGlhrvdmvixiFqPIl+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzQS8yOThEMjU4ODFE OUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFhV0d1OTJhLUxHSVdvOGlY NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001SWJUcHFKUWFXR3U5MmEtTEdJV284aVg2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUEzQS8yOThEMjU4ODFEOUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFh V0d1OTJhLUxHSVdvOGlYNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARchdfiKD9yF2hN55EGEJRsy0MZ25NxccJ/X9ctuvEJ+njjmSoDPpR fyvTGGFbVZr9zJ+c1aL2gqXJVx/6D9OgU2kt1JWHaGJKpqE2YsCVsP5EMrbNmH5u LJV99xnOn8Vcu0QLCzORmQrwJBfbNILeZDvrADvSNVFEk7wrAzkWdKu5owJuA/Vo 74ymLMDiyYXmEVLpEEBslkDOEZsxxi+SJD8dpDgLT6tjfv8Aj9czTnVUYrKEVW4V WEKupewWxQDTTa6Yvy/3gaogDUnxPuLuY7KxzjAjbCT/CncF6C39yuygfNgmeuVZ QdbiFjqbLhU1kPqlq53LjB5Co2ANaLcM -----END CERTIFICATE-----Generated at Tue Nov 26 16:39:20 2024 by rpki-client on console-ams.rpki-client.org