$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json) Hash identifier: HC7XWBNd6JL685Xl0FAH9WE2pa156XGC+MYlKcFbbpA= Subject key identifier: D3:0E:77:90:79:A1:E2:57:A9:61:3D:EE:4F:F9:A1:F3:B7:24:AA:FB Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Certificate serial: 3425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft Manifest number: 37FA Signing time: Fri 22 Nov 2024 14:37:09 +0000 Manifest this update: Fri 22 Nov 2024 14:37:08 +0000 Manifest next update: Fri 29 Nov 2024 14:37:08 +0000 Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: b8wFc1KXKU1tEnbWn4aIES34905YIKnQD9xx8NEN41U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13349 (0x3425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640 Validity Not Before: Nov 22 14:37:08 2024 GMT Not After : Nov 29 14:37:08 2024 GMT Subject: CN=67409714-80e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4a:0d:f5:94:c9:59:f1:72:bf:b0:8a:74:02: c4:d4:24:fa:96:4c:d4:76:eb:45:4d:e8:0b:c6:24: 9c:b8:2d:28:e2:2c:02:92:6d:14:94:df:48:77:de: dd:03:b3:9a:2b:57:37:b9:0b:50:e4:78:b7:ca:eb: ef:5e:1e:b1:5b:f0:6d:8c:ee:d7:e4:3e:22:6c:51: 88:73:75:ee:82:e2:65:19:ed:8d:c1:43:df:bf:53: fc:76:46:a4:b1:c7:e5:de:96:60:ed:12:13:e1:69: aa:ac:95:5c:71:56:31:50:78:cd:03:f4:b9:7f:37: 31:b8:3d:93:d8:53:af:1b:92:56:09:1b:51:cd:65: 80:33:98:a9:1b:6d:66:cc:46:57:68:cd:d4:c9:32: 1f:b6:ca:fe:fd:f1:31:78:ad:6c:4f:34:0f:9c:51: 95:eb:bd:d2:33:8f:50:af:fb:eb:e5:c3:4f:5a:42: da:12:9d:66:b8:8d:b3:c7:c6:d8:2f:0f:a0:c1:2b: 3c:43:38:9e:e7:9f:39:ad:5e:62:54:ec:cb:a0:72: ab:60:de:c9:23:69:36:fe:43:3f:df:5e:e3:79:76: 94:5c:f7:1a:b1:e3:75:50:c9:31:fd:e9:24:fc:20: bb:75:6c:b8:16:32:9d:d4:0a:5a:11:a9:be:53:59: c1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0E:77:90:79:A1:E2:57:A9:61:3D:EE:4F:F9:A1:F3:B7:24:AA:FB X509v3 Authority Key Identifier: keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:58:da:03:94:1e:ce:7a:8e:df:16:88:51:c7:92:e2:95:66: 41:5d:0b:fe:73:60:1e:fc:ea:9b:b1:6f:b5:8d:2b:9f:b6:d6: aa:19:76:42:67:92:9c:0c:31:f7:04:49:2e:6b:73:07:d6:cf: db:2e:b8:31:27:0c:cb:e4:8b:02:ef:13:5d:0c:8c:51:93:b3: 4c:13:de:23:bb:91:a4:a5:5f:1d:f5:9c:e3:fa:f6:46:be:22: b9:cf:9d:2e:26:3b:9a:f4:90:0c:a1:b4:bc:38:38:b2:64:48: 92:85:3d:40:ac:70:52:fe:3b:e3:82:48:50:8f:30:50:e7:4d: 50:d0:9d:4c:35:5a:cf:49:5b:c8:e2:a3:7b:bb:8c:4f:af:57: 52:7a:12:e4:3b:27:93:6e:e8:76:e0:96:17:ca:81:c4:ae:13: 2a:40:a6:ee:26:28:83:b0:dd:0b:e0:30:aa:30:e8:16:28:36: 7b:eb:4f:b6:01:e2:d5:7c:c6:1f:2b:27:e3:a0:96:13:9b:a6: 28:b2:86:57:87:d0:cc:d2:1c:7a:f2:d5:9d:2b:0d:82:91:74: ae:a1:7a:51:4f:b7:4a:36:0f:86:0c:4c:c9:e5:71:45:8d:ab: 42:94:b3:d7:4f:9c:a4:cc:ab:da:1d:e4:d1:8d:71:b9:e4:f4: 97:51:e3:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQkQxMTAvBgNVBAUTKDE2MjEwREM2NTJBMTYwREVFNEU0MDE1QkJDQjQwOUZB ODc3MjQ2NDAwHhcNMjQxMTIyMTQzNzA4WhcNMjQxMTI5MTQzNzA4WjAYMRYwFAYD VQQDEw02NzQwOTcxNC04MGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEoN9ZTJWfFyv7CKdALE1CT6lkzUdutFTegLxiScuC0o4iwCkm0UlN9Id97d A7OaK1c3uQtQ5Hi3yuvvXh6xW/BtjO7X5D4ibFGIc3XuguJlGe2NwUPfv1P8dkak scfl3pZg7RIT4WmqrJVccVYxUHjNA/S5fzcxuD2T2FOvG5JWCRtRzWWAM5ipG21m zEZXaM3UyTIftsr+/fExeK1sTzQPnFGV673SM49Qr/vr5cNPWkLaEp1muI2zx8bY Lw+gwSs8Qzie5585rV5iVOzLoHKrYN7JI2k2/kM/317jeXaUXPcaseN1UMkx/ekk /CC7dWy4FjKd1ApaEam+U1nBvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMOd5B5 oeJXqWE97k/5ofO3JKr7MB8GA1UdIwQYMBaAFBYhDcZSoWDe5OQBW7y0CfqHckZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNCRC9CRTdDRDAyQTFE OEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlON2s1QUZidkxRSi1vZHlS a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZpRU54bEtoWU43azVBRmJ2TFFKLW9keVJrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNCRC9CRTdDRDAyQTFEOEMxMUUyQUVGMDQ1RTgwOEIwMkNEMi9GaUVOeGxLaFlO N2s1QUZidkxRSi1vZHlSa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/WNoDlB7Oeo7fFohRx5LilWZBXQv+c2Ae/OqbsW+1jSufttaqGXZC Z5KcDDH3BEkua3MH1s/bLrgxJwzL5IsC7xNdDIxRk7NME94ju5GkpV8d9Zzj+vZG viK5z50uJjua9JAMobS8ODiyZEiShT1ArHBS/jvjgkhQjzBQ501Q0J1MNVrPSVvI 4qN7u4xPr1dSehLkOyeTbuh24JYXyoHErhMqQKbuJiiDsN0L4DCqMOgWKDZ760+2 AeLVfMYfKyfjoJYTm6YosoZXh9DM0hx68tWdKw2CkXSuoXpRT7dKNg+GDEzJ5XFF jatClLPXT5ykzKvaHeTRjXG55PSXUePY -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:38 2024 by rpki-client on console-fra.rpki-client.org