$ rpki-client -vvf rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft File: xYjecPKsY-wWHdqc3CADirBHKkU.mft (raw, json) Hash identifier: OsRZU01h8hP0/XvJG1gpp2Gd9/WEqF3sJML30JUfAFE= Subject key identifier: 67:EF:91:40:32:CF:D7:55:E0:9F:A3:35:65:3F:DD:C4:56:66:D6:CA Authority key identifier: C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45 Certificate issuer: /CN=A919DFF7/serialNumber=C588DE70F2AC63EC161DDA9CDC20038AB0472A45 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft Manifest number: 01E1 Signing time: Sat 23 Nov 2024 01:41:12 +0000 Manifest this update: Sat 23 Nov 2024 01:41:11 +0000 Manifest next update: Sat 30 Nov 2024 01:41:11 +0000 Files and hashes: 1: xYjecPKsY-wWHdqc3CADirBHKkU.crl (hash: A0A+J9oywtNAK8KfR9HWoHz5l7cnmAV1MNTywnv4jVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.crl rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DFF7/serialNumber=C588DE70F2AC63EC161DDA9CDC20038AB0472A45 Validity Not Before: Nov 23 01:41:11 2024 GMT Not After : Nov 30 01:41:11 2024 GMT Subject: CN=674132b8-a50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:d4:71:86:16:eb:94:07:bd:96:e1:86:33: 56:8f:7f:24:f5:48:40:39:d3:e3:5d:6d:36:d9:f0: 93:2e:3a:4a:a7:0d:25:af:b2:4a:9a:a7:2c:4a:76: d2:35:65:ce:74:52:8a:63:f0:c7:91:f3:bc:98:00: cc:88:e4:b8:05:af:d7:6e:78:f4:43:0e:78:4e:a0: 03:8b:19:80:2e:67:fa:ab:a2:7e:54:a4:8b:89:77: 9e:ce:99:ad:35:b6:b0:12:3f:18:a3:28:91:4d:17: 42:10:a0:63:0e:ab:d7:64:6c:1c:b6:0c:a6:7c:e6: fe:d3:56:19:9d:c7:9b:b8:9c:f6:27:5e:a4:c9:7e: 32:e2:f8:10:b7:01:f5:f7:79:b2:8d:98:f2:5b:45: a4:9e:3e:92:35:95:b2:4e:13:d2:41:c3:54:d7:dc: b7:0b:a8:0a:e7:90:7d:cf:02:a5:28:97:bf:93:8e: 80:08:69:bb:b1:84:5a:9e:b8:25:8f:dc:6b:30:99: fe:25:01:17:b5:fc:17:83:09:4a:50:71:bb:f7:c6: ac:0b:c3:37:97:64:14:bf:37:f4:eb:51:f0:58:12: e5:d8:fb:7c:d2:7a:11:49:05:09:59:c9:2f:99:39: 91:a5:07:58:30:b3:66:e5:a4:5d:1f:70:b7:8a:94: 8a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EF:91:40:32:CF:D7:55:E0:9F:A3:35:65:3F:DD:C4:56:66:D6:CA X509v3 Authority Key Identifier: keyid:C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:37:b8:f8:fd:5b:85:b7:60:b7:30:52:98:d6:ff:b1:1d:7a: e5:54:68:15:36:2f:cf:e3:1d:dd:e0:b9:6e:32:8f:3f:50:11: 30:ca:36:b8:43:39:4e:ee:f8:41:2e:65:41:75:cf:02:30:0d: 8a:3d:2a:2d:08:d6:5d:3d:32:f2:79:5a:9b:49:cd:a5:57:2b: a2:ca:8e:b8:fb:af:e1:78:13:bc:2f:1e:94:91:b4:d5:42:74: 23:1b:0b:7b:1d:51:e3:5a:3b:f8:3c:dd:ed:a0:a7:02:16:9c: 9e:a7:87:f7:4c:cc:2b:c1:98:32:5b:c7:d9:94:f5:24:90:d8: 54:98:f1:3a:61:ca:90:79:96:b8:7d:d4:22:45:d6:a2:51:95: 49:00:04:8b:42:c2:0a:5a:fd:d8:d0:21:c2:1f:3c:91:f8:1a: c5:a5:e0:cd:e2:93:c1:f0:37:78:47:7e:ae:86:50:10:e0:dd: eb:e1:6e:90:76:7a:52:af:0e:2c:de:61:fb:53:f4:69:3e:3c: 31:3c:2f:50:4d:fa:72:1e:7c:0b:c7:62:f8:f6:1c:5a:bd:af: 3d:12:d7:d2:da:24:71:6e:40:20:6b:87:15:35:d4:2f:a5:86: ba:8a:32:bf:9e:b4:ba:4c:e4:be:84:34:3d:79:df:f8:75:a1: ab:37:e2:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURGRjcxMTAvBgNVBAUTKEM1ODhERTcwRjJBQzYzRUMxNjFEREE5Q0RDMjAwMzhB QjA0NzJBNDUwHhcNMjQxMTIzMDE0MTExWhcNMjQxMTMwMDE0MTExWjAYMRYwFAYD VQQDEw02NzQxMzJiOC1hNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTXUcYYW65QHvZbhhjNWj38k9UhAOdPjXW022fCTLjpKpw0lr7JKmqcsSnbS NWXOdFKKY/DHkfO8mADMiOS4Ba/Xbnj0Qw54TqADixmALmf6q6J+VKSLiXeezpmt NbawEj8YoyiRTRdCEKBjDqvXZGwctgymfOb+01YZncebuJz2J16kyX4y4vgQtwH1 93myjZjyW0Wknj6SNZWyThPSQcNU19y3C6gK55B9zwKlKJe/k46ACGm7sYRanrgl j9xrMJn+JQEXtfwXgwlKUHG798asC8M3l2QUvzf061HwWBLl2Pt80noRSQUJWckv mTmRpQdYMLNm5aRdH3C3ipSKZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfvkUAy z9dV4J+jNWU/3cRWZtbKMB8GA1UdIwQYMBaAFMWI3nDyrGPsFh3anNwgA4qwRypF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REZGNy8zMzJEMEVENjIz NjcxMUVEQThBQzFGMjhDNEY5QUUwMi94WWplY1BLc1ktd1dIZHFjM0NBRGlyQkhL a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hZamVjUEtzWS13V0hkcWMzQ0FEaXJCSEtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REZGNy8zMzJEMEVENjIzNjcxMUVEQThBQzFGMjhDNEY5QUUwMi94WWplY1BLc1kt d1dIZHFjM0NBRGlyQkhLa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFN7j4/VuFt2C3MFKY1v+xHXrlVGgVNi/P4x3d4LluMo8/UBEwyja4 QzlO7vhBLmVBdc8CMA2KPSotCNZdPTLyeVqbSc2lVyuiyo64+6/heBO8Lx6UkbTV QnQjGwt7HVHjWjv4PN3toKcCFpyep4f3TMwrwZgyW8fZlPUkkNhUmPE6YcqQeZa4 fdQiRdaiUZVJAASLQsIKWv3Y0CHCHzyR+BrFpeDN4pPB8Dd4R36uhlAQ4N3r4W6Q dnpSrw4s3mH7U/RpPjwxPC9QTfpyHnwLx2L49hxava89EtfS2iRxbkAga4cVNdQv pYa6ijK/nrS6TOS+hDQ9ed/4daGrN+J4 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:42 2024 by rpki-client on console-fra.rpki-client.org