$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft File: xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft (raw, json) Hash identifier: SvHZunO66KWg7BkXz3vMUBFD++KHr3sUhmS5OXIh2sI= Subject key identifier: 38:DE:48:D4:D0:BD:B6:F3:05:9E:F3:EC:3D:D2:3D:10:4B:06:1D:2F Authority key identifier: C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05 Certificate issuer: /CN=A91A76AD/serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft Manifest number: 99 Signing time: Sat 23 Nov 2024 04:24:08 +0000 Manifest this update: Sat 23 Nov 2024 04:24:08 +0000 Manifest next update: Sat 30 Nov 2024 04:24:08 +0000 Files and hashes: 1: xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl (hash: sP6N9uIigWFTVB14IWo7EaW4JzSDOiEjSe50xaxXYhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD/serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05 Validity Not Before: Nov 23 04:24:08 2024 GMT Not After : Nov 30 04:24:08 2024 GMT Subject: CN=674158e8-6b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:01:59:8f:1c:6d:36:2b:e5:6a:05:7b:43:ba: 67:d3:71:1b:2a:57:4e:b2:6c:d2:02:fb:33:dc:d3: 13:3d:4b:ca:e8:15:84:52:84:1d:41:53:25:6e:b4: 25:ca:ab:4b:fc:bf:4e:61:09:bc:32:26:e2:e2:c7: bd:b4:06:8b:7b:04:b3:f6:3f:17:2a:64:57:ee:38: 94:3b:c0:40:64:45:bf:1d:2d:8a:7b:5f:9e:09:55: 83:99:37:79:4f:6c:3f:fb:c0:50:a4:cf:39:73:d2: 94:24:a9:fa:6f:40:65:9b:28:2d:41:ea:65:58:95: b2:8e:37:54:45:4d:2a:b5:72:9b:f5:6c:c9:ca:51: cd:75:9a:25:c8:f8:81:dd:ac:93:5b:c4:60:5a:29: 47:99:38:8d:86:e5:23:39:1a:db:22:44:3f:36:da: 7c:65:5f:a7:a2:47:38:ef:f9:9d:b6:ff:40:13:97: c2:60:de:0a:28:78:c5:fc:69:f2:47:df:30:61:ad: e4:01:d6:48:0c:99:8e:38:38:6a:7c:a0:02:44:29: 33:51:05:1e:56:6d:6d:9b:2c:4e:f7:c6:3e:f1:2e: 2f:3e:27:5e:75:fd:57:cb:43:b2:45:87:c5:19:8a: ec:de:bb:a0:df:7f:0d:0b:3c:f2:fc:2c:09:fc:3f: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DE:48:D4:D0:BD:B6:F3:05:9E:F3:EC:3D:D2:3D:10:4B:06:1D:2F X509v3 Authority Key Identifier: keyid:C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a6:44:fb:3f:28:d5:6e:46:63:3f:65:9c:c0:d2:6c:f3:52: c0:54:f5:38:6e:2e:6d:6f:d1:7d:d8:d7:13:20:da:cc:fa:54: db:fb:49:61:74:92:44:8a:db:00:38:b9:bd:10:71:c3:53:34: b2:33:d3:0e:92:8c:14:c3:f7:63:6c:25:1d:d4:05:17:66:8d: d5:2b:6b:fa:a0:8c:cc:fe:dc:b9:94:4a:cd:91:0d:f2:ce:aa: c9:4b:2c:8c:21:dd:8c:a1:86:2e:75:2c:1d:3e:2a:47:5e:d8: 7f:d3:5a:d3:75:87:49:fb:ff:31:f2:3a:92:a4:12:ad:66:a8: 60:2a:20:b0:bc:ba:68:48:5a:34:e3:02:bc:ab:ec:a7:62:7c: 42:0e:ae:c0:f2:d8:05:9a:e6:8a:09:79:f5:75:2e:8e:07:3a: ff:f8:f5:0e:1b:d5:1b:05:69:f7:43:8c:05:b7:00:ce:e8:b3: 56:b0:84:20:91:a7:0e:7a:3e:0d:55:42:f8:d5:11:fa:5c:f6: 08:00:ee:40:43:f4:6a:ef:c2:1a:1c:f8:ea:be:51:dd:1c:34: d1:42:b3:61:fb:4d:b9:76:58:5a:71:c6:c9:ad:fa:dd:ad:44: ab:73:e2:32:b2:d1:19:a4:a9:a6:75:8b:1b:b4:af:66:ab:2f: 2c:e8:68:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKEM0QjYyNTAzRTZENjcwMkFDMjlEMDBCRjM1MEM4QjJD MTJFNzlGMDUwHhcNMjQxMTIzMDQyNDA4WhcNMjQxMTMwMDQyNDA4WjAYMRYwFAYD VQQDEw02NzQxNThlOC02YjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gFZjxxtNivlagV7Q7pn03EbKldOsmzSAvsz3NMTPUvK6BWEUoQdQVMlbrQl yqtL/L9OYQm8Mibi4se9tAaLewSz9j8XKmRX7jiUO8BAZEW/HS2Ke1+eCVWDmTd5 T2w/+8BQpM85c9KUJKn6b0BlmygtQeplWJWyjjdURU0qtXKb9WzJylHNdZolyPiB 3ayTW8RgWilHmTiNhuUjORrbIkQ/Ntp8ZV+nokc47/mdtv9AE5fCYN4KKHjF/Gny R98wYa3kAdZIDJmOODhqfKACRCkzUQUeVm1tmyxO98Y+8S4vPidedf1Xy0OyRYfF GYrs3rug338NCzzy/CwJ/D86hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjeSNTQ vbbzBZ7z7D3SPRBLBh0vMB8GA1UdIwQYMBaAFMS2JQPm1nAqwp0AvzUMiywS558F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC8wN0Y1MkU0NkJF ODAxMUVFOTY3ODRENjJDNEY5QUUwMi94TFlsQS1iV2NDckNuUUNfTlF5TExCTG5u d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hMWWxBLWJXY0NyQ25RQ19OUXlMTEJMbm53VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC8wN0Y1MkU0NkJFODAxMUVFOTY3ODRENjJDNEY5QUUwMi94TFlsQS1iV2ND ckNuUUNfTlF5TExCTG5ud1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtpkT7PyjVbkZjP2WcwNJs81LAVPU4bi5tb9F92NcTINrM+lTb+0lh dJJEitsAOLm9EHHDUzSyM9MOkowUw/djbCUd1AUXZo3VK2v6oIzM/ty5lErNkQ3y zqrJSyyMId2MoYYudSwdPipHXth/01rTdYdJ+/8x8jqSpBKtZqhgKiCwvLpoSFo0 4wK8q+ynYnxCDq7A8tgFmuaKCXn1dS6OBzr/+PUOG9UbBWn3Q4wFtwDO6LNWsIQg kacOej4NVUL41RH6XPYIAO5AQ/Rq78IaHPjqvlHdHDTRQrNh+025dlhaccbJrfrd rUSrc+IystEZpKmmdYsbtK9mqy8s6Gia -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:19 2024 by rpki-client on console-ams.rpki-client.org