$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft File: u759h-rKuKMp6DvLD_fVAIi-Cc0.mft (raw, json) Hash identifier: +JK7u1qiQKhDuICQrjbUYojmBp23ZkStZIqRlmksY8I= Subject key identifier: A9:88:23:86:74:06:8D:B3:5D:B1:AF:4E:7E:B2:2C:0E:28:F8:0A:FD Authority key identifier: BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD Certificate issuer: /CN=A91AF15E/serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft Manifest number: 022F Signing time: Sat 23 Nov 2024 01:24:01 +0000 Manifest this update: Sat 23 Nov 2024 01:24:01 +0000 Manifest next update: Sat 30 Nov 2024 01:24:01 +0000 Files and hashes: 1: u759h-rKuKMp6DvLD_fVAIi-Cc0.crl (hash: bS7ER4/D0m8ECLecV8JqtyRXHQ9Kfht1MF9oCtj9TYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF15E/serialNumber=BBBE7D87EACAB8A329E83BCB0FF7D50088BE09CD Validity Not Before: Nov 23 01:24:01 2024 GMT Not After : Nov 30 01:24:01 2024 GMT Subject: CN=67412eb1-e400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:37:3a:83:cf:1d:9d:a1:7b:f7:3e:a4:5a: c7:66:ed:77:93:ba:6b:86:4f:4b:dd:ab:78:de:1a: d1:f7:22:82:57:d9:72:1e:c3:1e:b9:da:27:83:13: 50:23:97:6f:47:ed:c0:9a:35:bb:a5:a7:5e:71:ba: ec:ef:90:cd:bb:05:14:2c:23:45:a8:a5:0a:20:0a: 90:17:86:2f:c2:42:42:a1:ba:ac:44:f5:0a:60:89: 28:58:23:22:90:62:2e:76:11:47:10:f9:58:5e:a2: 85:fa:f6:0f:25:ad:a2:d5:fe:f3:d4:c4:ec:f2:b9: da:70:cf:9a:20:13:74:f6:bc:67:4d:9e:6e:ed:6e: 22:c7:1f:38:6a:dc:10:4a:ce:3c:3b:72:c6:7a:2a: c4:79:16:15:da:92:b2:a6:ca:9e:e7:71:77:9e:f8: 53:f5:dd:c8:67:e7:27:bd:92:42:a3:c6:0e:99:13: a7:0f:3f:62:d6:a4:99:a0:39:11:5e:81:cc:ad:40: ab:69:77:3b:d4:00:ec:9a:20:b7:35:fb:4b:8f:a7: 93:9e:f9:ed:6f:59:f4:f3:32:50:2d:34:79:65:c0: 83:fd:8e:25:49:3a:80:d8:27:7d:f3:71:49:a6:76: b9:92:8c:69:29:9e:a8:d3:7c:c2:d4:a3:0b:e8:21: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:88:23:86:74:06:8D:B3:5D:B1:AF:4E:7E:B2:2C:0E:28:F8:0A:FD X509v3 Authority Key Identifier: keyid:BB:BE:7D:87:EA:CA:B8:A3:29:E8:3B:CB:0F:F7:D5:00:88:BE:09:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u759h-rKuKMp6DvLD_fVAIi-Cc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF15E/94B2D376031D11ED99F29E1CC4F9AE02/u759h-rKuKMp6DvLD_fVAIi-Cc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:87:fb:72:cd:c7:7d:b3:f8:40:dc:9c:cc:5c:11:7b:6c:21: be:1d:98:fe:b2:a4:ed:74:07:56:88:29:3b:2f:88:ed:6e:88: 6a:d2:81:16:5f:bc:8a:e2:11:d5:48:7d:82:12:e1:e0:65:5b: e8:14:c2:bd:c3:6a:2c:d5:69:43:35:0e:2d:93:ce:7e:76:16: cf:67:91:aa:97:a3:51:1a:f9:07:e0:d9:d2:af:36:b1:43:7a: 83:0d:c1:de:ee:e8:33:6e:83:8b:02:7f:ce:9e:56:c8:20:91: 57:18:ac:91:9e:d7:39:a6:62:87:47:5b:90:80:50:58:97:56: b3:fc:95:ab:7d:75:21:5b:e2:2c:b1:de:e6:20:17:50:07:23: 2a:79:cd:51:21:b9:8e:29:10:8b:d8:7b:2d:49:4a:cc:1e:66: 19:06:53:a8:99:10:79:21:5b:a3:09:fc:26:6f:ff:dc:86:91: 8c:c5:6a:ed:51:b3:92:df:58:99:8e:57:79:3d:f9:d4:bd:32: 7d:59:9c:fb:42:d4:9f:d2:cb:5b:6e:bd:2f:68:ff:4a:14:2e: 23:f3:01:c9:d0:b8:43:d4:02:f2:d7:78:63:0f:36:8b:53:95: d7:a3:d4:c8:49:6e:0e:86:d9:57:0a:05:ec:b0:07:43:19:ff: 8e:60:7f:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxNUUxMTAvBgNVBAUTKEJCQkU3RDg3RUFDQUI4QTMyOUU4M0JDQjBGRjdENTAw ODhCRTA5Q0QwHhcNMjQxMTIzMDEyNDAxWhcNMjQxMTMwMDEyNDAxWjAYMRYwFAYD VQQDEw02NzQxMmViMS1lNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhY3OoPPHZ2he/c+pFrHZu13k7prhk9L3at43hrR9yKCV9lyHsMeudongxNQ I5dvR+3AmjW7padecbrs75DNuwUULCNFqKUKIAqQF4YvwkJCobqsRPUKYIkoWCMi kGIudhFHEPlYXqKF+vYPJa2i1f7z1MTs8rnacM+aIBN09rxnTZ5u7W4ixx84atwQ Ss48O3LGeirEeRYV2pKypsqe53F3nvhT9d3IZ+cnvZJCo8YOmROnDz9i1qSZoDkR XoHMrUCraXc71ADsmiC3NftLj6eTnvntb1n08zJQLTR5ZcCD/Y4lSTqA2Cd983FJ pna5koxpKZ6o03zC1KML6CHWgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmII4Z0 Bo2zXbGvTn6yLA4o+Ar9MB8GA1UdIwQYMBaAFLu+fYfqyrijKeg7yw/31QCIvgnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE1RS85NEIyRDM3NjAz MUQxMUVEOTlGMjlFMUNDNEY5QUUwMi91NzU5aC1yS3VLTXA2RHZMRF9mVkFJaS1D YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3NTloLXJLdUtNcDZEdkxEX2ZWQUlpLUNjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjE1RS85NEIyRDM3NjAzMUQxMUVEOTlGMjlFMUNDNEY5QUUwMi91NzU5aC1yS3VL TXA2RHZMRF9mVkFJaS1DYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBh/tyzcd9s/hA3JzMXBF7bCG+HZj+sqTtdAdWiCk7L4jtbohq0oEW X7yK4hHVSH2CEuHgZVvoFMK9w2os1WlDNQ4tk85+dhbPZ5Gql6NRGvkH4NnSrzax Q3qDDcHe7ugzboOLAn/OnlbIIJFXGKyRntc5pmKHR1uQgFBYl1az/JWrfXUhW+Is sd7mIBdQByMqec1RIbmOKRCL2HstSUrMHmYZBlOomRB5IVujCfwmb//chpGMxWrt UbOS31iZjld5PfnUvTJ9WZz7QtSf0stbbr0vaP9KFC4j8wHJ0LhD1ALy13hjDzaL U5XXo9TISW4OhtlXCgXssAdDGf+OYH8i -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:48 2024 by rpki-client on console-ams.rpki-client.org