$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft File: odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft (raw, json) Hash identifier: grqLAH6wDKF3AlYW45UrByJ1pIcZAJe/05c8PBrzHPs= Subject key identifier: E1:E6:3E:92:D8:B1:0B:E5:EE:58:7E:56:D7:5D:4F:66:71:10:F2:96 Authority key identifier: A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 Certificate issuer: /CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft Manifest number: 1B Signing time: Wed 23 Oct 2024 06:35:44 +0000 Manifest this update: Wed 23 Oct 2024 06:35:44 +0000 Manifest next update: Wed 30 Oct 2024 06:35:44 +0000 Files and hashes: 1: odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl (hash: aZd+p5jq7BI+1lrojBjKKs/paeIqrIOsbrULRJop9Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0DE0/serialNumber=A1D25DE3A559FDAF30449D9477D176EA378971F8 Validity Not Before: Oct 23 06:35:44 2024 GMT Not After : Oct 30 06:35:44 2024 GMT Subject: CN=67189940-891e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:a6:66:f7:97:6d:2f:0f:28:41:27:ad:77: 78:58:9a:a2:2f:4b:43:ac:43:55:01:80:66:c5:9a: 1b:3f:0d:07:21:eb:59:74:47:70:2d:37:9f:2c:82: 89:17:29:47:36:0f:ac:9d:ea:39:ea:e2:d4:ba:60: 4e:33:8e:54:4b:51:4d:d8:2a:47:92:1b:bc:61:b0: fa:7f:24:3a:98:e2:25:86:d4:99:b3:0a:85:e3:a4: e9:7f:70:41:83:6a:a8:ad:ae:fc:30:5e:26:09:d3: bf:b0:cb:a1:b2:d9:df:31:c2:2b:da:d8:9e:10:ba: b4:81:7e:2a:cf:3b:a2:ab:af:ef:c6:b5:df:30:c8: 8e:88:4a:e4:e4:e7:81:72:73:f8:c9:9a:e9:63:84: 9b:0d:08:d6:36:48:ab:c3:c5:e5:1a:98:17:f6:fd: ba:5f:65:ee:55:ae:30:36:44:1e:f9:9f:57:81:e4: 9e:df:3a:e0:0f:e2:ed:3b:be:23:4d:77:26:29:49: e7:e6:e8:55:e5:df:c5:be:99:ff:1c:d0:34:58:40: 77:fb:cc:d6:37:55:57:08:c3:8c:21:79:7d:c4:03: c7:ee:8f:f6:33:dd:c2:93:0f:d3:63:cc:d2:4f:ab: 3b:92:a8:1a:15:24:08:0f:92:c1:ef:c8:af:5b:4b: ab:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E6:3E:92:D8:B1:0B:E5:EE:58:7E:56:D7:5D:4F:66:71:10:F2:96 X509v3 Authority Key Identifier: keyid:A1:D2:5D:E3:A5:59:FD:AF:30:44:9D:94:77:D1:76:EA:37:89:71:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odJd46VZ_a8wRJ2Ud9F26jeJcfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7A65E93C6A8511EFB1568147C4F9AE02/odJd46VZ_a8wRJ2Ud9F26jeJcfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:55:3a:34:b1:83:7d:18:64:ba:b5:f7:07:f0:71:a1:80:bd: 0c:4b:43:42:03:b0:f6:6d:6b:ae:b8:57:63:4a:9b:cb:c9:54: 5a:52:12:75:b0:6e:ee:82:49:bc:5c:3b:71:9c:59:89:8a:02: fa:8f:9b:99:b4:0b:a3:cd:09:ab:fc:be:11:ab:3c:1d:22:dc: 60:ca:78:65:4f:6f:d9:3e:e4:62:dd:75:c9:a3:61:a4:e6:b9: b0:06:e7:42:3e:12:fe:50:de:d2:31:c5:c3:14:be:67:24:68: 91:e9:e6:67:39:cf:e9:d0:40:4f:d9:6a:6f:96:83:e6:8d:3d: e0:21:97:80:44:84:04:6a:36:a6:c4:1f:1e:83:85:5c:52:f5: 18:6f:f2:7b:c3:02:20:1a:7b:b5:74:cc:22:ec:24:38:04:31: 45:c1:f2:8d:4b:55:09:7a:4f:48:9f:dd:e8:d7:dc:5f:a9:ce: 6d:d9:6f:e8:5a:9b:10:7b:32:1f:a1:19:70:1f:e2:33:34:a5: a9:dc:aa:38:3d:0c:38:8a:e7:2f:2a:4c:ec:12:ed:db:be:a9: 03:78:4a:18:76:e9:f1:f5:c1:02:25:f5:e7:c5:2d:81:51:ed: 02:7c:a0:a4:83:ac:b6:d7:c1:57:9a:a5:77:05:a8:1b:8c:7c: d1:89:fa:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MERFMDExMC8GA1UEBRMoQTFEMjVERTNBNTU5RkRBRjMwNDQ5RDk0NzdEMTc2RUEz Nzg5NzFGODAeFw0yNDEwMjMwNjM1NDRaFw0yNDEwMzAwNjM1NDRaMBgxFjAUBgNV BAMTDTY3MTg5OTQwLTg5MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJp6Zm95dtLw8oQSetd3hYmqIvS0OsQ1UBgGbFmhs/DQch61l0R3AtN58sgokX KUc2D6yd6jnq4tS6YE4zjlRLUU3YKkeSG7xhsPp/JDqY4iWG1JmzCoXjpOl/cEGD aqitrvwwXiYJ07+wy6Gy2d8xwiva2J4QurSBfirPO6Krr+/Gtd8wyI6ISuTk54Fy c/jJmuljhJsNCNY2SKvDxeUamBf2/bpfZe5VrjA2RB75n1eB5J7fOuAP4u07viNN dyYpSefm6FXl38W+mf8c0DRYQHf7zNY3VVcIw4wheX3EA8fuj/Yz3cKTD9NjzNJP qzuSqBoVJAgPksHvyK9bS6vFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4eY+ktix C+XuWH5W111PZnEQ8pYwHwYDVR0jBBgwFoAUodJd46VZ/a8wRJ2Ud9F26jeJcfgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwREUwLzdBNjVFOTNDNkE4 NTExRUZCMTU2ODE0N0M0RjlBRTAyL29kSmQ0NlZaX2E4d1JKMlVkOUYyNmplSmNm Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb2RKZDQ2VlpfYTh3UkoyVWQ5RjI2amVKY2ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw REUwLzdBNjVFOTNDNkE4NTExRUZCMTU2ODE0N0M0RjlBRTAyL29kSmQ0NlZaX2E4 d1JKMlVkOUYyNmplSmNmZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAdVOjSxg30YZLq19wfwcaGAvQxLQ0IDsPZta664V2NKm8vJVFpSEnWw bu6CSbxcO3GcWYmKAvqPm5m0C6PNCav8vhGrPB0i3GDKeGVPb9k+5GLddcmjYaTm ubAG50I+Ev5Q3tIxxcMUvmckaJHp5mc5z+nQQE/Zam+Wg+aNPeAhl4BEhARqNqbE Hx6DhVxS9Rhv8nvDAiAae7V0zCLsJDgEMUXB8o1LVQl6T0if3ejX3F+pzm3Zb+ha mxB7Mh+hGXAf4jM0pancqjg9DDiK5y8qTOwS7du+qQN4Shh26fH1wQIl9efFLYFR 7QJ8oKSDrLbXwVeapXcFqBuMfNGJ+lQ= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org