$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft File: 64mHxSCv7Nwk9ByG_Gut08Fvpio.mft (raw, json) Hash identifier: X/bcgy3/moKMJVnmsOHy875cq+f5224xwHW9dHKVKIY= Subject key identifier: 7E:6F:08:D1:DF:BE:38:BF:7E:CD:25:F5:57:A3:4E:EE:FD:65:2E:6D Authority key identifier: EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A Certificate issuer: /CN=A91B1C73/serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft Manifest number: 10 Signing time: Wed 25 Dec 2024 06:06:57 +0000 Manifest this update: Wed 25 Dec 2024 06:06:56 +0000 Manifest next update: Wed 01 Jan 2025 06:06:56 +0000 Files and hashes: 1: 64mHxSCv7Nwk9ByG_Gut08Fvpio.crl (hash: warPzSSx9cnIpUEuap9csVpSM/lCiTmwPqdjbtCWjGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1C73/serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A Validity Not Before: Dec 25 06:06:56 2024 GMT Not After : Jan 1 06:06:56 2025 GMT Subject: CN=676ba100-63da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3d:5d:b2:8f:c2:fc:60:82:8d:ce:01:9a:28: e9:1a:5b:74:07:4d:30:03:40:6b:5f:93:2d:16:80: a9:a4:a3:59:3a:d4:22:a0:36:e7:a8:92:b9:be:5f: c2:cb:aa:71:e7:46:97:08:3f:02:0b:bb:30:ac:c3: 83:86:40:ac:86:71:c9:e4:90:79:d5:91:b0:45:fa: 12:bf:b7:05:60:ea:0d:57:ae:3f:ce:0e:7b:af:80: 23:c9:31:d4:26:d1:e1:1b:cd:1b:a0:93:da:c5:29: 51:77:18:e4:22:55:22:a4:5b:11:0e:3d:0f:c8:2a: e9:99:aa:58:0a:12:7d:69:ea:89:40:24:b5:28:8c: ec:b0:60:c6:ce:af:d9:fc:01:a7:53:f1:2b:7f:5c: 55:82:34:dc:30:19:91:fd:06:72:5c:cd:25:0a:9f: 39:46:cb:03:15:5e:72:cd:65:44:f1:9a:8c:83:fc: fe:21:db:fc:b9:51:08:83:24:d7:9a:34:ba:5a:a3: c7:23:f4:0e:ae:d7:dc:cc:92:b0:10:5b:93:dc:b3: e1:e8:2a:67:43:76:0e:c4:40:44:88:32:ee:12:05: 23:16:e4:25:ca:8d:61:2c:bc:f4:7e:9a:49:4a:02: 99:a8:63:92:77:98:fc:3d:6c:6a:8f:6c:6b:24:87: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6F:08:D1:DF:BE:38:BF:7E:CD:25:F5:57:A3:4E:EE:FD:65:2E:6D X509v3 Authority Key Identifier: keyid:EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:be:44:ee:98:7c:2a:a0:b0:d4:ce:19:8a:ef:db:24:9f:f9: 25:0c:b8:51:69:a7:35:f4:00:43:21:a2:3c:e2:d3:4e:d5:18: ee:a2:56:d8:ca:7e:58:3a:dd:e2:d1:1a:38:70:60:03:cd:46: 6a:e1:88:12:07:3e:80:57:4f:d8:94:6c:a1:d9:71:8d:7d:fa: 21:3d:20:3a:e1:bf:67:0f:ac:ee:60:58:cb:ae:3e:54:61:2e: da:c3:da:c6:b9:47:e4:86:d6:19:c0:f0:07:99:0d:51:60:29: b6:db:68:84:d6:2a:b0:88:0c:e4:45:3a:98:9b:33:3c:9e:69: 02:e5:9f:d0:2e:98:42:af:15:ed:a6:95:a4:b2:65:5a:64:ff: f3:50:62:a4:23:f5:11:92:53:8a:37:ff:49:8d:74:62:ff:c6: bc:54:97:0d:79:8a:2d:fe:84:a7:e2:04:32:80:02:5f:94:d2: a5:fb:c9:a0:78:b8:93:f9:f6:44:a0:58:4b:64:e6:3a:d0:28: 7b:0d:64:c4:2c:e6:ee:4a:a8:3b:25:28:ab:32:db:95:a5:9a: a3:fb:4b:2e:fb:9f:be:cd:bf:bc:37:03:45:38:fd:80:9c:0f: 4f:30:2e:12:c3:8b:be:1a:d7:70:d5:45:2d:ad:49:73:64:79: 44:fd:3e:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUM3MzExMC8GA1UEBRMoRUI4OTg3QzUyMEFGRUNEQzI0RjQxQzg2RkM2QkFERDND MTZGQTYyQTAeFw0yNDEyMjUwNjA2NTZaFw0yNTAxMDEwNjA2NTZaMBgxFjAUBgNV BAMTDTY3NmJhMTAwLTYzZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTPV2yj8L8YIKNzgGaKOkaW3QHTTADQGtfky0WgKmko1k61CKgNueokrm+X8LL qnHnRpcIPwILuzCsw4OGQKyGccnkkHnVkbBF+hK/twVg6g1Xrj/ODnuvgCPJMdQm 0eEbzRugk9rFKVF3GOQiVSKkWxEOPQ/IKumZqlgKEn1p6olAJLUojOywYMbOr9n8 AadT8St/XFWCNNwwGZH9BnJczSUKnzlGywMVXnLNZUTxmoyD/P4h2/y5UQiDJNea NLpao8cj9A6u19zMkrAQW5Pcs+HoKmdDdg7EQESIMu4SBSMW5CXKjWEsvPR+mklK ApmoY5J3mPw9bGqPbGskh90xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfm8I0d++ OL9+zSX1V6NO7v1lLm0wHwYDVR0jBBgwFoAU64mHxSCv7Nwk9ByG/Gut08Fvpiow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxQzczL0M0OTFCQTRFQUMw RDExRUY5ODc5OTI2RUM0RjlBRTAyLzY0bUh4U0N2N053azlCeUdfR3V0MDhGdnBp by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjRtSHhTQ3Y3TndrOUJ5R19HdXQwOEZ2cGlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx QzczL0M0OTFCQTRFQUMwRDExRUY5ODc5OTI2RUM0RjlBRTAyLzY0bUh4U0N2N053 azlCeUdfR3V0MDhGdnBpby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACi+RO6YfCqgsNTOGYrv2ySf+SUMuFFppzX0AEMhojzi007VGO6iVtjK flg63eLRGjhwYAPNRmrhiBIHPoBXT9iUbKHZcY19+iE9IDrhv2cPrO5gWMuuPlRh LtrD2sa5R+SG1hnA8AeZDVFgKbbbaITWKrCIDORFOpibMzyeaQLln9AumEKvFe2m laSyZVpk//NQYqQj9RGSU4o3/0mNdGL/xrxUlw15ii3+hKfiBDKAAl+U0qX7yaB4 uJP59kSgWEtk5jrQKHsNZMQs5u5KqDslKKsy25WlmqP7Sy77n77Nv7w3A0U4/YCc D08wLhLDi74a13DVRS2tSXNkeUT9PlI= -----END CERTIFICATE-----Generated at Wed Dec 25 08:01:24 2024 by rpki-client on console-fra.rpki-client.org