$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json) Hash identifier: WV+YH/2L4R8SDQoysPe0XI2W9x2NHGXNjoVoaeW5ua8= Subject key identifier: A8:36:47:C7:6E:22:DE:D7:0D:17:B5:B6:31:6B:AD:56:B3:2F:C5:C2 Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Certificate serial: 102E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft Manifest number: 184D Signing time: Fri 22 Nov 2024 17:24:06 +0000 Manifest this update: Fri 22 Nov 2024 17:24:05 +0000 Manifest next update: Fri 29 Nov 2024 17:24:05 +0000 Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: sp/yWXLBNUfVyi4cFeIff4G9ZfZXQWXxAAMHm80tb14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4142 (0x102e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Validity Not Before: Nov 22 17:24:05 2024 GMT Not After : Nov 29 17:24:05 2024 GMT Subject: CN=6740be36-d298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:98:f3:bc:93:13:8a:f3:41:54:fa:e0:51: fc:e4:8d:9e:4f:b8:0e:d6:59:d8:2f:3e:61:42:38: 6d:1f:23:90:83:38:fa:a0:d4:b4:41:6f:2d:93:f6: f7:67:8d:5b:f4:52:42:75:7f:06:d5:a6:9b:3e:15: 00:a0:ac:7b:44:55:11:4c:08:78:7f:8b:0e:9a:02: 79:5b:b0:72:90:8f:04:00:a3:81:5d:8a:60:7c:de: 06:ef:65:fa:e7:10:db:8c:4b:76:f4:1c:e1:78:ce: c7:14:54:28:63:39:79:17:7d:fa:66:20:96:83:ff: 2e:5b:97:7b:b9:3c:03:59:0f:a7:7c:a6:15:36:ea: a3:01:87:55:7c:21:84:d7:f1:6e:77:0c:fa:57:bf: 60:d6:e1:f4:06:80:04:29:42:26:0d:eb:b9:f7:b9: 79:03:f3:71:e9:fe:41:74:29:44:fe:a7:a9:84:85: 2c:c9:95:73:b3:2c:3b:fd:7d:db:59:ea:f7:cb:8d: b8:9a:9c:51:25:db:44:6c:66:fc:48:e4:f9:55:3e: 50:03:ba:06:4f:9b:32:59:ce:bb:08:46:5d:17:9b: ce:f2:85:40:15:80:38:f3:cf:13:14:38:bb:a0:1f: 6d:71:5e:9b:da:f0:21:a6:5c:a8:59:0c:ea:e9:7f: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:36:47:C7:6E:22:DE:D7:0D:17:B5:B6:31:6B:AD:56:B3:2F:C5:C2 X509v3 Authority Key Identifier: keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2b:b2:23:73:8d:1d:fb:f2:ef:fa:92:b7:e8:6f:fc:9a:51: 83:74:8b:c0:9c:58:c6:b1:bb:44:c7:f2:4f:d2:6f:b6:58:61: a6:55:1a:18:ee:e4:8d:53:70:32:15:a7:95:64:45:f1:cd:7f: f9:d8:73:09:d7:bc:e2:6c:a0:c9:77:db:0b:53:6d:37:7c:d2: 65:d8:23:77:fd:6f:bf:85:45:bd:b6:a5:d1:76:b0:b1:e2:bd: ae:78:cd:9d:19:89:e6:de:29:7a:31:43:67:20:55:bf:f9:c5: 4c:1b:2b:04:4b:e2:cd:12:9e:d8:de:50:1a:35:29:45:1f:04: f6:7b:37:82:a5:9b:8e:77:6a:71:57:15:87:e3:06:90:0c:02: 26:c7:52:84:a7:1e:a9:6a:28:80:9c:c6:78:63:cd:c1:a5:c4: 96:6e:4d:f8:75:9d:e0:a9:85:d6:6a:fb:68:44:1c:d0:a7:88: 2e:6a:8f:43:7a:8b:17:aa:94:01:9c:05:f4:14:a7:43:85:97: 26:2c:90:e4:42:67:d6:53:f4:fd:bc:e4:f6:d0:35:79:89:dc: f8:e9:45:ee:68:f5:ed:09:ae:bd:8c:93:ad:93:91:47:b5:34: 9b:24:84:7d:32:45:c2:e6:ac:f3:cb:e0:7a:f0:51:ed:9b:94: fc:2f:af:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKEY5Q0YwNDk3Q0ZCNjdFMTYyNzI5MTA5OEYxMUYxNzg2 RUI4OUZGNTAwHhcNMjQxMTIyMTcyNDA1WhcNMjQxMTI5MTcyNDA1WjAYMRYwFAYD VQQDEw02NzQwYmUzNi1kMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRCY87yTE4rzQVT64FH85I2eT7gO1lnYLz5hQjhtHyOQgzj6oNS0QW8tk/b3 Z41b9FJCdX8G1aabPhUAoKx7RFURTAh4f4sOmgJ5W7BykI8EAKOBXYpgfN4G72X6 5xDbjEt29BzheM7HFFQoYzl5F336ZiCWg/8uW5d7uTwDWQ+nfKYVNuqjAYdVfCGE 1/Fudwz6V79g1uH0BoAEKUImDeu597l5A/Nx6f5BdClE/qephIUsyZVzsyw7/X3b Wer3y424mpxRJdtEbGb8SOT5VT5QA7oGT5syWc67CEZdF5vO8oVAFYA4888TFDi7 oB9tcV6b2vAhplyoWQzq6X9cKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKg2R8du It7XDRe1tjFrrVazL8XCMB8GA1UdIwQYMBaAFPnPBJfPtn4WJykQmPEfF4brif9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZoWW5LUkNZOFI4WGh1dUpf MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jOEVsOC0yZmhZbktSQ1k4UjhYaHV1Sl8xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZo WW5LUkNZOFI4WGh1dUpfMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALK7Ijc40d+/Lv+pK36G/8mlGDdIvAnFjGsbtEx/JP0m+2WGGmVRoY 7uSNU3AyFaeVZEXxzX/52HMJ17zibKDJd9sLU203fNJl2CN3/W+/hUW9tqXRdrCx 4r2ueM2dGYnm3il6MUNnIFW/+cVMGysES+LNEp7Y3lAaNSlFHwT2ezeCpZuOd2px VxWH4waQDAImx1KEpx6paiiAnMZ4Y83BpcSWbk34dZ3gqYXWavtoRBzQp4guao9D eosXqpQBnAX0FKdDhZcmLJDkQmfWU/T9vOT20DV5idz46UXuaPXtCa69jJOtk5FH tTSbJIR9MkXC5qzzy+B68FHtm5T8L6+d -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org