$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft File: 4NxstwnusRvCB181LrbtToGK5wU.mft (raw, json) Hash identifier: 9vP0kLkA71drjUrWDl1SwFSZcbyI8dyG4jrnQ0+meFo= Subject key identifier: 1E:84:13:0A:6F:51:9C:62:20:FA:83:AB:EC:AC:4F:0C:58:43:29:E1 Authority key identifier: E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 Certificate issuer: /CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft Manifest number: 1A Signing time: Mon 25 Nov 2024 05:52:22 +0000 Manifest this update: Mon 25 Nov 2024 05:52:21 +0000 Manifest next update: Mon 02 Dec 2024 05:52:21 +0000 Files and hashes: 1: 4NxstwnusRvCB181LrbtToGK5wU.crl (hash: Nfd3S50Ll3TImxnvX4j5mY/LY7zclZyUI/5ehxfnTKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B87FC/serialNumber=E0DC6CB709EEB11BC2075F352EB6ED4E818AE705 Validity Not Before: Nov 25 05:52:21 2024 GMT Not After : Dec 2 05:52:21 2024 GMT Subject: CN=67441095-bbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:c7:4a:26:85:1a:dc:25:b1:08:52:ab:f2: b4:36:02:da:fb:c0:1b:f8:2f:42:08:88:fa:56:04: b3:05:15:36:30:e1:f2:c0:20:ba:bd:7b:ab:4c:72: ba:99:41:5c:74:9f:c2:48:ac:db:20:16:fe:fd:24: 3c:8d:ae:e4:83:e3:d3:a4:00:a1:fc:f5:d2:34:02: 9b:5d:6e:a4:e0:76:7b:00:92:75:23:b8:9c:84:93: 7a:7c:cf:94:2a:c5:5b:d0:04:86:cd:72:08:07:e6: 90:39:9e:90:35:b4:97:b1:b0:d7:e2:0b:b5:57:5d: 01:fe:66:d4:1c:32:91:5c:3d:0c:72:17:ea:45:35: bf:28:a8:c7:1f:f4:86:7a:3b:8d:5c:e3:93:36:ef: 1f:55:6c:50:70:2d:ee:ad:bc:ce:92:de:eb:0f:7c: 99:ae:d5:c5:0a:c3:bb:dd:58:fe:ac:d6:bb:b2:19: b9:1d:c2:e4:d0:bc:bf:cc:e6:96:54:39:61:e1:39: 01:24:4b:c6:2c:5a:91:69:45:61:ef:48:49:57:e3: 7c:d9:0b:f5:9d:e5:de:e9:be:53:70:a4:df:6e:da: c6:83:e1:f7:e9:e3:0d:6d:fa:a5:b9:bc:fd:b2:9b: c6:81:7b:25:9a:67:fe:9c:42:43:49:b3:aa:63:18: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:84:13:0A:6F:51:9C:62:20:FA:83:AB:EC:AC:4F:0C:58:43:29:E1 X509v3 Authority Key Identifier: keyid:E0:DC:6C:B7:09:EE:B1:1B:C2:07:5F:35:2E:B6:ED:4E:81:8A:E7:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NxstwnusRvCB181LrbtToGK5wU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/42A9BB5486E111EF8F773F82C4F9AE02/4NxstwnusRvCB181LrbtToGK5wU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:52:42:ee:d0:1e:44:51:85:aa:22:e5:fe:c7:35:9a:83:2a: 97:a0:b0:6a:1e:ff:6f:b5:7b:7b:75:b3:73:09:1d:25:1d:94: 26:5b:29:59:49:8e:4a:07:b5:9e:53:e5:fe:11:99:67:67:9b: 77:fa:41:7a:a2:61:ec:44:ef:58:f0:b7:46:d6:0d:b3:a6:8d: 65:4e:8f:a6:6e:9a:30:70:6f:81:ea:74:60:e6:1f:30:c7:54: 4a:4c:57:61:da:7e:19:6d:d3:92:12:f1:e8:ce:22:47:db:40: d1:ef:e9:e7:d6:5c:70:a2:d7:63:60:37:8e:70:2d:a2:40:ce: ca:44:44:d2:77:c0:a8:eb:84:0c:16:a4:c2:dd:4e:06:c7:5b: af:a1:c0:41:5f:59:0d:1b:72:dd:3d:e8:d7:e4:fe:18:f7:2b: 48:20:8f:a9:55:7d:22:3e:61:2d:62:34:fe:99:1f:3a:31:d8: 94:12:c8:c8:5c:7e:2f:2b:ce:8d:8f:4b:b2:47:68:8e:29:77: 5d:ef:a9:53:99:cd:83:da:80:c4:ea:45:68:4f:63:85:ce:17: 20:7d:80:c6:15:5a:2a:0d:85:05:a0:48:a5:5d:a9:92:ba:ec: 01:f4:47:97:04:56:05:f2:73:5b:96:f9:85:86:68:4f:52:eb: d6:4c:17:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODdGQzExMC8GA1UEBRMoRTBEQzZDQjcwOUVFQjExQkMyMDc1RjM1MkVCNkVENEU4 MThBRTcwNTAeFw0yNDExMjUwNTUyMjFaFw0yNDEyMDIwNTUyMjFaMBgxFjAUBgNV BAMTDTY3NDQxMDk1LWJiYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCT8dKJoUa3CWxCFKr8rQ2Atr7wBv4L0IIiPpWBLMFFTYw4fLAILq9e6tMcrqZ QVx0n8JIrNsgFv79JDyNruSD49OkAKH89dI0AptdbqTgdnsAknUjuJyEk3p8z5Qq xVvQBIbNcggH5pA5npA1tJexsNfiC7VXXQH+ZtQcMpFcPQxyF+pFNb8oqMcf9IZ6 O41c45M27x9VbFBwLe6tvM6S3usPfJmu1cUKw7vdWP6s1ruyGbkdwuTQvL/M5pZU OWHhOQEkS8YsWpFpRWHvSElX43zZC/Wd5d7pvlNwpN9u2saD4ffp4w1t+qW5vP2y m8aBeyWaZ/6cQkNJs6pjGCM1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHoQTCm9R nGIg+oOr7KxPDFhDKeEwHwYDVR0jBBgwFoAU4NxstwnusRvCB181LrbtToGK5wUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4N0ZDLzQyQTlCQjU0ODZF MTExRUY4Rjc3M0Y4MkM0RjlBRTAyLzROeHN0d251c1J2Q0IxODFMcmJ0VG9HSzV3 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNE54c3R3bnVzUnZDQjE4MUxyYnRUb0dLNXdVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 N0ZDLzQyQTlCQjU0ODZFMTExRUY4Rjc3M0Y4MkM0RjlBRTAyLzROeHN0d251c1J2 Q0IxODFMcmJ0VG9HSzV3VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHxSQu7QHkRRhaoi5f7HNZqDKpegsGoe/2+1e3t1s3MJHSUdlCZbKVlJ jkoHtZ5T5f4RmWdnm3f6QXqiYexE71jwt0bWDbOmjWVOj6ZumjBwb4HqdGDmHzDH VEpMV2Hafhlt05IS8ejOIkfbQNHv6efWXHCi12NgN45wLaJAzspERNJ3wKjrhAwW pMLdTgbHW6+hwEFfWQ0bct096Nfk/hj3K0ggj6lVfSI+YS1iNP6ZHzox2JQSyMhc fi8rzo2PS7JHaI4pd13vqVOZzYPagMTqRWhPY4XOFyB9gMYVWioNhQWgSKVdqZK6 7AH0R5cEVgXyc1uW+YWGaE9S69ZMF6U= -----END CERTIFICATE-----Generated at Mon Nov 25 07:19:52 2024 by rpki-client on console-ams.rpki-client.org