$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: sqHI2n9U9xFkL/mwt1MfM3lCan7BI+H1rgGxWyGAdyU= Subject key identifier: DF:2C:C0:F8:86:C0:D5:DA:92:1E:0A:5E:A1:4C:4B:57:F9:B4:83:C9 Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 3420 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 341E Signing time: Fri 22 Nov 2024 15:10:59 +0000 Manifest this update: Fri 22 Nov 2024 15:10:59 +0000 Manifest next update: Fri 29 Nov 2024 15:10:59 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: vTIveB3Sh+g0t4DIcUtec+q1UTo7wHG2YGzfnM+dRfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13344 (0x3420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: Nov 22 15:10:59 2024 GMT Not After : Nov 29 15:10:59 2024 GMT Subject: CN=67409f03-24d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:a9:fc:62:ab:29:b1:93:d1:d4:79:6a:5d: 74:d5:8f:a5:80:93:ab:91:6e:d9:8c:98:53:b9:11: 56:3e:4e:ac:92:b2:b5:82:c6:d1:15:b2:bf:11:2e: 1e:ad:68:fe:8e:99:9f:f5:87:85:11:67:ef:3b:33: 3e:7c:14:2c:70:c5:73:ef:cf:cf:9c:33:4b:f8:8b: 30:01:17:6e:30:5c:b9:e5:31:ff:a1:8d:b0:d3:a0: ce:c9:fa:8b:f2:33:0a:0b:4d:b6:2c:9a:fb:a5:86: 8a:40:fd:8d:59:f6:f2:ae:ae:e8:cc:b4:72:cd:5e: 07:cb:09:04:4c:0d:9c:13:f9:cc:af:e4:b2:dd:48: 5e:96:d9:b5:76:f0:bb:dc:27:e1:d7:b1:d2:3b:ab: f2:de:25:e4:48:4f:e4:f0:59:29:f0:e1:69:1e:73: 6a:44:25:28:15:89:fc:2c:12:f0:37:26:f1:49:dd: 92:a7:e4:cd:25:b2:61:ec:97:ab:38:4d:bd:87:97: 12:e0:39:21:2c:02:34:81:7b:3f:e3:b1:d7:67:25: bd:2b:11:e9:cf:91:db:5d:9e:5f:e5:4d:a7:f2:40: 9c:ff:62:c4:bc:44:4c:2b:ee:45:d9:a6:be:9b:67: a8:c3:df:58:05:6a:7a:db:d2:2d:41:2a:52:f3:d8: 0c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2C:C0:F8:86:C0:D5:DA:92:1E:0A:5E:A1:4C:4B:57:F9:B4:83:C9 X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d6:a7:80:da:8c:95:e8:26:5a:8e:2b:6c:de:d1:8e:1b:5f: e9:75:9c:3c:71:60:52:1f:1a:5b:a9:b2:26:e8:4f:c1:b4:63: 7d:fd:7b:07:71:ee:d0:3e:b1:c3:aa:22:b0:46:8a:fd:d7:2f: 84:01:e4:8f:4d:2d:50:dd:d5:65:0f:cb:f0:42:3b:72:29:be: bc:50:09:52:57:aa:24:dd:37:e7:72:94:3f:0f:00:ea:1b:d4: 06:36:95:2d:bc:31:3b:fb:67:46:50:1e:0d:31:d9:79:18:12: e0:d5:ab:d3:8b:cb:83:94:fc:0c:d0:1a:67:70:80:06:d8:bc: 7c:44:c1:80:18:ed:58:ba:9c:d8:bc:9d:d8:d2:96:0a:a2:6f: f3:f5:8d:d1:8d:0d:92:92:c6:4f:27:31:46:4a:de:67:57:a8: a3:25:26:85:d4:14:7d:6d:31:ae:40:66:e0:8a:e2:c2:a7:7f: 0a:b4:65:5b:a6:98:6e:45:04:4d:d3:42:9a:97:3c:de:2c:b9: 40:02:30:db:23:1f:1e:fd:45:9e:2f:49:e5:b2:dd:3e:62:a0: b5:cf:c1:c9:24:a8:d6:7f:4f:f5:da:f6:f0:14:f6:3e:e9:f4: 7b:84:3d:6c:03:5b:a9:0f:e5:17:1b:fa:5e:ee:8b:56:58:62: af:ec:c7:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjQxMTIyMTUxMDU5WhcNMjQxMTI5MTUxMDU5WjAYMRYwFAYD VQQDEw02NzQwOWYwMy0yNGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwWp/GKrKbGT0dR5al101Y+lgJOrkW7ZjJhTuRFWPk6skrK1gsbRFbK/ES4e rWj+jpmf9YeFEWfvOzM+fBQscMVz78/PnDNL+IswARduMFy55TH/oY2w06DOyfqL 8jMKC022LJr7pYaKQP2NWfbyrq7ozLRyzV4HywkETA2cE/nMr+Sy3Uheltm1dvC7 3Cfh17HSO6vy3iXkSE/k8Fkp8OFpHnNqRCUoFYn8LBLwNybxSd2Sp+TNJbJh7Jer OE29h5cS4DkhLAI0gXs/47HXZyW9KxHpz5HbXZ5f5U2n8kCc/2LEvERMK+5F2aa+ m2eow99YBWp629ItQSpS89gM6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8swPiG wNXakh4KXqFMS1f5tIPJMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy1qeA2oyV6CZajits3tGOG1/pdZw8cWBSHxpbqbIm6E/BtGN9/XsH ce7QPrHDqiKwRor91y+EAeSPTS1Q3dVlD8vwQjtyKb68UAlSV6ok3TfncpQ/DwDq G9QGNpUtvDE7+2dGUB4NMdl5GBLg1avTi8uDlPwM0BpncIAG2Lx8RMGAGO1YupzY vJ3Y0pYKom/z9Y3RjQ2SksZPJzFGSt5nV6ijJSaF1BR9bTGuQGbgiuLCp38KtGVb pphuRQRN00KalzzeLLlAAjDbIx8e/UWeL0nlst0+YqC1z8HJJKjWf0/12vbwFPY+ 6fR7hD1sA1upD+UXG/pe7otWWGKv7MeH -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org