$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: mFuUISii1vGomjcmSzv0m5TYeknp0Zejmw7Av2kVBzM= Subject key identifier: 1C:62:F4:A1:AF:E5:BE:AB:22:EB:94:2C:58:62:26:55:2B:3C:74:48 Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 012A Signing time: Thu 21 Nov 2024 01:01:32 +0000 Manifest this update: Thu 21 Nov 2024 01:01:31 +0000 Manifest next update: Thu 28 Nov 2024 01:01:31 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: mlakufHy1XsFSfriyZVO3IPljfd6wZ3lJGf46Qjuxio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Nov 21 01:01:31 2024 GMT Not After : Nov 28 01:01:31 2024 GMT Subject: CN=673e866b-4b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:db:d0:87:ed:43:7f:88:a8:c0:d2:f0:ab: 6a:08:53:5a:fd:12:11:32:2c:94:a8:ce:40:bf:d9: 5a:da:4b:67:f2:33:10:0b:85:82:34:6e:49:4b:40: c4:85:16:b2:43:11:f9:9a:44:ea:ce:83:9c:bd:df: 9e:65:e5:5d:2c:2a:86:c8:da:2e:a3:99:c6:48:88: 3a:54:71:b7:95:bf:bd:23:c8:96:bf:d4:da:a5:6f: 91:36:8a:38:64:5f:f9:18:b2:46:18:fd:b1:ce:85: f9:42:3a:fa:77:f6:8d:f4:26:69:e2:89:3b:9d:a5: 9c:a4:a4:b8:1e:c5:bb:d0:8f:d9:3a:87:40:ac:c1: 43:c7:c5:b2:bd:97:67:e5:ce:4e:63:35:6b:eb:dd: 63:34:ec:e3:54:c3:8d:46:93:1a:2e:ab:6f:97:8f: 8a:2d:e6:cc:26:30:9e:f1:ec:ed:78:44:69:3c:94: 0c:59:74:42:7d:54:05:01:60:a8:f4:12:07:a8:a8: 52:eb:f5:42:d4:85:dd:bc:a8:85:e2:cd:ef:30:28: 17:5e:79:a8:96:95:0f:90:fe:e9:60:63:ab:bf:c3: 8c:49:3c:48:74:b1:2b:49:b0:cc:4c:0b:ec:e2:38: bf:54:f6:8f:4a:5e:fd:21:00:18:52:65:63:f9:fb: 85:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:62:F4:A1:AF:E5:BE:AB:22:EB:94:2C:58:62:26:55:2B:3C:74:48 X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0e:4e:45:56:b8:f6:fa:b3:cc:4f:bf:59:2a:8d:63:16:31: f1:7f:7d:1e:61:95:9f:0f:00:79:29:06:30:63:2c:3b:39:9d: 83:be:b9:99:84:37:3b:10:27:c6:59:72:6c:d7:73:6d:7f:e8: 21:e1:a3:0d:7c:e6:70:95:40:5c:a6:7a:95:b5:b4:cf:ff:14: 06:c9:93:8b:e5:9a:3a:c7:c2:2e:48:ab:6a:19:dc:5e:8a:2a: a5:5f:a1:b4:ed:e9:84:9d:8c:d2:f9:d8:03:8a:71:9b:4a:2a: 85:26:28:a2:e4:a4:49:47:39:43:8d:c1:c6:99:7c:b8:e7:2f: 84:dc:dd:39:ba:58:bd:a2:ef:0c:b3:67:20:a7:ac:de:88:34: 83:b5:61:6b:2c:28:0e:f6:0e:f4:55:a5:8c:b0:f5:64:f8:3b: 8d:a7:50:62:e5:37:16:e6:2e:f0:63:8d:0b:de:d1:0f:73:fc: 6e:2f:2c:06:3c:0f:ee:d4:08:c4:71:18:1b:b4:76:ab:8d:23: 9a:1a:83:d8:51:1a:25:be:d2:97:ed:14:38:a9:0b:ab:a5:6d: bf:52:9a:25:f2:9c:d8:07:56:ba:a0:ed:4a:05:7e:b2:a9:4a: 86:ba:51:0a:3f:c8:f2:b8:21:77:4e:cd:84:8e:16:e0:e0:2b: 98:28:dd:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjQxMTIxMDEwMTMxWhcNMjQxMTI4MDEwMTMxWjAYMRYwFAYD VQQDEw02NzNlODY2Yi00YjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ePb0IftQ3+IqMDS8KtqCFNa/RIRMiyUqM5Av9la2ktn8jMQC4WCNG5JS0DE hRayQxH5mkTqzoOcvd+eZeVdLCqGyNouo5nGSIg6VHG3lb+9I8iWv9TapW+RNoo4 ZF/5GLJGGP2xzoX5Qjr6d/aN9CZp4ok7naWcpKS4HsW70I/ZOodArMFDx8WyvZdn 5c5OYzVr691jNOzjVMONRpMaLqtvl4+KLebMJjCe8ezteERpPJQMWXRCfVQFAWCo 9BIHqKhS6/VC1IXdvKiF4s3vMCgXXnmolpUPkP7pYGOrv8OMSTxIdLErSbDMTAvs 4ji/VPaPSl79IQAYUmVj+fuFhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxi9KGv 5b6rIuuULFhiJlUrPHRIMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuDk5FVrj2+rPMT79ZKo1jFjHxf30eYZWfDwB5KQYwYyw7OZ2DvrmZ hDc7ECfGWXJs13Ntf+gh4aMNfOZwlUBcpnqVtbTP/xQGyZOL5Zo6x8IuSKtqGdxe iiqlX6G07emEnYzS+dgDinGbSiqFJiii5KRJRzlDjcHGmXy45y+E3N05uli9ou8M s2cgp6zeiDSDtWFrLCgO9g70VaWMsPVk+DuNp1Bi5TcW5i7wY40L3tEPc/xuLywG PA/u1AjEcRgbtHarjSOaGoPYURolvtKX7RQ4qQurpW2/Upol8pzYB1a6oO1KBX6y qUqGulEKP8jyuCF3Ts2Ejhbg4CuYKN2T -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:51 2024 by rpki-client on console-ams.rpki-client.org