$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft File: MAKFsSjLjblfHkH_vS68Io1FPvw.mft (raw, json) Hash identifier: 6jogQ5uPT28XV120WOQLIazzJ+K9b7ObpaLNPcygn1I= Subject key identifier: F2:45:85:53:A7:D9:A1:56:28:19:35:B0:40:69:F6:D6:CB:B5:26:C7 Authority key identifier: 30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC Certificate issuer: /CN=A91CD39D/serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC Certificate serial: 0400 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft Manifest number: 0400 Signing time: Thu 21 Nov 2024 00:00:15 +0000 Manifest this update: Thu 21 Nov 2024 00:00:15 +0000 Manifest next update: Thu 28 Nov 2024 00:00:15 +0000 Files and hashes: 1: MAKFsSjLjblfHkH_vS68Io1FPvw.crl (hash: aWdX+30gAOhxgU0aPLTuazmPI6mizGVfUq21NgVs0FM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D/serialNumber=300285B128CB8DB95F1E41FFBD2EBC228D453EFC Validity Not Before: Nov 21 00:00:15 2024 GMT Not After : Nov 28 00:00:15 2024 GMT Subject: CN=673e780f-8ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:aa:c5:dd:4b:8d:83:13:ff:75:ef:ff:d3: 30:19:3c:fe:4a:e8:8c:bc:ec:c9:0c:8e:31:7d:49: 47:2c:f7:9c:12:93:ab:82:3f:f6:7a:3f:1b:e5:d5: ac:79:31:82:9e:5b:26:c6:67:0f:91:d5:5c:34:ea: 2f:3a:e0:10:16:e7:40:80:fa:48:b7:98:08:ab:4f: 4a:48:69:63:0a:4d:76:d7:36:1a:bb:85:49:74:d3: 53:80:0b:e9:49:03:3c:38:60:e4:54:91:6d:58:78: 2f:c8:d5:9d:cd:64:62:48:fd:01:14:92:89:e7:07: 17:df:10:c3:31:6f:32:87:06:d4:7f:92:c3:c0:63: 57:bf:42:1d:fa:0b:b4:9e:be:13:ee:60:3a:35:b7: 75:e2:52:ba:53:ff:4a:c8:d4:92:75:be:0a:80:8f: c6:b0:83:6f:81:cb:95:d1:77:1f:80:0e:83:aa:93: ff:c0:d3:e2:28:15:9d:76:73:64:e4:13:42:40:cd: 51:5d:df:4e:88:b5:cc:d2:94:01:93:2c:bb:0a:a1: 8c:c9:37:df:9c:6d:5f:86:76:1b:77:3f:2b:a8:48: ea:65:80:e7:39:43:72:dd:9b:78:0f:56:4d:5c:34: 72:f8:ba:89:3b:34:20:41:dd:ae:84:8e:d0:a7:b8: 79:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:45:85:53:A7:D9:A1:56:28:19:35:B0:40:69:F6:D6:CB:B5:26:C7 X509v3 Authority Key Identifier: keyid:30:02:85:B1:28:CB:8D:B9:5F:1E:41:FF:BD:2E:BC:22:8D:45:3E:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAKFsSjLjblfHkH_vS68Io1FPvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/D44E36D04E7611ECA5720B79C4F9AE02/MAKFsSjLjblfHkH_vS68Io1FPvw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:fe:38:ee:55:69:9b:ab:a4:50:e2:19:c9:99:b3:d4:76:a8: 49:0c:0d:fa:00:ce:fd:ec:d3:69:45:ea:9c:5d:ac:13:27:e5: 60:6f:bd:8e:56:20:24:46:8b:c9:ba:2a:45:a4:5a:a8:79:f5: 7c:c0:29:81:69:b6:a6:6f:8b:6a:d1:51:48:7e:fc:d2:ce:22: d3:78:53:43:81:f5:68:8a:98:a7:7a:b8:37:2d:08:40:a5:7a: 7e:2e:e4:30:82:81:6a:53:78:72:87:e2:76:5c:47:c8:97:8a: 30:9e:8c:1f:09:6e:68:89:29:db:44:f7:3e:81:50:c7:8c:31: 4f:b9:21:bf:7a:23:e3:e0:6f:0e:80:7d:6d:bb:dd:08:3f:f2: ab:b1:bd:fa:45:af:f4:42:40:92:45:ef:b3:0f:0e:28:fe:0a: c1:f5:7e:69:96:b1:57:75:cf:ae:2d:37:55:08:30:4f:49:b1: fc:05:91:e6:a6:be:02:ee:01:92:20:26:ab:9c:97:78:8c:d3: 22:65:fd:c6:76:3a:04:aa:5f:e5:27:3c:3f:a4:bd:e5:41:d1: d1:34:d4:c6:77:90:0d:4b:23:5d:c7:29:68:66:be:6a:f2:4c: 2e:f4:88:09:38:1b:f1:4a:a2:c1:8e:d2:00:ad:40:9a:90:67: 8e:75:36:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDMwMDI4NUIxMjhDQjhEQjk1RjFFNDFGRkJEMkVCQzIy OEQ0NTNFRkMwHhcNMjQxMTIxMDAwMDE1WhcNMjQxMTI4MDAwMDE1WjAYMRYwFAYD VQQDEw02NzNlNzgwZi04YWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuSqxd1LjYMT/3Xv/9MwGTz+SuiMvOzJDI4xfUlHLPecEpOrgj/2ej8b5dWs eTGCnlsmxmcPkdVcNOovOuAQFudAgPpIt5gIq09KSGljCk121zYau4VJdNNTgAvp SQM8OGDkVJFtWHgvyNWdzWRiSP0BFJKJ5wcX3xDDMW8yhwbUf5LDwGNXv0Id+gu0 nr4T7mA6Nbd14lK6U/9KyNSSdb4KgI/GsINvgcuV0XcfgA6DqpP/wNPiKBWddnNk 5BNCQM1RXd9OiLXM0pQBkyy7CqGMyTffnG1fhnYbdz8rqEjqZYDnOUNy3Zt4D1ZN XDRy+LqJOzQgQd2uhI7Qp7h54QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJFhVOn 2aFWKBk1sEBp9tbLtSbHMB8GA1UdIwQYMBaAFDAChbEoy425Xx5B/70uvCKNRT78 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ENDRFMzZEMDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpibGZIa0hfdlM2OElvMUZQ dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01BS0ZzU2pMamJsZkhrSF92UzY4SW8xRlB2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ENDRFMzZEMDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9NQUtGc1NqTGpi bGZIa0hfdlM2OElvMUZQdncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4/jjuVWmbq6RQ4hnJmbPUdqhJDA36AM797NNpReqcXawTJ+Vgb72O ViAkRovJuipFpFqoefV8wCmBabamb4tq0VFIfvzSziLTeFNDgfVoipinerg3LQhA pXp+LuQwgoFqU3hyh+J2XEfIl4ownowfCW5oiSnbRPc+gVDHjDFPuSG/eiPj4G8O gH1tu90IP/Krsb36Ra/0QkCSRe+zDw4o/grB9X5plrFXdc+uLTdVCDBPSbH8BZHm pr4C7gGSICarnJd4jNMiZf3GdjoEql/lJzw/pL3lQdHRNNTGd5ANSyNdxyloZr5q 8kwu9IgJOBvxSqLBjtIArUCakGeOdTaF -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:05 2024 by rpki-client on console-ams.rpki-client.org