$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: LDfnYoJFpDBMfUohIkIrB9uz3CpundNqdw1ykCbcWoE= Subject key identifier: 2F:79:EA:AD:6B:F5:E8:0E:8C:EA:05:FA:BA:4F:78:7B:EA:7A:38:C8 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: E6 Signing time: Sat 23 Nov 2024 03:30:49 +0000 Manifest this update: Sat 23 Nov 2024 03:30:48 +0000 Manifest next update: Sat 30 Nov 2024 03:30:48 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: Rjn7DpE/AXar2jCDNdhE2kID78dma/qZE0/ejA13u/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Nov 23 03:30:48 2024 GMT Not After : Nov 30 03:30:48 2024 GMT Subject: CN=67414c69-92e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:f1:cc:19:8d:6e:85:a9:d1:9f:b8:6d:9a: 8c:89:ba:78:34:7d:9e:65:1c:9e:59:10:34:de:be: 59:76:31:c1:88:d5:c1:3d:d5:12:42:f7:da:c1:97: b2:ec:c3:1f:ee:f1:a7:68:6d:5f:cf:2b:72:35:70: 95:f3:14:bb:2f:04:bf:1b:46:a1:e4:7c:69:04:93: b9:b5:87:bf:ce:3e:e2:a9:a1:88:b8:0f:ce:b4:16: 26:b6:2a:12:6f:90:70:62:8b:f1:56:f3:ab:b8:c7: 19:2e:7b:ae:e0:35:26:ac:6d:22:76:87:41:c9:8b: b3:70:f3:45:21:81:48:6d:f9:0a:37:8f:f7:10:dd: 28:32:45:75:7f:79:c7:93:b7:3e:86:c2:2f:45:76: 94:8e:ea:95:ee:e0:65:1d:72:13:7c:fe:b1:b2:b7: 99:3a:30:55:3c:d2:0b:44:f0:cd:85:f0:e8:82:6a: 5c:cb:ba:af:7a:97:9b:09:56:53:f0:71:62:3c:fc: f6:f0:9f:df:d7:03:e7:bd:40:73:3b:79:3a:1d:73: 8f:84:bd:3f:08:3d:73:39:11:0e:a9:89:ae:73:df: 4c:92:d7:f0:fd:33:a4:fe:75:73:f7:52:a1:72:25: 9f:c5:c3:89:b0:6f:65:71:18:eb:29:26:ae:56:a0: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:79:EA:AD:6B:F5:E8:0E:8C:EA:05:FA:BA:4F:78:7B:EA:7A:38:C8 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:a1:2c:a7:21:6e:58:04:4c:a1:5d:fa:5e:cb:b8:87:60:9f: 44:cd:0a:d5:74:ee:56:18:15:fa:87:fc:70:1b:47:54:c4:90: f3:99:51:76:b2:5a:89:6f:cb:27:d2:18:2b:0d:7e:64:53:77: 3d:19:14:f3:bd:82:09:20:8d:4c:0f:24:33:14:b5:20:48:aa: 83:6e:ee:37:6a:bc:fa:7c:6d:98:c3:37:c1:4a:a3:7e:9f:45: c4:cc:ce:a1:8e:1c:e5:13:12:78:e9:67:3c:d6:6f:85:c5:93: 99:03:89:e9:71:20:1c:5f:0f:8c:5a:f9:d0:6d:0c:bf:00:c9: a8:46:e1:08:22:95:13:c0:14:75:58:a6:b4:31:19:fc:22:45: 41:c3:d8:3f:17:55:e0:2a:9f:31:66:4e:a7:a1:85:b2:a1:53: 73:0b:59:21:65:26:db:ce:1b:59:50:20:94:2f:28:6b:d6:42: 0b:b6:e7:8c:90:8a:41:ac:55:c2:ea:e8:c2:7e:8a:e5:a0:00: 8a:6e:78:09:8e:53:45:d5:ec:3b:e9:0f:82:4c:6f:19:d1:da: cb:b7:b9:10:53:34:23:80:c3:ba:6d:df:3b:b2:72:76:4a:8b: 84:ba:8d:eb:60:47:f1:07:2e:97:f7:4a:44:ae:fb:64:f8:67: d1:87:94:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjQxMTIzMDMzMDQ4WhcNMjQxMTMwMDMzMDQ4WjAYMRYwFAYD VQQDEw02NzQxNGM2OS05MmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvx7xzBmNboWp0Z+4bZqMibp4NH2eZRyeWRA03r5ZdjHBiNXBPdUSQvfawZey 7MMf7vGnaG1fzytyNXCV8xS7LwS/G0ah5HxpBJO5tYe/zj7iqaGIuA/OtBYmtioS b5BwYovxVvOruMcZLnuu4DUmrG0idodByYuzcPNFIYFIbfkKN4/3EN0oMkV1f3nH k7c+hsIvRXaUjuqV7uBlHXITfP6xsreZOjBVPNILRPDNhfDogmpcy7qvepebCVZT 8HFiPPz28J/f1wPnvUBzO3k6HXOPhL0/CD1zOREOqYmuc99Mktfw/TOk/nVz91Kh ciWfxcOJsG9lcRjrKSauVqB4sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC956q1r 9egOjOoF+rpPeHvqejjIMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnoSynIW5YBEyhXfpey7iHYJ9EzQrVdO5WGBX6h/xwG0dUxJDzmVF2 slqJb8sn0hgrDX5kU3c9GRTzvYIJII1MDyQzFLUgSKqDbu43arz6fG2YwzfBSqN+ n0XEzM6hjhzlExJ46Wc81m+FxZOZA4npcSAcXw+MWvnQbQy/AMmoRuEIIpUTwBR1 WKa0MRn8IkVBw9g/F1XgKp8xZk6noYWyoVNzC1khZSbbzhtZUCCULyhr1kILtueM kIpBrFXC6ujCforloACKbngJjlNF1ew76Q+CTG8Z0drLt7kQUzQjgMO6bd87snJ2 SouEuo3rYEfxBy6X90pErvtk+GfRh5QX -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:57 2024 by rpki-client on console-fra.rpki-client.org