$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft File: 7uxT6tF_v4myIdm6WvzQEHkMmU0.mft (raw, json) Hash identifier: ON5p2Hzhw3XgKa3RajFQ7tNLWrsuH1RjVyCWuqrjZNc= Subject key identifier: B9:F8:F9:7F:7E:CC:11:90:76:63:F3:59:76:38:77:18:27:71:94:EE Authority key identifier: EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D Certificate issuer: /CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft Manifest number: D5 Signing time: Sat 23 Nov 2024 03:42:36 +0000 Manifest this update: Sat 23 Nov 2024 03:42:35 +0000 Manifest next update: Sat 30 Nov 2024 03:42:35 +0000 Files and hashes: 1: 7uxT6tF_v4myIdm6WvzQEHkMmU0.crl (hash: GGOcnCYz6xpc6horEI1Ynb925Ys8VXEDc5BQlQInQP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D Validity Not Before: Nov 23 03:42:35 2024 GMT Not After : Nov 30 03:42:35 2024 GMT Subject: CN=67414f2c-050a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3d:b6:3b:7b:f5:9c:04:bf:9a:6f:60:44:34: 17:8f:75:71:70:fc:f8:af:7d:da:08:b6:40:e7:fd: c6:0c:40:4b:66:3a:4b:55:36:c5:80:23:7f:b8:81: e4:69:8c:ad:43:a3:fd:63:da:81:98:d0:69:1a:9f: 3b:9f:f8:bd:b8:f2:83:29:ae:e8:2c:f2:b6:8a:c0: 7c:ad:9d:42:49:a7:bb:39:5a:29:b9:c3:e2:cf:8f: 1c:00:78:d5:80:9f:7c:f1:c7:76:e2:ab:06:2e:83: ba:39:44:77:e1:29:0b:75:a6:37:af:2a:26:79:70: c5:1d:d0:2e:87:52:6b:cf:22:8b:b3:0c:6e:9d:64: 09:3c:8e:92:e6:5e:5d:40:c9:a4:45:f5:58:21:7c: 38:ae:2e:13:82:fc:12:bc:c5:15:c7:37:af:bb:33: 11:28:71:4e:d8:37:b4:58:fb:58:61:7f:23:c5:af: 35:b9:35:ec:5b:7e:c5:f2:fc:a7:ff:2a:0e:85:28: fd:93:9e:b2:e9:52:7b:3e:3e:9b:8c:7b:6b:42:ce: a3:ba:0c:53:1a:de:f1:bf:fc:3c:d6:87:af:60:65: 94:14:52:36:1e:fe:ca:40:c6:63:70:3a:6e:81:f5: c5:d6:e3:ec:63:a4:f8:f8:91:28:a1:39:1a:00:3d: 41:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F8:F9:7F:7E:CC:11:90:76:63:F3:59:76:38:77:18:27:71:94:EE X509v3 Authority Key Identifier: keyid:EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a9:2b:c1:7c:a9:4e:5b:0d:cf:8f:26:7a:39:43:b5:95:2e: d4:2a:38:97:dd:e1:ee:71:b2:93:52:b4:e1:6b:86:e3:f6:f0: 81:76:ef:b5:c1:3f:30:e2:77:55:52:2d:ae:a0:fc:a7:30:3a: d2:ec:b1:3f:eb:e9:88:1e:a2:82:b9:ba:59:1e:98:92:37:63: 09:a7:cd:9a:06:c5:d4:a8:f3:75:2f:4f:c4:d9:b0:f7:07:62: c5:1a:5c:72:bf:f1:2a:03:79:4d:b7:81:be:aa:5a:ae:44:5e: 33:7b:dc:23:54:cc:24:54:f7:6a:73:a8:df:78:34:e7:cd:79: 81:52:9c:f9:e1:2e:be:2c:2c:54:b5:e1:99:b9:2b:97:d7:47: c0:41:32:77:f2:33:f5:bc:20:44:25:b7:e4:2d:07:26:5d:1e: 65:b6:48:75:3e:02:e0:fe:d6:23:96:6e:a3:6f:3f:df:91:50: 15:57:58:2f:eb:53:2b:2e:fc:a1:07:b2:06:67:91:d7:5c:75: d6:7f:d0:32:71:87:38:b1:d1:6f:7e:b2:41:85:cd:9b:89:54: c4:20:64:81:31:97:35:1c:d4:ea:29:3b:4c:74:bb:c2:44:6a: 80:2a:e0:cf:84:f3:38:cb:5f:74:04:2c:5a:ca:91:48:10:20: f3:14:e5:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKEVFRUM1M0VBRDE3RkJGODlCMjIxRDlCQTVBRkNEMDEw NzkwQzk5NEQwHhcNMjQxMTIzMDM0MjM1WhcNMjQxMTMwMDM0MjM1WjAYMRYwFAYD VQQDEw02NzQxNGYyYy0wNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvT22O3v1nAS/mm9gRDQXj3VxcPz4r33aCLZA5/3GDEBLZjpLVTbFgCN/uIHk aYytQ6P9Y9qBmNBpGp87n/i9uPKDKa7oLPK2isB8rZ1CSae7OVopucPiz48cAHjV gJ988cd24qsGLoO6OUR34SkLdaY3ryomeXDFHdAuh1JrzyKLswxunWQJPI6S5l5d QMmkRfVYIXw4ri4TgvwSvMUVxzevuzMRKHFO2De0WPtYYX8jxa81uTXsW37F8vyn /yoOhSj9k56y6VJ7Pj6bjHtrQs6jugxTGt7xv/w81oevYGWUFFI2Hv7KQMZjcDpu gfXF1uPsY6T4+JEooTkaAD1BcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLn4+X9+ zBGQdmPzWXY4dxgncZTuMB8GA1UdIwQYMBaAFO7sU+rRf7+JsiHZulr80BB5DJlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xQThBMDY2NDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi83dXhUNnRGX3Y0bXlJZG02V3Z6UUVIa01t VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1eFQ2dEZfdjRteUlkbTZXdnpRRUhrTW1VMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xQThBMDY2NDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi83dXhUNnRGX3Y0 bXlJZG02V3Z6UUVIa01tVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArqSvBfKlOWw3PjyZ6OUO1lS7UKjiX3eHucbKTUrTha4bj9vCBdu+1 wT8w4ndVUi2uoPynMDrS7LE/6+mIHqKCubpZHpiSN2MJp82aBsXUqPN1L0/E2bD3 B2LFGlxyv/EqA3lNt4G+qlquRF4ze9wjVMwkVPdqc6jfeDTnzXmBUpz54S6+LCxU teGZuSuX10fAQTJ38jP1vCBEJbfkLQcmXR5ltkh1PgLg/tYjlm6jbz/fkVAVV1gv 61MrLvyhB7IGZ5HXXHXWf9AycYc4sdFvfrJBhc2biVTEIGSBMZc1HNTqKTtMdLvC RGqAKuDPhPM4y190BCxaypFIECDzFOWQ -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:23 2024 by rpki-client on console-ams.rpki-client.org