$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json) Hash identifier: l2j8P2F14I7T/u4vwLJ0/3zNf2WdgScGetNR/tftha0= Subject key identifier: EA:F1:12:8F:99:EE:50:CD:6E:46:E5:3B:A7:10:AA:5F:94:18:97:B0 Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft Manifest number: 33 Signing time: Wed 23 Oct 2024 06:14:23 +0000 Manifest this update: Wed 23 Oct 2024 06:14:23 +0000 Manifest next update: Wed 30 Oct 2024 06:14:23 +0000 Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: DF8o4+Evs8Hyjc8RkTDfZ/+NZMeNV2AoElvknM51C9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Validity Not Before: Oct 23 06:14:23 2024 GMT Not After : Oct 30 06:14:23 2024 GMT Subject: CN=6718943f-4e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:27:c4:db:cd:8e:68:0d:5e:81:12:2f:81:5d: 59:d4:37:fe:fa:09:e9:68:17:ce:f1:3a:31:e3:01: 64:ae:24:7d:52:57:29:44:9c:1c:ce:a0:01:04:a4: 4e:d5:3a:22:95:7b:15:e5:75:08:e5:42:14:16:78: 9b:c1:88:92:7f:7f:60:64:01:d3:4d:63:27:69:bb: 8c:be:2e:bb:29:bf:aa:50:2d:dc:0c:d3:dc:8e:2b: 6f:57:d9:f2:c7:58:3a:86:03:ec:6b:cb:e9:64:1e: 3f:45:5f:71:c6:f6:bb:07:5c:7f:26:0e:09:e3:bc: 7e:63:0e:03:0c:98:cd:02:85:8c:e0:c0:7b:f4:7a: 4b:34:e2:fa:a2:e4:27:67:8d:91:8e:a5:dd:e7:44: a2:72:f8:64:07:ca:8e:96:9b:f8:1d:ca:47:7d:c4: d9:b4:fb:1a:7c:f8:e8:51:a6:d2:09:c5:f8:82:44: 39:cf:dc:24:19:37:68:0b:9c:df:9e:bd:45:5c:c3: e3:c4:ad:7f:90:a4:c4:8a:22:2a:3c:ec:28:10:82: ae:1e:ae:ed:13:20:a0:c6:29:f9:cc:60:6e:d5:92: 37:1b:6c:bd:ad:7e:39:6f:53:33:a7:09:fb:80:93: 22:77:99:c2:38:6a:62:c8:fb:a5:fe:85:dc:9c:e9: 39:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F1:12:8F:99:EE:50:CD:6E:46:E5:3B:A7:10:AA:5F:94:18:97:B0 X509v3 Authority Key Identifier: keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:bc:ba:67:f6:6f:1d:65:c4:fb:88:8b:32:a1:96:83:ae:5a: 16:57:06:42:db:00:ab:de:a5:cb:64:73:d1:ad:ec:7f:6c:a0: 74:3a:8a:87:2c:e2:9a:2e:db:2e:94:b2:11:23:0f:f0:e7:2c: 46:39:6c:31:7d:2c:09:a1:3b:36:a7:5e:b4:46:4b:02:3b:03: 47:4a:e9:05:a3:08:51:aa:04:f8:b2:91:09:e9:ea:60:ae:ef: 6e:39:64:75:25:57:5b:d9:be:84:e0:e8:04:1d:48:20:e7:4b: fc:5d:15:25:ea:e5:41:a4:53:3a:99:fb:cd:d5:25:85:0f:ef: 8d:dd:67:75:fe:a8:1b:d9:56:48:a4:f4:1a:d2:b1:13:ea:98: 59:f7:0a:9f:4e:e2:42:78:b4:82:43:35:06:6e:53:ca:89:54: c5:48:70:c1:a6:21:2e:c5:3c:63:e9:da:b2:df:e7:82:d0:c8: c4:3f:b2:1e:f7:7b:21:5c:a4:13:fb:f4:a4:b8:44:e7:0c:5e: 79:3d:4d:37:c8:02:6d:3f:6c:2c:bf:7f:ad:79:00:78:32:c4: 9d:f2:ef:4b:6d:14:2e:6c:bf:83:d6:45:fb:ce:82:29:92:00: a2:de:d0:da:61:50:80:21:3e:8d:ae:fb:c2:42:a4:3a:3a:be: 5e:80:c1:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjYwQTExMC8GA1UEBRMoRDRERjI1RTBFQ0QyRTM4MDhGNjg3MEVFNTZGNzBGMjU1 ODE4OTMzRTAeFw0yNDEwMjMwNjE0MjNaFw0yNDEwMzAwNjE0MjNaMBgxFjAUBgNV BAMTDTY3MTg5NDNmLTRlNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2J8TbzY5oDV6BEi+BXVnUN/76CeloF87xOjHjAWSuJH1SVylEnBzOoAEEpE7V OiKVexXldQjlQhQWeJvBiJJ/f2BkAdNNYydpu4y+Lrspv6pQLdwM09yOK29X2fLH WDqGA+xry+lkHj9FX3HG9rsHXH8mDgnjvH5jDgMMmM0ChYzgwHv0eks04vqi5Cdn jZGOpd3nRKJy+GQHyo6Wm/gdykd9xNm0+xp8+OhRptIJxfiCRDnP3CQZN2gLnN+e vUVcw+PErX+QpMSKIio87CgQgq4eru0TIKDGKfnMYG7VkjcbbL2tfjlvUzOnCfuA kyJ3mcI4amLI+6X+hdyc6TnpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6vESj5nu UM1uRuU7pxCqX5QYl7AwHwYDVR0jBBgwFoAU1N8l4OzS44CPaHDuVvcPJVgYkz4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyNjBBL0I2RENGMURDNDQ5 NTExRUZBNDU5MEMzREM0RjlBRTAyLzFOOGw0T3pTNDRDUGFIRHVWdmNQSlZnWWt6 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMU44bDRPelM0NENQYUhEdVZ2Y1BKVmdZa3o0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy NjBBL0I2RENGMURDNDQ5NTExRUZBNDU5MEMzREM0RjlBRTAyLzFOOGw0T3pTNDRD UGFIRHVWdmNQSlZnWWt6NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKS8umf2bx1lxPuIizKhloOuWhZXBkLbAKvepctkc9Gt7H9soHQ6iocs 4pou2y6UshEjD/DnLEY5bDF9LAmhOzanXrRGSwI7A0dK6QWjCFGqBPiykQnp6mCu 7245ZHUlV1vZvoTg6AQdSCDnS/xdFSXq5UGkUzqZ+83VJYUP743dZ3X+qBvZVkik 9BrSsRPqmFn3Cp9O4kJ4tIJDNQZuU8qJVMVIcMGmIS7FPGPp2rLf54LQyMQ/sh73 eyFcpBP79KS4ROcMXnk9TTfIAm0/bCy/f615AHgyxJ3y70ttFC5sv4PWRfvOgimS AKLe0NphUIAhPo2u+8JCpDo6vl6AwRQ= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:25 2024 by rpki-client on console-fra.rpki-client.org