$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft File: 1ex0z8jA_QV81Og74-tX8GHcWPg.mft (raw, json) Hash identifier: dQCjFxiWRrhwZ+1ALU/grcydTLPKt7bDPkC3sAC/MTo= Subject key identifier: AB:A7:D9:5A:C9:B3:78:9F:F7:AE:5B:39:52:D6:F1:0F:E6:FD:85:66 Authority key identifier: D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 Certificate issuer: /CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft Manifest number: 42 Signing time: Mon 25 Nov 2024 05:21:53 +0000 Manifest this update: Mon 25 Nov 2024 05:21:52 +0000 Manifest next update: Mon 02 Dec 2024 05:21:52 +0000 Files and hashes: 1: 1ex0z8jA_QV81Og74-tX8GHcWPg.crl (hash: l5geuEj1aoOWqWp3xGtdFvoLDIPlkmk/0b+5wIYPxA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Validity Not Before: Nov 25 05:21:52 2024 GMT Not After : Dec 2 05:21:52 2024 GMT Subject: CN=67440971-da34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:c8:1a:30:fe:04:14:0d:14:86:7b:86:cb: 18:88:14:47:54:04:c1:00:7e:c2:00:74:53:b2:a3: 1a:94:9a:bd:6e:f3:51:9e:23:51:2d:66:da:2a:53: 65:98:64:87:9f:a9:a3:52:9e:20:2b:c9:dc:1c:1e: 60:c7:b5:8e:7b:e6:30:d6:ab:35:d5:61:7f:aa:a7: 02:7d:41:66:9c:b3:3d:ee:01:d9:be:f5:42:c4:d2: 28:65:df:df:2e:54:96:af:02:a9:2d:af:93:b8:8c: da:c0:3b:1b:66:36:b6:1f:8f:61:54:86:36:cd:9f: 0d:cc:52:6e:b0:9f:90:ef:d5:08:b3:07:a6:ef:7b: 7d:83:5d:26:a1:30:50:e8:9d:c4:9f:e5:10:e4:af: e7:48:24:e2:d0:5d:a9:0c:c9:98:b2:4f:6b:81:86: d8:45:84:23:0a:c6:95:b8:f5:ac:70:5b:0e:2c:2a: 49:a0:0f:d6:bc:e5:0a:3b:31:b1:9f:9d:b6:8b:73: 9a:12:57:91:1f:77:fb:a9:12:38:c6:9c:c6:5b:b2: 6e:48:ba:9f:5d:89:aa:68:0c:f5:ef:59:1f:e9:2f: 92:98:05:13:d1:a4:5e:8b:cc:f6:fb:aa:98:ec:70: 71:51:f3:2f:81:a7:6d:83:6f:6e:48:78:06:03:d3: 17:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A7:D9:5A:C9:B3:78:9F:F7:AE:5B:39:52:D6:F1:0F:E6:FD:85:66 X509v3 Authority Key Identifier: keyid:D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:40:40:c5:a0:93:e0:42:1f:14:27:7c:4e:82:ad:f5:8d:5d: e7:d9:00:be:2c:9b:6c:7b:55:33:38:4b:5f:77:67:ab:fd:db: f5:3e:70:08:46:49:35:8c:ce:49:65:a6:b7:26:32:cc:dc:7f: 7e:60:09:99:c1:af:e0:06:8c:99:0c:61:af:76:ba:3a:45:14: 4a:50:ff:c7:64:8a:e0:8e:4d:58:9f:a5:4c:fa:e4:19:6b:70: d3:46:26:72:38:41:56:99:d9:ca:42:1c:04:c1:c8:9b:55:7c: 1d:8e:24:ee:a9:be:9d:e2:65:d3:e8:9a:bf:8d:13:62:c2:84: 28:cf:33:0b:90:16:f9:4d:7d:55:ff:18:0c:ec:0d:0a:f0:b7: 3a:8a:92:8b:fe:48:e7:06:13:8d:ef:f4:be:90:4a:18:c4:72: 62:90:88:b8:fd:21:17:20:70:49:63:67:cb:36:e1:2d:e9:da: 8f:22:d7:ef:3d:d8:af:6b:80:e6:e1:51:b1:45:75:72:e1:2d: a9:33:99:bb:f7:dd:9a:f8:99:cd:9e:33:20:64:6e:04:24:01: 2d:cb:a7:3d:ca:12:e1:fb:c3:2f:b6:53:5d:d0:7a:67:3c:6f: 80:8c:2c:72:ca:0f:03:54:bb:9f:b6:17:7e:55:19:bd:41:78: b0:6a:cc:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzEzQjExMC8GA1UEBRMoRDVFQzc0Q0ZDOEMwRkQwNTdDRDRFODNCRTNFQjU3RjA2 MURDNThGODAeFw0yNDExMjUwNTIxNTJaFw0yNDEyMDIwNTIxNTJaMBgxFjAUBgNV BAMTDTY3NDQwOTcxLWRhMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwhcgaMP4EFA0UhnuGyxiIFEdUBMEAfsIAdFOyoxqUmr1u81GeI1EtZtoqU2WY ZIefqaNSniArydwcHmDHtY575jDWqzXVYX+qpwJ9QWacsz3uAdm+9ULE0ihl398u VJavAqktr5O4jNrAOxtmNrYfj2FUhjbNnw3MUm6wn5Dv1QizB6bve32DXSahMFDo ncSf5RDkr+dIJOLQXakMyZiyT2uBhthFhCMKxpW49axwWw4sKkmgD9a85Qo7MbGf nbaLc5oSV5Efd/upEjjGnMZbsm5Iup9diapoDPXvWR/pL5KYBRPRpF6LzPb7qpjs cHFR8y+Bp22Db25IeAYD0xftAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq6fZWsmz eJ/3rls5UtbxD+b9hWYwHwYDVR0jBBgwFoAU1ex0z8jA/QV81Og74+tX8GHcWPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzMTNCL0Q1QkZFQzE0NDdE QjExRUZBRUE0QjAyREM0RjlBRTAyLzFleDB6OGpBX1FWODFPZzc0LXRYOEdIY1dQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWV4MHo4akFfUVY4MU9nNzQtdFg4R0hjV1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz MTNCL0Q1QkZFQzE0NDdEQjExRUZBRUE0QjAyREM0RjlBRTAyLzFleDB6OGpBX1FW ODFPZzc0LXRYOEdIY1dQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABNAQMWgk+BCHxQnfE6CrfWNXefZAL4sm2x7VTM4S193Z6v92/U+cAhG STWMzkllprcmMszcf35gCZnBr+AGjJkMYa92ujpFFEpQ/8dkiuCOTVifpUz65Blr cNNGJnI4QVaZ2cpCHATByJtVfB2OJO6pvp3iZdPomr+NE2LChCjPMwuQFvlNfVX/ GAzsDQrwtzqKkov+SOcGE43v9L6QShjEcmKQiLj9IRcgcEljZ8s24S3p2o8i1+89 2K9rgObhUbFFdXLhLakzmbv33Zr4mc2eMyBkbgQkAS3Lpz3KEuH7wy+2U13Qemc8 b4CMLHLKDwNUu5+2F35VGb1BeLBqzM8= -----END CERTIFICATE-----Generated at Mon Nov 25 06:05:11 2024 by rpki-client on console-fra.rpki-client.org