$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json) Hash identifier: wIG03/SxeqbUATi6oN57AoEq9pr7nzorb6RS9w/a340= Subject key identifier: 1F:4C:3C:D4:84:7D:27:61:FC:5B:1A:1C:C6:97:AD:1C:8D:49:A2:20 Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Certificate serial: 2065 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft Manifest number: 2A7B Signing time: Fri 22 Nov 2024 15:57:55 +0000 Manifest this update: Fri 22 Nov 2024 15:57:54 +0000 Manifest next update: Fri 29 Nov 2024 15:57:54 +0000 Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: g/XYK7ZD2FMJ0dxhtT7Bkz+o2hfseqNpkR4yMPBeaXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8293 (0x2065) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Validity Not Before: Nov 22 15:57:54 2024 GMT Not After : Nov 29 15:57:54 2024 GMT Subject: CN=6740aa03-70fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:90:0d:9c:92:2d:e3:ac:0f:75:40:44:d2: 01:f8:c4:5c:1d:e6:b6:65:0d:35:9a:20:91:8c:3e: a4:e1:5a:f8:ae:92:09:e4:ed:1f:fe:d4:13:19:e3: ea:dd:e8:93:ef:90:0c:9a:90:5f:c3:52:16:4d:41: 5f:1b:1f:d8:8c:e9:e9:80:ec:19:6e:8b:0d:58:13: 0f:63:94:78:46:b8:c0:63:5c:87:03:5f:a1:5e:ea: 4c:7b:f3:96:97:91:81:02:96:68:d2:85:ed:24:e4: cc:80:d3:78:58:a7:d3:e0:02:f9:7a:ca:6c:da:82: 52:10:7a:09:59:66:51:9b:4f:c9:c5:6e:86:61:54: 74:c2:b9:c2:3b:63:3c:b7:bd:33:5f:37:23:47:7d: a4:c9:19:32:2a:c6:8d:13:ae:9d:42:ec:3f:7e:6d: cc:16:0a:7f:d6:12:d2:a2:1d:8c:14:3d:1d:b3:cb: 26:fe:78:ef:fe:42:87:6a:05:53:24:de:ed:a0:d2: c5:12:4b:b8:9e:05:d7:05:94:a2:a2:2d:32:b1:d4: b4:50:65:a3:75:a3:a3:86:a2:8a:3c:88:45:1a:02: f4:c1:56:46:ac:e4:32:31:5f:ba:23:ec:96:08:89: 21:30:54:9f:67:19:6c:58:d8:0c:dc:fd:00:47:81: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4C:3C:D4:84:7D:27:61:FC:5B:1A:1C:C6:97:AD:1C:8D:49:A2:20 X509v3 Authority Key Identifier: keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9f:35:66:45:4e:52:ef:15:75:4f:5c:3a:1b:83:0c:21:22: ec:20:5d:ce:8a:1a:1f:15:a2:5e:2c:c8:38:5a:ab:c1:22:71: fc:be:da:bd:93:e5:d1:55:be:b6:cd:b4:53:1d:70:a3:09:dd: 89:3d:57:d8:87:15:6f:ac:3c:ab:bd:c4:77:ab:12:1c:63:cb: 4e:63:cb:9f:24:94:23:8a:b5:46:31:98:b4:4a:0b:26:4b:6b: 70:ff:d7:e1:88:eb:28:02:49:f1:08:10:aa:e8:2f:c9:0f:fa: 27:e6:35:20:bc:21:2d:78:a1:39:ad:ba:1c:0c:0f:0d:86:ef: e0:59:a2:2d:06:c5:52:b6:b8:bb:ad:25:9a:ce:1d:a6:74:7a: cc:36:c3:8f:0d:5f:b0:55:df:59:e1:7c:7d:6a:ca:84:96:e9: 4f:dc:38:d9:fc:bd:e3:f3:9e:79:75:36:3d:b0:52:99:a0:bd: 25:70:de:8e:39:bb:26:47:c6:30:36:aa:f3:c8:27:33:1a:fe: 79:5e:ba:f8:1f:3b:08:a0:7d:46:5a:b3:cb:c2:57:8d:c9:63: a4:0a:c9:35:34:ae:ed:aa:08:67:d0:86:0e:c7:34:6e:ec:ba: 98:3e:cc:d1:f6:f3:31:06:20:6d:db:02:ff:89:5e:2a:e8:4c: a8:35:af:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE NUVBQ0I3MzAwHhcNMjQxMTIyMTU1NzU0WhcNMjQxMTI5MTU1NzU0WjAYMRYwFAYD VQQDEw02NzQwYWEwMy03MGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4+QDZySLeOsD3VARNIB+MRcHea2ZQ01miCRjD6k4Vr4rpIJ5O0f/tQTGePq 3eiT75AMmpBfw1IWTUFfGx/YjOnpgOwZbosNWBMPY5R4RrjAY1yHA1+hXupMe/OW l5GBApZo0oXtJOTMgNN4WKfT4AL5esps2oJSEHoJWWZRm0/JxW6GYVR0wrnCO2M8 t70zXzcjR32kyRkyKsaNE66dQuw/fm3MFgp/1hLSoh2MFD0ds8sm/njv/kKHagVT JN7toNLFEku4ngXXBZSioi0ysdS0UGWjdaOjhqKKPIhFGgL0wVZGrOQyMV+6I+yW CIkhMFSfZxlsWNgM3P0AR4EySwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9MPNSE fSdh/FsaHMaXrRyNSaIgMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2 TGlRNktBZTNERjNWNnN0ekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9nzVmRU5S7xV1T1w6G4MMISLsIF3OihofFaJeLMg4WqvBInH8vtq9 k+XRVb62zbRTHXCjCd2JPVfYhxVvrDyrvcR3qxIcY8tOY8ufJJQjirVGMZi0Sgsm S2tw/9fhiOsoAknxCBCq6C/JD/on5jUgvCEteKE5rbocDA8Nhu/gWaItBsVStri7 rSWazh2mdHrMNsOPDV+wVd9Z4Xx9asqElulP3DjZ/L3j8555dTY9sFKZoL0lcN6O ObsmR8YwNqrzyCczGv55Xrr4HzsIoH1GWrPLwleNyWOkCsk1NK7tqghn0IYOxzRu 7LqYPszR9vMxBiBt2wL/iV4q6EyoNa/B -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org