$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft File: 4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json) Hash identifier: JP4SyVUS3tWiSvzgU+brQ2l24PXaRdC+nuqlqAsMjP0= Subject key identifier: 86:81:B7:1B:3E:83:C1:89:16:CF:D2:84:F4:92:CE:C0:3A:9C:F9:82 Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 Certificate issuer: /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft Manifest number: 18 Signing time: Wed 23 Oct 2024 06:40:55 +0000 Manifest this update: Wed 23 Oct 2024 06:40:54 +0000 Manifest next update: Wed 30 Oct 2024 06:40:54 +0000 Files and hashes: 1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: qWPC+yFSNVfHWbY/QizLqltNkWlcfzzX7g0Vc02O4x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882 Validity Not Before: Oct 23 06:40:54 2024 GMT Not After : Oct 30 06:40:54 2024 GMT Subject: CN=67189a76-8f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f4:89:71:6e:b4:96:bc:52:7e:68:1d:9a:86: 5f:d7:50:c1:a8:ac:18:0e:fb:5a:a0:1c:d5:b5:1f: 04:47:7e:ae:3c:ab:ef:67:ea:4c:2f:ea:28:09:93: 6b:41:e3:06:cc:3b:29:79:e4:a2:4f:9f:49:3b:06: 30:e4:fc:92:1f:d7:d0:39:a7:fc:a0:63:e3:35:c4: 9e:22:38:83:d3:a2:03:d2:75:03:cb:25:54:01:79: e7:97:70:a4:9e:0b:2b:8b:20:a4:76:b7:dd:11:f8: ec:42:68:9c:30:ce:b8:a4:80:74:ab:1a:95:da:4a: 6f:dd:da:35:8f:35:37:7c:c7:18:32:17:76:8c:de: 1c:98:01:bb:f5:9f:f1:3d:0a:24:7c:2e:fd:8e:bd: 4f:bc:38:f5:ca:69:5d:d6:3b:eb:28:22:5e:44:93: b9:f1:a2:e2:a6:b7:cd:77:8b:2e:50:d3:9c:6e:cb: e0:af:20:8b:a8:41:e6:f6:07:a0:62:47:b7:3e:e1: 62:67:8f:64:2a:56:11:33:e8:a2:fe:14:c4:de:da: cb:f3:a3:3c:a3:29:a5:c2:3e:f0:f8:9a:09:1d:67: b7:e1:fc:53:fb:bd:df:4c:d0:66:f1:35:f0:78:62: 69:94:e0:95:6a:3d:24:2b:f6:ad:88:da:3a:0f:68: 4b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:81:B7:1B:3E:83:C1:89:16:CF:D2:84:F4:92:CE:C0:3A:9C:F9:82 X509v3 Authority Key Identifier: keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:01:38:59:2d:bc:bf:90:f3:2c:25:d7:08:70:36:45:c5:0c: 67:99:3c:5a:ab:ed:88:8b:2b:a9:63:31:51:3c:13:50:e6:d8: e3:ba:a9:45:c5:92:80:c4:ae:50:a9:4e:6b:1a:41:10:36:d1: b0:c6:ef:11:76:75:66:96:ee:3d:e2:a1:68:a7:05:29:26:ce: a3:ba:ec:2f:e0:10:6d:d5:41:54:a8:51:22:36:2c:c9:bf:b1: fb:dd:40:29:58:bd:0a:ae:24:9a:a6:4d:37:dd:fd:e4:ac:1d: 2f:c1:e0:cc:50:41:24:9d:75:2e:14:59:0f:0b:08:93:f5:3b: 9c:16:44:64:99:81:4c:f4:ef:b4:3a:de:7b:14:86:8d:66:df: 76:aa:c3:d3:59:6c:4a:2e:13:99:46:22:4f:02:4c:d0:83:e1: 44:34:08:a6:8c:03:59:78:48:70:6d:e8:df:87:79:12:86:0b: b1:35:a4:e8:b4:dc:87:40:91:2f:0b:42:2e:2f:c7:3d:c9:9b: bb:9e:d6:2f:aa:1f:ae:da:59:32:b1:ee:3e:9f:ad:46:78:89: da:08:ad:70:9e:42:f9:4a:d8:57:62:3d:68:db:85:03:c5:3b: 7f:ae:05:0e:26:cd:1b:e5:3a:79:18:9a:ff:5a:be:c9:85:a5: e5:e1:d4:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NEFDRDExMC8GA1UEBRMoRTE0QTU5M0IzMTJBOTg4NTczRDdBNURERkFFMDdGOTEy NjkzQzg4MjAeFw0yNDEwMjMwNjQwNTRaFw0yNDEwMzAwNjQwNTRaMBgxFjAUBgNV BAMTDTY3MTg5YTc2LThmNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc9IlxbrSWvFJ+aB2ahl/XUMGorBgO+1qgHNW1HwRHfq48q+9n6kwv6igJk2tB 4wbMOyl55KJPn0k7BjDk/JIf19A5p/ygY+M1xJ4iOIPTogPSdQPLJVQBeeeXcKSe CyuLIKR2t90R+OxCaJwwzrikgHSrGpXaSm/d2jWPNTd8xxgyF3aM3hyYAbv1n/E9 CiR8Lv2OvU+8OPXKaV3WO+soIl5Ek7nxouKmt813iy5Q05xuy+CvIIuoQeb2B6Bi R7c+4WJnj2QqVhEz6KL+FMTe2svzozyjKaXCPvD4mgkdZ7fh/FP7vd9M0GbxNfB4 YmmU4JVqPSQr9q2I2joPaEsfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhoG3Gz6D wYkWz9KE9JLOwDqc+YIwHwYDVR0jBBgwFoAU4UpZOzEqmIVz16Xd+uB/kSaTyIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0QUNELzI5MDMxQTNBNzU2 RTExRUY5Q0E0NkU1MUM0RjlBRTAyLzRVcFpPekVxbUlWejE2WGQtdUJfa1NhVHlJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFVwWk96RXFtSVZ6MTZYZC11Ql9rU2FUeUlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 QUNELzI5MDMxQTNBNzU2RTExRUY5Q0E0NkU1MUM0RjlBRTAyLzRVcFpPekVxbUlW ejE2WGQtdUJfa1NhVHlJSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFQBOFktvL+Q8ywl1whwNkXFDGeZPFqr7YiLK6ljMVE8E1Dm2OO6qUXF koDErlCpTmsaQRA20bDG7xF2dWaW7j3ioWinBSkmzqO67C/gEG3VQVSoUSI2LMm/ sfvdQClYvQquJJqmTTfd/eSsHS/B4MxQQSSddS4UWQ8LCJP1O5wWRGSZgUz077Q6 3nsUho1m33aqw9NZbEouE5lGIk8CTNCD4UQ0CKaMA1l4SHBt6N+HeRKGC7E1pOi0 3IdAkS8LQi4vxz3Jm7ue1i+qH67aWTKx7j6frUZ4idoIrXCeQvlK2FdiPWjbhQPF O3+uBQ4mzRvlOnkYmv9avsmFpeXh1OM= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:26 2024 by rpki-client on console-fra.rpki-client.org