$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: O4mYAUqyhiDk5vewhdE9hWJhT0aEAvcMeJLeqiVXjG8= Subject key identifier: E7:A6:F9:D6:46:63:7D:53:B5:38:7D:A5:DA:B5:07:C5:23:CA:9B:43 Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 3422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 3422 Signing time: Fri 22 Nov 2024 14:55:54 +0000 Manifest this update: Fri 22 Nov 2024 14:55:53 +0000 Manifest next update: Fri 29 Nov 2024 14:55:53 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: SX9/F6N7eAT2LYoi7gnyEYV6BFYu6c4U6A1X0KYJt6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: Nov 22 14:55:53 2024 GMT Not After : Nov 29 14:55:53 2024 GMT Subject: CN=67409b79-50f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:16:ea:fa:df:89:86:3d:de:b1:ca:e4:a2: 8e:36:da:35:1d:5a:28:1c:ca:0a:9c:21:9e:5a:52: 05:bc:01:fc:38:6e:1f:57:e3:c4:05:6c:99:a9:47: a3:7b:e5:0a:40:07:ef:86:ea:e9:de:6a:48:68:5e: 0c:30:9c:c0:f9:00:b5:56:85:b1:a1:74:31:bd:4a: 32:e7:31:30:fe:b9:28:99:37:15:4c:e4:a4:b0:9b: 3b:4b:62:67:e6:c8:d5:d3:84:88:eb:51:c9:0d:6e: 41:a9:fb:8f:3f:a2:b7:38:a5:58:35:e4:1c:2c:59: ea:aa:77:08:b0:2c:77:04:bb:7b:fc:a7:72:cb:25: bd:c4:bc:e6:3e:a2:77:b5:f1:20:3f:df:cf:b8:57: fb:49:9d:3c:45:9f:32:f1:b2:79:46:93:49:2f:8d: a8:90:f0:cf:b9:64:9f:10:19:81:42:84:3e:af:04: 1d:7d:4c:3c:78:1a:66:12:00:32:69:44:86:e9:57: 70:0b:b3:d3:ea:cf:5f:ed:03:a3:3c:14:07:e7:58: 5e:69:4d:6f:43:2a:91:a9:eb:10:d0:ef:de:ff:c5: 2e:a8:b6:ad:0a:b1:87:ea:f0:76:2a:8d:b0:2c:7c: 0d:b1:de:cc:bc:93:e5:30:fe:91:e9:3b:2c:11:ff: 3c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A6:F9:D6:46:63:7D:53:B5:38:7D:A5:DA:B5:07:C5:23:CA:9B:43 X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:64:31:8d:fc:78:c3:7f:ad:01:86:15:30:05:7c:83:b0:da: f1:fb:a8:f6:03:8d:af:a6:d5:1e:8e:bc:b7:6f:a6:45:9a:e6: 11:f8:60:31:ad:63:d4:b8:e1:07:99:d7:27:f2:51:fe:05:a4: 90:55:50:91:73:57:db:3d:41:fa:0b:f3:e2:53:a2:12:00:cd: 6d:a1:b0:b7:94:06:25:30:c3:3d:55:13:57:75:0a:06:6f:5c: d5:38:dd:13:23:9b:96:22:f7:85:6c:e7:b9:18:7c:1c:20:e2: 34:9f:41:8a:21:6b:37:22:51:0b:ab:5a:ef:bc:5c:0d:1b:a1: e3:b8:9c:55:3d:1f:3c:10:97:19:cc:7e:88:4e:f5:92:ea:4c: 75:40:e5:9e:70:7b:a9:fa:8e:20:c2:11:09:b1:30:a8:7f:97: 60:f4:e2:fe:c8:e9:d2:22:03:43:c2:b5:12:1d:45:d3:6e:03: f4:d3:7c:2f:9b:85:53:79:16:7b:46:c5:21:0b:27:79:8f:bc: e2:43:e7:bd:ef:72:76:d2:59:ad:2f:4e:e7:df:7d:7b:e3:bb: 0e:46:68:51:94:fe:e5:a1:9d:da:15:d5:ba:33:b9:cb:be:e2: 83:a9:86:4e:9f:32:54:5c:b1:12:26:b5:93:93:60:48:1e:ff: 7b:f4:49:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjQxMTIyMTQ1NTUzWhcNMjQxMTI5MTQ1NTUzWjAYMRYwFAYD VQQDEw02NzQwOWI3OS01MGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKYW6vrfiYY93rHK5KKONto1HVooHMoKnCGeWlIFvAH8OG4fV+PEBWyZqUej e+UKQAfvhurp3mpIaF4MMJzA+QC1VoWxoXQxvUoy5zEw/rkomTcVTOSksJs7S2Jn 5sjV04SI61HJDW5BqfuPP6K3OKVYNeQcLFnqqncIsCx3BLt7/KdyyyW9xLzmPqJ3 tfEgP9/PuFf7SZ08RZ8y8bJ5RpNJL42okPDPuWSfEBmBQoQ+rwQdfUw8eBpmEgAy aUSG6VdwC7PT6s9f7QOjPBQH51heaU1vQyqRqesQ0O/e/8UuqLatCrGH6vB2Ko2w LHwNsd7MvJPlMP6R6TssEf882wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOem+dZG Y31TtTh9pdq1B8UjyptDMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgZDGN/HjDf60BhhUwBXyDsNrx+6j2A42vptUejry3b6ZFmuYR+GAx rWPUuOEHmdcn8lH+BaSQVVCRc1fbPUH6C/PiU6ISAM1tobC3lAYlMMM9VRNXdQoG b1zVON0TI5uWIveFbOe5GHwcIOI0n0GKIWs3IlELq1rvvFwNG6HjuJxVPR88EJcZ zH6ITvWS6kx1QOWecHup+o4gwhEJsTCof5dg9OL+yOnSIgNDwrUSHUXTbgP003wv m4VTeRZ7RsUhCyd5j7ziQ+e973J20lmtL07n331747sORmhRlP7loZ3aFdW6M7nL vuKDqYZOnzJUXLESJrWTk2BIHv979En7 -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org