$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json) Hash identifier: NKK3QEJzyrbPpCzLizecDIvgdtaRjYOjZcK6d38dFqg= Subject key identifier: 7A:CE:52:AA:79:FC:E2:E7:D7:2D:02:07:14:38:03:02:2F:82:3E:3C Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft Manifest number: 012E Signing time: Wed 20 Nov 2024 22:52:39 +0000 Manifest this update: Wed 20 Nov 2024 22:52:39 +0000 Manifest next update: Wed 27 Nov 2024 22:52:39 +0000 Files and hashes: 1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: /9E+EDjZtGXgMjyH2qAmx1McXmug5B1x3MO2FaX8QMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Validity Not Before: Nov 20 22:52:39 2024 GMT Not After : Nov 27 22:52:39 2024 GMT Subject: CN=673e6837-4d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b3:85:17:6a:ad:8c:fb:fb:d6:33:4c:b7:f7: 27:80:c6:c8:04:c4:81:f7:fb:c3:32:4c:3a:33:01: 98:4e:e4:c1:ef:da:d2:bc:ad:d7:0f:6e:97:00:ef: 33:3a:6b:e6:10:9c:4d:8f:93:94:8d:b6:3e:42:da: 5b:1e:cb:c7:72:92:68:c1:13:5c:41:bd:a0:27:61: 9a:ee:0a:27:b9:50:18:e2:a5:04:e8:99:ef:15:fe: 11:58:f9:a3:80:92:49:a9:74:38:72:a7:49:32:91: d3:50:58:66:1a:7d:53:5d:75:d7:d2:36:15:b6:fa: 04:76:21:8b:4f:d9:f2:8c:7b:f7:ba:ac:15:58:61: ac:cd:d3:c5:60:88:91:75:32:76:36:2e:73:35:20: dd:d9:ff:e5:e5:16:fd:8c:26:a1:85:2c:ac:eb:dc: e3:6f:31:4e:2c:bd:02:cc:0c:f3:a9:9b:d3:ee:93: 20:2b:8e:62:78:17:0e:a3:09:c4:cf:97:96:a1:6e: b7:50:4d:b7:ab:cd:56:fd:3b:c0:d2:d5:87:6d:75: 4c:69:a6:53:49:8b:d1:07:49:b3:10:72:bc:b4:92: f8:ed:6e:f3:95:a9:38:22:4e:cf:0c:fb:fc:21:38: 52:ad:f5:13:10:f5:ea:3e:0c:b7:ae:42:4c:f1:d0: 98:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CE:52:AA:79:FC:E2:E7:D7:2D:02:07:14:38:03:02:2F:82:3E:3C X509v3 Authority Key Identifier: keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:8f:e2:21:b8:39:e5:06:05:2d:de:c5:27:3a:7d:1b:a1:51: 77:98:1c:b6:32:2b:a3:0b:f4:45:c8:0e:18:c8:99:f9:63:10: 25:dd:10:d3:62:b5:b6:c4:e5:71:89:47:ad:9c:1c:22:84:35: 53:c7:c3:53:8f:0e:0b:59:d3:35:f8:b2:06:c6:40:83:0e:a8: 68:55:38:33:ea:87:fd:b6:c7:73:ac:ac:e1:f1:b4:b7:84:07: 0e:37:66:32:87:07:c6:64:98:4c:f6:db:c4:3a:2b:e0:63:30: 4a:a8:c6:ad:01:a9:c7:4e:68:63:dc:82:00:15:42:82:b4:5d: 46:da:12:09:d8:ca:ca:c4:fb:63:e8:f2:6e:67:77:9c:c6:75: 72:2f:cf:42:3c:24:c9:41:ac:63:42:66:93:67:6b:ad:ce:4a: 9b:5c:ba:f6:73:03:05:83:9f:41:db:49:35:68:16:65:9a:48: 43:be:b9:60:9f:e4:09:d2:0a:df:7e:23:f4:65:4a:44:dc:cc: 5c:74:a3:4f:62:3d:1c:92:8c:37:d6:61:d7:93:ed:75:00:96: 88:9a:82:cf:a8:bb:b3:34:fc:3a:71:5f:6f:94:ec:a0:78:25: 6c:82:c9:d2:a9:16:e5:54:a7:ac:35:7f:0d:59:64:d4:04:2a: 71:8a:a7:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKDlGRTAwQzE5Q0UwQjhGOTZFQ0Y4OUEzNTdGN0QxQUY1 NThGOTZGRjUwHhcNMjQxMTIwMjI1MjM5WhcNMjQxMTI3MjI1MjM5WjAYMRYwFAYD VQQDEw02NzNlNjgzNy00ZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA77OFF2qtjPv71jNMt/cngMbIBMSB9/vDMkw6MwGYTuTB79rSvK3XD26XAO8z OmvmEJxNj5OUjbY+QtpbHsvHcpJowRNcQb2gJ2Ga7gonuVAY4qUE6JnvFf4RWPmj gJJJqXQ4cqdJMpHTUFhmGn1TXXXX0jYVtvoEdiGLT9nyjHv3uqwVWGGszdPFYIiR dTJ2Ni5zNSDd2f/l5Rb9jCahhSys69zjbzFOLL0CzAzzqZvT7pMgK45ieBcOownE z5eWoW63UE23q81W/TvA0tWHbXVMaaZTSYvRB0mzEHK8tJL47W7zlak4Ik7PDPv8 IThSrfUTEPXqPgy3rkJM8dCYhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrOUqp5 /OLn1y0CBxQ4AwIvgj48MB8GA1UdIwQYMBaAFJ/gDBnOC4+W7PiaNX99GvVY+W/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC82NzAwNThCNERG RjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1YnMtSm8xZjMwYTlWajVi X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24tQU1HYzRMajVicy1KbzFmMzBhOVZqNWJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC82NzAwNThCNERGRjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1 YnMtSm8xZjMwYTlWajViX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRj+IhuDnlBgUt3sUnOn0boVF3mBy2MiujC/RFyA4YyJn5YxAl3RDT YrW2xOVxiUetnBwihDVTx8NTjw4LWdM1+LIGxkCDDqhoVTgz6of9tsdzrKzh8bS3 hAcON2YyhwfGZJhM9tvEOivgYzBKqMatAanHTmhj3IIAFUKCtF1G2hIJ2MrKxPtj 6PJuZ3ecxnVyL89CPCTJQaxjQmaTZ2utzkqbXLr2cwMFg59B20k1aBZlmkhDvrlg n+QJ0grffiP0ZUpE3MxcdKNPYj0ckow31mHXk+11AJaImoLPqLuzNPw6cV9vlOyg eCVsgsnSqRblVKesNX8NWWTUBCpxiqfx -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:00 2024 by rpki-client on console-ams.rpki-client.org