$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft File: aVxF2kJFO04LBivxfb9Eclx4g4c.mft (raw, json) Hash identifier: K7AocDRQzS0u3z+yAILfE+GGLB80pwslo8AWVYb5PNE= Subject key identifier: 26:D6:72:9A:C0:33:06:E4:FC:A8:91:9D:00:6C:59:3C:12:66:AA:67 Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 Certificate issuer: /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Certificate serial: 221F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft Manifest number: 221F Signing time: Wed 20 Nov 2024 14:39:11 +0000 Manifest this update: Wed 20 Nov 2024 14:39:10 +0000 Manifest next update: Wed 27 Nov 2024 14:39:10 +0000 Files and hashes: 1: aVxF2kJFO04LBivxfb9Eclx4g4c.crl (hash: ipTZNMBesjAnv+4ndrt6zNvMlQT4lOgZ+YNvTfw7ubg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8735 (0x221f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387 Validity Not Before: Nov 20 14:39:10 2024 GMT Not After : Nov 27 14:39:10 2024 GMT Subject: CN=673df48e-fec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:35:8f:ac:c2:09:6a:4b:c3:82:6b:1c:8c: 8f:40:3b:fe:df:3f:6c:f8:36:76:fb:95:00:70:16: b0:d5:1b:a7:13:bf:38:dd:dc:a6:4e:a0:ec:e9:89: 2e:b1:20:d7:65:b6:36:cb:11:a3:31:a5:01:02:7d: ba:a9:a5:e6:cf:4e:68:a6:17:c6:e5:80:d1:3a:76: 36:61:29:2d:fa:32:7d:dc:27:bf:1b:8e:0e:0b:b7: 22:2b:2d:47:c5:31:08:80:ad:de:a7:2d:41:76:ee: 20:fc:21:15:17:6f:bf:dd:00:45:33:38:be:14:31: be:45:9c:f9:15:f2:98:16:64:bc:9a:f6:75:fd:f9: f3:7c:02:29:b8:82:97:cf:9f:9f:ed:91:f4:3e:83: ec:e6:21:80:d6:a7:94:76:fb:48:1d:28:3b:58:18: d2:c1:83:cf:36:d7:89:97:12:ad:da:3b:df:00:ef: 6a:65:e6:0c:0f:47:67:2c:0c:d2:e9:24:27:23:a7: b4:68:c1:98:00:9d:7a:44:77:42:07:eb:76:82:c3: 15:09:63:c0:14:a9:2f:20:32:ea:8f:55:39:46:0a: 4c:f8:b4:c3:19:2e:31:16:35:c1:2d:cd:04:23:ec: 9b:51:93:58:62:f9:5a:47:df:f1:59:02:db:ad:3e: 21:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D6:72:9A:C0:33:06:E4:FC:A8:91:9D:00:6C:59:3C:12:66:AA:67 X509v3 Authority Key Identifier: keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:91:fe:f7:67:d1:a9:62:b0:3f:72:9c:bd:93:f9:6a:91:77: b4:e8:3d:87:ac:85:9f:c9:7d:9a:b8:da:13:d8:6d:68:d9:2c: 9a:5c:c8:27:7f:f4:b8:1d:85:40:ee:30:e7:b5:16:51:37:62: f7:1e:37:2f:84:13:df:d1:f4:ea:93:e6:7b:85:d6:f5:3a:bc: 91:0e:54:10:a0:4d:3e:53:3a:d1:4a:05:c5:b2:13:81:d8:22: bb:03:45:ff:39:a2:dd:00:a0:b9:c9:76:c8:45:6b:8c:5d:26: 70:a1:8d:a8:f7:4f:ff:8b:be:d5:06:98:cc:18:40:21:90:da: 28:68:a1:b3:6b:e9:9e:8f:a2:99:67:ae:97:76:b3:29:a6:bc: 3c:16:a7:fb:93:12:b0:67:00:fc:a6:cf:2b:a6:2d:a8:25:d7: d9:b6:9e:a9:d2:b7:79:67:1a:5f:88:10:08:f9:ed:43:e8:7d: cf:82:fd:71:2d:02:16:1d:ef:db:cd:27:8c:43:c9:08:b3:35: 96:9d:60:ca:92:01:dc:29:2a:7d:c0:9e:d3:ea:38:8a:75:53: 9f:cb:b0:e6:f7:05:4c:19:b9:3e:46:91:bb:7c:e8:67:1c:ea: bf:bb:d6:4d:6a:7a:43:96:53:00:53:06:1d:e2:20:44:bc:9c: 3c:58:76:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYyNkYxMTAvBgNVBAUTKDY5NUM0NURBNDI0NTNCNEUwQjA2MkJGMTdEQkY0NDcy NUM3ODgzODcwHhcNMjQxMTIwMTQzOTEwWhcNMjQxMTI3MTQzOTEwWjAYMRYwFAYD VQQDEw02NzNkZjQ4ZS1mZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwU1j6zCCWpLw4JrHIyPQDv+3z9s+DZ2+5UAcBaw1RunE7843dymTqDs6Yku sSDXZbY2yxGjMaUBAn26qaXmz05ophfG5YDROnY2YSkt+jJ93Ce/G44OC7ciKy1H xTEIgK3epy1Bdu4g/CEVF2+/3QBFMzi+FDG+RZz5FfKYFmS8mvZ1/fnzfAIpuIKX z5+f7ZH0PoPs5iGA1qeUdvtIHSg7WBjSwYPPNteJlxKt2jvfAO9qZeYMD0dnLAzS 6SQnI6e0aMGYAJ16RHdCB+t2gsMVCWPAFKkvIDLqj1U5RgpM+LTDGS4xFjXBLc0E I+ybUZNYYvlaR9/xWQLbrT4hIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbWcprA Mwbk/KiRnQBsWTwSZqpnMB8GA1UdIwQYMBaAFGlcRdpCRTtOCwYr8X2/RHJceIOH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84NDZFQzYyRUE3 OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8wNExCaXZ4ZmI5RWNseDRn NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FWeEYya0pGTzA0TEJpdnhmYjlFY2x4NGc0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjI2Ri84NDZFQzYyRUE3OEUxMUU1ODAyNDFCNjJDNEY5QUUwMi9hVnhGMmtKRk8w NExCaXZ4ZmI5RWNseDRnNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXkf73Z9GpYrA/cpy9k/lqkXe06D2HrIWfyX2auNoT2G1o2SyaXMgn f/S4HYVA7jDntRZRN2L3HjcvhBPf0fTqk+Z7hdb1OryRDlQQoE0+UzrRSgXFshOB 2CK7A0X/OaLdAKC5yXbIRWuMXSZwoY2o90//i77VBpjMGEAhkNooaKGza+mej6KZ Z66XdrMpprw8Fqf7kxKwZwD8ps8rpi2oJdfZtp6p0rd5ZxpfiBAI+e1D6H3Pgv1x LQIWHe/bzSeMQ8kIszWWnWDKkgHcKSp9wJ7T6jiKdVOfy7Dm9wVMGbk+RpG7fOhn HOq/u9ZNanpDllMAUwYd4iBEvJw8WHYn -----END CERTIFICATE-----Generated at Wed Nov 20 16:12:04 2024 by rpki-client on console-fra.rpki-client.org