$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft File: pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json) Hash identifier: 0MML/o6sjo5k5cTxysx2Af1QfzpSzSD1L1Qrnro8Jkk= Subject key identifier: 39:69:B1:51:91:93:3B:1F:72:71:9C:BA:EA:4F:1A:71:D2:51:52:44 Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 Certificate issuer: /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Certificate serial: 1663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft Manifest number: 1EFD Signing time: Fri 22 Nov 2024 16:42:28 +0000 Manifest this update: Fri 22 Nov 2024 16:42:27 +0000 Manifest next update: Fri 29 Nov 2024 16:42:27 +0000 Files and hashes: 1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: XhALvEYBpOqYsbRRum/LnpNWS5Q9XqXOSRvyUo3+eHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5731 (0x1663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Validity Not Before: Nov 22 16:42:27 2024 GMT Not After : Nov 29 16:42:27 2024 GMT Subject: CN=6740b474-eb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:31:53:62:7e:0e:85:0d:c0:57:16:f3:5d: a3:4e:1e:f2:31:32:dc:04:96:c3:4b:1b:c2:92:11: e9:41:39:6e:ae:bb:91:9c:18:66:c5:b0:1c:ef:ff: e4:c6:ac:8b:c0:57:3b:02:02:03:96:cc:f6:42:8b: 5e:0f:3f:7d:e8:ad:a6:28:f7:f5:1e:79:22:82:b7: 2a:ea:d8:53:b4:ba:58:ab:55:90:4e:8a:7d:c6:bb: 0b:6c:7b:b7:dd:34:e9:b9:14:90:e6:61:88:33:77: f8:60:1e:c8:cf:ad:6b:25:ab:a1:59:ee:37:18:a4: ee:49:7f:e9:9f:83:40:fa:3c:46:c6:11:7e:b9:0e: c0:72:36:62:7a:05:5b:1b:35:f4:bb:75:e5:60:8f: ec:2b:03:1d:31:42:8e:28:b4:a4:3e:50:5f:64:59: 48:86:ee:4e:03:b2:6e:f8:41:bc:e3:eb:f0:45:56: 81:42:32:b2:d9:dd:3f:7c:48:7c:f8:dc:66:0e:fc: 5f:d5:d5:69:da:35:d1:c3:f3:7d:ea:94:12:23:0e: 3b:29:b1:74:2c:c4:ed:75:b6:bb:f5:db:e8:92:15: 4e:ab:66:cc:c2:4d:ae:87:2f:bd:66:37:c9:8c:d9: c4:07:29:0b:cb:59:44:84:30:cb:c8:e8:bf:35:9a: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:69:B1:51:91:93:3B:1F:72:71:9C:BA:EA:4F:1A:71:D2:51:52:44 X509v3 Authority Key Identifier: keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:df:26:d7:a2:5b:fe:0a:b7:41:c9:ee:50:ac:d9:1b:61:a5: a6:e6:43:3d:45:e3:f8:54:63:49:9b:22:67:5e:c9:ff:e4:6d: 5d:c4:99:59:3f:58:2c:41:19:28:17:f7:fe:75:f1:26:78:46: 01:e0:17:7d:cf:3c:c6:6a:64:c3:a4:23:0e:bf:5d:2c:37:8d: 94:b5:b3:07:c8:0f:a5:32:0f:21:eb:0f:04:bf:64:ed:24:58: de:0d:62:86:34:db:0d:39:4d:b0:63:9e:e0:a6:1f:b0:a0:09: 81:51:fd:41:40:2c:59:ab:c3:e8:a6:9e:5b:c0:a1:97:c9:4f: 5d:ff:b8:a5:56:d1:97:c7:bb:f5:75:36:ff:d8:02:7a:28:c3: 32:c7:bb:2c:ab:8a:ff:59:10:11:bb:70:a5:1b:e6:c3:b6:80: 28:31:a7:eb:49:72:92:4c:22:b5:af:42:47:87:e8:a9:a1:5e: 00:f7:e2:6e:ef:8e:13:e1:c4:4f:f3:d0:ec:c7:ed:a1:db:a0: d7:12:aa:01:d3:39:b2:2d:87:43:93:f6:0f:7a:68:74:97:46: b4:d9:98:cc:43:00:15:2e:fd:3d:25:8b:39:19:7f:76:66:24: ff:6f:b9:0d:3b:ba:1e:cd:2e:7a:6c:39:29:70:94:3c:f1:4d: 1a:fc:0e:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEE2MEM5ODIxRjUzMEIwRDUzQTY3QTk4Qjc2NzE5NkM0 MEEyRDVBNjYwHhcNMjQxMTIyMTY0MjI3WhcNMjQxMTI5MTY0MjI3WjAYMRYwFAYD VQQDEw02NzQwYjQ3NC1lYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWcxU2J+DoUNwFcW812jTh7yMTLcBJbDSxvCkhHpQTlurruRnBhmxbAc7//k xqyLwFc7AgIDlsz2QoteDz996K2mKPf1Hnkigrcq6thTtLpYq1WQTop9xrsLbHu3 3TTpuRSQ5mGIM3f4YB7Iz61rJauhWe43GKTuSX/pn4NA+jxGxhF+uQ7AcjZiegVb GzX0u3XlYI/sKwMdMUKOKLSkPlBfZFlIhu5OA7Ju+EG84+vwRVaBQjKy2d0/fEh8 +NxmDvxf1dVp2jXRw/N96pQSIw47KbF0LMTtdba79dvokhVOq2bMwk2uhy+9ZjfJ jNnEBykLy1lEhDDLyOi/NZqk5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlpsVGR kzsfcnGcuupPGnHSUVJEMB8GA1UdIwQYMBaAFKYMmCH1MLDVOmepi3ZxlsQKLVpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NOVTZaNm1MZG5HV3hBb3RX bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BneVlJZlV3c05VNlo2bUxkbkdXeEFvdFdtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NO VTZaNm1MZG5HV3hBb3RXbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC23ybXolv+CrdBye5QrNkbYaWm5kM9ReP4VGNJmyJnXsn/5G1dxJlZ P1gsQRkoF/f+dfEmeEYB4Bd9zzzGamTDpCMOv10sN42UtbMHyA+lMg8h6w8Ev2Tt JFjeDWKGNNsNOU2wY57gph+woAmBUf1BQCxZq8Popp5bwKGXyU9d/7ilVtGXx7v1 dTb/2AJ6KMMyx7ssq4r/WRARu3ClG+bDtoAoMafrSXKSTCK1r0JHh+ipoV4A9+Ju 744T4cRP89Dsx+2h26DXEqoB0zmyLYdDk/YPemh0l0a02ZjMQwAVLv09JYs5GX92 ZiT/b7kNO7oezS56bDkpcJQ88U0a/A6J -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org