$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json) Hash identifier: G28dVbYBH1wOb/k05ApRfNJM/ehm1OW4ww6hLms51A8= Subject key identifier: 8E:9B:86:F4:44:AF:1E:F7:A6:B3:21:12:4C:39:8C:D5:BD:F8:B1:32 Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Certificate serial: 0709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft Manifest number: 0E11 Signing time: Fri 22 Nov 2024 21:25:20 +0000 Manifest this update: Fri 22 Nov 2024 21:25:19 +0000 Manifest next update: Fri 29 Nov 2024 21:25:19 +0000 Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: 1xKQvOekzPBkSJL36we0JRRUuBu+ezCLZ59OmusjHWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1801 (0x709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Validity Not Before: Nov 22 21:25:19 2024 GMT Not After : Nov 29 21:25:19 2024 GMT Subject: CN=6740f6bf-6794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:6d:ca:b3:a6:b2:e1:c8:c5:6d:5c:e4:b2: 0f:ce:ef:5b:33:35:06:17:be:63:aa:9c:03:37:aa: e2:66:36:b5:66:6e:62:71:46:c8:83:23:c3:92:08: 3e:18:f1:06:34:e6:55:02:3b:2c:23:ae:dd:1b:9d: bc:ce:ec:16:30:05:62:97:8a:43:9d:43:a3:75:b2: 39:63:50:7c:d6:4a:7b:49:c3:fc:4b:fa:6a:63:fb: 21:56:af:c2:ab:de:16:be:2d:68:ba:6d:bc:30:89: 9f:3c:ce:3e:b7:9c:58:c1:ce:4c:45:11:73:1c:b0: 1f:75:bc:db:06:5a:44:24:8e:bc:af:df:0e:f7:e0: be:3d:3d:5c:0c:70:4e:1c:b2:6a:0a:c6:53:3a:72: b5:d9:9f:d0:e0:44:ed:6d:70:d0:da:7f:ea:dc:2c: 04:f9:80:ee:e2:f0:0a:fb:6f:d7:0b:ab:47:69:f9: c5:27:ed:eb:5a:50:24:d1:15:94:22:d8:80:26:12: ed:f0:93:5e:55:98:9e:d5:e7:d6:6b:07:04:76:e5: 94:26:2d:a1:8e:16:81:1f:a7:b1:1b:26:52:07:18: 9c:00:69:f1:77:70:98:91:09:78:6c:45:6b:43:4d: 73:bc:9c:d9:51:21:e8:f9:9f:62:08:48:06:fe:cb: 3a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9B:86:F4:44:AF:1E:F7:A6:B3:21:12:4C:39:8C:D5:BD:F8:B1:32 X509v3 Authority Key Identifier: keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:0f:4f:47:61:24:69:1b:3c:c2:5a:97:c1:3b:eb:90:27:18: 4a:c7:6e:7f:a8:46:10:e1:8e:d6:69:46:f4:bf:0f:fd:5b:e3: cb:89:cf:a0:84:f8:f0:a4:e0:7a:d3:6e:05:45:89:ec:70:c5: e7:1f:c2:87:d5:bc:b3:5b:c0:c8:af:3f:2d:4e:d6:c1:dc:ec: 48:6b:bf:5e:84:5e:16:8b:36:cf:3a:c6:62:b1:b2:31:5f:7a: 9d:83:d7:53:ec:2e:65:aa:6f:ea:74:d3:88:3c:3e:98:2a:75: 08:4d:10:ed:07:7c:34:b8:59:af:66:d9:86:b7:98:00:44:da: ff:96:cb:bc:69:6d:9f:01:29:e3:22:46:7c:96:d8:b4:57:f2: 98:c1:c2:a9:76:c3:c4:c0:f5:da:3c:a9:60:47:1c:d4:eb:f8: be:63:a5:fe:a8:05:79:e4:96:c8:c7:df:86:bd:db:15:65:14: 6d:5c:55:96:eb:cf:e8:f8:df:24:47:f3:b5:68:44:cb:c8:c0: 96:93:82:3f:6c:1b:5e:90:ec:37:31:73:25:05:76:e8:1c:4c: 60:c7:50:52:76:aa:5b:4e:8e:ce:fd:02:31:92:a1:1e:6c:c0: 18:da:4a:d8:23:de:11:a7:ba:86:80:a1:7a:98:28:23:6a:8a: 52:e4:4f:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKEI5N0Q4RjI1MzQ1NjgwOTQ0OUVERTVEQzVDQTI1NjlB ODRFNzgzREIwHhcNMjQxMTIyMjEyNTE5WhcNMjQxMTI5MjEyNTE5WjAYMRYwFAYD VQQDEw02NzQwZjZiZi02Nzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFFtyrOmsuHIxW1c5LIPzu9bMzUGF75jqpwDN6riZja1Zm5icUbIgyPDkgg+ GPEGNOZVAjssI67dG528zuwWMAVil4pDnUOjdbI5Y1B81kp7ScP8S/pqY/shVq/C q94Wvi1oum28MImfPM4+t5xYwc5MRRFzHLAfdbzbBlpEJI68r98O9+C+PT1cDHBO HLJqCsZTOnK12Z/Q4ETtbXDQ2n/q3CwE+YDu4vAK+2/XC6tHafnFJ+3rWlAk0RWU ItiAJhLt8JNeVZie1efWawcEduWUJi2hjhaBH6exGyZSBxicAGnxd3CYkQl4bEVr Q01zvJzZUSHo+Z9iCEgG/ss6DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6bhvRE rx73prMhEkw5jNW9+LEyMB8GA1UdIwQYMBaAFLl9jyU0VoCUSe3l3FyiVpqE54Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dKUko3ZVhjWEtKV21vVG5n OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYMlBKVFJXZ0pSSjdlWGNYS0pXbW9Ubmc5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dK Uko3ZVhjWEtKV21vVG5nOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKD09HYSRpGzzCWpfBO+uQJxhKx25/qEYQ4Y7WaUb0vw/9W+PLic+g hPjwpOB6024FRYnscMXnH8KH1byzW8DIrz8tTtbB3OxIa79ehF4WizbPOsZisbIx X3qdg9dT7C5lqm/qdNOIPD6YKnUITRDtB3w0uFmvZtmGt5gARNr/lsu8aW2fASnj IkZ8lti0V/KYwcKpdsPEwPXaPKlgRxzU6/i+Y6X+qAV55JbIx9+GvdsVZRRtXFWW 68/o+N8kR/O1aETLyMCWk4I/bBtekOw3MXMlBXboHExgx1BSdqpbTo7O/QIxkqEe bMAY2krYI94Rp7qGgKF6mCgjaopS5E+V -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:52 2024 by rpki-client on console-ams.rpki-client.org