$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft File: foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json) Hash identifier: 6NLRycpX7UfVgCtEeQ43T9dmXzJSTBHOqmlZfYx/mY8= Subject key identifier: 19:8D:83:A5:DA:02:18:7A:9B:2D:97:46:8A:3E:33:7C:60:AA:2C:36 Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 Certificate issuer: /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Certificate serial: 346A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft Manifest number: 46BD Signing time: Fri 22 Nov 2024 14:20:52 +0000 Manifest this update: Fri 22 Nov 2024 14:20:51 +0000 Manifest next update: Fri 29 Nov 2024 14:20:51 +0000 Files and hashes: 1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: 6/FNLDYh4VX5lmBhfZneabuyus4TABRbKDkiiEPwV2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:20:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13418 (0x346a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Validity Not Before: Nov 22 14:20:51 2024 GMT Not After : Nov 29 14:20:51 2024 GMT Subject: CN=67409344-907c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7f:c7:d7:4f:ab:61:2e:cc:ad:2b:15:6d:92: 47:6a:dd:d7:62:57:c3:e4:7a:42:01:82:78:38:a9: a5:d1:5c:31:fe:e5:d9:8a:96:6f:96:fa:fd:75:0d: ff:60:2a:4b:dd:05:16:6f:c2:4f:49:a2:00:b5:16: 44:0c:00:aa:c3:42:f0:9b:28:21:03:3f:50:77:48: 36:e6:62:84:99:0e:4b:e7:23:65:73:1b:62:c1:68: 83:aa:ef:11:8a:f5:41:82:8b:33:6f:7e:82:74:6f: 6c:d0:70:28:6f:1e:04:79:ef:ec:60:62:f5:34:62: 9f:e5:f0:84:de:5a:35:d3:2e:7e:8b:bc:3a:d2:65: 01:93:25:2f:a2:59:d7:aa:13:3e:14:49:67:22:7a: 10:12:79:a7:1f:20:3b:56:3c:6c:b4:c3:a3:c6:d2: 61:39:46:5b:e8:82:db:2c:f2:42:97:84:dd:c6:6a: 9f:ea:2a:a7:82:a8:d5:16:3c:47:19:0f:f4:b5:17: 0e:2e:17:c0:f8:2d:09:fd:cc:80:29:4e:2d:f0:6e: ed:1f:fa:12:f7:a6:05:07:ee:65:e2:7a:de:2d:aa: e3:74:7c:b8:e5:d6:49:aa:81:31:d4:ce:d8:3b:e5: 7f:33:d0:37:8d:0d:86:95:d0:63:0b:dd:a0:e7:0d: 70:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8D:83:A5:DA:02:18:7A:9B:2D:97:46:8A:3E:33:7C:60:AA:2C:36 X509v3 Authority Key Identifier: keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:b5:d9:6a:8d:d7:36:a1:a7:fe:84:f9:1d:f4:88:26:90:69: 3f:f7:d4:64:66:b7:b3:07:34:a9:94:37:20:b2:73:74:ce:55: 7d:7f:6c:99:9f:55:96:99:53:25:b0:ef:96:08:4e:11:92:ae: f9:70:6a:43:61:c8:85:97:27:31:2e:4f:9d:3e:e4:c7:83:cb: dc:b7:95:66:f8:68:87:17:11:0a:e1:90:9e:a3:f6:ce:0a:e1: c4:0e:60:0e:db:d3:a3:74:19:24:30:f7:e8:83:04:c9:39:ce: 15:50:14:25:53:7a:aa:ca:16:5b:cb:54:2d:c0:fe:a4:8e:dc: e2:aa:59:04:84:51:1a:95:e4:4a:4a:fd:f6:93:9c:fc:9d:ea: 28:02:8f:29:23:c6:2f:fe:7f:92:c1:45:b4:a6:28:38:3c:61: 64:bd:f5:97:c3:22:7e:6c:a2:b6:4a:b5:db:70:7f:fb:f0:0d: a1:f5:93:82:73:69:3c:53:cc:69:47:22:72:79:25:13:40:c5: 89:a7:73:a7:47:4e:7d:4f:41:b3:6e:7d:ec:1e:ca:b5:76:93: cb:13:42:df:cd:f1:68:b6:3c:4c:fa:14:f4:03:4b:c3:ce:ae: ed:ed:52:b9:85:d7:03:45:98:56:ef:e5:a8:33:04:66:b3:c5: 83:11:ce:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDdFODUyRTI0OUQ5QzQ3Q0I2NTk1RTcwMTdEMDdERTI3 QzM5NEFGMDkwHhcNMjQxMTIyMTQyMDUxWhcNMjQxMTI5MTQyMDUxWjAYMRYwFAYD VQQDEw02NzQwOTM0NC05MDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX/H10+rYS7MrSsVbZJHat3XYlfD5HpCAYJ4OKml0Vwx/uXZipZvlvr9dQ3/ YCpL3QUWb8JPSaIAtRZEDACqw0LwmyghAz9Qd0g25mKEmQ5L5yNlcxtiwWiDqu8R ivVBgoszb36CdG9s0HAobx4Eee/sYGL1NGKf5fCE3lo10y5+i7w60mUBkyUvolnX qhM+FElnInoQEnmnHyA7VjxstMOjxtJhOUZb6ILbLPJCl4Tdxmqf6iqngqjVFjxH GQ/0tRcOLhfA+C0J/cyAKU4t8G7tH/oS96YFB+5l4nreLarjdHy45dZJqoEx1M7Y O+V/M9A3jQ2GldBjC92g5w1waQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmNg6Xa Ahh6my2XRoo+M3xgqiw2MB8GA1UdIwQYMBaAFH6FLiSdnEfLZZXnAX0H3ifDlK8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4dGxsZWNCZlFmZUo4T1Vy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZvVXVKSjJjUjh0bGxlY0JmUWZlSjhPVXJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4 dGxsZWNCZlFmZUo4T1Vyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxtdlqjdc2oaf+hPkd9IgmkGk/99RkZrezBzSplDcgsnN0zlV9f2yZ n1WWmVMlsO+WCE4Rkq75cGpDYciFlycxLk+dPuTHg8vct5Vm+GiHFxEK4ZCeo/bO CuHEDmAO29OjdBkkMPfogwTJOc4VUBQlU3qqyhZby1QtwP6kjtziqlkEhFEaleRK Sv32k5z8neooAo8pI8Yv/n+SwUW0pig4PGFkvfWXwyJ+bKK2SrXbcH/78A2h9ZOC c2k8U8xpRyJyeSUTQMWJp3OnR059T0Gzbn3sHsq1dpPLE0LfzfFotjxM+hT0A0vD zq7t7VK5hdcDRZhW7+WoMwRms8WDEc4y -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:44 2024 by rpki-client on console-fra.rpki-client.org