$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft File: mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json) Hash identifier: j7F8oLmV5mWlZoxP0i5PQf7+xAxZM/AmzpnER5JX6Ac= Subject key identifier: 47:A5:2F:F7:5F:7D:B7:6C:06:E8:50:06:28:17:B5:B7:02:24:4B:DF Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 Certificate issuer: /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Certificate serial: 24DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft Manifest number: 9DC3 Signing time: Tue 26 Nov 2024 14:29:57 +0000 Manifest this update: Tue 26 Nov 2024 14:29:56 +0000 Manifest next update: Tue 03 Dec 2024 14:29:56 +0000 Files and hashes: 1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: FpQikTcpV9AIvoLVUEoyrd8L3E+BIm1GpPjAt87pnoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 14:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9434 (0x24da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Validity Not Before: Nov 26 14:29:56 2024 GMT Not After : Dec 3 14:29:56 2024 GMT Subject: CN=6745db65-631a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:56:ca:15:af:c3:59:a7:f0:74:ff:83:30: 7b:c9:4c:d4:f9:97:2a:97:74:bd:fc:c2:b1:f8:56: 87:e0:b2:a6:90:9e:aa:32:b3:40:a9:6f:58:66:0f: f4:83:97:a3:6f:c9:cb:e0:40:d4:b6:f8:82:5a:53: b1:d4:8f:28:79:9f:34:13:64:cb:9e:11:92:1e:d7: f9:15:11:df:f3:d2:67:f3:12:61:ef:ed:1d:87:b4: ee:9f:89:2e:b8:d8:ad:17:0c:bb:c3:0f:ef:c4:87: b7:08:3e:84:fa:52:51:fa:ea:90:5a:f7:cb:73:a7: 52:2b:90:b9:30:63:65:a9:91:7f:65:39:3b:ea:5c: 98:27:d8:93:55:8e:16:51:85:df:b6:72:04:8e:61: 57:75:18:2c:ab:1f:b2:af:37:33:6e:a9:0c:2f:48: a7:e1:fa:4c:27:6d:e3:09:4c:a9:1e:8c:43:3f:a7: ee:77:26:5a:d5:c8:fd:bb:0f:e2:e5:11:a1:5a:ab: 3c:2d:d3:99:62:41:ec:ff:1f:20:63:e4:53:f7:1d: 21:f8:7d:28:b5:ba:6f:76:c6:81:e4:e5:1c:af:bf: 8a:d6:5a:34:3a:cd:77:5f:2b:ba:a8:fc:f5:87:b5: a7:98:4f:d8:40:a3:10:b5:26:42:17:5c:9f:cd:bc: 3a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A5:2F:F7:5F:7D:B7:6C:06:E8:50:06:28:17:B5:B7:02:24:4B:DF X509v3 Authority Key Identifier: keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:b7:cb:ff:c2:db:e9:95:23:2f:84:d1:9a:9b:3d:32:b0:40: c0:d2:48:c4:84:17:6c:4e:6f:43:24:21:e3:5f:1f:d7:b9:bf: 4f:eb:e1:8b:b7:ee:72:8a:f2:eb:7e:42:81:49:b2:43:d4:e1: cf:03:94:5f:71:06:c5:ba:b0:2c:0c:bf:45:d4:cf:03:3c:5f: cd:48:ce:1c:a0:50:bf:d8:d2:03:36:5f:03:fb:81:0e:db:1c: 26:47:30:dd:aa:68:8a:c1:8a:89:9d:8f:c1:3e:86:4e:7d:d1: 78:71:f5:d4:ac:20:b9:7f:f3:3b:b2:29:7b:3f:17:23:e2:28: 9a:3a:38:3b:45:5c:f9:10:bf:bf:e6:d4:62:2b:37:9f:0e:19: c9:7c:ca:6d:a9:2d:b0:d2:50:7d:a3:a3:57:35:78:e1:fa:5e: 0f:ec:11:9d:d5:49:47:28:84:41:41:94:0c:3a:01:b5:2f:e0: 6e:cf:3f:92:b2:e7:2c:fc:ea:8c:19:c6:3e:fb:8f:83:ce:35: d4:18:13:67:ab:42:1b:cb:fe:13:5b:b7:b6:7c:ed:98:a7:73: cf:03:c2:56:33:91:07:ae:ad:3d:5c:49:5e:66:a1:f0:8b:b7: 3c:6c:f9:dc:5d:df:75:74:09:61:01:6b:82:62:33:9b:b9:73: 09:f2:63:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDk4NUE2NjVBOUNGQjRGNUNBMDBFQ0E4QkZFQjgwNjMw QkY0RjQ4MTYwHhcNMjQxMTI2MTQyOTU2WhcNMjQxMjAzMTQyOTU2WjAYMRYwFAYD VQQDEw02NzQ1ZGI2NS02MzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7pWyhWvw1mn8HT/gzB7yUzU+Zcql3S9/MKx+FaH4LKmkJ6qMrNAqW9YZg/0 g5ejb8nL4EDUtviCWlOx1I8oeZ80E2TLnhGSHtf5FRHf89Jn8xJh7+0dh7Tun4ku uNitFwy7ww/vxIe3CD6E+lJR+uqQWvfLc6dSK5C5MGNlqZF/ZTk76lyYJ9iTVY4W UYXftnIEjmFXdRgsqx+yrzczbqkML0in4fpMJ23jCUypHoxDP6fudyZa1cj9uw/i 5RGhWqs8LdOZYkHs/x8gY+RT9x0h+H0otbpvdsaB5OUcr7+K1lo0Os13Xyu6qPz1 h7WnmE/YQKMQtSZCF1yfzbw6CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEelL/df fbdsBuhQBigXtbcCJEvfMB8GA1UdIwQYMBaAFJhaZlqc+09coA7Ki/64BjC/T0gW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1QxeWdEc3FMX3JnR01MOVBT QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GcG1XcHo3VDF5Z0RzcUxfcmdHTUw5UFNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1Qx eWdEc3FMX3JnR01MOVBTQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDt8v/wtvplSMvhNGamz0ysEDA0kjEhBdsTm9DJCHjXx/Xub9P6+GL t+5yivLrfkKBSbJD1OHPA5RfcQbFurAsDL9F1M8DPF/NSM4coFC/2NIDNl8D+4EO 2xwmRzDdqmiKwYqJnY/BPoZOfdF4cfXUrCC5f/M7sil7Pxcj4iiaOjg7RVz5EL+/ 5tRiKzefDhnJfMptqS2w0lB9o6NXNXjh+l4P7BGd1UlHKIRBQZQMOgG1L+Buzz+S sucs/OqMGcY++4+DzjXUGBNnq0Iby/4TW7e2fO2Yp3PPA8JWM5EHrq09XEleZqHw i7c8bPncXd91dAlhAWuCYjObuXMJ8mM6 -----END CERTIFICATE-----Generated at Tue Nov 26 16:39:27 2024 by rpki-client on console-ams.rpki-client.org