$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft File: mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json) Hash identifier: ZpP6uQ9Nn7CXB6yMT9/YRbgPnO4pugORr1x20JfH5Pk= Subject key identifier: 93:66:7A:FA:9A:FE:0C:67:0B:16:B2:39:BB:0F:C6:00:E1:23:69:64 Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 Certificate issuer: /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Certificate serial: 0C74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft Manifest number: 0D47 Signing time: Fri 22 Nov 2024 18:08:29 +0000 Manifest this update: Fri 22 Nov 2024 18:08:28 +0000 Manifest next update: Fri 29 Nov 2024 18:08:28 +0000 Files and hashes: 1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: yIizwoZZeuyEDarCQj2rBg24sszp8WkZs/f5TXBBYPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3188 (0xc74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Validity Not Before: Nov 22 18:08:28 2024 GMT Not After : Nov 29 18:08:28 2024 GMT Subject: CN=6740c89c-2d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:d7:64:23:73:3b:67:23:19:46:47:7c:f1: 9d:7c:78:77:6a:54:e5:af:60:aa:2b:18:91:84:3b: 46:14:a6:61:20:4e:94:f4:47:5b:ee:90:34:80:a7: f3:ba:42:90:1d:5a:7c:40:e1:7a:a7:0c:84:f5:16: 02:f8:81:de:9e:5f:e0:71:62:29:b9:65:f5:a5:81: 25:00:03:e1:c9:f0:6b:56:09:49:ef:f9:ce:9e:10: 2b:39:85:37:0c:e9:dd:11:18:d3:48:b7:99:d1:e0: 2c:b5:9d:ad:d9:f5:14:00:3a:79:40:74:36:da:12: df:09:91:a2:eb:85:94:47:35:3e:1b:da:9b:f9:03: ed:db:aa:10:30:a9:a8:ec:13:f2:02:7c:52:a0:85: 23:21:f3:08:dc:2a:b7:75:51:a0:8c:55:d8:68:3c: 92:a1:de:b0:2a:e7:cb:eb:82:90:d1:26:0f:2e:9e: 8a:1d:a7:3e:c2:0c:7d:36:c3:09:09:39:b5:df:ef: 6f:c3:2a:43:f4:8f:2c:89:7e:71:65:ee:96:a7:f8: 33:86:75:9b:9c:e1:be:cc:cb:7b:5b:cc:5b:54:ad: ac:70:ac:5e:2e:d6:68:09:1a:f1:42:65:c2:64:94: de:36:b6:50:11:8c:89:b5:ff:5d:f6:61:55:6e:d5: 25:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:66:7A:FA:9A:FE:0C:67:0B:16:B2:39:BB:0F:C6:00:E1:23:69:64 X509v3 Authority Key Identifier: keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:53:ae:d9:45:06:d5:a3:89:12:8f:4c:75:bf:7f:a0:a4:02: f1:5a:c7:b1:f8:ea:d8:8c:f2:39:48:3b:84:3b:4d:c0:df:e2: c8:03:2e:17:03:cb:e5:39:fa:fe:3b:6a:4a:ff:c6:78:6f:db: 33:fb:dc:9a:5d:bb:1e:70:c9:de:31:cb:f7:ef:43:cd:a3:bf: f2:76:40:41:f7:dd:2c:0e:2d:d8:4f:18:92:67:a7:4f:38:ea: ec:d6:22:61:c7:15:23:de:22:7d:ee:e4:6a:28:78:f1:09:56: c9:91:3b:1c:75:86:da:c4:92:84:ae:9e:99:09:15:9e:42:76: 75:c4:92:b6:37:b6:20:2b:64:c7:fe:8e:70:bc:ce:29:a6:ab: e7:d8:37:3d:0e:e1:bc:85:f3:ea:e3:de:97:ac:03:e8:b1:97: 8d:14:0e:63:67:36:48:c5:21:90:23:9a:ca:16:84:2d:3b:c5: 0c:7d:b7:c3:49:7f:5e:e7:8f:5b:1c:08:17:84:e9:e4:c8:f7: f1:f1:88:8b:63:2a:91:8a:94:bf:e7:ab:29:60:49:47:2c:f4: 8d:fa:37:93:eb:14:fc:b4:8a:4c:d1:93:37:cf:4d:5f:db:60: c7:8b:6a:6b:89:84:c1:00:33:94:25:98:89:35:bf:f0:b0:f9: 89:6b:e7:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDk4OEJBNTAzQTc2NTFFMzI2ODdDNEM5NkY2RURFMTg3 QzczRDA0MzgwHhcNMjQxMTIyMTgwODI4WhcNMjQxMTI5MTgwODI4WjAYMRYwFAYD VQQDEw02NzQwYzg5Yy0yZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vDXZCNzO2cjGUZHfPGdfHh3alTlr2CqKxiRhDtGFKZhIE6U9Edb7pA0gKfz ukKQHVp8QOF6pwyE9RYC+IHenl/gcWIpuWX1pYElAAPhyfBrVglJ7/nOnhArOYU3 DOndERjTSLeZ0eAstZ2t2fUUADp5QHQ22hLfCZGi64WURzU+G9qb+QPt26oQMKmo 7BPyAnxSoIUjIfMI3Cq3dVGgjFXYaDySod6wKufL64KQ0SYPLp6KHac+wgx9NsMJ CTm13+9vwypD9I8siX5xZe6Wp/gzhnWbnOG+zMt7W8xbVK2scKxeLtZoCRrxQmXC ZJTeNrZQEYyJtf9d9mFVbtUlXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNmevqa /gxnCxayObsPxgDhI2lkMB8GA1UdIwQYMBaAFJiLpQOnZR4yaHxMlvbt4YfHPQQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhqSm9mRXlXOXUzaGg4YzlC RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21JdWxBNmRsSGpKb2ZFeVc5dTNoaDhjOUJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhq Sm9mRXlXOXUzaGg4YzlCRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtU67ZRQbVo4kSj0x1v3+gpALxWsex+OrYjPI5SDuEO03A3+LIAy4X A8vlOfr+O2pK/8Z4b9sz+9yaXbsecMneMcv370PNo7/ydkBB990sDi3YTxiSZ6dP OOrs1iJhxxUj3iJ97uRqKHjxCVbJkTscdYbaxJKErp6ZCRWeQnZ1xJK2N7YgK2TH /o5wvM4ppqvn2Dc9DuG8hfPq496XrAPosZeNFA5jZzZIxSGQI5rKFoQtO8UMfbfD SX9e549bHAgXhOnkyPfx8YiLYyqRipS/56spYElHLPSN+jeT6xT8tIpM0ZM3z01f 22DHi2priYTBADOUJZiJNb/wsPmJa+dH -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org