$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft File: 9TjVlahlU-nmlHrF6Pz8y8namyE.mft (raw, json) Hash identifier: fClE99YTVapd+ysHm60KLgJsYFCFdRr1dg+Z5G7IviY= Subject key identifier: CF:78:1E:64:35:C4:EA:E2:C0:67:52:6F:46:63:0E:9B:F0:2A:BC:C8 Authority key identifier: F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21 Certificate issuer: /CN=A91EA115/serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21 Certificate serial: 3424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft Manifest number: 3423 Signing time: Fri 22 Nov 2024 14:26:49 +0000 Manifest this update: Fri 22 Nov 2024 14:26:49 +0000 Manifest next update: Fri 29 Nov 2024 14:26:49 +0000 Files and hashes: 1: 9TjVlahlU-nmlHrF6Pz8y8namyE.crl (hash: VoeyYnZrfkIH6RUxka/hwo2mwwogJYxdCDJkUAQGIVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13348 (0x3424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA115/serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21 Validity Not Before: Nov 22 14:26:49 2024 GMT Not After : Nov 29 14:26:49 2024 GMT Subject: CN=674094a9-48a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:bd:a8:a6:2c:e5:21:40:de:08:f0:e9:f1: fa:52:f5:b1:56:97:24:e7:6f:60:d3:da:4b:a3:94: 7a:ee:22:34:44:25:b3:a5:47:b3:42:69:b5:af:66: ed:9c:b5:4e:f8:dd:38:e3:cd:99:93:f8:18:5c:90: b4:18:a0:da:fd:68:cb:7c:ab:da:0a:ba:bb:8e:ac: 31:ee:42:8c:f5:01:fa:db:35:bb:d1:ef:2b:44:97: b4:28:a3:d0:63:63:3e:06:46:6d:7f:90:17:97:49: ac:21:e3:c5:78:b9:74:c6:cc:72:3c:3a:94:23:dd: 2b:28:11:26:db:40:43:92:f6:75:fa:a6:1b:8b:50: b2:58:e1:3d:20:69:13:ea:18:de:a2:a7:54:ea:f3: 57:97:13:ff:74:0a:76:1c:07:b8:fb:bd:53:68:1d: d2:ce:c0:eb:7d:64:ed:b7:c2:5b:b4:c7:c0:70:dd: 71:2b:67:00:02:3b:3e:46:3f:d9:f7:1b:ed:85:bd: 14:ea:b8:8b:a8:1c:32:83:05:b4:2b:14:e4:a8:b9: d4:fb:e3:72:16:01:fd:45:e3:66:80:60:e0:e9:cb: 2c:1b:30:a1:e1:51:8d:67:b5:5d:1f:9a:6d:50:37: 8b:d5:58:a1:d5:cf:d0:c7:78:8a:74:a6:a9:42:29: 07:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:78:1E:64:35:C4:EA:E2:C0:67:52:6F:46:63:0E:9B:F0:2A:BC:C8 X509v3 Authority Key Identifier: keyid:F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b6:93:a0:70:88:c3:37:2f:aa:28:f7:a8:93:2a:de:54:04: 39:bb:f4:e5:23:f1:2f:a0:7b:15:8b:65:8b:03:49:e8:1f:77: 64:ee:7a:51:b6:fb:a8:99:5d:e2:75:f5:85:92:50:9b:47:53: 87:0c:ad:b5:54:b9:09:55:af:b6:27:8f:60:1b:cf:5b:a6:a9: 56:f3:02:3b:93:d2:59:ae:75:5f:90:cc:04:1a:db:92:f8:7b: bb:b8:ea:71:a3:2b:8e:c3:c3:b4:1e:df:cf:bb:95:80:45:ce: 65:ca:77:b1:5d:9e:00:32:7b:b5:fd:a0:2c:7e:a4:66:3f:5b: 4f:1c:29:ee:11:ad:f4:03:b1:ce:e6:99:d2:cd:fb:67:9b:63: 61:95:c8:70:5b:b4:d2:07:a4:08:c1:60:20:03:14:cf:87:c1: 9b:fc:85:a4:07:4d:15:5c:ad:41:d2:56:89:ac:50:a6:b2:3e: 07:0d:eb:15:04:3e:5d:74:98:30:73:fc:df:81:64:ae:d5:0e: 4f:cf:4e:f6:51:74:2a:a2:74:b3:be:de:1c:6b:64:95:00:46: 00:c7:56:5d:fd:bb:86:3d:a3:b3:8c:a7:0c:65:a3:18:94:19: 65:88:e8:fa:52:81:a0:0c:5b:f6:0f:9c:32:85:b3:7a:f8:73: 5c:94:1e:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExMTUxMTAvBgNVBAUTKEY1MzhENTk1QTg2NTUzRTlFNjk0N0FDNUU4RkNGQ0NC QzlEQTlCMjEwHhcNMjQxMTIyMTQyNjQ5WhcNMjQxMTI5MTQyNjQ5WjAYMRYwFAYD VQQDEw02NzQwOTRhOS00OGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzza9qKYs5SFA3gjw6fH6UvWxVpck529g09pLo5R67iI0RCWzpUezQmm1r2bt nLVO+N04482Zk/gYXJC0GKDa/WjLfKvaCrq7jqwx7kKM9QH62zW70e8rRJe0KKPQ Y2M+BkZtf5AXl0msIePFeLl0xsxyPDqUI90rKBEm20BDkvZ1+qYbi1CyWOE9IGkT 6hjeoqdU6vNXlxP/dAp2HAe4+71TaB3SzsDrfWTtt8JbtMfAcN1xK2cAAjs+Rj/Z 9xvthb0U6riLqBwygwW0KxTkqLnU++NyFgH9ReNmgGDg6cssGzCh4VGNZ7VdH5pt UDeL1Vih1c/Qx3iKdKapQikHJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM94HmQ1 xOriwGdSb0ZjDpvwKrzIMB8GA1UdIwQYMBaAFPU41ZWoZVPp5pR6xej8/MvJ2psh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTExNS85MTI1NDUwRTFE ODYxMUUyOUYzM0UwREQwOEIwMkNEMi85VGpWbGFobFUtbm1sSHJGNlB6OHk4bmFt eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUalZsYWhsVS1ubWxIckY2UHo4eThuYW15RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTExNS85MTI1NDUwRTFEODYxMUUyOUYzM0UwREQwOEIwMkNEMi85VGpWbGFobFUt bm1sSHJGNlB6OHk4bmFteUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0tpOgcIjDNy+qKPeokyreVAQ5u/TlI/EvoHsVi2WLA0noH3dk7npR tvuomV3idfWFklCbR1OHDK21VLkJVa+2J49gG89bpqlW8wI7k9JZrnVfkMwEGtuS +Hu7uOpxoyuOw8O0Ht/Pu5WARc5lynexXZ4AMnu1/aAsfqRmP1tPHCnuEa30A7HO 5pnSzftnm2NhlchwW7TSB6QIwWAgAxTPh8Gb/IWkB00VXK1B0laJrFCmsj4HDesV BD5ddJgwc/zfgWSu1Q5Pz072UXQqonSzvt4ca2SVAEYAx1Zd/buGPaOzjKcMZaMY lBlliOj6UoGgDFv2D5wyhbN6+HNclB6a -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:44 2024 by rpki-client on console-fra.rpki-client.org