$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: LFJ14IfDIWowy5SJsyoP/YMv6tC2QedO1yAXsnGXETs= Subject key identifier: 15:F2:DF:D7:DA:FD:B4:2F:FC:18:81:B1:40:F2:F0:C3:3B:03:07:A0 Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: 0A Signing time: Sat 23 Nov 2024 06:04:15 +0000 Manifest this update: Sat 23 Nov 2024 06:04:15 +0000 Manifest next update: Sat 30 Nov 2024 06:04:15 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: VQN/PCa8NCLzRpqzp7q/zQ8haCgZIvI0syZJ268hGhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: Nov 23 06:04:15 2024 GMT Not After : Nov 30 06:04:15 2024 GMT Subject: CN=6741705f-6115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:88:18:9a:01:9b:9b:e0:37:46:ed:45:a2:b0: 34:0c:7d:75:d1:3f:44:25:bf:73:69:16:a2:64:65: 9c:f9:f6:dd:2f:a1:93:3e:01:7d:c1:02:c6:27:3d: cf:7d:2b:f9:63:c1:18:47:df:57:4b:0c:dc:36:01: 54:7e:64:81:b5:6b:4d:4d:ac:0d:15:8b:0d:fe:48: 0e:af:c5:1e:45:09:e9:de:0f:54:ae:2d:1c:d9:cb: 11:f3:09:71:b6:ab:a1:00:04:da:b3:cf:ba:91:50: 2a:2f:df:a5:a4:4d:7c:d5:25:31:e5:78:c1:54:6e: 8d:48:fe:6b:a6:3c:4c:d1:10:ec:a9:42:da:6c:82: 4b:fe:04:67:c2:e0:0e:64:03:0b:d7:ba:32:4a:5a: 61:0b:45:ff:d2:b3:7c:f9:db:52:3a:ee:05:c5:93: de:36:03:3c:fd:04:12:f8:2a:25:2a:cc:dc:c0:38: c5:46:66:33:07:a0:77:5d:14:ca:06:6e:ea:5b:b2: 6c:7d:3e:97:31:83:ba:01:2c:c5:78:55:32:54:24: 72:77:01:17:eb:24:67:45:92:b7:00:31:bb:ec:87: 9d:f7:e6:7d:82:2c:64:f8:db:17:8b:a8:e0:c4:41: 83:27:75:e2:49:be:e0:cc:11:1d:8b:f8:49:cc:78: 30:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F2:DF:D7:DA:FD:B4:2F:FC:18:81:B1:40:F2:F0:C3:3B:03:07:A0 X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:ed:4b:3f:13:ea:1f:4b:9d:e9:b1:58:66:3d:68:b3:77:8d: 2c:ef:25:fe:6e:ed:66:44:02:a7:6c:ac:bc:e2:a3:a9:a6:dd: da:73:d3:45:8e:94:a8:f4:ac:21:3e:72:9a:94:25:09:a0:61: b3:5e:42:0e:73:2e:86:67:1b:10:c8:8e:3e:1c:e4:1a:0f:12: f2:40:9f:d0:c5:ca:e1:b3:fe:55:78:b7:3a:35:0b:b2:4a:a5: 96:96:2e:05:86:dc:61:c1:4e:c4:f4:51:4c:27:04:ad:a3:54: c8:4a:1d:87:e4:6e:81:b7:14:41:a7:a5:62:77:04:c0:24:06: 56:ad:28:ea:fe:65:d0:49:4b:43:f3:0e:24:bd:14:25:d6:80: dc:9a:88:07:15:a9:2d:ce:5b:35:bb:d0:3a:86:eb:69:47:78: 15:f7:87:f3:ed:20:ee:e2:04:74:38:f2:08:2c:2f:46:d7:0a: 5a:b3:c8:fe:72:c7:68:6d:cb:1c:03:1c:52:87:86:0c:60:0b: 61:5e:33:45:36:1d:f4:8e:73:b7:37:7b:69:da:3a:a2:fe:f3: d1:54:77:22:a0:1e:36:87:a3:4e:39:45:97:9a:e5:ac:b2:32: a8:bc:c2:14:34:65:8e:67:e6:75:50:56:3c:c3:08:e7:b9:ff: 86:0a:93:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoNDQ2ODlDNjcxRkFFRjE5NjdDRjdBOUIxQTMzNjhEOEI5 MTRCN0JBNzAeFw0yNDExMjMwNjA0MTVaFw0yNDExMzAwNjA0MTVaMBgxFjAUBgNV BAMTDTY3NDE3MDVmLTYxMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjiBiaAZub4DdG7UWisDQMfXXRP0Qlv3NpFqJkZZz59t0voZM+AX3BAsYnPc99 K/ljwRhH31dLDNw2AVR+ZIG1a01NrA0Viw3+SA6vxR5FCeneD1SuLRzZyxHzCXG2 q6EABNqzz7qRUCov36WkTXzVJTHleMFUbo1I/mumPEzREOypQtpsgkv+BGfC4A5k AwvXujJKWmELRf/Ss3z521I67gXFk942Azz9BBL4KiUqzNzAOMVGZjMHoHddFMoG bupbsmx9Ppcxg7oBLMV4VTJUJHJ3ARfrJGdFkrcAMbvsh5335n2CLGT42xeLqODE QYMndeJJvuDMER2L+EnMeDCVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFfLf19r9 tC/8GIGxQPLwwzsDB6AwHwYDVR0jBBgwFoAURGicZx+u8ZZ896mxozaNi5FLe6cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2LzA3QUU3QTk2OUNG NjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkdpY1p4LXU4Wlo4OTZteG96YU5pNUZMZTZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QTQ2LzA3QUU3QTk2OUNGNjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpa ODk2bXhvemFOaTVGTGU2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKrtSz8T6h9LnemxWGY9aLN3jSzvJf5u7WZEAqdsrLzio6mm3dpz00WO lKj0rCE+cpqUJQmgYbNeQg5zLoZnGxDIjj4c5BoPEvJAn9DFyuGz/lV4tzo1C7JK pZaWLgWG3GHBTsT0UUwnBK2jVMhKHYfkboG3FEGnpWJ3BMAkBlatKOr+ZdBJS0Pz DiS9FCXWgNyaiAcVqS3OWzW70DqG62lHeBX3h/PtIO7iBHQ48ggsL0bXClqzyP5y x2htyxwDHFKHhgxgC2FeM0U2HfSOc7c3e2naOqL+89FUdyKgHjaHo045RZea5ayy Mqi8whQ0ZY5n5nVQVjzDCOe5/4YKk0U= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org