$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: wQ6C47Zjwaamu+GeVG5cjja4q7myt0KlQ3oJa+lhvi0= Subject key identifier: 29:CB:CF:1E:16:BD:E5:8F:D0:E0:07:EE:3F:ED:CB:CE:88:DD:CD:C6 Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 3428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 3428 Signing time: Fri 22 Nov 2024 14:31:45 +0000 Manifest this update: Fri 22 Nov 2024 14:31:45 +0000 Manifest next update: Fri 29 Nov 2024 14:31:45 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: kzQhtmSWh5L9R4y53N2Vb1dMcfwKAJK14pf1sWt/pmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13352 (0x3428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: Nov 22 14:31:45 2024 GMT Not After : Nov 29 14:31:45 2024 GMT Subject: CN=674095d1-978b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9e:ba:ed:e3:f3:31:75:4c:e6:b8:f1:fd:8a: 6e:51:47:b2:2c:45:55:02:dc:44:9e:14:2a:83:a8: 81:69:20:11:57:61:67:10:15:5a:ac:6e:a1:e4:0f: 76:fb:f3:ff:35:ab:4c:1a:d4:e0:09:11:de:7a:2f: 85:23:31:c1:eb:c5:33:07:30:fe:3a:d9:3f:bf:5d: 34:77:9a:be:55:7e:1b:0a:c0:9f:d9:9d:ba:ee:19: 7a:a4:f1:41:db:6e:3d:fe:aa:d6:05:1e:a1:9b:a7: e8:f3:08:8f:b3:60:c0:8f:9c:d1:95:ff:4d:c3:0f: 18:e1:23:20:49:f7:3b:4e:35:30:a1:b1:ce:25:15: 8f:7f:72:40:6b:ef:81:fd:ae:76:0d:b8:c2:fc:82: a4:78:82:7c:a2:4b:16:d2:4a:86:87:79:b6:96:da: 6a:aa:87:24:c1:57:89:f6:82:b7:51:13:7f:7a:2f: a4:54:4f:b5:c4:e8:f4:6f:69:13:df:8f:29:45:fd: f7:c4:a5:4e:ea:12:d9:a2:e9:78:3e:95:17:8d:15: cc:8b:93:4a:85:6a:13:52:79:69:92:00:d0:7f:38: e2:eb:20:a9:e5:fe:9a:9c:fb:dc:3e:d4:c2:d0:9e: 55:6c:cc:0f:9f:00:49:63:99:d8:81:78:8c:92:09: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CB:CF:1E:16:BD:E5:8F:D0:E0:07:EE:3F:ED:CB:CE:88:DD:CD:C6 X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:02:27:f7:c1:d3:e9:e1:94:9a:52:c1:bb:29:18:31:8a:ad: ad:f6:8a:0f:18:ae:f7:5e:e7:70:51:73:de:45:bb:74:45:f9: 6a:d3:9a:7f:43:cf:ed:a6:cc:1f:17:7b:83:93:5a:af:e0:8b: 76:6f:a0:4f:03:45:42:24:16:34:4a:e2:38:6d:85:02:bd:09: d7:26:f8:d3:c4:af:56:16:94:de:b5:ef:7a:20:86:99:b9:bd: 4e:82:9d:85:6f:82:c2:69:cf:50:90:8f:5e:69:81:69:18:32: 9d:9c:64:4c:01:b1:c0:fb:4c:a2:b9:ca:ae:aa:46:36:b4:1d: 20:b8:f2:11:b2:4c:94:6a:65:64:8c:19:0b:e1:6c:cf:d7:c7: 3f:68:7c:24:8b:8a:02:85:bb:c3:f8:47:ad:93:58:fe:46:db: 2a:6d:89:e8:8d:8b:2a:cd:16:a1:10:57:96:f7:cb:9a:e8:d5: 21:7c:7e:86:73:7a:5f:ee:9b:5d:97:71:c0:bb:4b:d5:e5:18: 6c:50:e2:69:9d:a2:1e:28:58:27:e6:ae:e5:fa:de:24:77:56: 3a:eb:0f:03:aa:c5:26:01:d1:e6:d4:ab:a2:ae:85:75:a3:94: 7b:f9:4c:e8:56:3b:67:58:df:8d:24:85:4a:5e:17:32:fa:0b: f9:bb:67:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjQxMTIyMTQzMTQ1WhcNMjQxMTI5MTQzMTQ1WjAYMRYwFAYD VQQDEw02NzQwOTVkMS05NzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJ667ePzMXVM5rjx/YpuUUeyLEVVAtxEnhQqg6iBaSARV2FnEBVarG6h5A92 +/P/NatMGtTgCRHeei+FIzHB68UzBzD+Otk/v100d5q+VX4bCsCf2Z267hl6pPFB 2249/qrWBR6hm6fo8wiPs2DAj5zRlf9Nww8Y4SMgSfc7TjUwobHOJRWPf3JAa++B /a52DbjC/IKkeIJ8oksW0kqGh3m2ltpqqockwVeJ9oK3URN/ei+kVE+1xOj0b2kT 348pRf33xKVO6hLZoul4PpUXjRXMi5NKhWoTUnlpkgDQfzji6yCp5f6anPvcPtTC 0J5VbMwPnwBJY5nYgXiMkgm18QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnLzx4W veWP0OAH7j/ty86I3c3GMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhAif3wdPp4ZSaUsG7KRgxiq2t9ooPGK73XudwUXPeRbt0Rflq05p/ Q8/tpswfF3uDk1qv4It2b6BPA0VCJBY0SuI4bYUCvQnXJvjTxK9WFpTete96IIaZ ub1Ogp2Fb4LCac9QkI9eaYFpGDKdnGRMAbHA+0yiucquqkY2tB0guPIRskyUamVk jBkL4WzP18c/aHwki4oChbvD+Eetk1j+RtsqbYnojYsqzRahEFeW98ua6NUhfH6G c3pf7ptdl3HAu0vV5RhsUOJpnaIeKFgn5q7l+t4kd1Y66w8DqsUmAdHm1KuiroV1 o5R7+UzoVjtnWN+NJIVKXhcy+gv5u2f/ -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:06 2024 by rpki-client on console-ams.rpki-client.org