$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft File: hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json) Hash identifier: L8z5axIAB+SjG+uqPWne6YmKSKlHCww0EJbymhEWzb4= Subject key identifier: 71:9A:C7:D2:BA:74:0C:BB:64:41:AF:2B:3F:13:34:56:A2:99:07:D9 Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 Certificate issuer: /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft Manifest number: 0F Signing time: Sat 23 Nov 2024 06:01:19 +0000 Manifest this update: Sat 23 Nov 2024 06:01:18 +0000 Manifest next update: Sat 30 Nov 2024 06:01:18 +0000 Files and hashes: 1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: 8vYHmbEzLJcq+s13GQp6j8iekf3aqFELC8Fx7VBhh84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251 Validity Not Before: Nov 23 06:01:18 2024 GMT Not After : Nov 30 06:01:18 2024 GMT Subject: CN=67416faf-984c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:a9:9f:78:89:9c:49:18:ad:59:b8:85:95: ab:83:86:59:c3:be:2c:bb:33:4a:4a:10:8a:cd:3b: 1d:56:d6:cf:73:07:9c:29:83:1a:7e:0e:44:ff:45: a8:44:b8:73:61:0e:5a:7c:2d:bc:c9:72:9a:c3:c4: b0:c8:01:f3:e6:0d:39:49:60:81:7d:56:68:0b:66: ee:2b:86:bf:7d:59:9c:21:74:8f:3e:3b:92:be:ba: cb:fa:86:d0:05:06:c1:4f:2b:2c:a3:ca:93:42:54: 48:0f:f3:b5:13:52:8d:2f:21:e1:58:62:33:53:84: 16:78:09:a5:fc:22:56:64:c6:13:46:fa:15:94:92: 12:63:4d:cd:ad:d8:cc:9e:1b:cc:b6:85:40:5b:33: d8:22:b8:8b:cb:e4:97:ea:92:a7:b4:9d:43:96:5f: 47:93:96:2e:d6:bf:7c:f9:4f:b6:59:d4:0e:12:be: 9b:56:7d:66:81:9a:7e:83:8a:b8:a1:7c:66:25:36: 25:d6:ca:f4:b0:88:3e:d3:47:00:1e:04:6c:cf:1d: c6:95:24:40:4b:9b:71:94:77:5b:9f:c3:f3:93:b8: f5:51:dd:f3:29:a6:d8:a6:35:bf:2e:3a:0a:23:c2: 61:fd:26:d6:70:46:45:1a:69:db:3d:60:bd:2e:91: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9A:C7:D2:BA:74:0C:BB:64:41:AF:2B:3F:13:34:56:A2:99:07:D9 X509v3 Authority Key Identifier: keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c3:c8:11:2e:e4:e3:5c:f9:df:e7:48:93:89:71:06:d6:c8: 6f:4c:c0:a1:18:1f:63:bf:1b:ac:13:a4:d9:ef:1a:43:e9:ec: 66:5c:44:81:59:a3:46:6c:e4:6c:0f:28:d5:bc:ed:1c:80:31: 6e:14:93:6a:05:69:5b:fc:05:fc:52:a2:1c:23:92:6d:ba:de: a1:b7:82:1a:82:89:61:ca:63:62:2b:1f:ae:d6:85:d8:d4:a9: 00:52:6d:86:fd:16:08:91:7f:39:1d:07:4c:0a:cd:77:dc:58: e4:e1:ec:05:a0:12:68:05:4e:aa:0f:ba:6a:f6:c7:fb:de:4f: 31:29:86:c1:0d:f6:ef:3c:03:9d:66:53:f2:82:dd:b1:f4:00: af:74:31:65:59:56:6f:9c:b2:48:dc:a9:c5:89:e7:4b:f7:0c: 3b:ca:f9:cd:d5:2e:bd:c6:23:d3:e3:58:63:f7:fa:41:41:8f: db:c7:9f:92:8b:02:fb:bc:0f:85:da:7f:d5:a4:b2:4f:7c:f0: 41:47:dd:d6:41:d9:ab:b1:cf:ca:9d:6b:a1:ba:52:ff:79:0a: 1a:6c:c4:20:b2:4b:16:14:ef:44:7d:78:99:9a:0d:39:b0:5a: fd:52:95:86:d5:21:fe:93:c1:c3:f6:d0:6f:ef:26:22:44:da: fc:c7:59:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzIwQTExMC8GA1UEBRMoODYzMkNEMjU2NjlERDg3MjIwMjA0NTE3NDA2RTNGNkIy RjEyOTI1MTAeFw0yNDExMjMwNjAxMThaFw0yNDExMzAwNjAxMThaMBgxFjAUBgNV BAMTDTY3NDE2ZmFmLTk4NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBuamfeImcSRitWbiFlauDhlnDviy7M0pKEIrNOx1W1s9zB5wpgxp+DkT/RahE uHNhDlp8LbzJcprDxLDIAfPmDTlJYIF9VmgLZu4rhr99WZwhdI8+O5K+usv6htAF BsFPKyyjypNCVEgP87UTUo0vIeFYYjNThBZ4CaX8IlZkxhNG+hWUkhJjTc2t2Mye G8y2hUBbM9giuIvL5Jfqkqe0nUOWX0eTli7Wv3z5T7ZZ1A4SvptWfWaBmn6Dirih fGYlNiXWyvSwiD7TRwAeBGzPHcaVJEBLm3GUd1ufw/OTuPVR3fMpptimNb8uOgoj wmH9JtZwRkUaads9YL0ukQrfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcZrH0rp0 DLtkQa8rPxM0VqKZB9kwHwYDVR0jBBgwFoAUhjLNJWad2HIgIEUXQG4/ay8SklEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMjBBLzgwQUFFRDgyOTU3 NDExRUY4NUUwRkIyMEM0RjlBRTAyL2hqTE5KV2FkMkhJZ0lFVVhRRzRfYXk4U2ts RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaGpMTkpXYWQySElnSUVVWFFHNF9heThTa2xFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MjBBLzgwQUFFRDgyOTU3NDExRUY4NUUwRkIyMEM0RjlBRTAyL2hqTE5KV2FkMkhJ Z0lFVVhRRzRfYXk4U2tsRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADrDyBEu5ONc+d/nSJOJcQbWyG9MwKEYH2O/G6wTpNnvGkPp7GZcRIFZ o0Zs5GwPKNW87RyAMW4Uk2oFaVv8BfxSohwjkm263qG3ghqCiWHKY2IrH67WhdjU qQBSbYb9FgiRfzkdB0wKzXfcWOTh7AWgEmgFTqoPumr2x/veTzEphsEN9u88A51m U/KC3bH0AK90MWVZVm+cskjcqcWJ50v3DDvK+c3VLr3GI9PjWGP3+kFBj9vHn5KL Avu8D4Xaf9Wksk988EFH3dZB2auxz8qda6G6Uv95ChpsxCCySxYU70R9eJmaDTmw Wv1SlYbVIf6TwcP20G/vJiJE2vzHWU8= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org