$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft File: hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json) Hash identifier: KzubuSbm9aBOtw6WnQX37T/8+n+APjLeF7u7fJsVbEY= Subject key identifier: A8:AB:10:BB:C5:7A:84:FE:EE:90:56:08:4F:40:46:36:28:2A:E5:9D Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 Certificate issuer: /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft Manifest number: 5C Signing time: Sat 23 Nov 2024 05:02:42 +0000 Manifest this update: Sat 23 Nov 2024 05:02:42 +0000 Manifest next update: Sat 30 Nov 2024 05:02:42 +0000 Files and hashes: 1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: hqa7r87jHtlFKTQgeS4d1eQcEhW9hIYvvL0o8FLu6p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931 Validity Not Before: Nov 23 05:02:42 2024 GMT Not After : Nov 30 05:02:42 2024 GMT Subject: CN=674161f2-db0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:26:d0:04:8c:62:1d:9c:62:16:33:56:7a: d1:9e:2d:26:81:a1:2b:60:fc:49:a6:66:34:b0:21: 30:9b:20:e7:4d:f5:cb:be:6a:91:fa:ef:a1:74:76: 5e:cf:7b:8a:63:99:a4:07:a4:89:b6:30:e0:e1:c0: 3a:c6:ba:a6:ff:25:a8:dc:a0:fe:de:69:5c:e0:d7: 6b:32:2d:0e:c7:75:10:2b:a9:0a:5e:3c:a6:b3:b4: 5d:f7:a8:bc:ae:35:b5:7a:6a:00:0e:ce:b7:5f:97: 30:ed:2a:ca:37:90:87:03:de:46:e9:da:28:e2:5e: 70:64:92:1b:b7:84:01:1c:7b:c0:1f:1a:f8:6c:ee: db:12:27:2c:81:98:3b:24:ff:b5:3e:43:bc:56:47: 07:06:d9:af:48:64:38:3d:95:5b:63:09:da:14:d5: 9d:03:90:09:f7:f3:ce:34:da:56:57:ac:43:f7:7d: 5b:1a:e4:fc:e6:1e:e0:91:0a:7f:7c:38:1a:16:99: bd:81:30:5e:89:c5:69:4e:22:ac:6a:81:7e:07:15: 6e:e2:38:4e:eb:a4:69:99:aa:0e:34:82:43:d0:3f: 96:a2:51:fc:03:c3:98:43:e8:e5:3e:bb:6c:ff:89: a3:65:8a:5f:29:1e:0a:84:14:7f:57:48:ca:b0:34: e8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AB:10:BB:C5:7A:84:FE:EE:90:56:08:4F:40:46:36:28:2A:E5:9D X509v3 Authority Key Identifier: keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:05:a9:38:02:13:ae:2b:f5:10:03:6b:6b:92:1e:81:30:44: 53:6d:6c:06:4e:d1:7e:21:a9:48:13:23:17:58:4d:54:39:19: 12:1c:28:ce:40:2f:eb:dc:d6:f2:64:2b:bd:47:7a:08:ca:c9: 6c:c4:9f:37:35:96:7a:ce:83:04:a9:ce:e9:b0:a6:3d:5b:4e: 37:9d:11:a7:e6:a3:ac:3e:bc:6e:41:04:24:51:7a:49:38:13: 35:3f:2a:9a:90:f5:d7:cb:de:34:93:47:43:1d:3a:c0:4c:c4: 0b:5c:da:ef:78:74:ae:ed:b6:90:e2:aa:5d:4e:1a:b6:3f:14: c5:05:2c:9a:34:da:00:b8:d0:8e:7e:80:c5:e0:36:e9:44:ca: 12:fd:69:26:65:35:24:62:34:c7:ad:a6:e1:42:d0:02:fa:ef: b2:f1:72:89:77:be:d3:3b:d6:60:cc:db:04:b7:08:f8:81:0a: f5:b5:e4:23:c0:b1:f8:48:39:21:59:b6:a6:50:9b:06:30:8c: 72:ad:8e:97:6d:41:df:88:8b:a1:fe:fa:1a:f1:b7:03:20:68: 92:21:54:2d:78:ac:a5:cf:4e:d6:c0:82:3c:a8:c9:b2:f4:37: 30:3a:ec:26:1b:cc:f3:21:ef:49:c8:1c:4d:73:9e:ca:f7:c2: 0e:de:fc:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDA5MTExMC8GA1UEBRMoODQ1OUZCNzI5MEQ3NEE5QkNFMjYwRTNGQUI2MDVEN0ZE ODMyNDkzMTAeFw0yNDExMjMwNTAyNDJaFw0yNDExMzAwNTAyNDJaMBgxFjAUBgNV BAMTDTY3NDE2MWYyLWRiMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8GSbQBIxiHZxiFjNWetGeLSaBoStg/EmmZjSwITCbIOdN9cu+apH676F0dl7P e4pjmaQHpIm2MODhwDrGuqb/JajcoP7eaVzg12syLQ7HdRArqQpePKaztF33qLyu NbV6agAOzrdflzDtKso3kIcD3kbp2ijiXnBkkhu3hAEce8AfGvhs7tsSJyyBmDsk /7U+Q7xWRwcG2a9IZDg9lVtjCdoU1Z0DkAn388402lZXrEP3fVsa5PzmHuCRCn98 OBoWmb2BMF6JxWlOIqxqgX4HFW7iOE7rpGmZqg40gkPQP5aiUfwDw5hD6OU+u2z/ iaNlil8pHgqEFH9XSMqwNOilAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqKsQu8V6 hP7ukFYIT0BGNigq5Z0wHwYDVR0jBBgwFoAUhFn7cpDXSpvOJg4/q2Bdf9gySTEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0MDkxLzY1MjFBMEYwMUQ5 RDExRUZBMTBGMkQzQUM0RjlBRTAyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNU RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEZuN2NwRFhTcHZPSmc0X3EyQmRmOWd5U1RFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 MDkxLzY1MjFBMEYwMUQ5RDExRUZBMTBGMkQzQUM0RjlBRTAyL2hGbjdjcERYU3B2 T0pnNF9xMkJkZjlneVNURS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEUFqTgCE64r9RADa2uSHoEwRFNtbAZO0X4hqUgTIxdYTVQ5GRIcKM5A L+vc1vJkK71HegjKyWzEnzc1lnrOgwSpzumwpj1bTjedEafmo6w+vG5BBCRRekk4 EzU/KpqQ9dfL3jSTR0MdOsBMxAtc2u94dK7ttpDiql1OGrY/FMUFLJo02gC40I5+ gMXgNulEyhL9aSZlNSRiNMetpuFC0AL677Lxcol3vtM71mDM2wS3CPiBCvW15CPA sfhIOSFZtqZQmwYwjHKtjpdtQd+Ii6H++hrxtwMgaJIhVC14rKXPTtbAgjyoybL0 NzA67CYbzPMh70nIHE1znsr3wg7e/G8= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:26 2024 by rpki-client on console-ams.rpki-client.org