$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft File: rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft (raw, json) Hash identifier: pTL2aR8AUL69zuFMAGdjmI8Sw4g7rZLcutxWmjpzHH0= Subject key identifier: 43:D9:08:C2:5C:E8:D2:BF:7F:86:EF:5A:2B:DC:52:79:2E:93:58:BB Authority key identifier: AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83 Certificate issuer: /CN=A91F7BA0/serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft Manifest number: 3D Signing time: Thu 17 Oct 2024 05:55:49 +0000 Manifest this update: Thu 17 Oct 2024 05:55:48 +0000 Manifest next update: Thu 24 Oct 2024 05:55:48 +0000 Files and hashes: 1: rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl (hash: nr7cjBfgC9YNTRv5HEdJYlMd3yjb0h2MgogSFBQZI88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Oct 2024 04:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BA0/serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683 Validity Not Before: Oct 17 05:55:48 2024 GMT Not After : Oct 24 05:55:48 2024 GMT Subject: CN=6710a6e5-dc48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:dd:66:8a:0e:61:9d:b1:1a:72:7d:07:51: e5:fa:99:cc:e6:a6:f3:4d:c8:d8:71:b3:8e:f1:c8: b8:a4:34:4b:2c:d9:cd:21:31:e0:16:7e:e8:ec:4f: 40:07:53:14:21:71:ac:5b:db:4f:e3:2c:a2:12:85: eb:31:8a:9f:5f:b2:40:f5:a2:29:e6:e2:95:46:97: 64:63:66:4c:cb:49:dd:69:08:7e:16:e2:12:2e:1d: 5f:f0:cd:16:5d:6f:54:9a:0b:5d:55:ba:de:3d:dc: 76:42:72:94:2b:10:d1:db:09:00:00:1d:c4:da:a5: f6:87:46:a3:58:4f:60:3f:25:fe:f0:78:44:b6:92: 83:80:bf:48:1e:58:58:28:52:0d:d0:3a:9a:e0:f7: cc:da:1b:ed:65:d7:cd:b2:0b:d3:70:6c:32:1f:21: 5b:33:3b:0c:56:a2:60:31:69:18:cb:22:7c:53:16: 57:6d:47:14:f8:e9:48:2f:72:fc:18:2f:5f:4a:8e: aa:9f:3e:07:e7:d4:ce:64:9a:d5:e7:00:4e:5e:5d: aa:71:ff:25:5d:2a:86:e5:76:fa:8f:f4:61:30:f3: 17:49:c4:f6:68:19:fa:3a:86:54:00:a6:a9:bc:83: 88:4a:51:40:2d:cc:66:4a:63:31:f4:01:93:76:3f: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D9:08:C2:5C:E8:D2:BF:7F:86:EF:5A:2B:DC:52:79:2E:93:58:BB X509v3 Authority Key Identifier: keyid:AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:93:86:96:e8:77:46:aa:95:ee:f2:55:be:df:06:50:d5:1a: ba:fa:20:d9:28:44:55:c9:ec:84:d6:cf:fb:26:28:a3:31:79: 10:4c:cb:c7:f2:bf:3e:e5:42:b4:c2:cc:91:5a:6c:84:d9:e7: e3:f7:b2:a5:ed:4b:f3:43:5f:36:d0:5a:dd:3e:14:49:ab:fd: 3a:6f:6b:e6:ee:8c:b6:65:cf:5f:83:33:8a:33:01:55:21:28: 70:1c:7e:89:d1:0a:11:67:f9:6f:fb:26:58:fe:1e:91:5e:69: 05:1f:77:15:d5:5a:34:90:17:c3:db:00:7f:18:d9:6d:39:37: 17:83:b4:07:37:0f:5d:a3:a2:84:94:28:20:34:fd:5c:c5:a1: d5:b0:0c:3a:3d:a9:f1:f6:fb:fc:e2:04:11:b1:6f:ea:01:94: 20:3a:f0:9c:6f:2f:47:a8:ba:7b:7a:9c:0b:0d:22:78:85:65: c2:12:31:2c:ff:d5:83:44:f8:98:a0:63:ee:6b:24:74:dc:48: 3e:86:58:0a:82:98:ad:b6:92:0f:da:f0:12:98:fa:8e:04:ea: 80:36:32:d6:fa:4e:8c:47:29:03:87:da:44:57:4a:9a:3f:54: 37:6f:11:dd:2d:a4:04:48:ba:bd:57:6a:64:3a:9a:2e:17:8b: 85:a2:ab:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG N0JBMDExMC8GA1UEBRMoQUNGQ0IzMUUyQkUyQUQzRDEyQjFBNzkxMDJGQ0I0RkQ1 OEJCNjY4MzAeFw0yNDEwMTcwNTU1NDhaFw0yNDEwMjQwNTU1NDhaMBgxFjAUBgNV BAMTDTY3MTBhNmU1LWRjNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBd91mig5hnbEacn0HUeX6mczmpvNNyNhxs47xyLikNEss2c0hMeAWfujsT0AH UxQhcaxb20/jLKIShesxip9fskD1oinm4pVGl2RjZkzLSd1pCH4W4hIuHV/wzRZd b1SaC11Vut493HZCcpQrENHbCQAAHcTapfaHRqNYT2A/Jf7weES2koOAv0geWFgo Ug3QOprg98zaG+1l182yC9NwbDIfIVszOwxWomAxaRjLInxTFldtRxT46UgvcvwY L19KjqqfPgfn1M5kmtXnAE5eXapx/yVdKobldvqP9GEw8xdJxPZoGfo6hlQApqm8 g4hKUUAtzGZKYzH0AZN2P0BNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ9kIwlzo 0r9/hu9aK9xSeS6TWLswHwYDVR0jBBgwFoAUrPyzHivirT0SsaeRAvy0/Vi7ZoMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3QkEwL0Y3MzgzRjg0MzhG MTExRUY5MEI5MDc0MEM0RjlBRTAyL3JQeXpIaXZpclQwU3NhZVJBdnkwX1ZpN1pv TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclB5ekhpdmlyVDBTc2FlUkF2eTBfVmk3Wm9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 QkEwL0Y3MzgzRjg0MzhGMTExRUY5MEI5MDc0MEM0RjlBRTAyL3JQeXpIaXZpclQw U3NhZVJBdnkwX1ZpN1pvTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFiThpbod0aqle7yVb7fBlDVGrr6INkoRFXJ7ITWz/smKKMxeRBMy8fy vz7lQrTCzJFabITZ5+P3sqXtS/NDXzbQWt0+FEmr/Tpva+bujLZlz1+DM4ozAVUh KHAcfonRChFn+W/7Jlj+HpFeaQUfdxXVWjSQF8PbAH8Y2W05NxeDtAc3D12jooSU KCA0/VzFodWwDDo9qfH2+/ziBBGxb+oBlCA68JxvL0eount6nAsNIniFZcISMSz/ 1YNE+JigY+5rJHTcSD6GWAqCmK22kg/a8BKY+o4E6oA2Mtb6ToxHKQOH2kRXSpo/ VDdvEd0tpARIur1XamQ6mi4Xi4Wiq4w= -----END CERTIFICATE-----Generated at Thu Oct 17 06:46:23 2024 by rpki-client on console-fra.rpki-client.org