$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft File: ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json) Hash identifier: tqiG8AoDVEuVbhRU5QwXqHkYMtd7vmw6dOee7Lqjd2Y= Subject key identifier: 65:22:90:29:03:67:72:27:0E:65:5A:58:75:AE:85:11:11:8D:B4:F0 Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 Certificate issuer: /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft Manifest number: 18 Signing time: Wed 23 Oct 2024 06:38:23 +0000 Manifest this update: Wed 23 Oct 2024 06:38:22 +0000 Manifest next update: Wed 30 Oct 2024 06:38:22 +0000 Files and hashes: 1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: YlAe2l/r/fbkLrUIQoR28AmjE5cEUvfcrbGzxK4DLRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177 Validity Not Before: Oct 23 06:38:22 2024 GMT Not After : Oct 30 06:38:22 2024 GMT Subject: CN=671899df-c7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:d9:86:79:da:fe:ea:f4:bd:ff:f7:f1:b4: 96:a0:13:26:60:01:63:b0:ca:66:68:a0:4a:2a:b2: 0f:36:ca:82:6e:7c:eb:6d:f8:ae:aa:d6:fd:ad:01: 3e:38:03:14:17:56:48:86:03:ed:99:ba:ed:9d:7f: 78:e1:40:fb:0a:57:a2:4f:d7:cd:5c:34:bd:a8:86: e5:13:35:63:37:d2:19:ee:f4:df:6b:c2:61:3c:6a: 72:0b:1b:c7:9e:3b:a6:3a:ed:e2:40:64:ab:0c:d5: 60:27:55:e4:8f:3b:e1:7c:2c:7e:1a:1c:fc:25:44: 8d:16:4d:8b:2b:2e:b4:b9:56:60:bb:14:9a:33:92: df:1d:c4:09:ce:cc:01:d4:92:e2:e6:78:b6:8d:f2: 66:00:43:cd:22:8f:80:1c:6f:bb:0c:69:a4:68:fb: 79:4b:f9:cf:7a:79:3d:01:a2:9d:f7:93:14:a3:78: 70:b6:ed:d2:d9:0e:86:74:c1:1b:6e:ed:e0:48:4f: 28:b3:2c:be:8a:93:5b:94:70:ae:87:67:1e:35:46: 8f:0a:df:f4:ee:fe:f5:b6:10:d1:ab:a2:76:02:98: 85:a5:58:00:e3:cd:2d:41:3e:a9:b8:0d:9e:11:dc: 65:e9:35:7a:2a:c2:91:a8:45:b7:0f:a6:e6:5a:91: 5b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:22:90:29:03:67:72:27:0E:65:5A:58:75:AE:85:11:11:8D:B4:F0 X509v3 Authority Key Identifier: keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3e:84:6a:fa:ee:8c:79:a6:81:fb:75:f7:16:d5:a3:4d:a2: fe:5e:74:2d:80:d5:92:dc:43:7b:c6:d1:2f:c3:05:e3:18:57: 69:53:a1:69:4e:e9:06:b2:6a:dc:1c:50:80:85:6e:c1:7e:dc: d1:51:44:c4:37:76:5b:05:04:70:fd:25:53:dd:f2:f0:72:0f: 24:a4:fc:5b:c3:96:00:e8:63:5d:aa:11:d7:82:55:83:b0:ac: 95:ab:4c:f7:4e:6c:24:39:89:39:92:1a:64:b3:b1:64:08:d0: dc:9c:6e:ca:1d:4f:c8:7d:f7:2d:89:0d:62:5e:36:2c:b4:22: 04:5a:74:08:f3:cc:c8:19:83:61:6c:5d:dc:a2:41:66:1c:0c: f2:bc:d0:b5:c2:68:7b:d2:4f:45:50:b0:b9:ed:5e:07:df:de: 66:ba:96:bf:20:3c:4b:50:28:ba:77:b8:08:9c:41:ff:54:68: 87:18:74:ae:d7:76:cc:64:b0:19:b8:68:80:3b:a8:e2:89:fd: df:b5:e0:90:cf:d6:3b:cb:3a:7c:05:01:81:12:38:16:53:4a: 1f:a3:09:36:75:ca:ed:a8:57:87:7a:cc:f8:d1:41:cd:e1:c9: ee:03:98:e4:be:3c:e3:ad:7c:2d:8a:6d:77:65:3e:a3:8c:ce: 39:49:aa:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODlEOTExMC8GA1UEBRMoMTMxNTcwQjQ1MzVGODQwMzAyNTMwREQxMzE3NDQyMzE2 MzA5QzE3NzAeFw0yNDEwMjMwNjM4MjJaFw0yNDEwMzAwNjM4MjJaMBgxFjAUBgNV BAMTDTY3MTg5OWRmLWM3ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFWdmGedr+6vS9//fxtJagEyZgAWOwymZooEoqsg82yoJufOtt+K6q1v2tAT44 AxQXVkiGA+2Zuu2df3jhQPsKV6JP181cNL2ohuUTNWM30hnu9N9rwmE8anILG8ee O6Y67eJAZKsM1WAnVeSPO+F8LH4aHPwlRI0WTYsrLrS5VmC7FJozkt8dxAnOzAHU kuLmeLaN8mYAQ80ij4Acb7sMaaRo+3lL+c96eT0Bop33kxSjeHC27dLZDoZ0wRtu 7eBITyizLL6Kk1uUcK6HZx41Ro8K3/Tu/vW2ENGronYCmIWlWADjzS1BPqm4DZ4R 3GXpNXoqwpGoRbcPpuZakVvTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZSKQKQNn cicOZVpYda6FERGNtPAwHwYDVR0jBBgwFoAUExVwtFNfhAMCUw3RMXRCMWMJwXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OUQ5L0Y1NjAzN0E2NkY1 QzExRUY4MzVBN0I2NkM0RjlBRTAyL0V4Vnd0Rk5maEFNQ1V3M1JNWFJDTVdNSndY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXhWd3RGTmZoQU1DVXczUk1YUkNNV01Kd1hjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 OUQ5L0Y1NjAzN0E2NkY1QzExRUY4MzVBN0I2NkM0RjlBRTAyL0V4Vnd0Rk5maEFN Q1V3M1JNWFJDTVdNSndYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF0+hGr67ox5poH7dfcW1aNNov5edC2A1ZLcQ3vG0S/DBeMYV2lToWlO 6QayatwcUICFbsF+3NFRRMQ3dlsFBHD9JVPd8vByDySk/FvDlgDoY12qEdeCVYOw rJWrTPdObCQ5iTmSGmSzsWQI0NycbsodT8h99y2JDWJeNiy0IgRadAjzzMgZg2Fs XdyiQWYcDPK80LXCaHvST0VQsLntXgff3ma6lr8gPEtQKLp3uAicQf9UaIcYdK7X dsxksBm4aIA7qOKJ/d+14JDP1jvLOnwFAYESOBZTSh+jCTZ1yu2oV4d6zPjRQc3h ye4DmOS+POOtfC2KbXdlPqOMzjlJqnI= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:04 2024 by rpki-client on console-ams.rpki-client.org