$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: Y658IbMHTXidqqMuQcQKhpEZCsEO+WKlFw1PGhl2H+c= Subject key identifier: 4D:DD:8F:A0:3C:94:AE:D2:44:F7:4A:EB:F9:D2:2D:7A:A1:35:B9:5C Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 014B Signing time: Wed 20 Nov 2024 23:29:35 +0000 Manifest this update: Wed 20 Nov 2024 23:29:34 +0000 Manifest next update: Wed 27 Nov 2024 23:29:34 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: rCIX3/vBunVoBXIS49dpAtPYWYxRDL/ZpNh+4JnuDZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Nov 20 23:29:34 2024 GMT Not After : Nov 27 23:29:34 2024 GMT Subject: CN=673e70de-9879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:71:46:88:8c:0f:bf:d3:b7:e1:45:53:67: c1:18:1e:24:75:9c:53:91:3b:b7:77:ff:3a:fb:8e: b8:74:6c:b6:1c:17:14:52:d8:1f:b0:2e:0e:fa:7d: 1f:cc:34:dd:74:89:db:5e:53:a3:7e:59:00:f5:88: d9:0b:98:e8:d1:f4:5c:19:af:52:d9:3e:b5:54:3a: 2e:8e:6c:52:6c:8f:9e:77:27:8f:0d:cc:91:1f:5c: 25:5c:5c:92:d1:86:96:53:c5:4c:93:e3:5a:c1:e0: 8a:1e:9c:1a:f9:43:b2:92:37:77:89:f0:21:97:b3: 68:8c:2a:6d:e7:32:19:4c:ec:55:5f:69:09:8c:fc: 23:39:66:8a:01:78:b9:c3:02:6d:0e:9a:93:8d:bd: 9c:91:89:13:5d:cf:37:ca:47:df:7a:27:de:7d:33: 23:ab:20:dd:d8:c7:73:04:63:6d:12:2d:be:a5:4c: e5:e0:d3:39:3f:cc:f7:31:b7:3a:38:52:a6:f2:e0: 0f:5e:0c:04:bc:c9:3c:6c:cf:70:65:c5:58:65:ea: b8:94:6b:54:de:21:cd:37:0e:02:09:7c:94:44:5c: 70:39:b8:c8:be:13:f2:ef:27:f8:ed:ee:39:03:d4: 50:71:2b:20:4a:37:9b:69:37:bf:00:17:1e:be:59: 5e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DD:8F:A0:3C:94:AE:D2:44:F7:4A:EB:F9:D2:2D:7A:A1:35:B9:5C X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:49:af:e4:c2:c6:64:9d:60:41:ec:cd:67:5f:36:26:49:83: 57:fb:fd:58:15:f3:b1:1a:6c:f1:1a:b6:4b:05:bb:ac:82:4e: 84:e1:cd:0a:cf:3e:c1:ba:f5:d7:8e:1c:06:f0:ae:0e:18:b1: 83:d2:86:1e:ee:98:99:3f:70:cf:8a:4b:46:50:a0:4e:fe:e5: f8:fe:64:5b:88:be:00:68:be:1d:3c:1a:fc:90:85:d5:17:1d: b8:93:a9:ca:2d:d7:19:70:b2:e1:1c:33:7d:86:df:9d:68:c3: d9:8e:fa:7e:14:23:b7:1d:46:d8:7c:56:1c:3c:bf:f4:9a:9a: 48:91:fe:44:6b:0c:95:c1:8d:25:5e:b0:dc:04:cf:fe:e7:a4: 86:82:10:03:14:5b:36:27:79:68:78:f5:2f:c6:b0:f6:89:86: 9f:47:c5:12:8b:80:c5:55:3d:ac:fb:2c:c0:de:38:8f:83:3e: 76:74:b7:67:c4:d1:a9:fa:46:e5:bb:0d:79:5f:8b:20:8c:8e: 02:41:de:4c:fa:cd:39:8c:18:dc:ad:c7:ce:ab:f8:6f:e2:ca: 1a:a2:e6:6f:4f:72:c0:dd:cd:7f:40:39:e7:61:41:99:19:a0: d6:2b:08:fd:fb:14:b9:22:70:6f:78:7b:82:0e:1b:96:66:71: f6:b5:0d:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjQxMTIwMjMyOTM0WhcNMjQxMTI3MjMyOTM0WjAYMRYwFAYD VQQDEw02NzNlNzBkZS05ODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjVxRoiMD7/Tt+FFU2fBGB4kdZxTkTu3d/86+464dGy2HBcUUtgfsC4O+n0f zDTddInbXlOjflkA9YjZC5jo0fRcGa9S2T61VDoujmxSbI+edyePDcyRH1wlXFyS 0YaWU8VMk+NaweCKHpwa+UOykjd3ifAhl7NojCpt5zIZTOxVX2kJjPwjOWaKAXi5 wwJtDpqTjb2ckYkTXc83ykffeifefTMjqyDd2MdzBGNtEi2+pUzl4NM5P8z3Mbc6 OFKm8uAPXgwEvMk8bM9wZcVYZeq4lGtU3iHNNw4CCXyURFxwObjIvhPy7yf47e45 A9RQcSsgSjebaTe/ABcevllepwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3dj6A8 lK7SRPdK6/nSLXqhNblcMB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACSa/kwsZknWBB7M1nXzYmSYNX+/1YFfOxGmzxGrZLBbusgk6E4c0K zz7BuvXXjhwG8K4OGLGD0oYe7piZP3DPiktGUKBO/uX4/mRbiL4AaL4dPBr8kIXV Fx24k6nKLdcZcLLhHDN9ht+daMPZjvp+FCO3HUbYfFYcPL/0mppIkf5EawyVwY0l XrDcBM/+56SGghADFFs2J3loePUvxrD2iYafR8USi4DFVT2s+yzA3jiPgz52dLdn xNGp+kbluw15X4sgjI4CQd5M+s05jBjcrcfOq/hv4soaouZvT3LA3c1/QDnnYUGZ GaDWKwj9+xS5InBveHuCDhuWZnH2tQ32 -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:25 2024 by rpki-client on console-fra.rpki-client.org