$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft File: XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json) Hash identifier: xRbkLlCZpNtqp4i7jplE275Qg1cv+H5hmD3sUQ6Ku1U= Subject key identifier: 5B:F7:21:9C:BE:95:4F:01:27:3A:A6:BA:64:B5:8D:8F:AB:21:45:AC Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC Certificate issuer: /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft Manifest number: 04AB Signing time: Sun 24 Nov 2024 23:19:19 +0000 Manifest this update: Sun 24 Nov 2024 23:19:18 +0000 Manifest next update: Sun 01 Dec 2024 23:19:18 +0000 Files and hashes: 1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: w11z8rgr5qbXcg3rKZK0C434slbzP/cAdijQAsqi6TI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC Validity Not Before: Nov 24 23:19:18 2024 GMT Not After : Dec 1 23:19:18 2024 GMT Subject: CN=6743b476-8e01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:ca:2d:e5:3f:c6:f5:c8:55:71:66:85:b5: 9f:e0:b5:cd:5e:39:01:38:ea:7a:6d:bb:79:c5:f8: c3:fc:28:26:92:27:43:e8:0b:0c:f3:63:9f:8a:33: f2:47:28:8d:59:76:f6:55:4d:e0:88:90:bd:f1:d8: b9:76:8c:3c:0d:c6:8d:d9:ba:03:a0:60:c3:fa:26: 1f:98:fc:8f:56:f7:dd:1c:5f:e5:21:48:94:d4:dc: 80:c1:b7:c7:a3:5f:19:a7:cb:ec:20:49:9e:e5:a1: f7:b8:52:e8:9b:7c:8f:10:ea:e2:af:33:db:75:16: 73:87:8d:f8:59:a8:fb:b8:c0:00:ae:9f:df:1a:32: f6:f6:b5:fe:c0:fe:a6:54:fe:0d:8d:c5:5f:fa:9a: 10:79:60:b2:a4:6f:b2:3b:83:86:46:1b:b1:b3:38: b5:37:46:33:ce:bc:08:f4:9a:02:72:13:f0:45:f6: 18:87:4e:4b:09:73:08:d0:1c:ee:81:a7:59:cc:ee: 24:aa:74:d1:3f:f7:4b:57:7d:27:af:e1:b4:0d:6a: ee:aa:33:b6:1a:ba:78:3b:94:bc:a2:12:75:1b:8e: ea:89:b4:76:e3:5b:78:c3:08:04:6e:10:be:6e:d0: 82:57:2f:f4:39:24:b9:10:cd:20:24:16:9e:49:fb: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F7:21:9C:BE:95:4F:01:27:3A:A6:BA:64:B5:8D:8F:AB:21:45:AC X509v3 Authority Key Identifier: keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:66:b1:98:25:76:49:e5:4d:d4:43:77:93:43:26:8d:90:4f: ae:cd:3c:52:8d:bf:d4:14:05:7f:20:53:94:0e:e7:cd:f8:5b: 8f:26:a3:65:62:c9:7f:99:80:36:dd:67:45:54:ef:f4:76:8c: 42:75:f1:d6:2e:04:e4:85:2c:e6:be:50:0c:60:10:dd:e5:10: de:1b:8d:d4:25:a5:54:b2:ca:bc:5f:44:00:53:44:22:da:4f: 41:e3:af:b5:f1:09:05:a1:7c:33:ab:d1:06:9f:e3:88:8b:d5: 0d:13:08:d7:76:b7:1d:8e:ae:4e:64:8f:dc:83:61:d7:c4:7c: e1:76:9d:32:a2:5f:f7:3e:c3:45:2d:80:77:dd:66:4a:2b:34: 79:e0:92:2e:4e:3e:f2:a0:8c:53:a2:81:5c:37:6c:ce:29:5d: 3f:1d:0a:d1:fb:97:db:25:c7:ca:b7:4e:49:e2:07:8f:c3:c2: 64:76:89:55:2f:dd:dc:b8:85:71:33:2d:58:19:60:bd:7a:e5: f4:71:a8:6c:b4:83:6c:26:83:f9:be:e5:01:bd:2a:58:08:7a: b6:a2:6b:ef:75:ce:9b:76:50:c8:d5:3f:4b:83:b4:04:ad:8f: 22:b0:f6:71:d2:30:20:62:94:0f:8f:18:19:cc:67:6f:74:5c: 3b:65:dc:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDNENGMzc2OTkzRDExODUyODI3MEREOTUyRjMwMkNF RDU3NUYxREMwHhcNMjQxMTI0MjMxOTE4WhcNMjQxMjAxMjMxOTE4WjAYMRYwFAYD VQQDEw02NzQzYjQ3Ni04ZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6XKLeU/xvXIVXFmhbWf4LXNXjkBOOp6bbt5xfjD/CgmkidD6AsM82OfijPy RyiNWXb2VU3giJC98di5dow8DcaN2boDoGDD+iYfmPyPVvfdHF/lIUiU1NyAwbfH o18Zp8vsIEme5aH3uFLom3yPEOrirzPbdRZzh434Waj7uMAArp/fGjL29rX+wP6m VP4NjcVf+poQeWCypG+yO4OGRhuxszi1N0YzzrwI9JoCchPwRfYYh05LCXMI0Bzu gadZzO4kqnTRP/dLV30nr+G0DWruqjO2Grp4O5S8ohJ1G47qibR241t4wwgEbhC+ btCCVy/0OSS5EM0gJBaeSfuK7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFv3IZy+ lU8BJzqmumS1jY+rIUWsMB8GA1UdIwQYMBaAFFxM83aZPRGFKCcN2VLzAs7VdfHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS9GMzdDODhFRTBC N0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZVW9KdzNaVXZNQ3p0VjE4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFenpkcGs5RVlVb0p3M1pVdk1DenRWMThkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS9GMzdDODhFRTBCN0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZ VW9KdzNaVXZNQ3p0VjE4ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSZrGYJXZJ5U3UQ3eTQyaNkE+uzTxSjb/UFAV/IFOUDufN+FuPJqNl Ysl/mYA23WdFVO/0doxCdfHWLgTkhSzmvlAMYBDd5RDeG43UJaVUssq8X0QAU0Qi 2k9B46+18QkFoXwzq9EGn+OIi9UNEwjXdrcdjq5OZI/cg2HXxHzhdp0yol/3PsNF LYB33WZKKzR54JIuTj7yoIxTooFcN2zOKV0/HQrR+5fbJcfKt05J4gePw8JkdolV L93cuIVxMy1YGWC9euX0cahstINsJoP5vuUBvSpYCHq2omvvdc6bdlDI1T9Lg7QE rY8isPZx0jAgYpQPjxgZzGdvdFw7ZdwJ -----END CERTIFICATE-----Generated at Mon Nov 25 01:01:36 2024 by rpki-client on console-ams.rpki-client.org