$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft File: mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json) Hash identifier: s0L1LOigqGoUH53OaMR3bPaySCmeddKcRBP3qCE8YIQ= Subject key identifier: 68:FD:ED:59:43:6B:47:6A:74:93:74:7C:1C:BD:C1:82:60:BA:83:DD Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 Certificate issuer: /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Certificate serial: 3422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft Manifest number: 3421 Signing time: Fri 22 Nov 2024 15:13:10 +0000 Manifest this update: Fri 22 Nov 2024 15:13:09 +0000 Manifest next update: Fri 29 Nov 2024 15:13:09 +0000 Files and hashes: 1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: XuC78gNwtZuFFJPT/ABX4TsoDZwN69VvbTkF3ZCh6ZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13346 (0x3422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13 Validity Not Before: Nov 22 15:13:09 2024 GMT Not After : Nov 29 15:13:09 2024 GMT Subject: CN=67409f86-60f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:aa:96:f6:59:19:54:7e:d6:88:8b:d3:61: 19:6e:2b:de:d9:01:88:5f:b1:04:c1:bf:bf:b3:00: 26:4d:08:78:c5:cc:40:d7:c9:3f:03:e3:12:e2:f4: a7:17:04:fa:cf:0f:f8:65:6d:f2:71:6a:77:3c:d3: eb:d5:55:07:69:f3:6c:16:93:75:33:e9:fb:29:bb: 04:c0:ed:f9:4b:74:51:05:2e:d5:84:d2:00:0f:27: 00:9a:99:4f:4e:63:58:e6:4c:52:ce:49:c3:c3:62: 1b:cd:bc:8e:29:64:0c:d4:da:51:54:62:e5:c3:44: 57:b0:24:1c:2f:ec:03:24:6e:77:1a:30:08:9a:e9: ad:44:98:7f:2b:ad:fe:3f:ef:04:5c:29:97:e3:30: cd:b5:a7:cc:a0:9d:48:30:79:71:31:55:55:99:54: e5:23:08:4e:bb:5e:95:3e:e8:24:1d:55:a4:27:64: 55:ff:e5:17:41:d2:75:59:d1:96:40:e2:7b:01:ab: af:d9:71:7c:15:26:ed:28:07:42:4e:5c:a2:48:a9: cd:c2:45:87:5f:d8:9f:8c:70:eb:b5:1d:cb:9c:c4: 23:10:79:1b:a9:ac:6c:d4:45:4a:90:7b:4e:b6:d2: 5d:fc:bc:80:d1:52:a2:08:76:c9:f4:b3:3f:30:6a: 66:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FD:ED:59:43:6B:47:6A:74:93:74:7C:1C:BD:C1:82:60:BA:83:DD X509v3 Authority Key Identifier: keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9e:27:d4:d2:a3:06:cd:95:b7:42:55:25:50:48:97:e5:64: f9:7e:07:71:41:3f:8a:83:d7:f4:86:37:86:d0:54:1f:06:cb: 9a:13:4b:c0:cc:07:30:62:9b:96:f2:e6:6f:2a:5c:ab:12:5e: 9d:b4:ba:5b:7b:a8:c2:cd:ed:a5:77:a4:48:37:54:80:4e:61: 4a:b2:c3:ed:2a:5b:cb:da:06:b8:4c:f3:bf:60:e1:92:33:e5: 72:8f:5f:a1:ae:a2:3c:ff:53:93:ab:ce:b4:2d:e3:71:e9:c9: 26:65:99:b1:32:2a:a0:71:62:b9:a5:93:70:4f:ec:67:51:a7: f0:bd:49:d6:79:26:7d:34:27:5e:69:0e:3b:e3:67:fc:3d:97: fe:82:9f:c7:6c:a1:38:91:59:c1:8a:e6:74:61:35:72:61:07: 79:05:47:1b:56:c2:69:59:3f:f5:98:f5:4e:f9:be:da:08:83: d8:0b:ec:54:31:7c:f9:fd:08:c1:ec:79:fb:de:3f:66:01:6e: 8d:36:ec:34:bb:e3:d2:ba:fc:44:5a:9a:3d:27:b2:b2:b5:72: c1:a4:35:f2:0e:19:3a:b2:12:7f:67:39:15:cb:03:d6:70:b1: f8:4b:d8:50:0b:a9:f7:c5:72:4e:96:3d:56:6c:c7:b3:8d:86: eb:47:a4:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE3OTkxMTAvBgNVBAUTKDk5RDZGNzdFRTBBNDM2RTU0ODdFOThDRUU1NTJCNjRC NUVDNjVCMTMwHhcNMjQxMTIyMTUxMzA5WhcNMjQxMTI5MTUxMzA5WjAYMRYwFAYD VQQDEw02NzQwOWY4Ni02MGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzReqlvZZGVR+1oiL02EZbive2QGIX7EEwb+/swAmTQh4xcxA18k/A+MS4vSn FwT6zw/4ZW3ycWp3PNPr1VUHafNsFpN1M+n7KbsEwO35S3RRBS7VhNIADycAmplP TmNY5kxSzknDw2IbzbyOKWQM1NpRVGLlw0RXsCQcL+wDJG53GjAImumtRJh/K63+ P+8EXCmX4zDNtafMoJ1IMHlxMVVVmVTlIwhOu16VPugkHVWkJ2RV/+UXQdJ1WdGW QOJ7Aauv2XF8FSbtKAdCTlyiSKnNwkWHX9ifjHDrtR3LnMQjEHkbqaxs1EVKkHtO ttJd/LyA0VKiCHbJ9LM/MGpm6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGj97VlD a0dqdJN0fBy9wYJguoPdMB8GA1UdIwQYMBaAFJnW937gpDblSH6YzuVStktexlsT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTc5OS8wREE5RjAyRTFE QTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051VklmcGpPNVZLMlMxN0dX eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kYjNmdUNrTnVWSWZwak81VksyUzE3R1d4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTc5OS8wREE5RjAyRTFEQTYxMUUyQjgyQjIzOUQwOEIwMkNEMi9tZGIzZnVDa051 VklmcGpPNVZLMlMxN0dXeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrnifU0qMGzZW3QlUlUEiX5WT5fgdxQT+Kg9f0hjeG0FQfBsuaE0vA zAcwYpuW8uZvKlyrEl6dtLpbe6jCze2ld6RIN1SATmFKssPtKlvL2ga4TPO/YOGS M+Vyj1+hrqI8/1OTq860LeNx6ckmZZmxMiqgcWK5pZNwT+xnUafwvUnWeSZ9NCde aQ4742f8PZf+gp/HbKE4kVnBiuZ0YTVyYQd5BUcbVsJpWT/1mPVO+b7aCIPYC+xU MXz5/QjB7Hn73j9mAW6NNuw0u+PSuvxEWpo9J7KytXLBpDXyDhk6shJ/ZzkVywPW cLH4S9hQC6n3xXJOlj1WbMezjYbrR6Sj -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:15 2024 by rpki-client on console-ams.rpki-client.org