$ rpki-client -vvf rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft File: aamToYghmKytXxzqNQZrr0nn1dA.mft (raw, json) Hash identifier: vVc5MtnpSBc1KwKKa7m0/vTi0HuOe92VRsTpZNka7Zo= Subject key identifier: C1:A8:92:EF:EC:87:12:24:C2:2F:93:AD:45:1A:2B:FE:1D:EA:EF:45 Authority key identifier: 69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 Certificate issuer: /CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft Manifest number: 81 Signing time: Sat 23 Nov 2024 04:39:14 +0000 Manifest this update: Sat 23 Nov 2024 04:39:14 +0000 Manifest next update: Sat 30 Nov 2024 04:39:14 +0000 Files and hashes: 1: aamToYghmKytXxzqNQZrr0nn1dA.crl (hash: QRpgN5f1iTccQyduWr/0Lh2s6lWbVORXTdjw82BX3Vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B23F/serialNumber=69A993A1882198ACAD5F1CEA35066BAF49E7D5D0 Validity Not Before: Nov 23 04:39:14 2024 GMT Not After : Nov 30 04:39:14 2024 GMT Subject: CN=67415c72-82d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:79:96:7f:c5:a3:c1:e3:4c:4a:5e:02:8d:bc: b1:fc:f7:2f:ce:6a:34:56:98:fa:9e:b7:70:d0:a7: b0:5c:71:a2:7a:e5:72:ad:14:07:b8:57:bf:c9:04: b1:77:a8:28:c3:33:06:f1:96:81:5e:0b:89:90:a1: 0e:dd:6d:b0:7a:ac:80:1b:ce:8b:9e:62:8c:38:1f: 19:04:ba:41:c9:b9:2a:32:13:30:35:25:54:44:1d: 07:f0:77:d3:dd:1e:ab:e4:74:b1:41:91:f7:a6:56: b3:b3:58:d8:89:10:8d:19:a6:4e:d3:d0:58:f4:f5: f4:c7:e2:76:cd:bf:18:91:90:6c:7d:80:8d:df:7d: 57:e6:ce:b4:ef:ed:80:50:05:47:41:7f:f2:a7:91: 7f:ff:9d:76:8c:f3:62:47:ce:f8:43:32:31:50:f7: fc:af:ca:12:8a:f9:c9:6a:85:c6:50:56:80:51:9e: 86:02:9c:ea:49:a9:39:d2:5b:bb:14:a3:03:67:4f: 71:73:ad:67:ba:fd:b0:de:b4:bc:6a:a1:d1:bc:eb: 32:c4:18:16:75:7d:b0:de:5e:47:84:31:de:8e:ad: 99:07:d8:54:8a:02:f2:23:1f:9f:65:f6:1c:3e:ec: 94:fa:fc:9f:05:a5:c1:6c:be:fc:be:5f:8f:f5:0c: 9b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A8:92:EF:EC:87:12:24:C2:2F:93:AD:45:1A:2B:FE:1D:EA:EF:45 X509v3 Authority Key Identifier: keyid:69:A9:93:A1:88:21:98:AC:AD:5F:1C:EA:35:06:6B:AF:49:E7:D5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aamToYghmKytXxzqNQZrr0nn1dA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B23F/670C2F2CE29F11EEB682C611C4F9AE02/aamToYghmKytXxzqNQZrr0nn1dA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:16:06:a5:d8:45:dc:53:f9:e7:ff:82:a8:d7:6e:a6:76:b5: f5:21:a3:09:64:27:4e:32:25:f1:59:94:63:c6:8b:c7:a6:d4: b4:94:07:e2:95:9e:07:a5:96:10:ec:c1:36:71:b4:58:a2:b6: ba:4e:bf:5b:78:c5:a2:84:7b:db:f5:49:d3:48:3f:7a:88:e7: 04:a2:7d:0a:74:2f:57:ed:53:06:d6:00:57:7b:6a:de:0e:66: 2e:b1:35:c0:50:d6:d2:b1:a0:4a:3c:f7:79:84:27:a7:2d:1b: e2:2a:dd:34:77:0d:9b:fd:48:a8:37:b1:5d:5e:5a:c8:70:25: 0e:e6:45:58:3f:62:96:da:f7:2f:ad:b2:26:d8:9e:e0:73:5c: 35:54:d9:11:c6:e3:03:d5:6b:44:b1:88:b6:52:b6:01:9b:7c: e7:ba:47:6a:30:d6:a5:10:b9:59:7d:b7:75:04:48:16:fd:e7: 4a:0f:d9:1c:84:3f:ee:b6:fa:34:3d:61:59:e1:45:e8:fe:48: 4e:9e:10:5a:79:b9:84:de:2b:ac:c8:83:5e:91:da:73:a8:e4: de:ff:4a:f8:8d:c7:cd:67:9c:93:97:74:78:6a:4a:cd:81:40: 99:4b:08:0a:be:5d:9e:91:bc:08:8f:cf:3a:cd:d7:6e:73:83: 13:d5:59:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIyM0YxMTAvBgNVBAUTKDY5QTk5M0ExODgyMTk4QUNBRDVGMUNFQTM1MDY2QkFG NDlFN0Q1RDAwHhcNMjQxMTIzMDQzOTE0WhcNMjQxMTMwMDQzOTE0WjAYMRYwFAYD VQQDEw02NzQxNWM3Mi04MmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHmWf8WjweNMSl4Cjbyx/Pcvzmo0Vpj6nrdw0KewXHGieuVyrRQHuFe/yQSx d6gowzMG8ZaBXguJkKEO3W2weqyAG86LnmKMOB8ZBLpBybkqMhMwNSVURB0H8HfT 3R6r5HSxQZH3plazs1jYiRCNGaZO09BY9PX0x+J2zb8YkZBsfYCN331X5s607+2A UAVHQX/yp5F//512jPNiR874QzIxUPf8r8oSivnJaoXGUFaAUZ6GApzqSak50lu7 FKMDZ09xc61nuv2w3rS8aqHRvOsyxBgWdX2w3l5HhDHejq2ZB9hUigLyIx+fZfYc PuyU+vyfBaXBbL78vl+P9Qyb+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGoku/s hxIkwi+TrUUaK/4d6u9FMB8GA1UdIwQYMBaAFGmpk6GIIZisrV8c6jUGa69J59XQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjIzRi82NzBDMkYyQ0Uy OUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1LeXRYeHpxTlFacnIwbm4x ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhbVRvWWdobUt5dFh4enFOUVpycjBubjFkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjIzRi82NzBDMkYyQ0UyOUYxMUVFQjY4MkM2MTFDNEY5QUUwMi9hYW1Ub1lnaG1L eXRYeHpxTlFacnIwbm4xZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClFgal2EXcU/nn/4Ko126mdrX1IaMJZCdOMiXxWZRjxovHptS0lAfi lZ4HpZYQ7ME2cbRYora6Tr9beMWihHvb9UnTSD96iOcEon0KdC9X7VMG1gBXe2re DmYusTXAUNbSsaBKPPd5hCenLRviKt00dw2b/UioN7FdXlrIcCUO5kVYP2KW2vcv rbIm2J7gc1w1VNkRxuMD1WtEsYi2UrYBm3znukdqMNalELlZfbd1BEgW/edKD9kc hD/utvo0PWFZ4UXo/khOnhBaebmE3iusyINekdpzqOTe/0r4jcfNZ5yTl3R4akrN gUCZSwgKvl2ekbwIj886zdduc4MT1VnS -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:04 2024 by rpki-client on console-ams.rpki-client.org