$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft File: olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json) Hash identifier: RtiZu+9odUrlyn5BtZ9t4naE52a7puWU04oOnR0se4w= Subject key identifier: CC:79:26:42:AC:45:77:FE:B8:F9:DB:82:71:4F:7F:01:10:51:50:92 Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA Certificate issuer: /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA Certificate serial: 0548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft Manifest number: 0548 Signing time: Fri 22 Nov 2024 22:59:46 +0000 Manifest this update: Fri 22 Nov 2024 22:59:46 +0000 Manifest next update: Fri 29 Nov 2024 22:59:46 +0000 Files and hashes: 1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: Eeuq4CAC1qaM1cO8XosDkFJxuNQ/yFKpZc17OMZBYNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1352 (0x548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA Validity Not Before: Nov 22 22:59:46 2024 GMT Not After : Nov 29 22:59:46 2024 GMT Subject: CN=67410ce2-c205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b7:44:b2:3b:71:e5:68:12:a2:65:dc:af:62: a6:75:fd:9f:fa:d5:72:a9:ca:3f:87:f3:b2:dd:c4: ae:52:21:b3:5a:1c:5c:1c:23:ca:10:13:32:e7:cf: 3f:5d:a2:d0:55:9c:c1:48:f5:15:71:b2:64:01:70: 26:d7:4b:c4:1f:2d:12:15:55:3b:a5:64:43:22:ed: a1:00:67:ab:60:eb:c5:14:9c:dc:a2:4b:9b:63:d3: 07:d1:1b:53:12:a9:fd:f5:9f:8f:55:d9:26:2d:fb: 5f:3a:06:96:9a:9f:2b:03:65:5b:55:96:94:85:8e: 7d:c0:48:01:e0:ba:1e:19:7b:3e:5b:b7:06:a3:f6: 81:e2:ad:6b:80:7d:8b:5f:a3:a9:51:c4:ac:61:b1: c8:1e:ef:d9:1c:68:3b:b5:4c:58:d5:c9:82:46:0f: 29:da:10:e1:f9:73:af:59:94:7b:12:a4:43:c7:55: 44:49:d2:0b:b0:b9:93:ca:21:3f:7b:ba:83:48:a4: 39:82:23:f3:a9:a9:f0:ed:94:2f:8c:22:ea:2b:a5: a3:0c:ee:f5:22:12:6d:6a:0f:60:1d:4b:c9:2c:94: 9e:7e:10:d9:63:96:68:06:04:b1:50:ad:83:d0:e6: da:0a:81:61:fb:87:e4:3d:bb:c3:66:3e:cd:b5:5f: 7f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:79:26:42:AC:45:77:FE:B8:F9:DB:82:71:4F:7F:01:10:51:50:92 X509v3 Authority Key Identifier: keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:bb:76:1f:8c:52:ee:ab:21:08:6b:fd:26:f8:3f:d1:e2:92: 94:a1:8e:a2:5f:61:f0:0a:d1:7e:e2:6e:e4:2e:01:ff:0b:71: 5c:c0:75:5c:f9:b8:13:b1:61:ef:de:23:27:a3:45:36:79:e7: 84:69:2d:ff:8d:d4:9e:7e:c7:77:62:42:22:c8:f7:ed:af:5c: 7a:29:3c:12:a4:2e:65:8d:43:15:ad:fa:2a:06:0e:bf:4c:45: 21:aa:23:1d:31:ef:d4:62:2f:e4:8c:1f:2a:70:25:d4:df:50: 30:de:49:b4:48:10:e4:6a:e6:13:a8:dd:ee:f9:43:03:0c:88: 51:7b:7a:3b:7d:75:ca:98:79:be:55:a2:53:4c:bd:a2:59:93: 22:e7:ee:9c:06:15:08:89:43:40:5f:b6:fd:3e:2a:63:4e:06: eb:ff:4d:52:25:eb:54:a8:8f:c2:9f:bb:19:66:1f:ef:a1:11: b9:0f:5b:fa:85:84:57:74:c5:53:6c:f4:6d:23:21:e4:2a:a0: 7d:e0:b9:de:77:69:06:ff:22:34:58:e8:27:83:51:4b:ae:bb: 65:07:25:d1:54:9a:9f:3a:43:95:92:d6:a8:f4:58:30:31:16: 39:a8:66:6f:da:01:e5:2c:96:5e:f5:6f:6a:db:2a:6b:c4:32: eb:95:0b:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKEEyNUJERjc2M0YwQkE2M0M0OUEzNzZBQkY5NkU1NTUw ODc5RTg1QkEwHhcNMjQxMTIyMjI1OTQ2WhcNMjQxMTI5MjI1OTQ2WjAYMRYwFAYD VQQDEw02NzQxMGNlMi1jMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LdEsjtx5WgSomXcr2Kmdf2f+tVyqco/h/Oy3cSuUiGzWhxcHCPKEBMy588/ XaLQVZzBSPUVcbJkAXAm10vEHy0SFVU7pWRDIu2hAGerYOvFFJzcokubY9MH0RtT Eqn99Z+PVdkmLftfOgaWmp8rA2VbVZaUhY59wEgB4LoeGXs+W7cGo/aB4q1rgH2L X6OpUcSsYbHIHu/ZHGg7tUxY1cmCRg8p2hDh+XOvWZR7EqRDx1VESdILsLmTyiE/ e7qDSKQ5giPzqanw7ZQvjCLqK6WjDO71IhJtag9gHUvJLJSefhDZY5ZoBgSxUK2D 0ObaCoFh+4fkPbvDZj7NtV9/hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMx5JkKs RXf+uPnbgnFPfwEQUVCSMB8GA1UdIwQYMBaAFKJb33Y/C6Y8SaN2q/luVVCHnoW6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zQkYwQUU5Q0M5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBqeEpvM2FyLVc1VlVJZWVo Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29sdmZkajhMcGp4Sm8zYXItVzVWVUllZWhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zQkYwQUU5Q0M5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBq eEpvM2FyLVc1VlVJZWVoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxu3YfjFLuqyEIa/0m+D/R4pKUoY6iX2HwCtF+4m7kLgH/C3FcwHVc +bgTsWHv3iMno0U2eeeEaS3/jdSefsd3YkIiyPftr1x6KTwSpC5ljUMVrfoqBg6/ TEUhqiMdMe/UYi/kjB8qcCXU31Aw3km0SBDkauYTqN3u+UMDDIhRe3o7fXXKmHm+ VaJTTL2iWZMi5+6cBhUIiUNAX7b9PipjTgbr/01SJetUqI/Cn7sZZh/voRG5D1v6 hYRXdMVTbPRtIyHkKqB94Lned2kG/yI0WOgng1FLrrtlByXRVJqfOkOVktao9Fgw MRY5qGZv2gHlLJZe9W9q2yprxDLrlQsT -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:23 2024 by rpki-client on console-fra.rpki-client.org