$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json) Hash identifier: 0Rp/v55GhVzxsdcKmJ+liTKP4ZPFJ9ZNXZWe4If9Ybo= Subject key identifier: C1:6A:7C:28:43:94:55:5B:F7:50:07:AD:1C:81:A9:C7:F2:84:83:7D Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft Manifest number: 0198 Signing time: Sat 23 Nov 2024 03:13:47 +0000 Manifest this update: Sat 23 Nov 2024 03:13:47 +0000 Manifest next update: Sat 30 Nov 2024 03:13:47 +0000 Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: C2dEPWb+gYpZQSsDlcyl/HjC0ePvXnvzUY3b4lH3iKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Validity Not Before: Nov 23 03:13:47 2024 GMT Not After : Nov 30 03:13:47 2024 GMT Subject: CN=6741486b-4bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3a:cb:86:d1:ce:a0:bf:09:00:7d:03:e2:e6: 7e:c4:ef:7e:42:ec:af:32:65:10:00:e2:8d:94:8a: 86:53:ba:ee:e4:c5:10:d6:e4:e3:b9:b5:41:fa:66: 18:a2:e7:59:1d:bb:cf:7b:3c:b1:95:4f:88:ef:06: 22:6b:f8:c7:3e:5c:c1:1e:1f:89:47:6d:09:03:52: 68:0f:c7:73:1c:1e:5c:f5:01:af:d0:32:26:06:eb: 01:3f:64:a7:59:5c:07:48:15:36:4f:5c:2a:f5:57: a9:0c:01:51:b0:99:a1:3c:a4:18:b4:e3:f4:b9:ce: f5:15:94:35:22:28:c7:a0:3d:e3:d5:1b:95:67:fc: e0:65:a8:12:83:88:ee:3f:66:f2:65:c1:9f:4d:a6: 2d:d0:9e:28:9a:8f:af:47:01:8d:06:9e:36:90:49: fd:ed:de:33:bb:ee:75:ba:7d:6f:26:9d:04:06:d5: 53:e0:8e:38:1e:20:62:6b:df:e6:11:d3:30:70:5c: 0d:53:92:b7:45:54:dd:34:9b:69:84:9b:fa:8f:88: a3:d6:6f:f9:32:1b:85:b3:f5:21:f9:9f:80:f0:c8: 25:bd:49:02:9e:f0:4a:d3:b3:58:52:9b:a3:36:51: e1:3f:02:a6:3a:32:29:7d:a5:70:32:7b:b2:cd:b0: 26:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6A:7C:28:43:94:55:5B:F7:50:07:AD:1C:81:A9:C7:F2:84:83:7D X509v3 Authority Key Identifier: keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:16:10:b0:fc:68:7a:4f:a1:5d:81:b3:6d:6d:e5:76:db:ae: b1:4a:5f:62:1b:7d:a6:bb:c2:5a:7c:32:74:1e:db:b4:cf:c8: 92:a7:75:e2:5f:5c:17:3e:dd:6c:81:d0:69:e3:06:c2:1a:fd: 1e:c3:d1:78:be:29:cf:d8:b7:d4:20:d4:8d:4e:e3:d4:59:5c: d3:c0:ac:e8:a3:87:ee:2f:df:09:c7:6d:7d:b4:9b:0b:b6:ea: 04:a1:d1:9a:c2:91:49:c2:5f:80:5d:20:91:ab:7b:a7:e5:12: 7f:1d:f1:65:6e:9b:1b:44:75:94:d5:08:72:73:c6:e8:4f:c5: 68:1c:91:2a:9e:62:81:02:7d:92:50:01:1a:e2:d1:e7:7a:bc: bf:e7:a5:18:4f:c4:64:e0:86:e2:0f:bf:7b:b5:3c:f4:c6:e0: e9:a8:c1:58:96:9c:20:49:06:99:89:0a:23:0d:1a:db:bb:03: 08:33:91:71:aa:09:a3:a6:d7:25:d6:e1:ef:3e:fb:2d:93:9e: d2:6c:4c:f2:b3:51:ab:ec:9a:0f:b7:68:b2:cd:a8:a1:dd:24: 07:c8:de:3f:64:d9:fb:0e:bf:da:4b:4b:c0:e5:23:0d:ab:b5: ba:65:bc:cd:b7:42:06:18:dc:ff:76:7f:9c:4e:73:24:32:6f: 6f:e4:33:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKENGQjZGNjI4OTdFNzRCMEQwN0VGOTYwMEJBNzcwOTM5 MDVDQjg3NUIwHhcNMjQxMTIzMDMxMzQ3WhcNMjQxMTMwMDMxMzQ3WjAYMRYwFAYD VQQDEw02NzQxNDg2Yi00YmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DrLhtHOoL8JAH0D4uZ+xO9+QuyvMmUQAOKNlIqGU7ru5MUQ1uTjubVB+mYY oudZHbvPezyxlU+I7wYia/jHPlzBHh+JR20JA1JoD8dzHB5c9QGv0DImBusBP2Sn WVwHSBU2T1wq9VepDAFRsJmhPKQYtOP0uc71FZQ1IijHoD3j1RuVZ/zgZagSg4ju P2byZcGfTaYt0J4omo+vRwGNBp42kEn97d4zu+51un1vJp0EBtVT4I44HiBia9/m EdMwcFwNU5K3RVTdNJtphJv6j4ij1m/5MhuFs/Uh+Z+A8MglvUkCnvBK07NYUpuj NlHhPwKmOjIpfaVwMnuyzbAmSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFqfChD lFVb91AHrRyBqcfyhIN9MB8GA1UdIwQYMBaAFM+29iiX50sNB++WALp3CTkFy4db MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3MEg3NVlBdW5jSk9RWExo MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3YjJLSmZuU3cwSDc1WUF1bmNKT1FYTGgxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3 MEg3NVlBdW5jSk9RWExoMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfFhCw/Gh6T6FdgbNtbeV2266xSl9iG32mu8JafDJ0Htu0z8iSp3Xi X1wXPt1sgdBp4wbCGv0ew9F4vinP2LfUINSNTuPUWVzTwKzoo4fuL98Jx219tJsL tuoEodGawpFJwl+AXSCRq3un5RJ/HfFlbpsbRHWU1Qhyc8boT8VoHJEqnmKBAn2S UAEa4tHnery/56UYT8Rk4IbiD797tTz0xuDpqMFYlpwgSQaZiQojDRrbuwMIM5Fx qgmjptcl1uHvPvstk57SbEzys1Gr7JoPt2iyzaih3SQHyN4/ZNn7Dr/aS0vA5SMN q7W6ZbzNt0IGGNz/dn+cTnMkMm9v5DMD -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org