$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft File: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json) Hash identifier: OPXaLFhnNVhen1/fZa7FWPFPvte41AcCiVh5ofcfbnc= Subject key identifier: 65:34:A8:38:9C:F3:5D:0E:75:66:E6:E8:6D:5B:23:5E:8A:2D:42:C1 Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 Certificate issuer: /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Certificate serial: 03D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft Manifest number: 03D5 Signing time: Sat 23 Nov 2024 00:09:55 +0000 Manifest this update: Sat 23 Nov 2024 00:09:55 +0000 Manifest next update: Sat 30 Nov 2024 00:09:55 +0000 Files and hashes: 1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: 6We97DeU84zaOe0byvFEL+JNWqh18hv4sgIZC6d06WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 982 (0x3d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Validity Not Before: Nov 23 00:09:55 2024 GMT Not After : Nov 30 00:09:55 2024 GMT Subject: CN=67411d53-3a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:ba:98:e0:61:b1:87:86:60:2c:b6:7b:ee: 88:07:88:5d:9f:05:b6:d0:e6:32:3c:b7:8b:fe:85: fb:1e:ad:91:e3:0b:72:fa:af:8d:89:dd:05:78:92: 40:62:d7:78:a4:d1:4d:3c:44:91:99:c4:4c:77:09: d2:13:f4:0a:3f:1a:67:a9:12:93:35:d9:bf:90:5b: 8a:04:3d:fe:3d:5b:08:9a:16:3b:d7:59:5a:81:39: fc:e7:99:82:96:10:33:3f:bf:30:18:53:40:98:b9: 60:eb:bb:12:ff:35:be:5a:21:2f:d1:b8:1d:81:21: c1:67:f9:3d:e7:60:d7:ab:5b:28:78:56:4c:02:3a: 89:0f:6c:97:33:e5:68:33:ac:de:eb:c4:53:af:72: f5:ab:17:d7:4e:d0:b6:47:70:e3:26:50:84:7e:e8: 46:10:6f:2b:b0:d3:05:7e:fb:4c:8d:22:28:c7:ac: f7:28:52:b3:7a:67:db:bd:ad:d9:87:f6:1f:e9:36: 6b:c2:ae:8a:50:5a:39:df:ad:49:56:bc:e8:34:61: 73:ad:1a:95:5f:60:30:66:28:fa:5f:64:23:59:5a: 43:54:d2:7f:f9:14:a9:0c:22:67:f8:6e:34:10:bc: 0c:8b:5a:99:8a:30:14:ee:e0:0f:8f:21:33:7c:d0: b2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:34:A8:38:9C:F3:5D:0E:75:66:E6:E8:6D:5B:23:5E:8A:2D:42:C1 X509v3 Authority Key Identifier: keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a8:19:84:8e:22:b2:c4:4c:98:fb:7a:9f:14:dd:31:a5:d1: 71:97:50:84:24:97:67:31:b6:7d:a5:15:a0:c3:14:83:f1:30: 44:07:b8:3b:74:69:37:f9:5b:8a:57:25:4b:d1:56:8d:1c:8f: 7b:5a:f2:66:3e:bb:42:49:a8:67:14:30:97:17:3c:93:0e:37: e8:3a:e4:0b:31:dd:08:da:d7:a4:a3:94:f7:a9:74:75:ce:9b: a8:7e:1e:a5:16:e3:38:6d:66:38:49:e2:b7:5c:2f:ce:5f:f7: 2b:dd:ba:4f:12:95:f7:1c:66:44:2f:1b:d1:2d:41:43:16:5f: 2a:48:28:cc:65:7f:29:f3:d0:f0:4d:63:94:a4:a6:9a:9b:4d: 19:82:af:9c:0a:78:eb:66:85:89:98:e9:89:95:2b:38:e8:f8: b6:d8:19:a8:a5:6b:9b:df:7f:80:23:ea:c0:2a:9f:16:97:2a: 07:a3:83:c4:de:72:18:86:54:a2:23:79:06:2d:87:1d:36:7f: 13:00:5e:36:a2:d4:63:58:22:70:b5:1f:54:30:e8:35:15:d5: 57:07:0b:62:da:2e:b5:f5:7a:bd:19:b0:5f:89:2e:f9:98:ee: 86:94:ac:c7:61:33:1f:3f:91:fa:d8:09:3d:2c:8d:a7:29:60: 4e:fb:d2:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QjIxMTAvBgNVBAUTKEQ5NkJGNTZBQjYzRkFFRjAxNjlDMEQyOUQ2NEE1NDc4 MUMwNkIyRTQwHhcNMjQxMTIzMDAwOTU1WhcNMjQxMTMwMDAwOTU1WjAYMRYwFAYD VQQDEw02NzQxMWQ1My0zYTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIe6mOBhsYeGYCy2e+6IB4hdnwW20OYyPLeL/oX7Hq2R4wty+q+Nid0FeJJA Ytd4pNFNPESRmcRMdwnSE/QKPxpnqRKTNdm/kFuKBD3+PVsImhY711lagTn855mC lhAzP78wGFNAmLlg67sS/zW+WiEv0bgdgSHBZ/k952DXq1soeFZMAjqJD2yXM+Vo M6ze68RTr3L1qxfXTtC2R3DjJlCEfuhGEG8rsNMFfvtMjSIox6z3KFKzemfbva3Z h/Yf6TZrwq6KUFo5361JVrzoNGFzrRqVX2AwZij6X2QjWVpDVNJ/+RSpDCJn+G40 ELwMi1qZijAU7uAPjyEzfNCyrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGU0qDic 810OdWbm6G1bI16KLULBMB8GA1UdIwQYMBaAFNlr9Wq2P67wFpwNKdZKVHgcBrLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdCMi83NDZEQjZGMjVE NjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2QVduQTBwMWtwVWVCd0dz dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJXdjFhcllfcnZBV25BMHAxa3BVZUJ3R3N1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdCMi83NDZEQjZGMjVENjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2 QVduQTBwMWtwVWVCd0dzdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNqBmEjiKyxEyY+3qfFN0xpdFxl1CEJJdnMbZ9pRWgwxSD8TBEB7g7 dGk3+VuKVyVL0VaNHI97WvJmPrtCSahnFDCXFzyTDjfoOuQLMd0I2teko5T3qXR1 zpuofh6lFuM4bWY4SeK3XC/OX/cr3bpPEpX3HGZELxvRLUFDFl8qSCjMZX8p89Dw TWOUpKaam00Zgq+cCnjrZoWJmOmJlSs46Pi22BmopWub33+AI+rAKp8WlyoHo4PE 3nIYhlSiI3kGLYcdNn8TAF42otRjWCJwtR9UMOg1FdVXBwti2i619Xq9GbBfiS75 mO6GlKzHYTMfP5H62Ak9LI2nKWBO+9Lg -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org