$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft File: 5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json) Hash identifier: W52lmaSacaTFQqhpSeXVMuOkYgJ/YASbeMM69M4am5I= Subject key identifier: 44:2B:05:2D:C7:EC:B2:32:18:56:A5:90:F6:64:0C:F3:A2:C6:B6:FA Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 Certificate issuer: /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft Manifest number: 1B Signing time: Sat 23 Nov 2024 05:50:33 +0000 Manifest this update: Sat 23 Nov 2024 05:50:32 +0000 Manifest next update: Sat 30 Nov 2024 05:50:32 +0000 Files and hashes: 1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: AiNfC4y4AZ/mXZabsirASQkUFV2Zqq2AEplB67hgU5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Validity Not Before: Nov 23 05:50:32 2024 GMT Not After : Nov 30 05:50:32 2024 GMT Subject: CN=67416d29-ac91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:7a:27:2e:33:c4:c1:33:cb:b0:8f:17:4b: 4a:d6:34:76:e6:db:f9:d2:17:80:0f:04:2b:9f:5d: b8:57:19:27:a1:4a:ae:d0:7f:78:f6:5e:ff:fc:fa: e5:9e:e0:d0:fd:d0:b6:ac:8c:0d:dd:e5:f3:99:a6: 8b:a1:6a:c1:97:56:8d:ff:75:4f:2b:08:98:58:05: 61:8d:50:af:4b:3e:c3:9e:af:22:4b:1a:42:18:2e: 2e:94:ec:09:05:60:49:0b:85:b4:f3:4d:e8:ce:95: 84:17:9b:f5:48:a9:59:f0:2d:41:7a:80:c5:a1:64: a6:56:45:88:76:05:7b:55:65:3b:b2:f9:cd:72:b6: e9:a9:67:66:59:74:17:cb:9d:72:ae:f6:5f:3b:6f: 8c:00:97:09:97:19:eb:7a:44:21:d2:c8:c3:33:e4: 9b:85:9b:c8:8f:8a:c9:98:da:1e:b2:03:f5:0b:2c: fc:4f:3a:d8:64:96:a3:5b:f0:a3:83:39:a4:8d:92: bc:3a:4e:d7:0a:1a:d6:6e:41:62:aa:02:0b:c2:8f: 25:ae:28:4c:fb:ec:bb:64:45:45:d5:fe:c3:91:8f: b7:ab:55:1f:8a:ba:b3:26:ef:e3:cd:55:eb:64:c9: 78:40:54:20:3c:ff:5c:af:90:7a:98:b2:3b:87:52: cb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2B:05:2D:C7:EC:B2:32:18:56:A5:90:F6:64:0C:F3:A2:C6:B6:FA X509v3 Authority Key Identifier: keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0d:79:80:9c:13:8a:a6:ed:36:75:15:84:6b:fa:d8:2f:fb: 88:d4:9e:f7:a0:9e:0d:b5:9c:0a:51:c6:de:e7:92:f8:29:7d: 88:f0:35:88:9e:af:eb:f4:c4:b8:ab:b7:bf:a9:39:b5:8e:1a: 9c:df:25:f9:27:5b:7f:75:9f:a5:25:da:6a:3e:84:61:1a:3f: 52:be:42:a2:89:9b:03:c6:da:c8:fe:d2:14:f1:e6:40:2c:75: 04:40:c8:c9:0a:40:82:f4:6c:85:8c:df:8b:b3:4a:d6:1f:a4: b9:8a:88:98:9e:4d:6c:9c:9c:4f:1d:11:37:ed:5f:ed:ec:7b: e8:32:90:be:fe:4d:94:13:7e:5a:a5:a6:05:a5:26:ca:a2:95: ee:58:90:f7:b2:5e:0f:82:54:65:b3:88:40:b4:40:9c:e5:0a: 76:75:7d:9f:86:17:b5:45:cd:32:e4:9a:ed:5a:95:25:d0:8f: af:48:98:ba:ec:9b:8f:e2:3b:a3:44:f2:bf:ae:35:74:fe:a5: 7a:15:8a:68:de:54:2f:ec:f5:ff:f1:6b:92:d1:d8:6e:d6:2f: 74:95:e6:ae:be:b3:0d:64:41:05:9b:ec:94:6e:5b:3d:ae:a8: 5f:58:08:2f:9b:da:db:a9:bb:09:f8:21:f4:11:42:bb:27:17: 4c:c5:19:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjZEQzExMC8GA1UEBRMoRTQyRTQyMDAyQTgzNzg3QTY3QUY4Q0I5QTg1MUY5Mzk5 NzQ2QzEzMjAeFw0yNDExMjMwNTUwMzJaFw0yNDExMzAwNTUwMzJaMBgxFjAUBgNV BAMTDTY3NDE2ZDI5LWFjOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgTnonLjPEwTPLsI8XS0rWNHbm2/nSF4APBCufXbhXGSehSq7Qf3j2Xv/8+uWe 4ND90LasjA3d5fOZpouhasGXVo3/dU8rCJhYBWGNUK9LPsOeryJLGkIYLi6U7AkF YEkLhbTzTejOlYQXm/VIqVnwLUF6gMWhZKZWRYh2BXtVZTuy+c1ytumpZ2ZZdBfL nXKu9l87b4wAlwmXGet6RCHSyMMz5JuFm8iPismY2h6yA/ULLPxPOthklqNb8KOD OaSNkrw6TtcKGtZuQWKqAgvCjyWuKEz77LtkRUXV/sORj7erVR+KurMm7+PNVetk yXhAVCA8/1yvkHqYsjuHUstvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURCsFLcfs sjIYVqWQ9mQM86LGtvowHwYDVR0jBBgwFoAU5C5CACqDeHpnr4y5qFH5OZdGwTIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NkRDLzgwQ0UyNzhBODQ2 QjExRUY5QzQyNEQzQUM0RjlBRTAyLzVDNUNBQ3FEZUhwbnI0eTVxRkg1T1pkR3dU SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNUM1Q0FDcURlSHBucjR5NXFGSDVPWmRHd1RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NkRDLzgwQ0UyNzhBODQ2QjExRUY5QzQyNEQzQUM0RjlBRTAyLzVDNUNBQ3FEZUhw bnI0eTVxRkg1T1pkR3dUSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC4NeYCcE4qm7TZ1FYRr+tgv+4jUnvegng21nApRxt7nkvgpfYjwNYie r+v0xLirt7+pObWOGpzfJfknW391n6Ul2mo+hGEaP1K+QqKJmwPG2sj+0hTx5kAs dQRAyMkKQIL0bIWM34uzStYfpLmKiJieTWycnE8dETftX+3se+gykL7+TZQTflql pgWlJsqile5YkPeyXg+CVGWziEC0QJzlCnZ1fZ+GF7VFzTLkmu1alSXQj69ImLrs m4/iO6NE8r+uNXT+pXoVimjeVC/s9f/xa5LR2G7WL3SV5q6+sw1kQQWb7JRuWz2u qF9YCC+b2tupuwn4IfQRQrsnF0zFGcU= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org