$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft File: RLpWm_0uyBawaXNFE-C78tNOtwc.mft (raw, json) Hash identifier: WfR1QiYBOsNN1czupaWtEu2aX+WJIMJ4FQeJkbvv+AE= Subject key identifier: AF:D5:D6:19:2D:4E:65:C1:D7:A0:0B:79:7F:19:4F:73:B1:53:20:8C Authority key identifier: 44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 Certificate issuer: /CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Certificate serial: 0564 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft Manifest number: 0552 Signing time: Fri 22 Nov 2024 23:01:10 +0000 Manifest this update: Fri 22 Nov 2024 23:01:10 +0000 Manifest next update: Fri 29 Nov 2024 23:01:10 +0000 Files and hashes: 1: RLpWm_0uyBawaXNFE-C78tNOtwc.crl (hash: k+4n+jUsqqHrjjCNTwYTIbVbR8/8fAriFhNAeO9I6dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1380 (0x564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Validity Not Before: Nov 22 23:01:10 2024 GMT Not After : Nov 29 23:01:10 2024 GMT Subject: CN=67410d36-3c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:8f:bd:75:6d:a7:a5:87:13:98:63:03:a5: de:9b:ea:03:66:8d:81:79:4b:21:68:19:a9:4c:d7: 19:b6:f9:2e:dc:d7:1e:e5:d9:d9:3e:84:d5:ee:fe: 23:b0:3b:c2:67:6b:98:4c:6f:a5:5d:d4:a4:f4:28: df:11:1a:03:5f:9b:43:35:ff:12:41:c1:4b:5a:71: 9a:a2:f4:a9:9a:bb:44:86:be:69:ed:26:45:84:50: a5:b4:df:a4:9e:51:88:e8:36:5f:f6:c3:90:58:ba: 6a:29:eb:22:0a:b0:13:49:85:3b:af:d3:88:49:c5: 9d:48:4a:2f:9e:44:41:61:eb:b1:55:e3:8c:f3:4e: 3e:96:0c:dd:9a:d0:a9:2d:61:c3:01:c7:33:29:9c: 9c:13:db:44:55:e8:6b:c5:a4:07:dd:ba:f1:8c:0c: 9e:c6:a2:f0:c6:81:85:bc:1b:f7:c8:bb:1f:ed:49: d1:54:3e:9c:60:6a:73:01:45:06:f8:a4:b6:da:d8: df:94:31:15:fe:2d:72:f6:c8:1d:23:8c:d0:82:9b: c1:de:55:de:19:2a:94:3b:d1:4b:ae:a3:ac:10:f4: c8:36:fd:99:65:61:1a:18:05:45:0b:f6:37:b7:83: 3c:ce:4a:f4:51:ce:52:fb:38:d5:46:c5:c4:9a:38: 8c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D5:D6:19:2D:4E:65:C1:D7:A0:0B:79:7F:19:4F:73:B1:53:20:8C X509v3 Authority Key Identifier: keyid:44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:8c:06:77:44:fe:d0:24:6c:b1:f5:0c:b0:85:bd:d8:bd:9a: a2:96:37:57:2c:30:fa:e0:90:11:82:04:f9:12:d0:0c:4f:bd: 53:6c:a8:1a:22:00:00:43:99:9c:d1:ae:90:7c:71:40:37:fa: da:ad:5a:78:28:b7:b8:63:f5:5e:98:a9:27:fc:fb:08:ff:c7: c6:61:f1:06:0e:b4:29:f5:2a:00:e2:d0:c7:ce:89:e2:db:77: 4d:b4:e9:77:04:57:84:97:c4:72:5d:fd:ef:05:e6:2e:c2:00: 72:d9:e9:40:df:9a:bf:ae:78:a7:b5:d2:d9:2c:46:98:ae:5a: 6a:b2:8e:94:53:09:fe:12:20:86:e0:37:16:76:86:ba:ef:a3: fb:ba:82:4d:46:7d:a0:51:f1:8e:ca:67:7e:73:99:cf:ce:17: 76:d3:d9:f0:e7:a8:9b:6b:12:55:36:25:73:74:2b:a6:05:cc: 04:27:d4:4d:53:ba:4b:be:02:a1:42:c9:0e:73:30:31:68:6d: 62:35:d3:10:8b:4d:97:30:34:4a:f0:9a:93:4c:b3:84:c1:6f: da:ae:2e:b1:9e:4d:a7:33:b9:b0:b1:c0:68:3a:ba:61:a7:8c: fa:ff:97:11:53:db:5c:a1:57:53:99:d0:c6:7f:1e:33:b9:31: c6:34:a8:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQwQjIxMTAvBgNVBAUTKDQ0QkE1NjlCRkQyRUM4MTZCMDY5NzM0NTEzRTBCQkYy RDM0RUI3MDcwHhcNMjQxMTIyMjMwMTEwWhcNMjQxMTI5MjMwMTEwWjAYMRYwFAYD VQQDEw02NzQxMGQzNi0zYzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTqPvXVtp6WHE5hjA6Xem+oDZo2BeUshaBmpTNcZtvku3Nce5dnZPoTV7v4j sDvCZ2uYTG+lXdSk9CjfERoDX5tDNf8SQcFLWnGaovSpmrtEhr5p7SZFhFCltN+k nlGI6DZf9sOQWLpqKesiCrATSYU7r9OIScWdSEovnkRBYeuxVeOM804+lgzdmtCp LWHDAcczKZycE9tEVehrxaQH3brxjAyexqLwxoGFvBv3yLsf7UnRVD6cYGpzAUUG +KS22tjflDEV/i1y9sgdI4zQgpvB3lXeGSqUO9FLrqOsEPTINv2ZZWEaGAVFC/Y3 t4M8zkr0Uc5S+zjVRsXEmjiMGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/V1hkt TmXB16ALeX8ZT3OxUyCMMB8GA1UdIwQYMBaAFES6Vpv9LsgWsGlzRRPgu/LTTrcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDBCMi8yMjEzRTVCQ0NC MkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlCYXdhWE5GRS1DNzh0Tk90 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JMcFdtXzB1eUJhd2FYTkZFLUM3OHROT3R3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDBCMi8yMjEzRTVCQ0NCMkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlC YXdhWE5GRS1DNzh0Tk90d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZjAZ3RP7QJGyx9Qywhb3YvZqiljdXLDD64JARggT5EtAMT71TbKga IgAAQ5mc0a6QfHFAN/rarVp4KLe4Y/VemKkn/PsI/8fGYfEGDrQp9SoA4tDHzoni 23dNtOl3BFeEl8RyXf3vBeYuwgBy2elA35q/rnintdLZLEaYrlpqso6UUwn+EiCG 4DcWdoa676P7uoJNRn2gUfGOymd+c5nPzhd209nw56ibaxJVNiVzdCumBcwEJ9RN U7pLvgKhQskOczAxaG1iNdMQi02XMDRK8JqTTLOEwW/ari6xnk2nM7mwscBoOrph p4z6/5cRU9tcoVdTmdDGfx4zuTHGNKjn -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org