$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft File: 7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json) Hash identifier: S0/7GFqvcByA+1rGTHZT4BmF1F+p+4AyeCTDP1XH0+I= Subject key identifier: F4:B2:4E:37:75:A6:97:1D:D0:4C:78:D0:80:20:DE:70:F5:E4:64:46 Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD Certificate issuer: /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Certificate serial: 3423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft Manifest number: 3423 Signing time: Sun 24 Nov 2024 14:34:27 +0000 Manifest this update: Sun 24 Nov 2024 14:34:26 +0000 Manifest next update: Sun 01 Dec 2024 14:34:26 +0000 Files and hashes: 1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: R1oaNciz0tORWK0q4VG3tB8XP+X9HCpEKUxoy13ylaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13347 (0x3423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD Validity Not Before: Nov 24 14:34:26 2024 GMT Not After : Dec 1 14:34:26 2024 GMT Subject: CN=67433973-a38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:7a:42:cc:09:9a:5e:6a:5e:61:9d:22:2a: 4d:54:6e:31:5d:d0:5b:10:bd:73:71:25:fd:96:70: 93:b4:bf:66:ad:b1:5f:19:ba:44:a9:bf:e1:51:b8: 92:f1:8d:25:10:45:b0:e4:c3:86:82:56:6a:a0:54: 14:a0:7d:03:9e:37:8a:c4:c8:cb:64:53:38:67:6a: a2:64:74:ac:70:d1:af:79:74:f8:3d:91:70:f7:00: 79:e0:d0:57:67:16:e1:a1:b1:03:75:7e:ff:d7:4b: af:6a:94:1d:3c:11:c8:98:02:6f:01:05:43:ba:80: 74:cd:a7:ed:58:94:f5:5e:8d:cc:a8:2f:cc:b6:72: c0:20:1d:46:5a:48:da:61:e5:fd:bf:a4:d3:4d:d5: 2d:dc:59:ec:2a:97:58:55:71:b7:19:6a:14:d2:bc: 49:02:cb:83:9a:3a:6e:84:a2:82:06:da:f3:bd:e7: d9:f4:bf:e4:68:13:fb:c4:84:73:2c:8d:43:d4:4d: 23:d7:c7:10:b3:b1:b2:31:bc:c4:28:b9:4b:68:9f: 6b:e4:db:19:0e:ab:50:3e:34:35:aa:28:d8:c6:21: f1:c6:eb:f2:ce:1e:82:2e:fc:38:10:e5:91:22:13: 91:33:a0:c2:86:0e:7d:b7:dd:cb:0d:1a:88:35:d8: 43:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B2:4E:37:75:A6:97:1D:D0:4C:78:D0:80:20:DE:70:F5:E4:64:46 X509v3 Authority Key Identifier: keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:51:dc:2d:9a:74:f2:0c:21:8d:fa:d0:d9:40:cb:05:fe:10: 64:72:cc:e4:f8:79:10:07:9b:a0:c9:12:b6:e1:60:56:c6:4f: 80:c9:64:a2:be:14:e3:23:45:45:13:42:7f:f0:5c:fd:03:a0: b7:61:ba:4f:88:ab:8c:6b:7d:43:c1:55:d6:37:0b:ee:47:ef: af:04:8f:bb:ff:8f:01:b5:e6:0e:15:ff:9a:03:1f:02:0b:73: 55:81:a9:ea:5a:1b:1e:f4:f6:12:e1:39:99:48:a1:03:3a:f2: 1d:3a:56:b9:e1:0b:8d:2e:0a:43:b7:3e:c5:3d:32:d1:12:9c: d2:f9:61:3a:45:d1:ae:3d:2c:e0:28:28:ad:23:12:b1:e8:44: 02:6a:a5:4c:0e:c8:7d:0d:e5:21:0b:43:f6:14:f3:c9:83:95: 4f:d5:6b:16:8a:fc:f9:b0:03:64:02:4d:80:b3:ee:5a:34:41: cb:0e:18:34:9c:e6:d7:81:a6:dd:dc:26:7c:87:41:d7:1e:6a: a8:24:e4:ff:91:c3:47:92:e6:fe:a1:63:1c:02:f6:09:0d:6c: 4c:9d:1e:09:69:93:b7:96:d9:54:f3:2b:8f:92:74:5d:4d:78: 6a:e4:d6:d4:05:df:c5:6e:ee:63:37:03:27:2c:01:f4:31:89: 58:fc:00:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkzMzUxMTAvBgNVBAUTKEVEREFDRTQwNzFGREE4NTg1Q0YxMjM0NEI4MjUxMkNE RUYwN0YzQUQwHhcNMjQxMTI0MTQzNDI2WhcNMjQxMjAxMTQzNDI2WjAYMRYwFAYD VQQDEw02NzQzMzk3My1hMzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0956QswJml5qXmGdIipNVG4xXdBbEL1zcSX9lnCTtL9mrbFfGbpEqb/hUbiS 8Y0lEEWw5MOGglZqoFQUoH0DnjeKxMjLZFM4Z2qiZHSscNGveXT4PZFw9wB54NBX ZxbhobEDdX7/10uvapQdPBHImAJvAQVDuoB0zaftWJT1Xo3MqC/MtnLAIB1GWkja YeX9v6TTTdUt3FnsKpdYVXG3GWoU0rxJAsuDmjpuhKKCBtrzvefZ9L/kaBP7xIRz LI1D1E0j18cQs7GyMbzEKLlLaJ9r5NsZDqtQPjQ1qijYxiHxxuvyzh6CLvw4EOWR IhORM6DChg59t93LDRqINdhDYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSyTjd1 ppcd0Ex40IAg3nD15GRGMB8GA1UdIwQYMBaAFO3azkBx/ahYXPEjRLglEs3vB/Ot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTMzNS9FNjI2RTVEMDFE OEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFGaGM4U05FdUNVU3plOEg4 NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkck9RSEg5cUZoYzhTTkV1Q1VTemU4SDg2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTMzNS9FNjI2RTVEMDFEOEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFG aGM4U05FdUNVU3plOEg4NjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArUdwtmnTyDCGN+tDZQMsF/hBkcszk+HkQB5ugyRK24WBWxk+AyWSi vhTjI0VFE0J/8Fz9A6C3YbpPiKuMa31DwVXWNwvuR++vBI+7/48BteYOFf+aAx8C C3NVganqWhse9PYS4TmZSKEDOvIdOla54QuNLgpDtz7FPTLREpzS+WE6RdGuPSzg KCitIxKx6EQCaqVMDsh9DeUhC0P2FPPJg5VP1WsWivz5sANkAk2As+5aNEHLDhg0 nObXgabd3CZ8h0HXHmqoJOT/kcNHkub+oWMcAvYJDWxMnR4JaZO3ltlU8yuPknRd TXhq5NbUBd/Fbu5jNwMnLAH0MYlY/ABL -----END CERTIFICATE-----Generated at Sun Nov 24 15:31:21 2024 by rpki-client on console-ams.rpki-client.org