$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft File: snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft (raw, json) Hash identifier: GprcFr6QU/fDBjBk5VVnarMoKqYkO1XiUvxJyjSTuTg= Subject key identifier: 2D:61:36:DB:A3:F5:C7:04:5F:FD:9D:1F:2E:48:00:F5:26:88:DE:4D Authority key identifier: B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 Certificate issuer: /CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Certificate serial: 05D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft Manifest number: 05D2 Signing time: Fri 22 Nov 2024 22:31:24 +0000 Manifest this update: Fri 22 Nov 2024 22:31:23 +0000 Manifest next update: Fri 29 Nov 2024 22:31:23 +0000 Files and hashes: 1: snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl (hash: FS0z0AEeQo1K6zyTJz/14KOxuX4BHovWCnyRu+hWxrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1490 (0x5d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39D/serialNumber=B279D34FE308EC4ABF42011119C8D22CB6F61AC4 Validity Not Before: Nov 22 22:31:23 2024 GMT Not After : Nov 29 22:31:23 2024 GMT Subject: CN=6741063b-f1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:1b:a2:d1:b2:42:ad:b5:8b:9c:03:15:93: 7d:40:08:d7:ce:73:c2:41:10:11:16:f7:b7:8c:23: 5e:e8:c7:4d:2f:b9:b7:ae:71:26:04:82:50:ce:2b: 20:b5:bd:a6:d7:4a:dc:12:4a:42:7b:e0:df:57:2f: 11:22:8b:44:68:43:b1:d6:89:a3:70:17:13:16:5b: d4:a2:fd:37:90:b8:fd:f4:6e:a5:f1:f9:db:f6:f9: 3e:fa:30:be:05:5a:3d:47:3a:1a:bf:6e:18:1c:7e: ec:22:14:41:da:80:9a:4d:8b:8f:e1:2a:bf:2f:01: a2:6e:65:e8:33:a8:e3:96:50:6c:40:04:c5:7a:65: 32:bf:e0:7d:12:24:2a:9f:a2:bf:a1:d0:16:48:fb: 5b:32:27:2c:bb:e4:a5:c7:63:bc:f5:15:24:c1:6a: 2f:e9:9c:4c:1b:0e:9a:76:eb:ed:98:d9:a7:75:57: 83:27:b5:8e:83:b4:51:67:fd:d4:77:db:45:a5:d1: bf:3d:b0:05:36:f7:16:3f:3a:4d:7c:7f:f8:e0:71: 06:66:85:a6:bd:9a:65:41:9b:ff:15:b0:cf:92:d3: 74:05:03:50:9b:37:b1:7a:96:52:01:4b:51:b2:d2: cd:ac:50:88:91:05:b4:ba:2d:50:1f:7e:31:f7:8c: d1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:61:36:DB:A3:F5:C7:04:5F:FD:9D:1F:2E:48:00:F5:26:88:DE:4D X509v3 Authority Key Identifier: keyid:B2:79:D3:4F:E3:08:EC:4A:BF:42:01:11:19:C8:D2:2C:B6:F6:1A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snnTT-MI7Eq_QgERGcjSLLb2GsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39D/467C03B0931D11EBBD79342DC4F9AE02/snnTT-MI7Eq_QgERGcjSLLb2GsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:59:dd:08:46:d7:10:0d:46:52:6c:d6:70:64:34:d8:9e:b3: ee:6d:2a:10:43:68:2e:4c:d1:08:d8:0f:5d:44:e0:1f:7e:06: d0:56:ea:1a:88:01:3e:6d:bd:da:91:a8:2b:8c:97:6c:1f:cc: e2:94:8e:d7:39:48:b3:3f:d2:cb:0d:a8:27:bd:df:e5:cd:d1: da:37:c8:f2:d2:40:1f:7f:75:80:3c:e7:a3:71:f0:c1:02:8d: 73:fb:20:fb:4a:f8:5e:40:3e:d7:8c:24:60:b3:43:ea:35:14: c9:0e:1b:25:bd:bc:1c:a8:a1:93:fe:25:dd:10:f5:22:3f:f4: 4d:d1:32:ed:fe:e0:d9:3d:c2:4a:0d:b7:06:bd:bd:cb:d2:fd: 0c:e7:1b:6a:9d:44:c5:d5:ed:d0:4e:8e:9b:ff:50:a7:01:62: 43:6c:1e:fb:98:dc:63:1c:3c:5b:05:42:90:47:aa:e2:9c:de: cc:a2:a2:f1:75:59:ff:e4:5e:89:dc:1d:2d:c3:e8:32:c0:4e: 22:fe:2b:4b:bf:35:15:e4:15:f5:fc:c1:d5:a2:7a:47:75:08: 9d:ea:77:a7:da:06:a7:14:86:76:98:43:8d:e6:cb:11:2d:b2: bb:f2:7a:c6:86:03:b7:c1:f4:f6:12:36:17:fa:47:16:ac:79: 8e:26:99:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUQxMTAvBgNVBAUTKEIyNzlEMzRGRTMwOEVDNEFCRjQyMDExMTE5QzhEMjJD QjZGNjFBQzQwHhcNMjQxMTIyMjIzMTIzWhcNMjQxMTI5MjIzMTIzWjAYMRYwFAYD VQQDEw02NzQxMDYzYi1mMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfAbotGyQq21i5wDFZN9QAjXznPCQRARFve3jCNe6MdNL7m3rnEmBIJQzisg tb2m10rcEkpCe+DfVy8RIotEaEOx1omjcBcTFlvUov03kLj99G6l8fnb9vk++jC+ BVo9Rzoav24YHH7sIhRB2oCaTYuP4Sq/LwGibmXoM6jjllBsQATFemUyv+B9EiQq n6K/odAWSPtbMicsu+Slx2O89RUkwWov6ZxMGw6aduvtmNmndVeDJ7WOg7RRZ/3U d9tFpdG/PbAFNvcWPzpNfH/44HEGZoWmvZplQZv/FbDPktN0BQNQmzexepZSAUtR stLNrFCIkQW0ui1QH34x94zROQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1hNtuj 9ccEX/2dHy5IAPUmiN5NMB8GA1UdIwQYMBaAFLJ500/jCOxKv0IBERnI0iy29hrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5RC80NjdDMDNCMDkz MUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdFcV9RZ0VSR2NqU0xMYjJH c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NublRULU1JN0VxX1FnRVJHY2pTTExiMkdzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5RC80NjdDMDNCMDkzMUQxMUVCQkQ3OTM0MkRDNEY5QUUwMi9zbm5UVC1NSTdF cV9RZ0VSR2NqU0xMYjJHc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClWd0IRtcQDUZSbNZwZDTYnrPubSoQQ2guTNEI2A9dROAffgbQVuoa iAE+bb3akagrjJdsH8zilI7XOUizP9LLDagnvd/lzdHaN8jy0kAff3WAPOejcfDB Ao1z+yD7SvheQD7XjCRgs0PqNRTJDhslvbwcqKGT/iXdEPUiP/RN0TLt/uDZPcJK DbcGvb3L0v0M5xtqnUTF1e3QTo6b/1CnAWJDbB77mNxjHDxbBUKQR6rinN7MoqLx dVn/5F6J3B0tw+gywE4i/itLvzUV5BX1/MHVonpHdQid6nen2ganFIZ2mEON5ssR LbK78nrGhgO3wfT2EjYX+kcWrHmOJpm8 -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:35 2024 by rpki-client on console-fra.rpki-client.org