$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json) Hash identifier: A19Wi5EXNV5lQX4yTkgQmAB8Wgm0nKJ2aGkJ44u8LQY= Subject key identifier: CE:97:92:69:C0:DF:54:F1:8A:10:08:AE:EF:F0:4D:57:F0:54:F2:DD Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft Manifest number: 99 Signing time: Sat 23 Nov 2024 04:24:33 +0000 Manifest this update: Sat 23 Nov 2024 04:24:33 +0000 Manifest next update: Sat 30 Nov 2024 04:24:33 +0000 Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: 6SrXvXdklp2BO/Q6gxCwH9tAajFVDOc+01DEnSz1gts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Validity Not Before: Nov 23 04:24:33 2024 GMT Not After : Nov 30 04:24:33 2024 GMT Subject: CN=67415901-1d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8b:a4:a0:45:97:38:75:98:84:07:ff:c5:3d: a2:9c:05:0e:04:c8:7c:c0:50:ac:1a:2f:08:be:4e: 70:c7:39:61:18:4c:f0:56:40:6d:26:86:6b:94:f1: 20:ff:aa:9b:11:69:73:74:85:43:9a:bb:6a:dc:a7: c4:9c:dc:6a:7d:01:ad:45:78:f4:08:40:fe:37:b7: 98:bd:be:58:bf:8c:6d:df:6d:d8:93:46:13:ca:5c: 02:c8:54:df:65:79:df:10:8c:05:30:79:47:93:9e: 18:0a:10:26:94:ce:2e:53:45:5c:59:2e:3a:56:aa: f6:6d:b7:ff:81:8c:0e:f9:05:54:b9:0e:5f:d6:67: b4:09:8d:a6:77:35:53:0f:a9:57:01:9d:fb:aa:4d: 2c:de:70:4c:50:3e:81:9b:f8:36:9f:24:b1:20:b2: 2c:b1:26:23:a4:9d:c1:9e:65:b2:40:4a:e9:0c:0d: 14:63:a5:26:5a:94:f3:33:41:64:dd:65:d3:a3:67: af:e4:38:fa:90:ea:79:37:4f:3b:e3:30:f8:64:e0: 5a:53:aa:d4:a0:be:af:08:7c:5d:c0:d9:ee:16:5c: 24:d1:45:a8:71:c1:dc:54:bf:25:ee:8c:a3:9b:c5: 63:67:9e:a9:64:1f:47:da:77:83:ae:b2:8d:6a:f7: 66:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:97:92:69:C0:DF:54:F1:8A:10:08:AE:EF:F0:4D:57:F0:54:F2:DD X509v3 Authority Key Identifier: keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:62:6d:f7:a2:df:c4:d2:8f:a2:01:ff:3c:69:56:8f:29:8e: ae:e8:3e:2d:8e:51:a1:93:a6:c9:34:64:11:f3:4d:c1:94:5c: 79:3e:05:e8:d8:c5:a4:be:bf:50:e4:17:ef:3b:56:7c:29:38: 05:f3:50:c9:f9:9e:50:7d:1a:b0:06:36:19:e8:6f:cf:0c:c4: 9c:91:93:6d:0b:ec:31:01:91:b2:52:3b:a7:46:27:e6:27:2c: 18:17:4f:4e:1c:b2:3f:0f:b7:de:43:6d:b7:c2:16:19:43:a9: 20:78:42:01:b3:b7:86:97:62:de:2a:cc:6d:65:e6:fa:7f:6a: fb:6f:41:53:30:39:6d:89:68:23:2b:4b:ae:12:b6:22:48:7f: 81:04:83:95:37:0a:8d:a0:60:e0:f0:52:d7:b8:74:e8:fc:ad: 06:71:1b:f4:34:3f:5a:51:44:f6:0c:05:d3:48:bf:0b:a1:7c: 29:66:6d:a8:88:b0:e7:7b:88:7c:27:56:00:d1:d5:74:aa:3a: de:72:77:c4:85:ee:7e:a7:89:1d:b4:a8:ad:a0:e8:e1:99:74: 2c:89:ad:5c:ea:5e:8f:1b:24:b3:fd:b3:22:79:b3:0d:b9:71: b4:75:61:8f:54:55:4e:f4:f6:9e:3c:d2:41:df:e0:2d:9d:c8: bb:33:e6:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NEMxMTAvBgNVBAUTKDZDMjRDRTI0NjRBRDM3NzFFMzJDMzMwODE4RDFCN0RB MDE0QzY5MDkwHhcNMjQxMTIzMDQyNDMzWhcNMjQxMTMwMDQyNDMzWjAYMRYwFAYD VQQDEw02NzQxNTkwMS0xZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oukoEWXOHWYhAf/xT2inAUOBMh8wFCsGi8Ivk5wxzlhGEzwVkBtJoZrlPEg /6qbEWlzdIVDmrtq3KfEnNxqfQGtRXj0CED+N7eYvb5Yv4xt323Yk0YTylwCyFTf ZXnfEIwFMHlHk54YChAmlM4uU0VcWS46Vqr2bbf/gYwO+QVUuQ5f1me0CY2mdzVT D6lXAZ37qk0s3nBMUD6Bm/g2nySxILIssSYjpJ3BnmWyQErpDA0UY6UmWpTzM0Fk 3WXTo2ev5Dj6kOp5N0874zD4ZOBaU6rUoL6vCHxdwNnuFlwk0UWoccHcVL8l7oyj m8VjZ56pZB9H2neDrrKNavdmdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6XkmnA 31TxihAIru/wTVfwVPLdMB8GA1UdIwQYMBaAFGwkziRkrTdx4ywzCBjRt9oBTGkJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg0Qy9GMzVCMzA1RUJG MzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4zSGpMRE1JR05HMzJnRk1h UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDVE9KR1N0TjNIakxETUlHTkczMmdGTWFRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg0Qy9GMzVCMzA1RUJGMzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4z SGpMRE1JR05HMzJnRk1hUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAYm33ot/E0o+iAf88aVaPKY6u6D4tjlGhk6bJNGQR803BlFx5PgXo 2MWkvr9Q5BfvO1Z8KTgF81DJ+Z5QfRqwBjYZ6G/PDMSckZNtC+wxAZGyUjunRifm JywYF09OHLI/D7feQ223whYZQ6kgeEIBs7eGl2LeKsxtZeb6f2r7b0FTMDltiWgj K0uuErYiSH+BBIOVNwqNoGDg8FLXuHTo/K0GcRv0ND9aUUT2DAXTSL8LoXwpZm2o iLDne4h8J1YA0dV0qjrecnfEhe5+p4kdtKitoOjhmXQsia1c6l6PGySz/bMiebMN uXG0dWGPVFVO9PaePNJB3+Atnci7M+Y5 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org