$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft File: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft (raw, json) Hash identifier: 2UL6sYeuFG25IDi8n/l2OTqFV37YFLICck4QfOit+ss= Subject key identifier: 1D:23:31:D1:F7:4F:CF:94:AA:F3:CF:38:19:6F:2B:DF:4B:DC:B9:2D Authority key identifier: 2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 Certificate issuer: /CN=A91F0CF4/serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Certificate serial: 0B53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft Manifest number: 12FF Signing time: Fri 22 Nov 2024 18:53:27 +0000 Manifest this update: Fri 22 Nov 2024 18:53:27 +0000 Manifest next update: Fri 29 Nov 2024 18:53:27 +0000 Files and hashes: 1: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl (hash: wmqZDxF9oN0N5OjeFABLd1L0qym+gQfwcg+9vuwtLIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2899 (0xb53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4/serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Validity Not Before: Nov 22 18:53:27 2024 GMT Not After : Nov 29 18:53:27 2024 GMT Subject: CN=6740d327-c75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:05:97:4f:66:24:16:1b:1c:69:16:90:6b: 04:ed:95:be:c6:7f:c8:41:7d:ae:88:90:b4:3e:5f: 46:11:40:b4:5d:35:5a:86:de:13:39:37:51:6e:39: ae:bd:93:c2:ce:fe:d6:83:2e:32:bd:e6:a8:a0:f1: 11:bd:f5:27:7b:fc:50:18:8b:69:68:67:bc:28:bf: 6a:b0:29:d1:82:94:18:3c:0c:79:72:1c:33:df:bd: 0f:c9:2d:95:89:de:fa:80:7a:2c:83:05:3f:de:a0: 85:76:ed:8b:f4:e0:8c:10:95:a6:1d:39:18:23:06: ab:bf:7b:f6:57:62:78:83:2c:03:1f:1e:27:fa:a6: 93:f9:73:b7:8e:55:33:e9:f8:32:7d:e1:09:03:37: 9f:14:60:8c:05:db:a9:59:1b:0a:95:0c:f8:95:86: 14:fd:e8:da:82:18:ff:57:11:c7:75:be:c9:e8:a1: c4:a1:59:22:32:52:06:85:d7:78:0a:dc:63:f0:b5: 95:95:1f:f5:20:be:1a:51:01:b5:f6:71:fa:a0:31: 44:87:f9:b0:ef:d1:61:ac:75:bb:41:c5:46:34:56: 0b:6f:a0:82:a8:e0:61:55:9f:f6:f5:ed:58:19:48: a2:e0:22:81:33:52:be:f5:b5:e5:ef:9c:5c:be:fd: 4f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:23:31:D1:F7:4F:CF:94:AA:F3:CF:38:19:6F:2B:DF:4B:DC:B9:2D X509v3 Authority Key Identifier: keyid:2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:49:70:9c:74:63:53:60:a9:f4:b0:45:a2:61:eb:c1:1c:71: 77:88:99:38:12:8b:c9:6f:95:10:09:6a:19:92:5a:87:59:22: 65:48:99:4d:13:35:52:d8:b3:9f:2d:a6:d6:59:c7:33:ec:92: 32:4b:69:c7:c1:4a:27:76:4a:4f:29:47:61:66:bc:7f:6c:16: 19:7b:7d:10:79:a9:f0:39:85:30:01:b5:80:e5:65:6c:cd:3b: 71:4e:4e:3f:11:45:66:44:16:5d:86:b7:d5:22:b8:9e:12:cb: cf:b6:5a:59:e5:1b:15:82:db:5b:72:78:c7:50:82:10:a5:ae: 73:e1:25:75:65:e2:90:ca:a9:ad:c9:8b:12:b5:4b:03:60:3e: cf:d3:8a:32:31:ea:ea:df:cd:42:c9:d4:7b:46:79:4d:1d:ec: 3c:03:30:65:59:64:cc:96:98:b6:6c:47:27:fc:e5:2b:8f:b6: 94:1e:39:59:31:96:36:36:d4:d3:78:cc:1d:44:31:fd:d7:ae: 01:a6:f1:48:a0:5a:47:04:a4:28:e1:aa:55:a4:ee:c2:05:f1: f9:7b:77:ff:fd:d3:c1:ef:34:18:ac:40:d3:57:a7:1e:79:39: 5f:82:88:f7:21:12:25:c5:1a:fc:03:03:08:9f:1f:f4:b3:cc: 6e:18:0a:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKDJFQTA2MDJFMEVFNjAxNkI1MEZBRTQwRDkzNjUzQkEz QzE4ODgwNDMwHhcNMjQxMTIyMTg1MzI3WhcNMjQxMTI5MTg1MzI3WjAYMRYwFAYD VQQDEw02NzQwZDMyNy1jNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdIFl09mJBYbHGkWkGsE7ZW+xn/IQX2uiJC0Pl9GEUC0XTVaht4TOTdRbjmu vZPCzv7Wgy4yveaooPERvfUne/xQGItpaGe8KL9qsCnRgpQYPAx5chwz370PyS2V id76gHosgwU/3qCFdu2L9OCMEJWmHTkYIwarv3v2V2J4gywDHx4n+qaT+XO3jlUz 6fgyfeEJAzefFGCMBdupWRsKlQz4lYYU/ejaghj/VxHHdb7J6KHEoVkiMlIGhdd4 Ctxj8LWVlR/1IL4aUQG19nH6oDFEh/mw79FhrHW7QcVGNFYLb6CCqOBhVZ/29e1Y GUii4CKBM1K+9bXl75xcvv1PfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0jMdH3 T8+UqvPPOBlvK99L3LktMB8GA1UdIwQYMBaAFC6gYC4O5gFrUPrkDZNlO6PBiIBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFXdFEtdVFOazJVN284R0ln RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxQmdMZzdtQVd0US11UU5rMlU3bzhHSWdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFX dFEtdVFOazJVN284R0lnRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHSXCcdGNTYKn0sEWiYevBHHF3iJk4EovJb5UQCWoZklqHWSJlSJlN EzVS2LOfLabWWccz7JIyS2nHwUondkpPKUdhZrx/bBYZe30QeanwOYUwAbWA5WVs zTtxTk4/EUVmRBZdhrfVIrieEsvPtlpZ5RsVgttbcnjHUIIQpa5z4SV1ZeKQyqmt yYsStUsDYD7P04oyMerq381CydR7RnlNHew8AzBlWWTMlpi2bEcn/OUrj7aUHjlZ MZY2NtTTeMwdRDH9164BpvFIoFpHBKQo4apVpO7CBfH5e3f//dPB7zQYrEDTV6ce eTlfgoj3IRIlxRr8AwMInx/0s8xuGAoq -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org