$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft File: h81xgndjHgvdtrTzot8esxEio4E.mft (raw, json) Hash identifier: dT9Ck8ORt0B+YVRCcm499D9SgiRsRpn4KzzjBggHqAw= Subject key identifier: A9:8A:13:01:74:6A:30:F2:5C:00:49:24:BF:3D:F3:81:FE:0E:5D:AC Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81 Certificate issuer: /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381 Certificate serial: 0DF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft Manifest number: 1097 Signing time: Fri 22 Nov 2024 17:46:45 +0000 Manifest this update: Fri 22 Nov 2024 17:46:44 +0000 Manifest next update: Fri 29 Nov 2024 17:46:44 +0000 Files and hashes: 1: h81xgndjHgvdtrTzot8esxEio4E.crl (hash: xhXYm0SCLYJt6mF86D0W/n1j6YmiBPROwYnIhJ1QeZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3570 (0xdf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381 Validity Not Before: Nov 22 17:46:44 2024 GMT Not After : Nov 29 17:46:44 2024 GMT Subject: CN=6740c385-d274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:19:59:a5:cb:73:00:5f:7a:5f:7d:6f:1f:85: 1c:b2:d0:55:b2:78:86:e6:64:f3:fd:9d:df:1f:5a: 59:43:df:dd:e7:8c:2d:51:9d:39:36:81:ad:30:f1: ed:d2:52:89:44:8a:c7:5f:5e:f5:ee:5e:cd:ba:a2: dc:ae:4a:48:28:c6:d1:b5:6a:f2:6d:8e:43:55:c0: 12:3f:e7:ab:8e:4f:21:9a:08:7b:c5:e4:86:29:33: 76:17:2d:ae:2b:35:c5:d9:d8:5f:f0:fd:be:db:91: 95:80:ae:89:7f:bf:31:c4:75:63:02:1d:b3:5b:10: a2:98:6a:1b:07:d7:23:37:27:f6:e3:63:99:cd:19: 71:87:0d:9f:83:a2:01:fb:38:ae:95:58:ea:7b:84: c1:fb:51:8b:95:2c:59:21:9f:54:98:91:88:21:29: ed:97:7c:30:e5:a3:0f:69:49:bb:2a:23:3f:bf:7a: de:e7:eb:ca:1a:f5:5f:3c:eb:2a:06:f2:57:60:11: cb:6c:b2:bc:dd:ec:70:0a:4b:af:80:b5:29:31:ad: fe:cc:91:50:00:a7:b3:d3:ae:a5:e7:f2:c1:f4:93: a3:0c:11:c3:66:b5:8a:7e:74:22:3f:39:de:2e:6d: 67:74:6b:00:99:b3:39:89:96:ca:aa:6c:7e:ac:92: b5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8A:13:01:74:6A:30:F2:5C:00:49:24:BF:3D:F3:81:FE:0E:5D:AC X509v3 Authority Key Identifier: keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:1b:7c:63:0d:c2:5c:6d:ce:af:31:11:1c:82:da:1c:cf:f1: 01:68:cb:c7:a1:01:90:4b:b4:c8:95:e3:fb:45:d8:6d:63:51: 02:bf:53:2e:06:e3:63:0c:19:f1:0c:3c:9b:62:9d:fd:a1:fa: ec:63:8a:4b:72:22:87:aa:2b:b2:61:75:08:29:36:2b:77:f1: 51:62:a5:9c:f3:19:61:5a:8e:54:41:03:4e:c6:09:bf:33:0f: af:ae:c7:f5:57:a4:db:82:c4:c0:8e:5e:42:93:75:25:dc:0a: 20:9d:26:cd:97:c0:4d:fd:d8:da:bf:0e:26:8b:ed:be:32:59: 27:e2:96:3d:ac:5d:d7:da:f6:96:b5:8b:3e:31:b6:4c:01:46: 41:02:50:3f:7d:74:1f:ab:50:aa:33:89:e7:fa:13:a8:77:cf: 42:68:46:50:70:51:06:d1:2c:fa:24:e2:25:2c:b8:da:e6:db: 71:25:5e:97:40:ea:a8:83:7c:c9:68:01:ad:d7:d1:e6:2e:45: 19:b2:d6:76:be:80:8c:d1:e3:a2:aa:1f:44:a4:d7:1d:90:c0: d4:f4:29:c9:4e:a0:a5:ff:7f:f3:17:4f:68:e8:c3:04:8f:2a: b3:7c:e8:3c:6d:81:a2:e3:95:ee:fc:e7:10:51:a6:2a:ec:2c: 71:16:b4:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJEREQxMTAvBgNVBAUTKDg3Q0Q3MTgyNzc2MzFFMEJEREI2QjRGM0EyREYxRUIz MTEyMkEzODEwHhcNMjQxMTIyMTc0NjQ0WhcNMjQxMTI5MTc0NjQ0WjAYMRYwFAYD VQQDEw02NzQwYzM4NS1kMjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xlZpctzAF96X31vH4UcstBVsniG5mTz/Z3fH1pZQ9/d54wtUZ05NoGtMPHt 0lKJRIrHX1717l7NuqLcrkpIKMbRtWrybY5DVcASP+erjk8hmgh7xeSGKTN2Fy2u KzXF2dhf8P2+25GVgK6Jf78xxHVjAh2zWxCimGobB9cjNyf242OZzRlxhw2fg6IB +ziulVjqe4TB+1GLlSxZIZ9UmJGIISntl3ww5aMPaUm7KiM/v3re5+vKGvVfPOsq BvJXYBHLbLK83exwCkuvgLUpMa3+zJFQAKez066l5/LB9JOjDBHDZrWKfnQiPzne Lm1ndGsAmbM5iZbKqmx+rJK1MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmKEwF0 ajDyXABJJL8984H+Dl2sMB8GA1UdIwQYMBaAFIfNcYJ3Yx4L3ba086LfHrMRIqOB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRERC9CNEEyODM2MjlF MUIxMUU5OEUxRTRFNUVDNEY5QUUwMi9oODF4Z25kakhndmR0clR6b3Q4ZXN4RWlv NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4MXhnbmRqSGd2ZHRyVHpvdDhlc3hFaW80RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRERC9CNEEyODM2MjlFMUIxMUU5OEUxRTRFNUVDNEY5QUUwMi9oODF4Z25kakhn dmR0clR6b3Q4ZXN4RWlvNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDG3xjDcJcbc6vMREcgtocz/EBaMvHoQGQS7TIleP7RdhtY1ECv1Mu BuNjDBnxDDybYp39ofrsY4pLciKHqiuyYXUIKTYrd/FRYqWc8xlhWo5UQQNOxgm/ Mw+vrsf1V6TbgsTAjl5Ck3Ul3AognSbNl8BN/djavw4mi+2+Mlkn4pY9rF3X2vaW tYs+MbZMAUZBAlA/fXQfq1CqM4nn+hOod89CaEZQcFEG0Sz6JOIlLLja5ttxJV6X QOqog3zJaAGt19HmLkUZstZ2voCM0eOiqh9EpNcdkMDU9CnJTqCl/3/zF09o6MME jyqzfOg8bYGi45Xu/OcQUaYq7CxxFrRn -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org