$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json) Hash identifier: rJBl/k6csp5v3Eh7uAQKxIopVL1MhBW5EmDfQxx4QnA= Subject key identifier: 26:F3:F2:8A:CA:10:25:B9:14:88:BE:2E:45:2E:6B:8B:D0:0D:3F:F1 Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft Manifest number: 045D Signing time: Fri 22 Nov 2024 23:41:27 +0000 Manifest this update: Fri 22 Nov 2024 23:41:27 +0000 Manifest next update: Fri 29 Nov 2024 23:41:27 +0000 Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: karSaOl67hUYRAKzfA5iiw4zEn4Q5GD6QA2dOibNKS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Validity Not Before: Nov 22 23:41:27 2024 GMT Not After : Nov 29 23:41:27 2024 GMT Subject: CN=674116a7-7cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ef:41:93:63:67:f4:cc:ae:46:c2:d5:b4:54: 8e:7c:1b:4a:8e:94:5e:dc:a7:f3:2b:2e:0a:2c:af: ef:ea:cb:4f:3c:13:9f:bc:a6:37:f9:b2:02:90:c4: 77:0d:a1:75:5b:c2:9e:39:d5:30:ab:56:6e:17:46: 6e:28:19:d2:c4:2b:1e:8a:35:af:11:e0:bb:f8:df: cd:3f:38:b4:9f:da:ce:91:be:df:47:6e:68:ed:79: 3d:e1:6c:8d:0b:19:6d:bd:d3:9c:64:21:c2:96:0f: f4:dc:e2:e1:85:5a:58:be:4a:cd:e9:64:e9:07:8b: 26:2e:14:65:b2:7a:27:3c:bb:34:5d:b3:27:25:b9: 4a:50:ff:75:64:de:be:ee:d4:2e:ca:2b:14:8b:a4: 9b:95:74:ec:af:1c:13:38:15:45:c9:18:c9:7d:5d: e8:80:7c:a4:26:2f:1a:57:e6:40:4e:85:6a:dc:e4: 76:5d:ba:21:e5:cc:5a:a7:eb:0a:3a:36:94:7d:b8: 1b:70:4f:11:e3:40:cf:b2:76:2a:1f:4e:6f:cb:3c: 5e:2d:bc:b5:89:bb:04:f2:e3:c0:b6:45:d2:40:d3: ad:5c:3f:2b:3c:0e:69:56:9d:06:86:45:0b:27:cb: 06:b9:b0:e8:85:23:7c:86:8e:9b:a4:a5:7e:5a:57: 5c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F3:F2:8A:CA:10:25:B9:14:88:BE:2E:45:2E:6B:8B:D0:0D:3F:F1 X509v3 Authority Key Identifier: keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:51:56:01:60:2a:23:c2:2f:bb:65:9f:78:85:3d:1d:e3:b9: 67:c7:4d:5d:6a:3d:75:06:34:18:89:59:7d:98:a2:9c:47:e9: 8f:7e:e3:ab:27:a7:05:47:82:4a:db:b2:df:56:e4:3f:84:14: ac:4b:78:dd:71:a9:67:94:f5:f9:bb:d3:99:12:c5:3b:3d:18: 8f:5b:b0:8e:be:28:71:de:48:1d:3e:88:67:b8:d2:96:b4:82: 09:b9:53:92:66:b1:00:ce:7a:ea:e8:79:16:d2:98:c3:ab:77: e8:7a:85:19:9a:86:b3:a1:45:b6:db:b2:4f:2e:3e:90:c5:90: 91:7e:13:ab:ba:11:01:8a:1f:a4:c3:7e:d3:c4:c7:e2:a8:bf: ab:38:fc:ea:7c:f4:98:f4:89:63:a7:c4:92:7a:fd:89:be:f3: 56:e5:75:34:55:b8:3a:f3:2b:0f:5a:09:a2:14:f5:90:e3:5f: 69:23:cc:8f:ff:d8:91:b8:93:d4:98:09:6c:95:c4:c6:84:db: 12:8e:2c:fb:59:7f:a6:77:3b:92:e6:d0:e6:2c:b5:35:31:1c: 14:c6:b9:e6:3a:38:25:dd:0a:cd:22:a8:4c:8e:da:8a:b6:59: e4:ee:04:dc:66:be:3d:61:ce:a8:86:fa:1b:c4:4d:4c:27:6b: 8d:5a:54:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM1QkIxMTAvBgNVBAUTKEU2MUZBMTI0QTYxOEUyNTY2N0NDMzFDQ0ZDNDkxNkNF MDc2RkRBNTcwHhcNMjQxMTIyMjM0MTI3WhcNMjQxMTI5MjM0MTI3WjAYMRYwFAYD VQQDEw02NzQxMTZhNy03Y2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxu9Bk2Nn9MyuRsLVtFSOfBtKjpRe3KfzKy4KLK/v6stPPBOfvKY3+bICkMR3 DaF1W8KeOdUwq1ZuF0ZuKBnSxCseijWvEeC7+N/NPzi0n9rOkb7fR25o7Xk94WyN CxltvdOcZCHClg/03OLhhVpYvkrN6WTpB4smLhRlsnonPLs0XbMnJblKUP91ZN6+ 7tQuyisUi6SblXTsrxwTOBVFyRjJfV3ogHykJi8aV+ZAToVq3OR2Xboh5cxap+sK OjaUfbgbcE8R40DPsnYqH05vyzxeLby1ibsE8uPAtkXSQNOtXD8rPA5pVp0GhkUL J8sGubDohSN8ho6bpKV+WldctQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbz8orK ECW5FIi+LkUua4vQDT/xMB8GA1UdIwQYMBaAFOYfoSSmGOJWZ8wxzPxJFs4Hb9pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzVCQi8wNzYzN0QwMjI3 RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRsWm56REhNX0VrV3pnZHYy bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoLWhKS1lZNGxabnpESE1fRWtXemdkdjJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzVCQi8wNzYzN0QwMjI3RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRs Wm56REhNX0VrV3pnZHYybGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2UVYBYCojwi+7ZZ94hT0d47lnx01daj11BjQYiVl9mKKcR+mPfuOr J6cFR4JK27LfVuQ/hBSsS3jdcalnlPX5u9OZEsU7PRiPW7COvihx3kgdPohnuNKW tIIJuVOSZrEAznrq6HkW0pjDq3foeoUZmoazoUW227JPLj6QxZCRfhOruhEBih+k w37TxMfiqL+rOPzqfPSY9Iljp8SSev2JvvNW5XU0Vbg68ysPWgmiFPWQ419pI8yP /9iRuJPUmAlslcTGhNsSjiz7WX+mdzuS5tDmLLU1MRwUxrnmOjgl3QrNIqhMjtqK tlnk7gTcZr49Yc6ohvobxE1MJ2uNWlQi -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:30 2024 by rpki-client on console-ams.rpki-client.org