$ rpki-client -vvf rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft File: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft (raw, json) Hash identifier: v6zFZx3RemAZn7wmqAwRWJZiVl+ToD/1A6OHz7NNsOo= Subject key identifier: BA:33:C0:E9:8A:C6:42:C7:04:61:B8:44:85:13:15:75:B6:38:F5:39 Authority key identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F Certificate issuer: /CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Certificate serial: 075C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft Manifest number: 0757 Signing time: Fri 22 Nov 2024 21:03:40 +0000 Manifest this update: Fri 22 Nov 2024 21:03:39 +0000 Manifest next update: Fri 29 Nov 2024 21:03:39 +0000 Files and hashes: 1: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl (hash: E6bgd3ROmPIkW9yX+SbkYvL+g2oLKjpubCJsfpQRJpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1884 (0x75c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Validity Not Before: Nov 22 21:03:39 2024 GMT Not After : Nov 29 21:03:39 2024 GMT Subject: CN=6740f1ab-66f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:50:f1:cc:3e:bf:38:8f:d1:21:70:56:47: c6:ce:72:7c:a7:b6:f3:4e:3d:94:e4:f5:67:9d:64: 65:31:8c:33:35:c2:da:f6:73:d3:c5:db:a6:c9:12: 75:1c:ec:c8:e1:10:46:c1:ac:eb:fa:51:c5:2e:6f: 0c:54:12:2f:6e:2b:27:08:f9:ca:30:c4:35:10:d9: f3:6d:37:df:2e:73:ce:68:ef:12:09:ac:bf:92:c0: c7:52:18:44:a3:5e:e4:bd:05:14:73:8e:07:01:15: dc:79:d7:2d:83:02:64:e8:27:3b:2f:53:b7:63:53: 8b:92:a5:aa:15:f3:af:d3:c1:8f:02:13:86:42:30: 25:95:e0:79:ac:da:25:f3:1c:f2:54:fa:e1:c7:e0: e8:d6:1f:11:f1:6c:04:43:74:5f:d9:e6:51:e4:35: 0a:bb:b9:c5:63:4b:4a:57:2d:15:98:dd:99:ed:1a: c4:ba:c2:b6:3d:6c:eb:8d:9b:04:56:fe:e8:b6:20: e8:7f:44:53:68:a3:a5:41:5f:94:8e:87:b2:20:fa: 90:1e:3d:0c:62:26:5b:a1:16:d9:c0:cb:01:a4:18: 2d:4b:1f:02:56:8a:6c:44:06:2a:4b:bf:b2:7d:c3: ee:dc:74:67:0c:a5:04:ec:ed:49:54:6a:aa:a5:21: 36:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:33:C0:E9:8A:C6:42:C7:04:61:B8:44:85:13:15:75:B6:38:F5:39 X509v3 Authority Key Identifier: keyid:6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:f7:8d:42:f8:9e:9f:1e:b5:d1:17:70:0f:67:fa:29:97:28: d5:e4:41:9f:71:df:3a:0f:f8:f3:10:dc:98:e8:c2:f7:1a:a3: 77:02:62:2a:b4:b9:05:48:d0:f5:1f:8b:2c:65:00:ad:5f:b3: ba:dd:af:bb:a1:f5:51:c1:6a:62:f0:bc:4d:71:0f:d3:97:36: 31:b7:de:66:a5:53:9d:5a:c1:91:f3:43:49:4d:cc:6a:39:73: 33:a7:ee:03:5f:2d:04:de:ab:0c:4d:eb:fc:5c:fb:9d:35:ec: 7a:0d:80:22:3c:79:3f:3a:ad:82:24:08:40:4a:88:c8:ff:23: 55:89:f8:3a:d9:b0:73:0d:17:0d:40:ee:5f:1c:f7:08:42:67: 71:d3:e5:63:99:46:fc:41:82:d0:38:8c:14:ad:fa:fd:46:a1: 3e:8e:85:e6:6f:1b:a9:d1:db:92:57:0c:c2:a1:02:00:15:61: 40:e0:6a:28:38:50:01:e8:78:bd:be:71:be:1c:5d:9f:63:73: 44:67:59:65:7a:ea:34:9e:a1:c8:9e:79:d6:72:00:05:d8:fc: c8:97:46:78:28:f6:68:9f:38:0e:cc:0d:35:43:6c:91:fc:6e: bc:52:f2:dd:5b:02:4c:af:73:fa:35:28:3b:9b:19:fd:96:bb: 5b:d9:b0:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMkQxMTAvBgNVBAUTKDZCNkNEREVCNzEzOUE5RDkzNjY3NkQ4M0E1M0VDNTY3 RjFENkYxOUYwHhcNMjQxMTIyMjEwMzM5WhcNMjQxMTI5MjEwMzM5WjAYMRYwFAYD VQQDEw02NzQwZjFhYi02NmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrVQ8cw+vziP0SFwVkfGznJ8p7bzTj2U5PVnnWRlMYwzNcLa9nPTxdumyRJ1 HOzI4RBGwazr+lHFLm8MVBIvbisnCPnKMMQ1ENnzbTffLnPOaO8SCay/ksDHUhhE o17kvQUUc44HARXcedctgwJk6Cc7L1O3Y1OLkqWqFfOv08GPAhOGQjAlleB5rNol 8xzyVPrhx+Do1h8R8WwEQ3Rf2eZR5DUKu7nFY0tKVy0VmN2Z7RrEusK2PWzrjZsE Vv7otiDof0RTaKOlQV+UjoeyIPqQHj0MYiZboRbZwMsBpBgtSx8CVopsRAYqS7+y fcPu3HRnDKUE7O1JVGqqpSE2AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLozwOmK xkLHBGG4RIUTFXW2OPU5MB8GA1UdIwQYMBaAFGts3etxOanZNmdtg6U+xWfx1vGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIyRC82QzBBRDA5MkZD QjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFkazJaMjJEcFQ3RlpfSFc4 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyemQ2M0U1cWRrMloyMkRwVDdGWl9IVzhaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIyRC82QzBBRDA5MkZDQjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFk azJaMjJEcFQ3RlpfSFc4WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+941C+J6fHrXRF3APZ/oplyjV5EGfcd86D/jzENyY6ML3GqN3AmIq tLkFSND1H4ssZQCtX7O63a+7ofVRwWpi8LxNcQ/TlzYxt95mpVOdWsGR80NJTcxq OXMzp+4DXy0E3qsMTev8XPudNex6DYAiPHk/Oq2CJAhASojI/yNVifg62bBzDRcN QO5fHPcIQmdx0+VjmUb8QYLQOIwUrfr9RqE+joXmbxup0duSVwzCoQIAFWFA4Goo OFAB6Hi9vnG+HF2fY3NEZ1lleuo0nqHInnnWcgAF2PzIl0Z4KPZonzgOzA01Q2yR /G68UvLdWwJMr3P6NSg7mxn9lrtb2bBX -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org