$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.mft File: cyrtpBw-sfatmUNCIXD-fAJJ5bQ.mft (raw, json) Hash identifier: zi918y1ulBJha7kuDt4/6X6Qfnf9zoXzIHMSmP7AnAU= Subject key identifier: 48:33:09:0E:FA:22:2A:E3:C4:A6:36:13:A5:52:BB:27:67:D4:8A:38 Authority key identifier: 73:2A:ED:A4:1C:3E:B1:F6:AD:99:43:42:21:70:FE:7C:02:49:E5:B4 Certificate issuer: /CN=A91F9090/serialNumber=732AEDA41C3EB1F6AD9943422170FE7C0249E5B4 Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.mft Manifest number: 02D4 Signing time: Sat 23 Nov 2024 00:55:39 +0000 Manifest this update: Sat 23 Nov 2024 00:55:38 +0000 Manifest next update: Sat 30 Nov 2024 00:55:38 +0000 Files and hashes: 1: cyrtpBw-sfatmUNCIXD-fAJJ5bQ.crl (hash: iCB6UWaF9YHRo/5VUuVWago08dRIL8fYGdIkCU51PmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.crl rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9090/serialNumber=732AEDA41C3EB1F6AD9943422170FE7C0249E5B4 Validity Not Before: Nov 23 00:55:38 2024 GMT Not After : Nov 30 00:55:38 2024 GMT Subject: CN=6741280b-00f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:24:db:da:0b:31:15:c2:e1:46:00:09:5b: 88:2b:93:39:31:e2:93:15:d1:b3:cd:93:81:b4:4c: 54:83:8d:4c:b6:9f:f4:06:d4:44:93:cf:cb:3a:72: fb:2f:45:9f:61:51:bd:ab:ec:ee:5d:e3:d5:21:e7: 77:15:33:a8:aa:c2:d2:1c:fb:50:1e:03:32:34:4d: 3e:32:a9:9a:ba:c6:55:d3:82:a8:cc:bf:f6:e3:d2: 25:52:9f:56:4c:e2:1c:17:94:39:03:47:16:e0:d4: ad:ec:4e:9e:23:4f:c4:c7:5e:68:1d:94:32:9b:8c: 2f:09:46:94:6a:fc:9a:ac:f9:d9:55:d4:68:c9:9e: 89:8a:a0:19:1a:9b:02:f6:f4:88:8f:7c:7f:67:fe: 0c:71:32:bd:06:72:d6:59:1c:8f:ff:ac:9b:14:e9: 15:ec:80:19:b3:00:d7:6b:b6:23:a9:5e:e6:07:39: 69:bd:59:2a:17:38:b0:94:b0:08:92:af:0d:b4:b9: b5:55:23:18:5c:47:82:d5:1c:8c:17:3c:b3:c4:6b: 11:a9:a3:65:4b:19:0d:91:a0:cd:f8:ee:e1:6e:00: e4:a6:c8:bf:86:b5:5f:50:cb:09:fc:b7:b8:01:0f: 1c:1e:38:2c:de:56:7b:59:f6:58:21:95:90:63:5e: 03:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:33:09:0E:FA:22:2A:E3:C4:A6:36:13:A5:52:BB:27:67:D4:8A:38 X509v3 Authority Key Identifier: keyid:73:2A:ED:A4:1C:3E:B1:F6:AD:99:43:42:21:70:FE:7C:02:49:E5:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9090/F52E9A20C53611EC93978E29C4F9AE02/cyrtpBw-sfatmUNCIXD-fAJJ5bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:77:5a:47:b7:e7:95:99:b7:33:e6:81:e9:00:b3:42:c2:fe: bb:5a:d8:84:b4:7e:ec:3a:da:62:82:3b:71:bd:e6:12:ac:fe: 72:20:2d:20:8a:d3:71:51:2f:ef:65:e5:b5:89:39:ae:75:98: 7a:3b:ac:dc:4f:94:dd:9e:96:31:17:53:42:c4:ff:8e:70:b4: 30:22:a5:c6:9e:32:7f:4b:42:c8:93:36:3a:ad:21:f2:d4:95: f9:ac:6b:37:25:a0:0c:56:ce:99:e1:91:bc:70:27:c6:b4:5f: 5e:8c:6c:33:61:68:80:7c:50:e3:f3:d9:09:b1:83:9e:67:cc: 67:9c:97:04:92:57:db:a2:fa:7a:b8:9b:4d:7a:0f:ae:c9:a9: f7:a8:a9:07:02:b8:98:e2:40:48:51:ae:98:b6:4b:77:4c:8c: 5f:d5:94:b1:9a:a5:b5:2c:0c:40:89:8e:1f:d6:74:65:e9:27: e4:5d:88:41:05:a2:44:3e:52:e7:23:d7:89:08:ab:48:37:37: 0b:45:32:49:3f:75:46:05:56:9a:1d:06:eb:fe:9a:c9:44:28: 2f:05:a1:21:82:51:b7:cc:30:27:ef:eb:4a:f7:f4:47:4d:34: ae:13:a6:56:dc:31:70:c9:3a:6b:10:7c:d5:5c:3d:f4:74:52: 91:ef:ae:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkwOTAxMTAvBgNVBAUTKDczMkFFREE0MUMzRUIxRjZBRDk5NDM0MjIxNzBGRTdD MDI0OUU1QjQwHhcNMjQxMTIzMDA1NTM4WhcNMjQxMTMwMDA1NTM4WjAYMRYwFAYD VQQDEw02NzQxMjgwYi0wMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoy8k29oLMRXC4UYACVuIK5M5MeKTFdGzzZOBtExUg41Mtp/0BtREk8/LOnL7 L0WfYVG9q+zuXePVIed3FTOoqsLSHPtQHgMyNE0+MqmausZV04KozL/249IlUp9W TOIcF5Q5A0cW4NSt7E6eI0/Ex15oHZQym4wvCUaUavyarPnZVdRoyZ6JiqAZGpsC 9vSIj3x/Z/4McTK9BnLWWRyP/6ybFOkV7IAZswDXa7YjqV7mBzlpvVkqFziwlLAI kq8NtLm1VSMYXEeC1RyMFzyzxGsRqaNlSxkNkaDN+O7hbgDkpsi/hrVfUMsJ/Le4 AQ8cHjgs3lZ7WfZYIZWQY14DyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgzCQ76 IirjxKY2E6VSuydn1Io4MB8GA1UdIwQYMBaAFHMq7aQcPrH2rZlDQiFw/nwCSeW0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTA5MC9GNTJFOUEyMEM1 MzYxMUVDOTM5NzhFMjlDNEY5QUUwMi9jeXJ0cEJ3LXNmYXRtVU5DSVhELWZBSko1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N5cnRwQnctc2ZhdG1VTkNJWEQtZkFKSjViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTA5MC9GNTJFOUEyMEM1MzYxMUVDOTM5NzhFMjlDNEY5QUUwMi9jeXJ0cEJ3LXNm YXRtVU5DSVhELWZBSko1YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUd1pHt+eVmbcz5oHpALNCwv67WtiEtH7sOtpigjtxveYSrP5yIC0g itNxUS/vZeW1iTmudZh6O6zcT5TdnpYxF1NCxP+OcLQwIqXGnjJ/S0LIkzY6rSHy 1JX5rGs3JaAMVs6Z4ZG8cCfGtF9ejGwzYWiAfFDj89kJsYOeZ8xnnJcEklfbovp6 uJtNeg+uyan3qKkHAriY4kBIUa6Ytkt3TIxf1ZSxmqW1LAxAiY4f1nRl6SfkXYhB BaJEPlLnI9eJCKtINzcLRTJJP3VGBVaaHQbr/prJRCgvBaEhglG3zDAn7+tK9/RH TTSuE6ZW3DFwyTprEHzVXD30dFKR765Q -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:59 2024 by rpki-client on console-ams.rpki-client.org