$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: yExhC998n2Y2a1G+/xtFmGa34WzNUpi9FRRN0HsX95Q= Subject key identifier: CE:3D:53:1B:F0:E3:64:DB:9C:1A:D8:AE:EA:95:BC:B5:83:95:4F:35 Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 09C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 09C7 Signing time: Fri 22 Nov 2024 19:43:17 +0000 Manifest this update: Fri 22 Nov 2024 19:43:16 +0000 Manifest next update: Fri 29 Nov 2024 19:43:16 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: lAKbhPV5w0x71+O17N8kxA58SFL3AP11BNYdYjTW5c0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2503 (0x9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Nov 22 19:43:16 2024 GMT Not After : Nov 29 19:43:16 2024 GMT Subject: CN=6740ded4-9fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:85:dc:ec:1b:81:ef:2a:7b:e0:86:f9:a8:0c: ef:33:ff:30:3a:a5:1a:49:fd:78:67:1d:77:01:6f: 28:63:3d:26:85:91:fe:8c:45:f7:ff:bd:e2:36:d3: bc:c6:d6:12:99:0e:61:bd:49:15:4c:9c:d3:91:d9: 4e:ac:fd:46:ac:50:42:52:4c:04:2d:4b:12:67:23: ea:0d:79:dc:02:ff:bd:2d:0c:cc:52:77:e0:d8:d1: 2e:73:11:3e:b4:f5:c7:e2:5b:54:92:79:80:dd:c9: ef:3a:39:f4:6a:09:e8:a1:ee:04:85:af:35:8c:11: 5d:50:43:55:78:c4:e7:42:67:97:5e:2b:88:88:0b: 98:1b:bc:d9:ac:cc:7b:c7:ee:10:97:49:4f:dc:58: ca:f8:10:45:c2:3b:bf:2b:c2:7f:e1:1e:1f:c4:eb: f0:d9:a1:16:bb:61:10:0a:1b:79:06:26:72:6d:24: 92:ac:f3:9a:3b:d5:9d:5a:00:b4:b7:30:b6:fc:25: 72:20:96:6d:2c:e1:b7:ec:35:f3:59:b1:c9:61:49: b0:04:88:cf:b9:a1:a4:4d:96:e2:e2:f7:aa:c7:71: e8:38:f4:ac:80:c2:bd:30:18:c4:31:24:5d:20:7a: d3:46:ad:eb:27:54:3a:b2:c0:93:2d:02:21:a2:cc: 25:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3D:53:1B:F0:E3:64:DB:9C:1A:D8:AE:EA:95:BC:B5:83:95:4F:35 X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:02:b3:11:9d:4d:99:02:cd:fc:13:30:69:47:aa:be:ab:40: f7:b0:9b:be:a1:d8:20:72:c3:a6:b8:41:99:f5:82:b3:f1:c5: 3a:7c:41:a5:ab:ca:8f:00:b1:0b:82:db:c0:41:d0:ce:49:59: 2b:10:f7:02:11:40:46:e2:68:4b:23:86:8b:6d:99:be:04:fd: a5:0b:14:bb:1c:bd:d6:21:45:b3:52:e8:05:ab:25:56:20:54: 04:05:e2:d7:a0:54:d0:ab:b1:07:c4:87:b7:6a:11:b9:21:66: 6e:1b:bc:92:fe:b1:07:a5:24:d5:d4:4c:3f:92:3e:0d:46:c5: 55:3a:79:7e:c1:fa:b5:5f:d7:f1:55:da:5d:dc:2b:be:f1:8f: a9:0e:10:a4:fa:f2:5f:a5:b4:d2:0c:aa:13:39:a6:e7:04:dc: dd:ee:38:41:db:3c:5b:d7:72:35:41:56:35:a2:0e:66:73:4e: e4:94:a4:b6:20:24:ac:9a:8c:fc:aa:be:00:88:ea:c5:23:d2: 4f:a4:b3:f4:73:15:33:4d:cc:a9:76:81:72:3f:f8:91:15:91: ae:b9:93:af:29:b5:48:64:de:66:e5:0d:bc:02:92:08:32:9e: 4f:04:86:a1:c4:2a:dd:9c:06:d9:51:6e:3b:2c:c4:5c:0f:7c: f3:6f:df:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjQxMTIyMTk0MzE2WhcNMjQxMTI5MTk0MzE2WjAYMRYwFAYD VQQDEw02NzQwZGVkNC05ZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoXc7BuB7yp74Ib5qAzvM/8wOqUaSf14Zx13AW8oYz0mhZH+jEX3/73iNtO8 xtYSmQ5hvUkVTJzTkdlOrP1GrFBCUkwELUsSZyPqDXncAv+9LQzMUnfg2NEucxE+ tPXH4ltUknmA3cnvOjn0agnooe4Eha81jBFdUENVeMTnQmeXXiuIiAuYG7zZrMx7 x+4Ql0lP3FjK+BBFwju/K8J/4R4fxOvw2aEWu2EQCht5BiZybSSSrPOaO9WdWgC0 tzC2/CVyIJZtLOG37DXzWbHJYUmwBIjPuaGkTZbi4veqx3HoOPSsgMK9MBjEMSRd IHrTRq3rJ1Q6ssCTLQIhoswl7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM49Uxvw 42TbnBrYruqVvLWDlU81MB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZArMRnU2ZAs38EzBpR6q+q0D3sJu+odggcsOmuEGZ9YKz8cU6fEGl q8qPALELgtvAQdDOSVkrEPcCEUBG4mhLI4aLbZm+BP2lCxS7HL3WIUWzUugFqyVW IFQEBeLXoFTQq7EHxIe3ahG5IWZuG7yS/rEHpSTV1Ew/kj4NRsVVOnl+wfq1X9fx Vdpd3Cu+8Y+pDhCk+vJfpbTSDKoTOabnBNzd7jhB2zxb13I1QVY1og5mc07klKS2 ICSsmoz8qr4AiOrFI9JPpLP0cxUzTcypdoFyP/iRFZGuuZOvKbVIZN5m5Q28ApII Mp5PBIahxCrdnAbZUW47LMRcD3zzb9/d -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:35 2024 by rpki-client on console-fra.rpki-client.org