$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft File: 3JAYFdyRlzyvoZqLV2-GjphBPjk.mft (raw, json) Hash identifier: 5VvPgwMpQedXWsL0CxzAntYZGtdyuud/Rkvch7ebWVc= Subject key identifier: E8:0B:5B:19:5C:45:1F:DB:06:67:71:E3:A3:1A:9C:CA:88:D9:1D:6D Authority key identifier: DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 Certificate issuer: /CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Certificate serial: 1B6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft Manifest number: 1B6E Signing time: Fri 22 Nov 2024 16:15:10 +0000 Manifest this update: Fri 22 Nov 2024 16:15:10 +0000 Manifest next update: Fri 29 Nov 2024 16:15:10 +0000 Files and hashes: 1: 3JAYFdyRlzyvoZqLV2-GjphBPjk.crl (hash: G7nvXI55ThnQteWzvKo2hdyqxAYrbdUAvmsRnsKqMfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7022 (0x1b6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5/serialNumber=DC901815DC91973CAFA19A8B576F868E98413E39 Validity Not Before: Nov 22 16:15:10 2024 GMT Not After : Nov 29 16:15:10 2024 GMT Subject: CN=6740ae0e-811f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:18:b3:8f:fc:c4:b8:df:d2:20:b8:6d:73:69: ab:0e:fc:3f:f0:cf:a2:69:1f:2e:e5:c7:58:32:99: 06:75:c6:35:31:66:e1:c4:76:4d:1d:57:43:49:7d: ec:d2:ff:6e:57:1e:a2:9a:08:9e:66:de:83:54:da: 8c:c6:54:6a:10:1e:51:64:05:80:33:98:0a:fd:8d: ff:7a:b3:18:23:d4:fb:69:6a:ce:0d:7c:00:91:7c: fb:41:c9:af:a1:b0:33:5c:1a:3c:68:9a:f1:02:44: 96:d3:9c:d6:8f:0b:66:d4:26:e0:e5:d4:d4:10:12: 17:ea:1b:f5:07:f2:5a:e4:ec:77:8d:9e:ef:cb:af: 4c:30:5d:5c:eb:53:19:c8:ba:8d:6e:a2:31:51:fe: 9b:ef:2a:6e:78:33:e2:28:49:5b:8e:22:92:d7:19: 2e:be:50:e9:2a:e2:5b:f2:00:62:48:a4:8f:63:13: 62:fd:0b:d0:8d:1a:1c:cf:ba:e9:cd:62:6d:7e:09: 54:5b:a6:11:be:00:e5:69:76:28:79:a9:56:39:3e: 95:7e:90:7c:50:4e:52:42:c3:eb:85:85:53:dc:1f: 00:be:41:95:07:78:a1:2d:50:95:8e:28:b2:b5:5a: 62:f3:d3:dd:3f:09:5f:70:e9:c2:20:d1:bf:50:a9: f5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0B:5B:19:5C:45:1F:DB:06:67:71:E3:A3:1A:9C:CA:88:D9:1D:6D X509v3 Authority Key Identifier: keyid:DC:90:18:15:DC:91:97:3C:AF:A1:9A:8B:57:6F:86:8E:98:41:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3JAYFdyRlzyvoZqLV2-GjphBPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/32C6568CF6E011E692A20B87C4F9AE02/3JAYFdyRlzyvoZqLV2-GjphBPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:19:19:e4:b3:5e:32:23:77:c4:0e:77:6e:0e:82:84:9f:c1: b5:be:92:05:fe:83:82:fd:61:87:a1:53:0a:6d:cd:fe:6f:f6: bb:d0:91:99:61:06:a4:70:db:4c:0b:c8:49:64:52:b2:83:18: b4:18:f8:90:3f:26:2f:36:ea:08:6d:d7:38:f3:9b:e7:b8:a7: cb:f4:43:de:cd:e1:99:1d:e6:5f:e9:a1:6a:a0:39:4c:64:33: bf:36:a3:b6:85:77:23:ae:96:c8:df:3b:2a:c7:a2:09:20:e0: 0b:55:e0:a0:7c:f0:75:88:d6:bb:04:c3:94:0e:1d:bb:4b:9d: 4c:df:c6:f6:46:98:8d:06:9a:54:04:2e:3e:f4:9f:32:60:1f: 34:e4:d6:55:55:6e:30:4a:a7:6e:86:1e:57:af:02:77:4b:8d: 55:be:94:bd:b8:22:0d:d8:01:0f:bb:33:1b:9d:bb:19:bc:3e: 76:88:d3:a9:0c:5a:f8:76:5a:f2:ee:01:59:60:a6:60:2a:82: f6:96:c2:d8:71:e1:c4:ab:b7:cf:08:35:8d:6e:dd:c2:40:77: 81:2c:8c:de:ac:82:ed:94:27:96:7e:60:e8:e0:c8:08:c1:9b: 4d:c3:0f:7f:54:93:93:7b:7f:64:1c:6b:0f:95:5c:92:33:11: 84:ce:cf:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKERDOTAxODE1REM5MTk3M0NBRkExOUE4QjU3NkY4NjhF OTg0MTNFMzkwHhcNMjQxMTIyMTYxNTEwWhcNMjQxMTI5MTYxNTEwWjAYMRYwFAYD VQQDEw02NzQwYWUwZS04MTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7hizj/zEuN/SILhtc2mrDvw/8M+iaR8u5cdYMpkGdcY1MWbhxHZNHVdDSX3s 0v9uVx6imgieZt6DVNqMxlRqEB5RZAWAM5gK/Y3/erMYI9T7aWrODXwAkXz7Qcmv obAzXBo8aJrxAkSW05zWjwtm1Cbg5dTUEBIX6hv1B/Ja5Ox3jZ7vy69MMF1c61MZ yLqNbqIxUf6b7ypueDPiKElbjiKS1xkuvlDpKuJb8gBiSKSPYxNi/QvQjRocz7rp zWJtfglUW6YRvgDlaXYoealWOT6VfpB8UE5SQsPrhYVT3B8AvkGVB3ihLVCVjiiy tVpi89PdPwlfcOnCING/UKn1QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgLWxlc RR/bBmdx46ManMqI2R1tMB8GA1UdIwQYMBaAFNyQGBXckZc8r6Gai1dvho6YQT45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8zMkM2NTY4Q0Y2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6eXZvWnFMVjItR2pwaEJQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNKQVlGZHlSbHp5dm9acUxWMi1HanBoQlBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8zMkM2NTY4Q0Y2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi8zSkFZRmR5Umx6 eXZvWnFMVjItR2pwaEJQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWGRnks14yI3fEDnduDoKEn8G1vpIF/oOC/WGHoVMKbc3+b/a70JGZ YQakcNtMC8hJZFKygxi0GPiQPyYvNuoIbdc485vnuKfL9EPezeGZHeZf6aFqoDlM ZDO/NqO2hXcjrpbI3zsqx6IJIOALVeCgfPB1iNa7BMOUDh27S51M38b2RpiNBppU BC4+9J8yYB805NZVVW4wSqduhh5XrwJ3S41VvpS9uCIN2AEPuzMbnbsZvD52iNOp DFr4dlry7gFZYKZgKoL2lsLYceHEq7fPCDWNbt3CQHeBLIzerILtlCeWfmDo4MgI wZtNww9/VJOTe39kHGsPlVySMxGEzs9L -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:37 2024 by rpki-client on console-fra.rpki-client.org