$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft File: j8P43lI68p2yShWQ_UCgRHWuCiU.mft (raw, json) Hash identifier: QeV2gcGcH26hEyXTwr6XW4fUqndvUhfP9yy2q7SfOAg= Subject key identifier: 6D:A4:FC:DA:72:EE:5C:B8:C5:9E:AC:91:9E:86:A2:AA:4F:50:7F:D2 Authority key identifier: 8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25 Certificate issuer: /CN=A911AB93/serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25 Certificate serial: 1DE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft Manifest number: 1E77 Signing time: Fri 22 Nov 2024 16:05:52 +0000 Manifest this update: Fri 22 Nov 2024 16:05:52 +0000 Manifest next update: Fri 29 Nov 2024 16:05:52 +0000 Files and hashes: 1: j8P43lI68p2yShWQ_UCgRHWuCiU.crl (hash: oxZO1MH/BcwcMi6URxaZP2CXo275Hnd/tP3dzZRn6O8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7654 (0x1de6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AB93/serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25 Validity Not Before: Nov 22 16:05:52 2024 GMT Not After : Nov 29 16:05:52 2024 GMT Subject: CN=6740abe0-0608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:23:fb:ad:9f:bf:29:02:16:94:56:df:42:14: 01:da:82:f0:b7:3f:42:2a:26:e3:84:d2:a7:d8:07: 62:59:3c:80:d3:f8:16:7a:f7:df:57:e8:a1:e7:60: 6d:d2:d9:bb:ac:06:d9:c5:e9:ce:0d:12:10:1c:bb: 1b:de:69:a1:3b:95:23:35:a6:85:dc:28:24:2f:09: f9:12:32:c1:1f:a0:6f:5a:70:cd:c9:e2:38:41:8e: 0f:53:3f:04:71:4b:6f:e8:a1:1e:f6:c5:00:6e:b9: 5c:45:b5:54:40:d7:05:70:56:45:ff:2e:1c:9f:57: 09:9d:0a:ab:0f:2a:77:da:c7:ae:62:48:e4:51:6c: d6:66:2d:06:54:44:23:2b:0c:8e:36:94:8d:b8:9a: 3a:9a:64:7d:97:02:4f:15:b7:72:8a:15:58:80:29: 45:2d:bb:46:20:2f:b2:83:f8:06:af:f2:d9:7b:29: 10:05:df:49:61:f3:60:4c:86:cb:0c:b5:1b:4c:06: d9:84:22:7e:fc:a3:82:72:30:b5:c9:44:50:4d:a4: a0:0f:da:f5:6c:e2:c2:9a:6a:ac:0b:b2:c3:63:0e: 42:db:c5:6b:90:35:e7:6d:5c:2e:f0:dc:8d:09:c5: 64:52:35:5e:40:0b:48:dc:9d:48:ce:16:de:14:22: db:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A4:FC:DA:72:EE:5C:B8:C5:9E:AC:91:9E:86:A2:AA:4F:50:7F:D2 X509v3 Authority Key Identifier: keyid:8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:9d:32:1e:c6:1e:c0:41:f6:0d:16:98:b8:a3:de:ba:ff:5d: 41:c6:24:e9:da:ab:48:f9:96:5c:dc:c3:ed:76:44:17:a3:ca: c3:59:86:dd:66:8c:b1:6f:a1:6b:62:9d:18:c3:d2:0b:13:15: a2:2e:ac:69:a4:cd:3b:44:f1:44:c5:2e:d8:39:bb:53:2b:7b: 39:d2:05:9c:a6:ee:31:d7:b4:ab:8b:8a:54:92:63:1c:ae:b8: d5:d1:9d:8d:ac:a6:df:d7:56:b6:55:38:13:40:9a:aa:61:69: a4:d2:b2:fd:eb:6e:97:4a:1b:cb:80:02:02:83:82:40:15:60: 0f:d6:1d:1d:fc:8e:c2:30:6c:75:43:27:f5:17:92:01:03:b7: ce:46:a1:d7:8d:14:0d:fb:51:19:f3:63:d1:d7:2c:40:61:75: a4:c4:21:9a:c0:8b:17:16:98:00:33:0c:67:2b:46:86:ce:87: 0d:37:d3:4b:0b:6a:69:ec:69:43:11:89:99:28:22:58:7c:1e: 90:4c:f8:99:1a:8d:ab:f2:fc:73:9c:9c:45:39:11:27:9b:29: 1c:5f:23:96:ce:b9:bf:fa:cb:6d:e7:c0:3b:86:dd:d4:45:6c: 16:b5:08:0e:90:ba:fb:14:8d:48:9a:20:ca:13:3b:d7:eb:8e: 77:70:63:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCOTMxMTAvBgNVBAUTKDhGQzNGOERFNTIzQUYyOURCMjRBMTU5MEZENDBBMDQ0 NzVBRTBBMjUwHhcNMjQxMTIyMTYwNTUyWhcNMjQxMTI5MTYwNTUyWjAYMRYwFAYD VQQDEw02NzQwYWJlMC0wNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5SP7rZ+/KQIWlFbfQhQB2oLwtz9CKibjhNKn2AdiWTyA0/gWevffV+ih52Bt 0tm7rAbZxenODRIQHLsb3mmhO5UjNaaF3CgkLwn5EjLBH6BvWnDNyeI4QY4PUz8E cUtv6KEe9sUAbrlcRbVUQNcFcFZF/y4cn1cJnQqrDyp32seuYkjkUWzWZi0GVEQj KwyONpSNuJo6mmR9lwJPFbdyihVYgClFLbtGIC+yg/gGr/LZeykQBd9JYfNgTIbL DLUbTAbZhCJ+/KOCcjC1yURQTaSgD9r1bOLCmmqsC7LDYw5C28VrkDXnbVwu8NyN CcVkUjVeQAtI3J1IzhbeFCLbNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2k/Npy 7ly4xZ6skZ6GoqpPUH/SMB8GA1UdIwQYMBaAFI/D+N5SOvKdskoVkP1AoER1rgol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUI5My84RDMwMzk0Njgx OEIxMUU2QkYxQ0I2NTdDNEY5QUUwMi9qOFA0M2xJNjhwMnlTaFdRX1VDZ1JIV3VD aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o4UDQzbEk2OHAyeVNoV1FfVUNnUkhXdUNpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUI5My84RDMwMzk0NjgxOEIxMUU2QkYxQ0I2NTdDNEY5QUUwMi9qOFA0M2xJNjhw MnlTaFdRX1VDZ1JIV3VDaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2nTIexh7AQfYNFpi4o966/11BxiTp2qtI+ZZc3MPtdkQXo8rDWYbd Zoyxb6FrYp0Yw9ILExWiLqxppM07RPFExS7YObtTK3s50gWcpu4x17Sri4pUkmMc rrjV0Z2NrKbf11a2VTgTQJqqYWmk0rL9626XShvLgAICg4JAFWAP1h0d/I7CMGx1 Qyf1F5IBA7fORqHXjRQN+1EZ82PR1yxAYXWkxCGawIsXFpgAMwxnK0aGzocNN9NL C2pp7GlDEYmZKCJYfB6QTPiZGo2r8vxznJxFOREnmykcXyOWzrm/+stt58A7ht3U RWwWtQgOkLr7FI1ImiDKEzvX6453cGP7 -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:56 2024 by rpki-client on console-ams.rpki-client.org