$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft File: B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json) Hash identifier: V4H+XurEKdtE2t80EDfTZax2sx/s7Y0QXvGIMRBbzh8= Subject key identifier: 05:37:37:A7:F6:2F:9E:DF:1C:0D:7D:D1:F6:8F:63:E9:2A:F2:A2:09 Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18 Certificate issuer: /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft Manifest number: 06 Signing time: Wed 23 Oct 2024 06:50:52 +0000 Manifest this update: Wed 23 Oct 2024 06:50:51 +0000 Manifest next update: Wed 30 Oct 2024 06:50:51 +0000 Files and hashes: 1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: zuqxzgSXkjkvVxwv7IYnXGm5dtM6ocT6flE3lS23Ffc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818 Validity Not Before: Oct 23 06:50:51 2024 GMT Not After : Oct 30 06:50:51 2024 GMT Subject: CN=67189ccb-81b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:86:38:ab:74:3c:a4:3f:fe:d3:8a:89:3c:ac: 9f:05:ce:71:92:ed:4e:86:65:51:de:b2:2e:73:0b: ad:63:b2:e2:a2:9b:19:e0:13:25:d8:2b:a2:0f:80: df:54:8c:39:9b:67:e1:ac:d6:57:a5:f2:99:c9:6a: 35:96:73:2b:a3:34:b8:9e:e2:48:de:77:fa:36:e8: 28:fa:83:3c:52:46:54:38:a9:7a:e9:55:30:18:9c: e2:74:46:53:3a:12:17:b5:69:8a:33:08:5f:53:53: 45:33:48:49:fb:77:27:94:d5:2a:6b:21:63:d7:50: fd:f1:75:c2:55:67:67:c7:49:ad:dc:d8:d2:9e:33: 47:54:00:3b:af:9d:59:cf:65:ae:dc:95:98:2b:37: 0d:95:25:bc:e0:40:4a:ed:e4:dd:2d:e0:34:d0:28: 7e:48:a3:00:5d:08:f2:b9:4f:8f:f9:64:db:86:22: 1c:ef:ef:24:64:89:bc:61:9a:97:92:ed:7c:cf:72: 17:d2:81:1c:d1:8b:f2:25:1f:b6:55:e4:39:7f:f7: a2:8c:9b:e2:7e:2a:9f:bc:25:e2:31:3b:67:e2:01: ea:ec:c2:52:45:0a:47:95:1f:b2:57:7f:89:8e:1b: 0d:b8:99:01:5b:3a:10:62:d1:28:ed:0d:fa:65:ee: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:37:37:A7:F6:2F:9E:DF:1C:0D:7D:D1:F6:8F:63:E9:2A:F2:A2:09 X509v3 Authority Key Identifier: keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:32:28:f9:10:b3:ce:f4:38:cd:00:34:68:6b:25:1c:d1:c0: a9:a1:ab:74:1e:68:f1:89:68:71:9f:24:8a:3c:92:33:e3:50: 46:55:52:96:2c:78:c7:2e:3c:6e:1c:2f:47:bf:df:2d:02:95: 1b:4f:03:ec:90:6b:74:62:3e:de:c7:ea:b2:0f:42:c6:8e:e8: e5:ac:6d:08:7c:6d:39:7d:55:34:ce:69:b5:46:1e:ee:b4:36: a9:52:f1:7d:50:7f:0f:8c:2d:90:2e:08:63:9d:5e:49:1c:11: b9:bf:35:e3:8d:2b:63:22:9b:23:58:6f:ab:e0:c8:f1:a4:69: 9d:d4:6a:16:d2:0e:7c:ac:ac:24:9e:4f:62:5f:2a:f8:e5:60: c5:70:2f:0a:ad:40:d3:9d:24:0b:0c:b9:96:4b:ff:5f:ef:25: ce:7b:54:a3:82:08:4a:92:8a:00:a0:93:6c:82:96:a4:cd:fb: 90:2e:18:21:65:08:6b:aa:1d:ee:9f:29:e2:13:a8:b2:59:e0: d4:9c:83:90:06:ff:89:ce:3c:c5:f5:c8:da:ac:39:ab:44:fa: e9:3b:ae:1d:9c:88:03:72:90:c1:85:15:18:2f:65:ed:51:41: 71:bb:09:c6:f0:bf:d8:f2:cd:ce:6c:2a:94:fe:ea:77:b6:75: 79:01:1a:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0IwNTExMC8GA1UEBRMoMDdCMjVGN0U2NUNCNjI3MTA4QjBEOTRDMThGN0Y1NzlE MzM0NzgxODAeFw0yNDEwMjMwNjUwNTFaFw0yNDEwMzAwNjUwNTFaMBgxFjAUBgNV BAMTDTY3MTg5Y2NiLTgxYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDihjirdDykP/7Tiok8rJ8FznGS7U6GZVHesi5zC61jsuKimxngEyXYK6IPgN9U jDmbZ+Gs1lel8pnJajWWcyujNLie4kjed/o26Cj6gzxSRlQ4qXrpVTAYnOJ0RlM6 Ehe1aYozCF9TU0UzSEn7dyeU1SprIWPXUP3xdcJVZ2fHSa3c2NKeM0dUADuvnVnP Za7clZgrNw2VJbzgQErt5N0t4DTQKH5IowBdCPK5T4/5ZNuGIhzv7yRkibxhmpeS 7XzPchfSgRzRi/IlH7ZV5Dl/96KMm+J+Kp+8JeIxO2fiAerswlJFCkeVH7JXf4mO Gw24mQFbOhBi0SjtDfpl7pINAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBTc3p/Yv nt8cDX3R9o9j6SryogkwHwYDVR0jBBgwFoAUB7JffmXLYnEIsNlMGPf1edM0eBgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQjA1L0ZBNTJERUMyOEE5 QTExRUZCOEFBNTY0OEM0RjlBRTAyL0I3SmZmbVhMWW5FSXNObE1HUGYxZWRNMGVC Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQjdKZmZtWExZbkVJc05sTUdQZjFlZE0wZUJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD QjA1L0ZBNTJERUMyOEE5QTExRUZCOEFBNTY0OEM0RjlBRTAyL0I3SmZmbVhMWW5F SXNObE1HUGYxZWRNMGVCZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK4yKPkQs870OM0ANGhrJRzRwKmhq3QeaPGJaHGfJIo8kjPjUEZVUpYs eMcuPG4cL0e/3y0ClRtPA+yQa3RiPt7H6rIPQsaO6OWsbQh8bTl9VTTOabVGHu60 NqlS8X1Qfw+MLZAuCGOdXkkcEbm/NeONK2MimyNYb6vgyPGkaZ3UahbSDnysrCSe T2JfKvjlYMVwLwqtQNOdJAsMuZZL/1/vJc57VKOCCEqSigCgk2yClqTN+5AuGCFl CGuqHe6fKeITqLJZ4NScg5AG/4nOPMX1yNqsOatE+uk7rh2ciANykMGFFRgvZe1R QXG7Ccbwv9jyzc5sKpT+6ne2dXkBGhE= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:18 2024 by rpki-client on console-fra.rpki-client.org