$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft File: F-lBr577tRXXwktBjmn5hnx6FMo.mft (raw, json) Hash identifier: zYJ7WyE3Ppf7gR/I/ha8nlCiee53+2a77l8sZRrAwnk= Subject key identifier: F4:B0:63:15:85:84:1B:1C:72:CB:7D:6B:82:26:3A:2B:05:F8:5D:8F Authority key identifier: 17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA Certificate issuer: /CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft Manifest number: 59 Signing time: Mon 25 Nov 2024 05:03:26 +0000 Manifest this update: Mon 25 Nov 2024 05:03:26 +0000 Manifest next update: Mon 02 Dec 2024 05:03:26 +0000 Files and hashes: 1: F-lBr577tRXXwktBjmn5hnx6FMo.crl (hash: EQ/9+k0nckWCGu0gY5GT6LH0aEJ5wqDEPQagWpnyyu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129023/serialNumber=17E941AF9EFBB515D7C24B418E69F9867C7A14CA Validity Not Before: Nov 25 05:03:26 2024 GMT Not After : Dec 2 05:03:26 2024 GMT Subject: CN=6744051e-1a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:79:ed:e6:1a:a1:f0:33:60:83:19:27:dd:f9: b2:47:b3:a6:bf:bc:03:d4:d1:15:7b:10:05:8e:c8: f6:00:98:e1:cd:60:e2:60:69:f3:9e:d8:94:b4:d5: 0c:ab:b9:9b:61:d2:5c:f8:cf:da:a7:36:85:ba:00: 12:52:38:e9:23:b0:a3:45:9f:8b:d2:40:b8:f4:c6: ec:a2:ff:a5:41:62:49:e4:ef:f8:b3:d2:97:48:9a: 1e:12:e2:fa:2e:16:7c:e8:bf:3c:e8:b9:8a:ea:e0: c2:c1:1c:8f:5b:03:10:a7:c3:9c:e5:73:99:d4:e0: 86:51:59:09:54:cf:ab:57:f3:45:6e:99:5c:e4:d6: 39:86:1f:67:93:a7:f9:6b:83:66:57:a8:b3:87:6b: d2:71:d8:dc:b8:36:d6:b8:d0:13:74:d9:34:26:73: db:dd:db:32:a0:92:e3:22:6c:cb:42:2e:3e:f6:41: f6:b3:e7:2c:49:5e:d7:87:67:3e:57:f7:8b:f6:9c: 93:33:5e:18:33:60:dc:39:71:35:04:1a:89:d3:a3: fe:c8:1b:dd:b1:fb:9d:8b:c6:bf:e3:d2:6f:e0:0c: 92:2b:a7:91:e5:25:4e:60:0c:32:e6:33:e6:de:37: f9:28:41:f2:3d:85:85:93:d6:3a:67:7f:8d:8d:61: 32:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B0:63:15:85:84:1B:1C:72:CB:7D:6B:82:26:3A:2B:05:F8:5D:8F X509v3 Authority Key Identifier: keyid:17:E9:41:AF:9E:FB:B5:15:D7:C2:4B:41:8E:69:F9:86:7C:7A:14:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F-lBr577tRXXwktBjmn5hnx6FMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/FCF64740228011EFA7283C14C4F9AE02/F-lBr577tRXXwktBjmn5hnx6FMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:d2:a3:ff:c7:40:8d:a1:4c:8e:59:a7:ab:b2:b3:37:9b:78: d5:45:be:a9:8e:91:3d:4d:1f:b2:22:bd:31:92:74:f8:45:54: cd:d5:27:3c:8d:5e:e3:fb:eb:49:5e:97:2d:c0:89:ba:de:8e: b8:9e:6a:4e:28:a9:4c:77:56:8c:9b:7c:a2:e2:ca:59:64:33: 54:0d:e8:99:c7:41:c6:c7:85:26:43:ff:a4:bd:78:19:7b:fb: 4a:b7:bb:cb:4c:7f:e2:6e:9f:b3:52:3d:ed:b1:3b:06:a2:16: d6:61:6b:40:9d:17:bc:8a:73:47:84:a6:cf:a0:2a:e5:76:f0: c1:38:64:89:e4:de:08:0a:f7:8c:6c:9c:18:2a:76:c1:53:25: f2:20:7d:f7:de:69:a2:04:ff:23:65:10:a7:c9:43:a5:67:ab: a9:f9:32:a7:0d:df:c7:e4:ac:2e:d6:a8:af:ae:b6:27:43:b0: b0:a6:b8:56:74:40:eb:8c:25:c4:d8:90:a0:1a:ba:09:00:cb: 2d:6e:9b:85:c0:fd:71:e8:2d:c7:f2:b2:ba:59:f5:dc:83:9f: de:dd:db:89:2b:dd:e4:11:82:09:11:16:7b:b9:71:aa:2f:f9: de:0e:38:e5:05:99:27:e9:11:c1:a4:71:b2:b2:36:0e:eb:ef: 32:77:b9:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTAyMzExMC8GA1UEBRMoMTdFOTQxQUY5RUZCQjUxNUQ3QzI0QjQxOEU2OUY5ODY3 QzdBMTRDQTAeFw0yNDExMjUwNTAzMjZaFw0yNDEyMDIwNTAzMjZaMBgxFjAUBgNV BAMTDTY3NDQwNTFlLTFhOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJee3mGqHwM2CDGSfd+bJHs6a/vAPU0RV7EAWOyPYAmOHNYOJgafOe2JS01Qyr uZth0lz4z9qnNoW6ABJSOOkjsKNFn4vSQLj0xuyi/6VBYknk7/iz0pdImh4S4vou FnzovzzouYrq4MLBHI9bAxCnw5zlc5nU4IZRWQlUz6tX80VumVzk1jmGH2eTp/lr g2ZXqLOHa9Jx2Ny4Nta40BN02TQmc9vd2zKgkuMibMtCLj72Qfaz5yxJXteHZz5X 94v2nJMzXhgzYNw5cTUEGonTo/7IG92x+52Lxr/j0m/gDJIrp5HlJU5gDDLmM+be N/koQfI9hYWT1jpnf42NYTK3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9LBjFYWE Gxxyy31rgiY6KwX4XY8wHwYDVR0jBBgwFoAUF+lBr577tRXXwktBjmn5hnx6FMow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MDIzL0ZDRjY0NzQwMjI4 MDExRUZBNzI4M0MxNEM0RjlBRTAyL0YtbEJyNTc3dFJYWHdrdEJqbW41aG54NkZN by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRi1sQnI1Nzd0UlhYd2t0QmptbjVobng2Rk1vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 MDIzL0ZDRjY0NzQwMjI4MDExRUZBNzI4M0MxNEM0RjlBRTAyL0YtbEJyNTc3dFJY WHdrdEJqbW41aG54NkZNby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALHSo//HQI2hTI5Zp6uyszebeNVFvqmOkT1NH7IivTGSdPhFVM3VJzyN XuP760lely3Aibrejrieak4oqUx3VoybfKLiyllkM1QN6JnHQcbHhSZD/6S9eBl7 +0q3u8tMf+Jun7NSPe2xOwaiFtZha0CdF7yKc0eEps+gKuV28ME4ZInk3ggK94xs nBgqdsFTJfIgfffeaaIE/yNlEKfJQ6Vnq6n5MqcN38fkrC7WqK+utidDsLCmuFZ0 QOuMJcTYkKAaugkAyy1um4XA/XHoLcfysrpZ9dyDn97d24kr3eQRggkRFnu5caov +d4OOOUFmSfpEcGkcbKyNg7r7zJ3uYs= -----END CERTIFICATE-----Generated at Mon Nov 25 06:04:09 2024 by rpki-client on console-ams.rpki-client.org