$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft File: 5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json) Hash identifier: 0dRnflJOLhNO+/jotK1wHDIEQ+wYLgQc9UNhqll+P8c= Subject key identifier: B0:6C:DD:E5:04:11:81:7B:70:EF:C1:3D:C0:FC:6B:14:7D:4B:04:3F Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 Certificate issuer: /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Certificate serial: 3423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft Manifest number: 3423 Signing time: Fri 22 Nov 2024 14:43:44 +0000 Manifest this update: Fri 22 Nov 2024 14:43:43 +0000 Manifest next update: Fri 29 Nov 2024 14:43:43 +0000 Files and hashes: 1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: hyHA//UOGJ5YlSljfE3nZmXxcXNRPaJZdqbBVl0SRlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13347 (0x3423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Validity Not Before: Nov 22 14:43:43 2024 GMT Not After : Nov 29 14:43:43 2024 GMT Subject: CN=6740989f-b171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:92:68:f0:89:ae:da:e4:c2:71:fb:bb:9c: 99:12:ad:3f:f9:aa:9c:ac:65:6a:13:b0:3e:9a:32: c1:42:5d:77:31:d0:b2:7f:a1:c6:48:31:83:16:de: 61:9b:98:0f:47:5a:88:0b:53:2d:e0:80:ed:de:40: b4:be:09:af:6d:62:56:88:b1:f1:20:5f:ef:d2:a5: f7:25:d8:ea:d7:c6:fa:0b:5f:f1:08:a1:b4:24:c7: 32:7e:53:ac:96:74:1f:c5:6d:c5:83:21:bd:8e:d5: 03:fe:ff:77:80:9b:35:a1:2b:c7:83:63:7f:14:70: 8f:6b:c1:20:de:6e:68:ca:e0:06:5f:bc:6b:32:51: c3:0c:0e:f0:78:6c:95:b4:5f:8b:c2:ff:71:23:bf: 08:1a:bf:a9:bb:7d:ec:5f:7d:77:c3:08:cf:9e:29: 36:62:c3:e6:3d:8d:ff:fc:35:28:c6:ee:41:85:33: d5:2c:1e:d5:04:f8:68:dd:9b:08:39:2f:aa:e3:3e: af:db:68:4e:63:3b:a1:d9:e2:45:df:df:fc:6b:47: 68:5b:02:6a:31:7a:1d:77:64:4b:f3:fe:32:ef:7b: 1e:fb:62:9c:7c:7d:5b:91:c0:a0:87:37:3f:81:10: ea:96:be:da:b0:d7:3b:27:47:24:39:29:24:a6:2d: dc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6C:DD:E5:04:11:81:7B:70:EF:C1:3D:C0:FC:6B:14:7D:4B:04:3F X509v3 Authority Key Identifier: keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:d9:37:5f:d9:28:46:6a:31:b5:12:b3:c4:77:fd:0d:e8:88: fe:13:28:a9:3b:3f:25:e9:c4:93:8e:35:6e:48:0e:56:94:e0: 97:4f:83:a0:c9:5f:e6:e4:4e:5c:c3:30:f9:bb:7c:97:63:1b: 55:a2:a4:ae:39:a9:92:b6:4c:aa:f3:80:cd:03:2b:4e:d1:3d: 08:e5:a2:02:b8:67:39:d2:49:e0:37:d0:e1:e2:79:8a:ee:e2: 37:1c:ac:9a:d8:6a:3b:45:d8:7f:ac:1c:33:d2:c7:f9:2a:ac: b2:dc:ec:13:c0:c2:57:b8:6f:1d:c0:cc:c3:27:4b:03:fc:a9: a9:78:7d:23:6f:03:38:b1:62:37:e5:ba:b0:1e:a9:51:8f:f9: 0d:40:31:95:ac:5f:f8:b9:64:a6:8c:21:7d:e0:11:34:ee:ba: b7:71:f4:76:59:65:81:aa:dd:68:7b:8d:30:b5:85:c6:02:10: 4f:80:01:4b:5d:4a:d1:6f:ae:59:e9:cc:6e:51:8d:b5:45:de: 3e:24:00:31:bb:4e:30:9a:27:40:8a:5b:5d:67:18:53:52:65: df:b1:1a:42:b7:0d:cd:82:bd:ce:2e:32:f0:f0:88:9a:68:a9: 4f:73:1a:09:32:9e:5d:45:1a:05:3f:70:00:0f:b9:d2:a7:21: c3:05:c0:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4RTAxMTAvBgNVBAUTKEU0QjNBRTNFRDIzMTdBMjNFMTlCRDdBMDMyQkVGQUVB RDUzNzI3RDMwHhcNMjQxMTIyMTQ0MzQzWhcNMjQxMTI5MTQ0MzQzWjAYMRYwFAYD VQQDEw02NzQwOTg5Zi1iMTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4uSaPCJrtrkwnH7u5yZEq0/+aqcrGVqE7A+mjLBQl13MdCyf6HGSDGDFt5h m5gPR1qIC1Mt4IDt3kC0vgmvbWJWiLHxIF/v0qX3Jdjq18b6C1/xCKG0JMcyflOs lnQfxW3FgyG9jtUD/v93gJs1oSvHg2N/FHCPa8Eg3m5oyuAGX7xrMlHDDA7weGyV tF+Lwv9xI78IGr+pu33sX313wwjPnik2YsPmPY3//DUoxu5BhTPVLB7VBPho3ZsI OS+q4z6v22hOYzuh2eJF39/8a0doWwJqMXodd2RL8/4y73se+2KcfH1bkcCghzc/ gRDqlr7asNc7J0ckOSkkpi3ckQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBs3eUE EYF7cO/BPcD8axR9SwQ/MB8GA1UdIwQYMBaAFOSzrj7SMXoj4ZvXoDK++urVNyfT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThFMC9EQzFFRkI0QTFE OTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVpUGhtOWVnTXI3NjZ0VTNK OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMT3VQdEl4ZWlQaG05ZWdNcjc2NnRVM0o5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OThFMC9EQzFFRkI0QTFEOTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVp UGhtOWVnTXI3NjZ0VTNKOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB2Tdf2ShGajG1ErPEd/0N6Ij+EyipOz8l6cSTjjVuSA5WlOCXT4Og yV/m5E5cwzD5u3yXYxtVoqSuOamStkyq84DNAytO0T0I5aICuGc50kngN9Dh4nmK 7uI3HKya2Go7Rdh/rBwz0sf5Kqyy3OwTwMJXuG8dwMzDJ0sD/KmpeH0jbwM4sWI3 5bqwHqlRj/kNQDGVrF/4uWSmjCF94BE07rq3cfR2WWWBqt1oe40wtYXGAhBPgAFL XUrRb65Z6cxuUY21Rd4+JAAxu04wmidAiltdZxhTUmXfsRpCtw3Ngr3OLjLw8Iia aKlPcxoJMp5dRRoFP3AAD7nSpyHDBcCk -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:35 2024 by rpki-client on console-fra.rpki-client.org