$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json) Hash identifier: mx8vt1uHRu22zaoNO5UH3aokSma5MaqrCCyC84Aty7M= Subject key identifier: 70:FC:5D:66:E3:EC:42:19:8A:D5:F2:B1:B9:CB:1B:56:22:CE:1A:A7 Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Certificate serial: 053F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft Manifest number: 053E Signing time: Fri 22 Nov 2024 23:02:29 +0000 Manifest this update: Fri 22 Nov 2024 23:02:28 +0000 Manifest next update: Fri 29 Nov 2024 23:02:28 +0000 Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: fQZzr5qGOtsMcDA4Czg5pim9HHdPXA1+ikkcgzXcYy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1343 (0x53f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Validity Not Before: Nov 22 23:02:28 2024 GMT Not After : Nov 29 23:02:28 2024 GMT Subject: CN=67410d84-5888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:87:12:6a:ae:d3:24:6f:93:62:79:ee:d4:9e: 9a:7f:d9:0a:1e:6c:94:05:43:db:91:39:98:f2:9d: 1e:a5:aa:71:26:87:e2:0a:7f:9a:17:6a:c5:53:93: 4a:eb:bb:1d:05:de:f3:a9:19:3c:8e:25:d9:8f:a4: c9:b6:85:cd:ae:51:92:b0:6c:eb:a2:d9:60:24:0f: 39:9c:4a:b4:e2:4c:9d:ce:ca:af:82:a8:a5:74:fb: 48:76:ba:1b:7e:9d:b2:dc:1a:6a:24:f3:24:84:36: 40:e8:a7:24:82:a4:20:b3:f6:ca:fc:55:3b:4f:d3: 3e:07:04:c9:53:89:54:f0:b8:a1:ae:c4:6c:3d:45: c6:5d:34:31:6d:a2:d6:6c:e9:fb:e0:bf:1c:36:e8: 8a:27:d1:50:f4:7c:7f:6c:6b:13:18:d3:2b:6e:c2: 68:70:28:91:5d:ed:2d:89:2a:93:11:d3:f6:54:f6: 23:d3:88:ea:cf:36:e6:d8:a3:a3:10:3e:3b:87:9b: 0a:9c:4e:94:6d:f2:4a:5c:63:2b:41:e9:1b:1d:67: 1a:f1:bc:19:5e:dc:cf:d5:f5:4f:92:6e:34:9b:6d: 5c:15:12:3e:89:71:3e:06:75:52:64:3b:d8:e3:b7: c4:a0:64:ff:db:a0:0f:7b:05:a4:3b:7a:14:a7:bd: 32:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FC:5D:66:E3:EC:42:19:8A:D5:F2:B1:B9:CB:1B:56:22:CE:1A:A7 X509v3 Authority Key Identifier: keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fd:06:9c:52:94:fb:50:7d:9f:22:db:25:92:12:e0:fc:af: 34:2d:fe:8f:43:54:3a:cf:0d:11:33:80:8f:7d:9e:27:4a:c1: 62:df:36:4e:32:db:d3:6e:49:e7:b9:86:c2:3d:69:bc:ea:62: 37:9c:ca:20:60:be:b3:b2:8a:6e:4e:b1:16:7d:fa:22:40:21: d3:f4:54:55:3d:5b:51:8f:ae:cc:fd:8b:d0:58:d6:2b:76:9f: 98:f4:71:d0:a1:79:39:ca:e8:5c:50:7e:38:b5:aa:5e:0e:fb: d3:2f:9a:97:fd:3c:89:f9:dc:b7:1a:de:00:2a:38:68:67:cf: de:79:ab:30:53:33:2b:06:98:25:ed:3f:06:d9:a7:4c:c8:ce: 69:85:a1:48:ba:5a:8a:d0:be:92:79:b6:95:10:97:ae:e1:02: 53:32:fb:b8:c9:bb:34:17:96:ca:7b:78:fb:d9:dd:84:45:3c: a3:93:c1:b0:7b:c0:33:83:81:f1:eb:3f:de:b6:36:a7:b0:58: c4:8f:92:6b:14:0e:27:4d:e1:c2:a1:39:fb:f2:56:3b:c3:d9: 20:ac:96:cc:5a:b6:e3:9f:f8:df:8e:77:68:73:e3:cf:7f:fc: 9d:e0:b9:6a:0a:a6:aa:16:f9:99:ec:32:ef:4a:ac:9c:39:75: e5:0b:df:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFNEUxMTAvBgNVBAUTKENFNTJEODc3NzBBMzI1MkJEMUY0QzkxMjZDQjVENUQx QjdEOUZCRjQwHhcNMjQxMTIyMjMwMjI4WhcNMjQxMTI5MjMwMjI4WjAYMRYwFAYD VQQDEw02NzQxMGQ4NC01ODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYcSaq7TJG+TYnnu1J6af9kKHmyUBUPbkTmY8p0epapxJofiCn+aF2rFU5NK 67sdBd7zqRk8jiXZj6TJtoXNrlGSsGzrotlgJA85nEq04kydzsqvgqildPtIdrob fp2y3BpqJPMkhDZA6KckgqQgs/bK/FU7T9M+BwTJU4lU8LihrsRsPUXGXTQxbaLW bOn74L8cNuiKJ9FQ9Hx/bGsTGNMrbsJocCiRXe0tiSqTEdP2VPYj04jqzzbm2KOj ED47h5sKnE6UbfJKXGMrQekbHWca8bwZXtzP1fVPkm40m21cFRI+iXE+BnVSZDvY 47fEoGT/26APewWkO3oUp70yBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHD8XWbj 7EIZitXysbnLG1YizhqnMB8GA1UdIwQYMBaAFM5S2HdwoyUr0fTJEmy11dG32fv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0RS80ODJEREQ2NENF QUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpTdlI5TWtTYkxYVjBiZlot X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psTFlkM0NqSlN2UjlNa1NiTFhWMGJmWi1fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU0RS80ODJEREQ2NENFQUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpT dlI5TWtTYkxYVjBiZlotX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb/QacUpT7UH2fItslkhLg/K80Lf6PQ1Q6zw0RM4CPfZ4nSsFi3zZO MtvTbknnuYbCPWm86mI3nMogYL6zsopuTrEWffoiQCHT9FRVPVtRj67M/YvQWNYr dp+Y9HHQoXk5yuhcUH44tapeDvvTL5qX/TyJ+dy3Gt4AKjhoZ8/eeaswUzMrBpgl 7T8G2adMyM5phaFIulqK0L6SebaVEJeu4QJTMvu4ybs0F5bKe3j72d2ERTyjk8Gw e8Azg4Hx6z/etjansFjEj5JrFA4nTeHCoTn78lY7w9kgrJbMWrbjn/jfjndoc+PP f/yd4LlqCqaqFvmZ7DLvSqycOXXlC9+z -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org